diff options
| author | heraklit256 <37872459+heraklit256@users.noreply.github.com#> | 2018-08-07 16:34:30 +0200 |
|---|---|---|
| committer | heraklit256 <37872459+heraklit256@users.noreply.github.com#> | 2018-08-07 16:34:30 +0200 |
| commit | 1ecd691570fcdbb3d093948d78dbacd33f8d3ea3 (patch) | |
| tree | c7c531e7f0a54c2278f31c6f465d15c57e8b9498 /conf/composites.conf | |
| parent | 19b524dc47f1465db7329be57c02f27e7aca215b (diff) | |
| download | rspamd-1ecd691570fcdbb3d093948d78dbacd33f8d3ea3.tar.gz rspamd-1ecd691570fcdbb3d093948d78dbacd33f8d3ea3.zip | |
add negative weight to DNSWL entries
However, a message must be correctly DKIM signed to get some more
negative weight in case an received IP is listed with medium or
high trust at DNSWL.
This supersedes a first patch without the DKIM condition.
Diffstat (limited to 'conf/composites.conf')
| -rw-r--r-- | conf/composites.conf | 13 |
1 files changed, 11 insertions, 2 deletions
diff --git a/conf/composites.conf b/conf/composites.conf index a07b7020f..9d204344c 100644 --- a/conf/composites.conf +++ b/conf/composites.conf @@ -83,9 +83,18 @@ composites { } RCVD_UNAUTH_PBL { expression = "RECEIVED_PBL & -RCVD_VIA_SMTP_AUTH"; - description = "Relayed through ZEN PBL IP without sufficient authentication"; + description = "Relayed through ZEN PBL IP without sufficient authentication (possible indicating an open relay)"; score = 2.0; - policy = "leave"; + } + RCVD_DKIM_DNSWL_MED { + expression = "R_DKIM_ALLOW & RCVD_IN_DNSWL_MED"; + description = "Sufficiently DKIM signed and received from IP with medium trust at DNSWL"; + score = -1.5; + } + RCVD_DKIM_DNSWL_HI { + expression = "R_DKIM_ALLOW & RCVD_IN_DNSWL_HI"; + description = "Sufficiently DKIM signed and received from IP with high trust at DNSWL"; + score = -3.5; } .include(try=true; priority=1; duplicate=merge) "$LOCAL_CONFDIR/local.d/composites.conf" |