[Minor] Composite: Don't penalise for SPF/DKIM failure when DMARC passed

diff --git a/conf/composites.conf b/conf/composites.conf
index 5ed69df39b61409f7e18b58c818188d68ddfccd6..d6d845fe9bc21137c1d7a79f6526f118f03773ff 100644 (file)
--- a/conf/composites.conf
+++ b/conf/composites.conf
@@ -26,6 +26,9 @@ composite "FORGED_SENDER_FORWARDING" {
 composite "SPF_FAIL_FORWARDING" {
     expression = "g:forwarding & (R_SPF_SOFTFAIL | R_SPF_FAIL)";
 }
+composite "DMARC_POLICY_ALLOW_WITH_FAILURES" {
+    expression = "DMARC_POLICY_ALLOW & (R_SPF_SOFTFAIL | R_SPF_FAIL | R_DKIM_REJECT)";
+}
 composite "FORGED_RECIPIENTS_FORWARDING" {
     expression = "FORGED_RECIPIENTS & g:forwarding";
 }

diff --git a/conf/metrics.conf b/conf/metrics.conf
index 781034048d5977878b674132c02c02ff6f6a96f1..44600b5bcef95016446e51c883f674b11d69ec68 100644 (file)
--- a/conf/metrics.conf
+++ b/conf/metrics.conf
@@ -997,6 +997,10 @@ metric {
             weight = -0.5;
             description = "DMARC permit policy";
         }
+        symbol "DMARC_POLICY_ALLOW_WITH_FAILURES" {
+            weight = -0.5;
+            description = "DMARC permit policy with DKIM/SPF failure";
+        }
         symbol "DMARC_POLICY_REJECT" {
             weight = 2.0;
             description = "DMARC reject policy";