paxton
/
mailcow
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

[Rspamd] Improve spoofing detection

master
andryyy 2019-04-14 20:37:38 +02:00
parent cd88165282
commit 9f00d956f1
2 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
data/conf/rspamd/local.d/composites.conf
View File

@ -16,3 +16,7 @@ SOGO_CONTACT_EXCLUDE_FWD_HOST {
SOGO_CONTACT_SPOOFED { SOGO_CONTACT_SPOOFED {
expression = "(R_SPF_PERMFAIL | R_SPF_SOFTFAIL | R_SPF_FAIL) & ~SOGO_CONTACT"; expression = "(R_SPF_PERMFAIL | R_SPF_SOFTFAIL | R_SPF_FAIL) & ~SOGO_CONTACT";
} }
SPOOFED_UNAUTH {
expression = "UNAUTH_MAILCOW_DOMAIN & !MAILCOW_WHITE & !R_SPF_ALLOW";
score = 5.0;
}

8
data/conf/rspamd/local.d/multimap.conf
View File

@ -83,3 +83,11 @@ GLOBAL_RCPT_BL {
prefilter = true; prefilter = true;
action = "reject"; action = "reject";
} }
UNAUTH_MAILCOW_DOMAIN {
type = "header";
header = "from";
filter = "email:domain";
nflags = ["authenticated"];
map = "redis://DOMAIN_MAP";
}