Gnous/mailcow
2
0
Fork 0
Code Issues Pull Requests 1 Packages Projects Releases Wiki Activity
6,140 Commits 2 Branches 0 Tags 46 MiB
1a2f145b28
Commit Graph

259 Commits

Author SHA1 Message Date
andryyy
0474de88b1
[Rspamd] Forced action add header seems to be broken atm, switching to rewrite subject until fixed 2020-03-10 07:20:18 +01:00
andryyy
537b7dad14
[Rspamd] Add fuzzy hashes to headers, if matched 2020-03-08 12:24:42 +01:00
andryyy
fc460fd806
[Rspamd] Reduce CSA crap to 2.0 2020-03-06 18:16:54 +01:00
andryyy
d248bb660c
[Rspamd] Reduce Sorbs recent score 
[Rspamd] Add annoying CSA to bulk symbols and score then with 3.2
[Rspamd] Update to 2.4
 2020-03-06 07:14:06 +01:00
andryyy
49d4f6f897
[Rspamd] Set fixed name for fuzzy store 2020-02-26 14:30:44 +01:00
andryyy
e1f165b9dc
[Rspamd] Add mailcow fuzzy hash store 2020-02-26 14:24:19 +01:00
Michael Kuron
3cdbe7b73c
Reduce Rspamd DNSBL false positives (#3311) 
* rspamd: ignore Spamhaus XBL for Received headers

* rspamd: ignore SORBS RBL for forwarding hosts

* rspamd: ignore RBLs for forwarding hosts
 2020-02-04 12:35:52 +01:00
André Peters
60fb5498ff
Update mime_types.conf 2020-02-04 12:06:20 +01:00
André Peters
96a507c927
Update mime_types.conf 2020-02-04 12:05:24 +01:00
andryyy
d83013667b
[Rspamd] Do not normalise domains to eSLD for ARC 2020-01-19 13:17:23 +01:00
Michael Kuron
4c2e13009b rspamd: More comprehensive attachment handling (#3273) 
- block all Office documents with macros
- don’t just block all doc files
- mark some more Windows executable extensions as bad
 2020-01-17 22:19:12 +01:00
andryyy
4e46d44e79
[Rspamd] Allow empty envfrom for system mails, add only Dovecot to sign_networks and sign by header when sign_networks fires. 
ARC remains active for forwards. Result: fully signed and trusted forwards and signed rejects in sieve.
 2020-01-12 12:21:21 +01:00
andryyy
791e0831ad
[Rspamd] Fix DKIM, fixes #3262 2020-01-12 11:39:53 +01:00
andryyy
5f73629493
[Rspamd] Set rspamd as trusted host, rspamd is not spoofing 2020-01-10 20:39:52 +01:00
andryyy
03cbed5002
[Rspamd] allow_hdrfrom_mismatch true, auth_only false (sieve) 2020-01-10 20:39:11 +01:00
andryyy
203dd12497
[Rspamd] Fix groups 2020-01-06 18:47:51 +01:00
andryyy
6d5677eb32
[Rspamd] Decrease weight of missed charset 2020-01-05 11:34:03 +01:00
andryyy
b098696b89
[Rspamd] Fix groups.conf syntax 2020-01-05 11:24:13 +01:00
andryyy
ad1f243667
[Postfix] Set CA path for smtpd 
[Rspamd] Split deprecated metrics.conf to actions.conf and groups.conf
 2020-01-05 11:21:04 +01:00
andryyy
58a00cf7ea
[Web, Rspamd] Add bad language map, add map to mailcow UI 2019-12-22 18:57:28 +01:00
andryyy
5a0df09361
[Rspamd] Rate .doc with +10, decrease default bayes ham score 2019-12-20 15:44:58 +01:00
andryyy
7b4ed3bf64
[Rspamd] Lower map watch interval 2019-12-02 10:54:22 +01:00
andryyy
d57e2b58c1
[Rspamd] Reduce ptr fail score 2019-11-24 16:09:59 +01:00
andryyy
19d0eedeba
[Rspamd] Add FORGED_W_BAD_POLICY 2019-11-24 16:08:58 +01:00
andryyy
d67e4e83c9
[Rspamd] Increase score for BAD_REP_POLICIES 2019-11-15 23:51:48 +01:00
andryyy
