Commit Graph

407 Commits (bbb1d7aa39d612c428d02c2d51b948d1368d8224)

Author SHA1 Message Date
andryyy 65aa7b0a92
[Rspamd] Use empty-env-from@localhost as placeholder for empty env from senders in quarantine 2020-04-08 21:55:17 +02:00
Michael Kuron ca4c7c51dc
[rspamd] Restore add header forced action (#3440)
Revert 0474de88b1. Fixed since c3a4c6d311.
2020-03-31 19:21:03 +02:00
andryyy e491b835e5
[Rspamd] And even more spam headers 2020-03-21 20:39:07 +01:00
andryyy 6a523fc497
[Rspamd] Moooore spam crap 2020-03-21 20:34:55 +01:00
andryyy d460061e7a
[Rspamd] More spam headers 2020-03-21 20:19:58 +01:00
andryyy b0ff2ddb50
[Rspamd] Add more bulk headers (feel free to contribute) 2020-03-21 20:13:44 +01:00
andryyy 0474de88b1
[Rspamd] Forced action add header seems to be broken atm, switching to rewrite subject until fixed 2020-03-10 07:20:18 +01:00
andryyy 537b7dad14
[Rspamd] Add fuzzy hashes to headers, if matched 2020-03-08 12:24:42 +01:00
andryyy fc460fd806
[Rspamd] Reduce CSA crap to 2.0 2020-03-06 18:16:54 +01:00
andryyy f532422726
[Rspamd, Web] Escape monitoring hosts, add regex maps to vars file 2020-03-06 08:38:01 +01:00
andryyy bbd53d7f4f
[Rspamd] Add X-CSA to bulk headers 2020-03-06 08:33:00 +01:00
andryyy d248bb660c
[Rspamd] Reduce Sorbs recent score
[Rspamd] Add annoying CSA to bulk symbols and score then with 3.2
[Rspamd] Update to 2.4
2020-03-06 07:14:06 +01:00
andryyy c9f455a2b1
[Rspamd] Move monitoring hosts to monitoring_nolog.map file 2020-03-04 11:53:07 +01:00
Ry3nlNaToR 93965fdc30
Added mailflowmonitoring.com to no log Rspamd (#3384) 2020-03-04 06:08:54 +01:00
andryyy 580b700eec
[Rspamd] Quarantine: Set sender to null@localhost when sender is missing 2020-03-03 19:10:28 +01:00
andryyy 49d4f6f897
[Rspamd] Set fixed name for fuzzy store 2020-02-26 14:30:44 +01:00
andryyy e1f165b9dc
[Rspamd] Add mailcow fuzzy hash store 2020-02-26 14:24:19 +01:00
andryyy c9a4715dfc
[Rspamd] Disable 304 until SOGO_CONTACT triggers an update, needs rework 2020-02-25 11:14:59 +01:00
andryyy 9d04d0ee4a
[Rspamd] Add X-Last-TLS-Session-Version header 2020-02-09 19:08:28 +01:00
andryyy 8a3fc802c5 Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized 2020-02-06 07:04:31 +01:00
andryyy ad55dd8f05
[Rspamd] Use redis master for RL operations in pipe_rl 2020-02-05 11:02:31 +01:00
Michael Kuron 3cdbe7b73c
Reduce Rspamd DNSBL false positives (#3311)
* rspamd: ignore Spamhaus XBL for Received headers

* rspamd: ignore SORBS RBL for forwarding hosts

* rspamd: ignore RBLs for forwarding hosts
2020-02-04 12:35:52 +01:00
André Peters 60fb5498ff
Update mime_types.conf 2020-02-04 12:06:20 +01:00
André Peters 96a507c927
Update mime_types.conf 2020-02-04 12:05:24 +01:00
andryyy d83013667b
[Rspamd] Do not normalise domains to eSLD for ARC 2020-01-19 13:17:23 +01:00
andryyy 57af5103c7
[Rspamd] Ratelimit for bounces reduced, max_rcpt for ratelimit increased 2020-01-18 16:32:27 +01:00
Michael Kuron 4c2e13009b rspamd: More comprehensive attachment handling (#3273)
- block all Office documents with macros
- don’t just block all doc files
- mark some more Windows executable extensions as bad
2020-01-17 22:19:12 +01:00
andryyy 4e46d44e79
[Rspamd] Allow empty envfrom for system mails, add only Dovecot to sign_networks and sign by header when sign_networks fires.
