doc:appunti:linux:sa:rspamd_spamassassin
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revisionNext revisionBoth sides next revision | ||
doc:appunti:linux:sa:rspamd_spamassassin [2023/11/17 11:12] – [Configure the blacklists] niccolo | doc:appunti:linux:sa:rspamd_spamassassin [2023/11/20 12:37] – [SPF check] niccolo | ||
---|---|---|---|
Line 256: | Line 256: | ||
</ | </ | ||
- | Local configuration must go into **local.d/ | + | Local configuration must go into **local.d/ |
+ | |||
+ | < | ||
+ | # Map containing additional IPv4/IPv6 addresses/ | ||
+ | # be excluded from checks where exclude_local is true (the default). | ||
+ | local_exclude_ip_map = " | ||
+ | |||
+ | # Add a custom RBL. | ||
+ | rbls { | ||
+ | zen_rigacci { | ||
+ | # Checks to enable for this RBL. | ||
+ | # from: the sending IP that sent the message. | ||
+ | checks = [" | ||
+ | # Address used for RBL-testing. | ||
+ | rbl = " | ||
+ | ipv4 = true; | ||
+ | ipv6 = true; | ||
+ | exclude_local = true; | ||
+ | local_exclude_ip_map = " | ||
+ | # Symbol to yeld. | ||
+ | symbol = " | ||
+ | returncodes = { | ||
+ | # Apply a specific symbol instead of the generic one. | ||
+ | " | ||
+ | " | ||
+ | " | ||
+ | } | ||
+ | } | ||
+ | } | ||
+ | </ | ||
+ | |||
+ | The file pointed by the **local_exclude_ip_map** option can be updated (adding or removing IP addresses or subnets) without the need to reload any service. | ||
+ | |||
+ | A custom score can be defined into **local.d/ | ||
+ | |||
+ | < | ||
+ | symbols = { | ||
+ | " | ||
+ | weight = 6.2; | ||
+ | description = "From address is listed in ZEN Rigacci.Org"; | ||
+ | groups = [" | ||
+ | } | ||
+ | } | ||
+ | |||
+ | symbols = { | ||
+ | " | ||
+ | weight = 6.8; | ||
+ | description = "From address is listed in ZEN Rigacci.Org, | ||
+ | groups = [" | ||
+ | } | ||
+ | } | ||
+ | </ | ||
Several RBLs are enabled per default in the Debian 12 install. if you want to disable some, just add the symbol into the **rbls** list with the option **enabled = false**: | Several RBLs are enabled per default in the Debian 12 install. if you want to disable some, just add the symbol into the **rbls** list with the option **enabled = false**: | ||
Line 342: | Line 393: | ||
</ | </ | ||
- | As you can see from the log below, an SPF fail does not trigger a significative SPAM score using the default metrics: only 0.90/18.00: | + | The '' |
< | < | ||
Line 350: | Line 401: | ||
(default: F (no action): [0.90/ | (default: F (no action): [0.90/ | ||
MIME_GOOD(-0.10){text/ | MIME_GOOD(-0.10){text/ | ||
- | ipnet: | + | ipnet: |
FROM_EQ_ENVFROM(0.00){}, | FROM_EQ_ENVFROM(0.00){}, | ||
RCPT_COUNT_ONE(0.00){1; | RCPT_COUNT_ONE(0.00){1; | ||
Line 596: | Line 647: | ||
===== Logging ===== | ===== Logging ===== | ||
- | Example to enable logging | + | Example to enable logging |
< | < | ||
- | debug_modules = [" | + | debug_modules = [" |
</ | </ | ||
doc/appunti/linux/sa/rspamd_spamassassin.txt · Last modified: 2024/07/17 18:23 by niccolo