56ddc4bd26
[Rspamd] Add new default reject message 
[Rspamd] Add Sorbs
 2019-11-15 07:58:04 +01:00
andryyy
64f8ed2fbc
[Rspamd] Increase invalid PTR score 2019-11-14 10:17:58 +01:00
andryyy
99326f81de
[Rspamd, Postfix] Move PTR check to Postfix 2019-11-14 10:16:51 +01:00
Michael Kuron
fbc7b7dce5 rspamd: Don't remove WHITELISTED_FWD_HOST if SOGO_CONTACT present (#3084) 2019-11-11 08:20:46 +01:00
andryyy
7f8b13434d
[Rspamd, Dovecot] Do not use Schaal rules - probably too much for Rspamd 2.x to handle, mem leak? 2019-10-31 20:43:07 +01:00
andryyy
50020bf1f0
[Rspamd] Remove neural, other gbc options 2019-10-31 19:55:42 +01:00
andryyy
6655ada308
[Rspamd] Remove unwanted options after talking to Vsevo 2019-10-31 19:03:20 +01:00
andryyy
27de9dbf92
[Rspamd] Slight changes to improve memory usage 
[Web] Dirty hack to touch Rspamd maps a second time
 2019-10-30 20:07:58 +01:00
andryyy
c0f39e5cac Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized 2019-10-29 18:36:53 +01:00
andryyy
a71f590b1e
[Rspamd] Remove score from neural 2019-10-29 18:36:49 +01:00
Michael Kuron
c63967f7be
Rspamd: increase redis timeout 2019-10-26 13:00:31 +02:00
andryyy
ee57b5921f
[Rspamd] Various fixes for Rspamd 2.0, neural network activated, autolearning activated (auto-keeps a ratio) 2019-10-12 13:14:34 +02:00
andryyy
0cfa056faa
[Rspamd] Do not quaratine if symbol is GLOBAL_X_BL 2019-10-10 12:38:24 +02:00
andryyy
a231ecaed5
[Rspamd] Fix ARC defaults, thanks to klausenbusk 2019-09-23 10:44:58 +02:00
andryyy
287c577fc4
[Rspamd] Set !ARC_ALLOW to SPF FAIL check 2019-09-23 10:44:26 +02:00
ntimo
3ca014ee79
[Rspamd] Added multimap config for bad_words_de.map 2019-09-16 18:18:56 +02:00
ntimo
005ed2cadc
[Rspamd] Split bad words into multiple files per language 2019-09-15 11:53:04 +02:00
andryyy
9c714b34a4
[Rspamd] Bad word update and score change 2019-08-30 19:30:38 +02:00
andryyy
6e82a35929
[Rspamd] Important fix for fishy maps 2019-08-28 15:04:53 +02:00
andryyy
1414e9df00
[Rspamd] Reduce fishy tld score 
[Compose] Update Dovecot image
 2019-08-28 14:37:04 +02:00
andryyy
a5d569e0ca
[Rspamd] Reduce fishy tld score 2019-08-28 14:26:01 +02:00
andryyy
23ae0c3cc1
[Rspamd] Filter 'em bad words from 'em bad tlds 2019-08-28 13:03:15 +02:00
andryyy
e342016534
[Rspamd] Fix scores of UCE 2019-08-22 22:08:22 +02:00
andryyy
084eb008a1
[Rspamd] Add UCE to RBL 2019-08-22 16:34:03 +02:00
andryyy
3a26365b51
[Rspamd] Change SA ruleset name 2019-08-21 14:37:30 +02:00
andryyy
db0719f068
[Rspamd] Fix IP whitelist 2019-07-22 13:50:05 +02:00
andryyy
71df10892c
[Rspamd] Add custom IP whitelist template 2019-07-22 13:38:47 +02:00
André Peters
83136c7876
Merge pull request #2789 from patschi/patch-6 
Remove DMARC descriptions from polices_group
 2019-07-16 21:30:44 +02:00
Patrik Kernstock
197f27b705
Remove DMARC descriptions from polices_group 
Remove descriptions as they are inherited from the default rspamd configuration anyway
 2019-07-16 20:15:11 +02:00
Michael Kuron
cecbbe9e82
Remove score from R_DKIM_PERMFAIL 
This error happens when there is no public key in DNS for that selector.