ARC remains active for forwards. Result: fully signed and trusted forwards and signed rejects in sieve.
2020-01-12 12:21:21 +01:00
andryyy 791e0831ad
[Rspamd] Fix DKIM, fixes #3262 2020-01-12 11:39:53 +01:00
andryyy 5f73629493
[Rspamd] Set rspamd as trusted host, rspamd is not spoofing 2020-01-10 20:39:52 +01:00
andryyy 03cbed5002
[Rspamd] allow_hdrfrom_mismatch true, auth_only false (sieve) 2020-01-10 20:39:11 +01:00
andryyy 203dd12497
[Rspamd] Fix groups 2020-01-06 18:47:51 +01:00
andryyy 6d5677eb32
[Rspamd] Decrease weight of missed charset 2020-01-05 11:34:03 +01:00
andryyy b098696b89
[Rspamd] Fix groups.conf syntax 2020-01-05 11:24:13 +01:00
andryyy ad1f243667
[Postfix] Set CA path for smtpd
[Rspamd] Split deprecated metrics.conf to actions.conf and groups.conf
2020-01-05 11:21:04 +01:00
andryyy 58a00cf7ea
[Web, Rspamd] Add bad language map, add map to mailcow UI 2019-12-22 18:57:28 +01:00
andryyy 5a0df09361
[Rspamd] Rate .doc with +10, decrease default bayes ham score 2019-12-20 15:44:58 +01:00
andryyy 7b4ed3bf64
[Rspamd] Lower map watch interval 2019-12-02 10:54:22 +01:00
andryyy d57e2b58c1
[Rspamd] Reduce ptr fail score 2019-11-24 16:09:59 +01:00
andryyy 19d0eedeba
[Rspamd] Add FORGED_W_BAD_POLICY 2019-11-24 16:08:58 +01:00
andryyy e0535bedbb
[Rspamd] Set new last modified when changing Rspamd settings 2019-11-18 16:42:56 +01:00
andryyy 7a87c492ed
[Rspamd] Fix bad ASN map format 2019-11-18 13:26:16 +01:00
andryyy d67e4e83c9
[Rspamd] Increase score for BAD_REP_POLICIES 2019-11-15 23:51:48 +01:00
andryyy 56ddc4bd26
[Rspamd] Add new default reject message
[Rspamd] Add Sorbs
2019-11-15 07:58:04 +01:00
andryyy 64f8ed2fbc
[Rspamd] Increase invalid PTR score 2019-11-14 10:17:58 +01:00
andryyy 99326f81de
[Rspamd, Postfix] Move PTR check to Postfix 2019-11-14 10:16:51 +01:00
Michael Kuron fbc7b7dce5 rspamd: Don't remove WHITELISTED_FWD_HOST if SOGO_CONTACT present (#3084) 2019-11-11 08:20:46 +01:00
andryyy bcc28784f7
[Rspamd] CL is not a fishy tld 2019-11-02 12:02:49 +01:00
andryyy 7f8b13434d
[Rspamd, Dovecot] Do not use Schaal rules - probably too much for Rspamd 2.x to handle, mem leak? 2019-10-31 20:43:07 +01:00
andryyy 50020bf1f0
[Rspamd] Remove neural, other gbc options 2019-10-31 19:55:42 +01:00
andryyy 6655ada308
[Rspamd] Remove unwanted options after talking to Vsevo 2019-10-31 19:03:20 +01:00
andryyy df3d78f03b
[Rspamd] Reset logging 2019-10-30 20:18:21 +01:00
andryyy 27de9dbf92
[Rspamd] Slight changes to improve memory usage
[Web] Dirty hack to touch Rspamd maps a second time
2019-10-30 20:07:58 +01:00
andryyy c0f39e5cac Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized 2019-10-29 18:36:53 +01:00
andryyy a71f590b1e
[Rspamd] Remove score from neural 2019-10-29 18:36:49 +01:00
andryyy 8683e4bd9a
[Rspamd] Use last-modified headers to not read unmodified settings map every 30 seconds 2019-10-29 14:21:58 +01:00
Michael Kuron c63967f7be
