1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
|
-- 0 or 1 received: = spam
local symbol = 'ONCE_RECEIVED'
-- Symbol for strict checks
local symbol_strict = nil
local bad_hosts = {}
local good_hosts = {}
function recv_dns_cb(task, to_resolve, results, err)
if not results then
task:insert_result(symbol_strict, 1)
else
rspamd_logger.info(string.format('SMTP resolver failed to resolve: %s is %s', to_resolve, results[1]))
local i = true
for _,h in ipairs(bad_hosts) do
if string.find(results[1], h) then
-- Check for good hostname
if good_hosts then
for _,gh in ipairs(good_hosts) do
if string.find(results[1], gh) then
i = false
break
end
end
end
if i then
task:insert_result(symbol_strict, 1, h)
return
end
end
end
end
end
function check_quantity_received (task)
local recvh = task:get_received_headers()
if table.maxn(recvh) <= 1 then
task:insert_result(symbol, 1)
-- Strict checks
if symbol_strict then
local r = recvh[1]
if not r then
return
end
-- Unresolved host
if not r['real_hostname'] or string.lower(r['real_hostname']) == 'unknown' or string.match(r['real_hostname'], '^%d+%.%d+%.%d+%.%d+$') then
if r['real_ip'] then
-- Try to resolve it again
task:resolve_dns_ptr(r['real_ip'], 'recv_dns_cb')
else
task:insert_result(symbol_strict, 1)
end
return
end
local i = true
local hn = string.lower(r['real_hostname'])
for _,h in ipairs(bad_hosts) do
if string.find(hn, h) then
-- Check for good hostname
if good_hosts then
for _,gh in ipairs(good_hosts) do
if string.find(hn, gh) then
i = false
break
end
end
end
if i then
task:insert_result(symbol_strict, 1, h)
return
end
end
end
end
end
end
-- Registration
if type(rspamd_config.get_api_version) ~= 'nil' then
if rspamd_config:get_api_version() >= 1 then
rspamd_config:register_module_option('once_received', 'symbol', 'string')
rspamd_config:register_module_option('once_received', 'symbol_strict', 'string')
rspamd_config:register_module_option('once_received', 'bad_host', 'string')
rspamd_config:register_module_option('once_received', 'good_host', 'string')
end
end
-- Configuration
local opts = rspamd_config:get_all_opt('once_received')
if opts then
if opts['symbol'] then
symbol = opts['symbol']
for n,v in pairs(opts) do
if n == 'symbol_strict' then
symbol_strict = v
if type(rspamd_config.get_api_version) ~= 'nil' then
rspamd_config:register_virtual_symbol(symbol_strict, 1.0)
end
elseif n == 'bad_host' then
if type(v) == 'string' then
bad_hosts[1] = v
else
bad_hosts = v
end
elseif n == 'good_host' then
if type(v) == 'string' then
good_hosts[1] = v
else
good_hosts = v
end
end
end
-- Register symbol's callback
rspamd_config:register_symbol(symbol, 1.0, 'check_quantity_received')
end
end
|