blob: 94eba112f9e326177f9eeb4e904d8fc7d2db84f9 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
|
# Rspamd user settings
Rspamd allows to specify custom settings according to incoming messages. Each setting define some set
of custom metric weights, symbols or actions. An administrator can also skip spam checks for certain
messages completely. Unlike the most of configuration options, rspamd settings can be loaded dynamically
and thus they are updated automatically if a corresponding file or URL has changed since last update.
To load rspamd settings one may specify `.include_map "</file|url>"` or use the ordinary `.include` macro:
~~~nginx
.include_map "$CONFDIR/settings.conf"
~~~
## Settings structure
The settings file itself should contain a single section called "settings":
~~~nginx
settings {
some_users {
priority = high;
from = "@example.com";
rcpt = "admin";
rcpt = "/user.*/";
ip = "172.16.0.0/16";
apply "default" {
symbol1 = 10.0;
symbol2 = 0.0;
actions {
reject = 100.0
greylist = 10.0
}
}
}
whitelist {
priority = low;
rcpt = "postmaster@example.com";
want_spam = yes;
}
}
~~~
So each setting has the following attributes:
- `name` - section name that identify this specific setting (e.g. `some_users`)
- `priority` - high or low, high priority rules are matched first (default priority is low)
- `match list` - list of rules when this rule matches:
+ `from` - match SMTP from
+ `rcpt` - match RCPT
+ `ip` - match source IP address
- `apply` - list of applied rules, identified by metric name (e.g. `default`)
+ `symbol` - modify weight of a symbol
+ `actions` - section of modified actions
Match section performs `AND` operation on different matches, for example, if you have
`from` and `rcpt` in the same rule, then rule matches only when `from` `AND` `rcpt` match.
For the same matches `OR` rule applies. Therefore, if you have multiple `rcpt` matches, then any of
these `rcpt` will trigger the rule. If a setting applies no more rules are matched.
Regexp rules are slow and should not be used intensively. All other rules are matched very quickly.
The picture below describes the architecture of settings matching.
|