Rspamd: increase redis timeout 2019-10-26 13:00:31 +02:00
andryyy be4099182b
[Rspamd] Do not log watchdog mails 2019-10-21 20:42:43 +02:00
andryyy d5ee7de66a
[Rspamd] Disable info logging, re-enable silent logging, only apply MILTER_HEADERS symbol to watchdog Rspamd settings map 2019-10-20 21:48:30 +02:00
andryyy ee57b5921f
[Rspamd] Various fixes for Rspamd 2.0, neural network activated, autolearning activated (auto-keeps a ratio) 2019-10-12 13:14:34 +02:00
andryyy 0cfa056faa
[Rspamd] Do not quaratine if symbol is GLOBAL_X_BL 2019-10-10 12:38:24 +02:00
andryyy a231ecaed5
[Rspamd] Fix ARC defaults, thanks to klausenbusk 2019-09-23 10:44:58 +02:00
andryyy 287c577fc4
[Rspamd] Set !ARC_ALLOW to SPF FAIL check 2019-09-23 10:44:26 +02:00
ntimo ba6c5b7197
[Rspamd] Updated bad_word maps 2019-09-17 20:39:08 +02:00
ntimo 3ca014ee79
[Rspamd] Added multimap config for bad_words_de.map 2019-09-16 18:18:56 +02:00
ntimo 005ed2cadc
[Rspamd] Split bad words into multiple files per language 2019-09-15 11:53:04 +02:00
André Peters d1e56ab7bc
Update fishy_tlds.map 2019-09-10 16:48:40 +02:00
André Peters f87beded34
Update fishy_tlds.map 2019-09-05 14:32:04 +02:00
andryyy 8d0b2678fe
[Rspamd] Remove some TLDs from fishy map 2019-09-04 08:14:35 +02:00
andryyy 9c714b34a4
[Rspamd] Bad word update and score change 2019-08-30 19:30:38 +02:00
andryyy 569296dcdc
[Rspamd] More bad words - todo: split by language 2019-08-30 18:54:54 +02:00
andryyy 5a89dc114d
[Rspamd] Minor changes to fishy tlds and bad words 2019-08-29 18:57:37 +02:00
andryyy 6e82a35929
[Rspamd] Important fix for fishy maps 2019-08-28 15:04:53 +02:00
andryyy 1414e9df00
[Rspamd] Reduce fishy tld score
[Compose] Update Dovecot image
2019-08-28 14:37:04 +02:00
andryyy a5d569e0ca
[Rspamd] Reduce fishy tld score 2019-08-28 14:26:01 +02:00
andryyy 01fe856d05
[Rspamd] Fix a domain name 2019-08-28 13:05:42 +02:00
andryyy 23ae0c3cc1
[Rspamd] Filter 'em bad words from 'em bad tlds 2019-08-28 13:03:15 +02:00
andryyy e342016534
[Rspamd] Fix scores of UCE 2019-08-22 22:08:22 +02:00
andryyy 084eb008a1
[Rspamd] Add UCE to RBL 2019-08-22 16:34:03 +02:00
andryyy 9bbf9dc68e
[Rspamd] Fix and improve settings map 2019-08-21 21:07:51 +02:00
andryyy 3a26365b51
[Rspamd] Change SA ruleset name 2019-08-21 14:37:30 +02:00
andryyy db0719f068
[Rspamd] Fix IP whitelist 2019-07-22 13:50:05 +02:00
andryyy 71df10892c
[Rspamd] Add custom IP whitelist template 2019-07-22 13:38:47 +02:00
André Peters 83136c7876
Merge pull request #2789 from patschi/patch-6
Remove DMARC descriptions from polices_group
2019-07-16 21:30:44 +02:00
Patrik Kernstock 197f27b705
Remove DMARC descriptions from polices_group
Remove descriptions as they are inherited from the default rspamd configuration anyway
2019-07-16 20:15:11 +02:00
Michael Kuron cecbbe9e82
Remove score from R_DKIM_PERMFAIL
This error happens when there is no public key in DNS for that selector.