 2019-07-16 20:03:37 +02:00
André Peters
84f4f43b27
Update policies_group.conf 2019-07-12 23:15:27 +02:00
andryyy
2efd27e40e
[Olefy] A new container is born, thanks to @c-rosenberg 
[ACME] Autoconfig is back (re-added to SAN list by default for all mail domains)
[Rspamd] Added comment to composite
 2019-06-25 18:52:05 +02:00
andryyy
f2d1a56104
[Rspamd] Increase OLEFY_MACRO score 2019-06-20 10:18:43 +02:00
andryyy
04940429ba
[Rspamd] Add oletools via olefy, big thanks to @c-rosenberg 2019-06-16 17:35:58 +02:00
andryyy
6f99f06c6d
[Rspamd] Add OLEFY_MACRO symbol 2019-06-16 17:35:24 +02:00
andryyy
9c347e36fc
[Rspamd] Less aggressive bayes 2019-06-16 17:34:58 +02:00
andryyy
e43951331c
[Rspamd] Sign ARC inbonud, thanks to @Kraeutergarten 2019-06-11 11:41:59 +02:00
andryyy
395f0f7a3d
[Rspamd] Remove authenticated user from auth results header 
[Dovecot] Fix permissions of console
[Compose] New Dovecot image
 2019-05-29 18:02:14 +02:00
andryyy
ba14f0f113
[Rspamd] Fix spoofing detection 2019-05-20 15:14:42 +02:00
andryyy
3ffa7e1f33
[Rspamd] Add SIEVE_HOST map and skip spoof check for these IPs 2019-05-18 22:44:06 +02:00
andryyy
45359bb6cf
[Rspamd] Do not apply SPOOFED_UNAUTH on ARC_ALLOW 
[Dovecot] Set sieve_redirect_envelope_from to rcpt
 2019-05-18 09:18:00 +02:00
andryyy
5c07cca529
[Rspamd] Change spoofed mail handling 2019-05-09 11:48:38 +02:00
andryyy
28c8c53a6e
[Rspamd] meta_exporter: return false if not matched 
[Compose] Update Dovecot image
 2019-05-01 22:50:38 +02:00
andryyy
91af3d5c5a
[Rspamd] Much higher scores for DMARC failures 2019-04-30 14:00:47 +02:00
andryyy
9f00d956f1 [Rspamd] Improve spoofing detection 2019-04-14 20:37:38 +02:00
andryyy
c8047b9555 [Web] Change session timeout handling 
[Rspamd] Add missing spamassassin.conf
 2019-04-14 13:01:47 +02:00
andryyy
6dc5318673
[Rspamd] Delete rspamd.conf.local 2019-03-06 15:08:18 +01:00
andryyy
02b015a359
[Rspamd] Lower history nrows 2019-02-14 11:11:20 +01:00
andryyy
6f478ed2a3
[Rspamd] Set history lines to 10000 2019-02-05 00:02:56 +01:00
andryyy
8da54e5194
[Rspamd] Split global wl from to mime-from and smtp-from 2019-01-29 12:11:10 +01:00
Aiko Appeldorn
4c176d3833 [rspamd] increased values for SPF, DKIM reject 2019-01-15 18:54:05 +01:00
andryyy
17222eac94
[Rspamd] Set max_size for AV 
[Rspamd] Set higher/lower scores for local fuzzy matches
 2019-01-13 23:02:09 +01:00
Michael Kuron
2b0065d5ab
Do not apply SOGO_CONTACT for hard SPF failures 
Fixes #1983 more completely
 2019-01-13 10:28:21 +01:00
andryyy
94d7952802
[Rspamd] Scan the whole message to be able to trigger Sanesecurity rules 
[Rspamd] Increase add_header and greylist score
 2019-01-08 13:00:56 +01:00
andryyy
ed763cd668 [Rspamd] Use meta exporter to pipe meta data of ratelimited msg to Redis 2018-12-15 21:23:42 +01:00
andryyy
3a39937baf [Rspamd] Do not apply SOGO_CONTACT for SPF fails and when sending from whitelisted host 2018-12-10 13:26:18 +01:00
andryyy
968f6f4157 [Rspamd] use boolean for one_shot, fixes #2066 2018-12-04 08:31:56 +01:00
root
d445d7d2e7 [Web] Allow actions in quarantine modal, fixes #1991 
[Web] Fixes for Source Sans Pro font
[Rspamd] Add global rcpt blacklist and whitelist
[Compose] New Rspamd image
 2018-11-27 10:20:42 +01:00
andryyy
f76c3ee7f3 [Dovecot] Unsupported examples for IMAP auth via LDAP 
[Rspamd] Globel whitelist/blacklist from via multimap
 2018-11-26 09:06:51 +01:00
andryyy
869e01a9a7 [Rspamd] Add fuzzy hash to msg 2018-11-12 09:57:25 +01:00
Michael Kuron
4ee546c04a
Reduce rspamd DNS timeout 
Fixes #1957
 2018-10-29 19:55:24 +01:00
andryyy
42fe16250b [Rspamd] Adjust default values for (perm) failures of DKIM and SPF 2018-10-26 20:04:41 +02:00
André
