doc:appunti:linux:sa:rspamd_spamassassin
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revisionNext revisionBoth sides next revision | ||
doc:appunti:linux:sa:rspamd_spamassassin [2023/11/16 12:59] – [Customizing the headers] niccolo | doc:appunti:linux:sa:rspamd_spamassassin [2023/11/20 12:37] – [SPF check] niccolo | ||
---|---|---|---|
Line 256: | Line 256: | ||
</ | </ | ||
- | Local configuration must go into **local.d/ | + | Local configuration must go into **local.d/ |
< | < | ||
- | rules { | + | # Map containing additional IPv4/IPv6 addresses/ |
- | "RCVD_IN_DNSWL" { | + | # be excluded from checks where exclude_local is true (the default). |
- | enabled = false; | + | local_exclude_ip_map = " |
+ | |||
+ | # Add a custom RBL. | ||
+ | rbls { | ||
+ | | ||
+ | # Checks to enable for this RBL. | ||
+ | # from: the sending IP that sent the message. | ||
+ | checks = ["from"]; | ||
+ | # Address used for RBL-testing. | ||
+ | rbl = " | ||
+ | ipv4 = true; | ||
+ | ipv6 = true; | ||
+ | exclude_local = true; | ||
+ | local_exclude_ip_map = "${LOCAL_CONFDIR}/ | ||
+ | | ||
+ | symbol = " | ||
+ | returncodes = { | ||
+ | # Apply a specific symbol instead of the generic one. | ||
+ | " | ||
+ | " | ||
+ | " | ||
+ | } | ||
+ | } | ||
+ | } | ||
+ | </ | ||
+ | |||
+ | The file pointed by the **local_exclude_ip_map** option can be updated (adding or removing IP addresses or subnets) without the need to reload any service. | ||
+ | |||
+ | A custom score can be defined into **local.d/ | ||
+ | |||
+ | < | ||
+ | symbols = { | ||
+ | " | ||
+ | weight = 6.2; | ||
+ | description = "From address is listed in ZEN Rigacci.Org"; | ||
+ | groups = [" | ||
+ | } | ||
+ | } | ||
+ | |||
+ | symbols = { | ||
+ | " | ||
+ | weight = 6.8; | ||
+ | description = "From address is listed in ZEN Rigacci.Org, | ||
+ | groups = [" | ||
+ | } | ||
+ | } | ||
+ | </ | ||
+ | |||
+ | Several RBLs are enabled per default in the Debian 12 install. if you want to disable some, just add the symbol into the **rbls** list with the option **enabled = false**: | ||
+ | |||
+ | < | ||
+ | rbls { | ||
+ | dnswl { | ||
+ | symbol = " | ||
+ | | ||
} | } | ||
} | } | ||
Line 339: | Line 393: | ||
</ | </ | ||
- | As you can see from the log below, an SPF fail does not trigger a significative SPAM score using the default metrics: only 0.90/18.00: | + | The '' |
< | < | ||
Line 347: | Line 401: | ||
(default: F (no action): [0.90/ | (default: F (no action): [0.90/ | ||
MIME_GOOD(-0.10){text/ | MIME_GOOD(-0.10){text/ | ||
- | ipnet: | + | ipnet: |
FROM_EQ_ENVFROM(0.00){}, | FROM_EQ_ENVFROM(0.00){}, | ||
RCPT_COUNT_ONE(0.00){1; | RCPT_COUNT_ONE(0.00){1; | ||
Line 569: | Line 623: | ||
</ | </ | ||
- | With the following example we add a custom **X-Virus** header if a symbol was added, e.g. by the antivirus module. | + | With the following example we add a custom **X-Virus** header if a symbol was added, e.g. by the antivirus module. In this case the antivirus module should not apply its own //reject// action, otherwise it is pointless to mangle the headers. |
< | < | ||
Line 593: | Line 647: | ||
===== Logging ===== | ===== Logging ===== | ||
- | Example to enable logging | + | Example to enable logging |
< | < | ||
- | debug_modules = [" | + | debug_modules = [" |
</ | </ | ||
doc/appunti/linux/sa/rspamd_spamassassin.txt · Last modified: 2024/07/17 18:23 by niccolo