2019-07-16 20:03:37 +02:00
André Peters 84f4f43b27
Update policies_group.conf 2019-07-12 23:15:27 +02:00
andryyy 2efd27e40e
[Olefy] A new container is born, thanks to @c-rosenberg
[ACME] Autoconfig is back (re-added to SAN list by default for all mail domains)
[Rspamd] Added comment to composite
2019-06-25 18:52:05 +02:00
andryyy f2d1a56104
[Rspamd] Increase OLEFY_MACRO score 2019-06-20 10:18:43 +02:00
andryyy 04940429ba
[Rspamd] Add oletools via olefy, big thanks to @c-rosenberg 2019-06-16 17:35:58 +02:00
andryyy 6f99f06c6d
[Rspamd] Add OLEFY_MACRO symbol 2019-06-16 17:35:24 +02:00
andryyy 9c347e36fc
[Rspamd] Less aggressive bayes 2019-06-16 17:34:58 +02:00
andryyy e43951331c
[Rspamd] Sign ARC inbonud, thanks to @Kraeutergarten 2019-06-11 11:41:59 +02:00
andryyy de3a89ac7a
[Postfix] Remove duplicate proxy read maps, add resource maps 2019-06-09 16:49:02 +02:00
andryyy 395f0f7a3d
[Rspamd] Remove authenticated user from auth results header
[Dovecot] Fix permissions of console
[Compose] New Dovecot image
2019-05-29 18:02:14 +02:00
andryyy ba14f0f113
[Rspamd] Fix spoofing detection 2019-05-20 15:14:42 +02:00
andryyy 3ffa7e1f33
[Rspamd] Add SIEVE_HOST map and skip spoof check for these IPs 2019-05-18 22:44:06 +02:00
andryyy 45359bb6cf
[Rspamd] Do not apply SPOOFED_UNAUTH on ARC_ALLOW
[Dovecot] Set sieve_redirect_envelope_from to rcpt
2019-05-18 09:18:00 +02:00
andryyy 5c07cca529
[Rspamd] Change spoofed mail handling 2019-05-09 11:48:38 +02:00
andryyy 456e92c830
[Rspamd] Set to to_ip to_ip_from rate buckets to 100 / 1s 2019-05-09 11:32:16 +02:00
André Peters 61433a4488
Merge pull request #2541 from sriccio/master
Allow to easily add custom plugins to rspamd
2019-05-05 22:33:32 +02:00
andryyy 28c8c53a6e
[Rspamd] meta_exporter: return false if not matched
[Compose] Update Dovecot image
2019-05-01 22:50:38 +02:00
Howaner 17918b3e21 Added domain alias handling to quarantine mails and added recipients row to quarantine mail display
If a mail is sent to a domain alias domain and rejected, mailcow does not currently store the mail in quarantine.
This commit adds domain alias handling to the reject code and should fix this behavior.

Also added displaying of recipient addresses into the quarantine mail dialog to be able to see what mail address was "leaked".
2019-05-01 00:56:12 +02:00
andryyy 91af3d5c5a
[Rspamd] Much higher scores for DMARC failures 2019-04-30 14:00:47 +02:00
sriccio ef5cf81308 [rspamd] Allow to easily use custom rspamd lua plugins
Since rspamd 1.9.2 we'll be able to load custom modules from plugins.d
directory.

This allow to add and configure plugins easily from the
data/conf/rspamd/plugins.d

Also loading config for custom plugins need rspamd.conf.local or
optionally rspamd.conf.override.

