[Rspamd] Improve spoofing detection
This commit is contained in:
parent
cd88165282
commit
9f00d956f1
@ -16,3 +16,7 @@ SOGO_CONTACT_EXCLUDE_FWD_HOST {
|
|||||||
SOGO_CONTACT_SPOOFED {
|
SOGO_CONTACT_SPOOFED {
|
||||||
expression = "(R_SPF_PERMFAIL | R_SPF_SOFTFAIL | R_SPF_FAIL) & ~SOGO_CONTACT";
|
expression = "(R_SPF_PERMFAIL | R_SPF_SOFTFAIL | R_SPF_FAIL) & ~SOGO_CONTACT";
|
||||||
}
|
}
|
||||||
|
SPOOFED_UNAUTH {
|
||||||
|
expression = "UNAUTH_MAILCOW_DOMAIN & !MAILCOW_WHITE & !R_SPF_ALLOW";
|
||||||
|
score = 5.0;
|
||||||
|
}
|
||||||
|
@ -83,3 +83,11 @@ GLOBAL_RCPT_BL {
|
|||||||
prefilter = true;
|
prefilter = true;
|
||||||
action = "reject";
|
action = "reject";
|
||||||
}
|
}
|
||||||
|
|
||||||
|
UNAUTH_MAILCOW_DOMAIN {
|
||||||
|
type = "header";
|
||||||
|
header = "from";
|
||||||
|
filter = "email:domain";
|
||||||
|
nflags = ["authenticated"];
|
||||||
|
map = "redis://DOMAIN_MAP";
|
||||||
|
}
|
||||||
|
Loading…
Reference in New Issue
Block a user