73b48fc13e [Rspamd] Remove deprecated attachments_only in AV module 
[Rspamd] Remove old symbol score
 2018-10-16 22:59:25 +02:00
André
afc18fd469 [Rspamd] Update bad asn, move KEEP_SPAM to a custom lua function 2018-09-09 09:47:47 +02:00
André
b007975a04 [Rspamd] Rename -disable_monitored > disable_monitoring 2018-08-03 11:56:39 +02:00
André
59c4cc054e [Rspamd] Deactivate neural but use a more aggressive learning method (no autolearn) 2018-07-29 23:03:49 +02:00
André
d8f86ae488 [Rspamd] Add local fuzzy worker 2018-07-29 00:34:36 +02:00
André
e2ed2eab53 [Rspamd] Remove per_user settings as they were pretty much useless, some minor changes to bayes" 2018-07-25 01:06:12 +02:00
André
37fbce855e [Rspamd] Remove autolearn from Rspamd 2018-07-03 23:24:11 +02:00
André
777e469958 [ClamAV] Remove deprecated AllowSupplementaryGroups 2018-05-30 20:28:23 +02:00
André
1b35376252 [Rspamd] Remove score for CTYPE_MIXED_BOGUS and ARC_REJECT, increase DNS timeout 2018-05-30 18:40:43 +02:00
Michael Kuron
ea84004410
[rspamd] fix redis multimaps in version 1.7.5 
The key's value was being used as symbol name instead of the symbol name defined in the config file
 2018-05-25 18:58:37 +02:00
André
1f7a5d586c [Rspamd] Remove IP, fixes #1400 2018-05-19 00:14:30 +02:00
André
8ff4eb8076 [Rspamd] Slight changes to neural plugin 2018-05-18 21:39:25 +02:00
André
7a5d3af80b [Rspamd] Slight changes to neural 2018-05-17 11:15:46 +02:00
André
5e2d19ac62 [Rspamd] Add neural module and define its scores 2018-05-16 21:26:05 +02:00
André
d167ade957 [Rspamd] Remove explict redis servers from statistic, add a name 2018-05-16 21:25:55 +02:00
André
7f72e44dac [Rspamd] Move symbols to corresponding groups 2018-05-11 10:40:26 +02:00
André
7181ee4658 [Rspamd] Apply ratelimit against authenticated user instead of envelope from 
[PHP-FPM] Create PHP-FPM listeners 9001 (system) and 9002 (web), drop 9000
[Rspamd] Parse quarantine messages as utf8
[Rspamd] Use new schema for Rspamd bayes hashes and expire them in Redis
[SOGo] Change default logo
[SOGo] Use different keyserver by default in Dockerfile
[Rspamd] Add bad ASN list (disabled by default)
[Watchdog] Change the way we check PHP-FPM, change SOGo check
[Nginx] Change ports according to new PHP-FPM listeners
[Update] Fix PHP-FPM ports for existing non-mailcow Nginx sites
 2018-04-26 13:56:07 +02:00
André Peters
07a05b9363 [Rspamd] Enable more modules 2018-02-09 10:32:42 +01:00
André Peters
a50036477e [Web] Mind was set to french, reverting to english 2018-02-08 20:13:36 +01:00
andre.peters
83a21259f7 [Rspamd] Use names instead of IPs 2018-01-21 15:00:05 +01:00
André Peters
5648ec6d39
Merge pull request #915 from tiirex9/master 
Adds 'do nothing' as default for sub-addressing
 2018-01-18 10:27:14 +01:00
andre.peters
0019502069 [Rspamd] Increase spam scores for SPF failures 2018-01-16 21:02:45 +01:00
andre.peters
c6bcf322ff [Rspamd] Force-add metadata_exporter 2018-01-16 18:58:29 +01:00
Tii
d58b89528f rspamd multimap redis stuff doesn't work as expected... 2018-01-16 16:31:37 +01:00
andre.peters
873222d5f8 [Rspamd] Remove DKIM forced action, move ratelimit lua, add meta exporter 2017-12-09 09:08:23 +01:00
André
b16684ce20 [Rspamd] Slightly reduce map watch interval 2017-11-03 20:26:36 +01:00
André
1e9bc49f2c [Rspamd] Echo dummy for fowardingshosts map; Use higher map reading interval; 
[Dockerapi] Exit on sigterm;
[Watchdog] Wait for dockerapi-mailcow to be online
 2017-10-27 11:22:39 +02:00
André
4156b4cdf8 [Rspamd] Disable spoofed sender check 2017-10-26 10:29:13 +02:00
André
988978b351 [Rspamd] Remove log helper and disable fann redis 2017-10-25 20:55:11 +02:00
André