I added support for this in the docker-compose.yml

Idea came while i was writing a custom plugin for Cyren antispam
gateway, which can be found here: https://github.com/sriccio/rspamd-plugins
2019-04-17 10:36:39 +02:00
andryyy 9f00d956f1 [Rspamd] Improve spoofing detection 2019-04-14 20:37:38 +02:00
andryyy c8047b9555 [Web] Change session timeout handling
[Rspamd] Add missing spamassassin.conf
2019-04-14 13:01:47 +02:00
André Peters 70c424caa2
[Web] Fix rejected mails not being quarantized properly if they are tagged 2019-03-12 11:26:33 +01:00
andryyy 1c3daedc39
[Rspamd] Remove headers var from dyn maps 2019-03-12 01:28:04 +01:00
Aaron Larisch 40a826a347 Fix rejected mails not being quarantized properly if they are tagged 2019-03-11 15:31:21 +01:00
andryyy 2443e956eb
[Rspamd] Remove buggy last-modified check 2019-03-08 12:43:05 +01:00
andryyy d124fa1d5b
[Rspamd] Check if filterconf table was changed and return Last-Modified accordingly 2019-03-07 11:44:38 +01:00
andryyy e04e15ed23
[Rspamd] Mime from and rcpt can now be checked by from_mime and rcpt_mime 2019-03-07 00:07:11 +01:00
andryyy c792bbcbab
[Rspamd] make upstream an object 2019-03-07 00:05:55 +01:00
andryyy bb065dbc22
[Rspamd] Add fuzzy worker with worker-fuzzy.inc 2019-03-06 15:14:25 +01:00
andryyy 6dc5318673
[Rspamd] Delete rspamd.conf.local 2019-03-06 15:08:18 +01:00
andryyy 108e808d06
[Rspamd] Reduce SOGO_CONTACT score to -99 2019-02-23 23:46:01 +01:00
andryyy 02b015a359
[Rspamd] Lower history nrows 2019-02-14 11:11:20 +01:00
andryyy 6f478ed2a3
[Rspamd] Set history lines to 10000 2019-02-05 00:02:56 +01:00
andryyy 8da54e5194
[Rspamd] Split global wl from to mime-from and smtp-from 2019-01-29 12:11:10 +01:00
andryyy d6efc2fcd3
[Rspamd] Fix metadata_exporter
[Web] Show subjet in quarantine
[Compose] Update Rspamd image
2019-01-17 22:00:18 +01:00
André Peters f3dfe346bf [Dovecot] Allow setting ACL_ANYONE in mailcow.conf 2019-01-16 19:08:19 +01:00
Aiko Appeldorn 4c176d3833 [rspamd] increased values for SPF, DKIM reject 2019-01-15 18:54:05 +01:00
andryyy 17222eac94
[Rspamd] Set max_size for AV
[Rspamd] Set higher/lower scores for local fuzzy matches
2019-01-13 23:02:09 +01:00
Michael Kuron 2b0065d5ab
Do not apply SOGO_CONTACT for hard SPF failures
Fixes #1983 more completely
2019-01-13 10:28:21 +01:00
andryyy 94d7952802
[Rspamd] Scan the whole message to be able to trigger Sanesecurity rules
[Rspamd] Increase add_header and greylist score
2019-01-08 13:00:56 +01:00
andryyy 2baf407331
[Rspamd] preg_quote filter objects, only translate * to .* - fixes #2152 2019-01-08 12:58:27 +01:00
andryyy ed763cd668 [Rspamd] Use meta exporter to pipe meta data of ratelimited msg to Redis 2018-12-15 21:23:42 +01:00
andryyy e7427eddf3 [Rspamd] Updated values of default ratelimit settings, add info_symbol 2018-12-15 21:22:59 +01:00
andryyy 3a39937baf [Rspamd] Do not apply SOGO_CONTACT for SPF fails and when sending from whitelisted host 2018-12-10 13:26:18 +01:00
andryyy e43c696204 [Rspamd] Remove SOGO_CONTACT for header from 2018-12-10 13:25:38 +01:00
andryyy 968f6f4157 [Rspamd] use boolean for one_shot, fixes #2066 2018-12-04 08:31:56 +01:00
andryyy e02c51b1d1 [Rspamd] Fix examples for global white/blacklist 2018-11-29 21:51:09 +01:00
root d445d7d2e7 [Web] Allow actions in quarantine modal, fixes #1991
[Web] Fixes for Source Sans Pro font
[Rspamd] Add global rcpt blacklist and whitelist
[Compose] New Rspamd image
2018-11-27 10:20:42 +01:00
andryyy f76c3ee7f3 [Dovecot] Unsupported examples for IMAP auth via LDAP
[Rspamd] Globel whitelist/blacklist from via multimap
2018-11-26 09:06:51 +01:00
andryyy 869e01a9a7 [Rspamd] Add fuzzy hash to msg 2018-11-12 09:57:25 +01:00
andryyy 4f7f493490 [Rspamd] Add SOGo contacts to whitelist 2018-11-12 09:56:54 +01:00
Michael Kuron 4ee546c04a
Reduce rspamd DNS timeout
Fixes #1957
2018-10-29 19:55:24 +01:00
andryyy f92b20c9ad [Rspamd] Change log level to silent (see docs) 2018-10-27 13:55:55 +02:00
andryyy 42fe16250b [Rspamd] Adjust default values for (perm) failures of DKIM and SPF 2018-10-26 20:04:41 +02:00
André Peters 68f2a1c5fc
[Rspamd] Properly close additional Rspamd maps 2018-10-19 11:12:58 +02:00
André 73b48fc13e [Rspamd] Remove deprecated attachments_only in AV module
[Rspamd] Remove old symbol score
2018-10-16 22:59:25 +02:00
André 32f7ae1d2e [Rspamd] Prefix quarantine error_log messages with "QUARANTINE"
[Rspamd] Fix quarantine max size check (it was ignored)
2018-10-11 11:55:52 +02:00
André a054182246 [Rspamd] Add desc to high spam networks 2018-09-30 18:56:35 +02:00
André b008211f52 [Rspamd] Controller password placeholder 2018-09-30 09:55:50 +02:00
André 8439daea7e [Rspamd] Revert adding worker-controller-password... 2018-09-30 09:54:19 +02:00
André 4396be2938 [Rspamd] Place socket in _rspamd home and fix permissions
[Compose] Remove volume for Rspamd socket
[Web] Do not exit loop on fuzzy errors when learning a message as spam
2018-09-30 09:53:25 +02:00
André 73b10350d0 [Rspamd] Ignore sa-rules-heinlein file, remove from index 2018-09-29 22:03:48 +02:00
André 0fb43f4916 [Docker API] Use TLS encryption for communication with "on-the-fly" created key paris (non-exposed)
[Docker API] Create pipe to pass Rspamd UI worker password
[Dovecot] Pull Spamassassin ruleset to be read by Rspamd (MANY THANKS to Peer Heinlein!)
[Dovecot] Garbage collector for deleted maildirs (set keep time via MAILDIR_GC_TIME which defaults to 1440 minutes)
[Web] Flush memcached after mailbox item changes, fixes #1808
[Web] Fix duplicate IDs, fixes #1792
[Compose] Use SQL sockets
[PHP-FPM] Update APCu and Redis libs
[Dovecot] Encrypt maildir with global key pair in crypt-vol-1 (BACKUP!), also fixes #1791
[Web] Fix deletion of spam aliases
[Helper] Add "crypt" to backup script
[Helper] Override file for external SQL socket (not supported!)
[Compose] New images for Rspamd, PHP-FPM, SOGo, Dovecot, Docker API, Watchdog, ACME, Postfix
2018-09-29 22:01:23 +02:00
André c7cef3241f [Rspamd] Controller worker count == 1, fixes #1716 2018-09-12 20:32:59 +02:00