f7cd7cc123 [Rspamd] Redis history is enabled by default 2017-10-21 10:09:53 +02:00
Michael Kuron
a4ccd780c6 rspamd: disable greylisting for forwarding hosts 2017-10-14 16:40:44 +02:00
andryyy
fc18d153cd [Compose, DockerAPI, Web, Watchdog] Watchdog may send notification mails (todo: docs), DockerAPI via Flesk for limited access 2017-10-05 23:38:33 +02:00
andryyy
073c6c6e73 [Postfix/Rspamd] Do not reject unauthenticated sender mismatches but rewrite their subject and assign symbol SPOOFED_SENDER with score 1.0 2017-10-04 23:16:39 +02:00
andryyy
a8fb1d3f4f Add experimental watchdog 2017-09-20 10:56:49 +02:00
André Peters
78c363b7a5 Merge pull request #565 from mkuron/softreject 
Forwarding hosts: treat soft reject like greylist
 2017-09-09 10:43:41 +02:00
Michael Kuron
3d9c161be1 Forwarding hosts: treat soft reject like greylist 2017-09-09 10:30:26 +02:00
andryyy
9be3aa3334 [Rspamd] Disable monitored 2017-07-27 09:03:44 +02:00
andryyy
ed33cb5f57 [Rspamd] ARC: Disallow login/domain mismatch 2017-07-21 11:03:35 +02:00
andryyy
256c9d86dd [Rspamd] Initial custom ratelimit support 2017-07-13 12:55:14 +02:00
andryyy
578011c78c Move milter config, increase timeout for DNS 2017-06-21 10:18:52 +02:00
andryyy
44197c410e Do not add milter headers for authenticated users 2017-06-13 07:41:00 +02:00
andryyy
a41cafac3e Switch to Rspamds milter interface 2017-06-06 22:00:34 +02:00
andryyy
d33399b3cb Fix mismatch in env and from mime header when signing mail 2017-05-29 21:49:01 +02:00
andryyy
fd92283fb8 Add missing ; 2017-05-24 10:03:06 +02:00
andryyy
466b8137e5 Add log_helper to Rspamd, add IPv6 for http maps in Nginx, make Bind listen on v6 and add acl for internal network 2017-05-23 22:23:34 +02:00
andryyy
f3a1d81347 Rate extensions 2017-05-23 21:50:05 +02:00
andryyy
e99db685e5 Change map watch interval, remove Mraptor 2017-05-20 14:28:05 +02:00
Michael Kuron
759f21ac6b Consistent symbol names for forwarding hosts 
multimap.conf and force_actions weren't using the same name
 2017-05-09 07:29:43 +02:00
andryyy
d64ed65575 Add multimap and forced actions for forwarded_hosts, removed from settings 2017-05-08 23:09:21 +02:00
andryyy
cdf7c87e20 Deleted two http maps, replaced by redis multimaps, much better tag system 2017-05-08 15:39:33 +02:00
andryyy
1501df6e42 Use Redis for DKIM keys, define any selector, auto-merge old keys to Redis and fallback to files 2017-05-05 10:35:27 +02:00
andryyy
e3f9839410 Do not use sld for DKIM signing 2017-05-04 19:12:21 +02:00
andryyy
fd84b2ffa9 Change DKIM to new method, add clamav forced action when virus is found" 2017-04-25 20:32:36 +02:00
Michael Kuron
f3fad4e7a2 Remove rspamd size limit 
This ensures that the spam and antivirus filters cannot be evaded by making the message large enough.
Rspamd does not need a size limit on its own (e.g. for DoS protection) as Postfix already has a size limit (message_size_limit).
 2017-04-24 19:49:41 +02:00
andryyy
95cbfe3661 Move mail to spam when DKIM fails, ignore when white/blacklist and honor other actions 2017-04-21 10:19:07 +02:00
andryyy
babad4f137 Anti-Virus local configuration for Rspamd, container not enabled by default 2017-04-20 21:14:20 +02:00
andryyy
60fa9ab9dd Fall back to dkim.conf 2017-03-26 11:08:07 +02:00
andryyy
16d90b86d5 Use Redis history in Rspamd 2017-03-21 23:50:00 +01:00
andryyy
f384759282 Add all defaults to ratelimit module config in Rspamd 2017-03-21 11:20:04 +01:00
André Peters
4f72ed4509 Merge branch 'dev' into footable 2017-03-21 10:06:46 +01:00
André P
8d1784a1c4 Reset ratelimit 2017-03-21 10:05:26 +01:00
root
51230f780f Local 2017-03-21 08:11:06 +01:00
andryyy
7e6fc8568f Move DKIM signing to new dkim_signing.conf 2017-03-19 21:55:03 +01:00