[Rspamd-Users] Whitelist by Helo...

[Nihad @ RSPAMD maillist]

On 13 Aug 2019, 19.33 +0200, Alberto <alberto at bersol.info>, wrote:
> Hi Everybody:
>
> I have an home host with dynamic IP which have to send some
> notifications mails, and they always are stored in SPAM folder.
>
> The headers are the following:
>
> ...
>
> Received: from myhome.myhomedomain (173.95-95-224.dynamic.clientes.euskaltel.es [95.95.224.173])
> by correo.bersol.info (Postfix) with ESMTP id 180E52091B
> for <root at bersol.info>; Tue, 13 Aug 2019 04:55:13 +0200 (CEST)
> Received: by myhome.myhomedomain (Postfix, from userid 0)
> id E106440561; Tue, 13 Aug 2019 04:55:11 +0200 (CEST)
> ...
> X-Spamd-Result: default: False [7.84 / 15.00];
> ...
> HFILTER_HELO_NORES_A_OR_MX(0.30)[myhome.myhomedomain];
> HFILTER_HELO_IP_A(1.00)[myhome.myhomedomain];
> ...
> X-Spam: Yes
>
>
> I have some whitelist by "From" or "IP" but in this case I would like to
> set a Whitelist by Helo because the home IP is dynamic.
>
> root at myhosthome:~# cat /etc/rspamd/local.d/multimap.conf
>
> # Whitelists...
> ###############
>
> IP_WL {
>   type = "ip";
>   map = "${LOCAL_CONFDIR}/local.d/ip_wl.map";
>   symbol = "My_IP_WL";
>   prefilter = true;
>   action = "accept";
>   #score = -5;
>   description = "Lista Blanca de IP";
> }
> FROM_WL {
>   type = "from";
>   #filter = "email:user";
>   map = "${LOCAL_CONFDIR}/local.d/from_wl.map";
>   symbol = "My_FROM_WL";
>   regexp = true;
>   action = "accept"
>   #score = -50;
>   description = "Lista Blanca de FROM";
> }
> ...
>
> I suppose I must set another function with type "helo", perhaps... ??
>
> Best Regards,
>
> --
> Users mailing list
> Users at lists.rspamd.com
> https://lists.rspamd.com/mailman/listinfo/users


I’ve got something similar for local crontabs that might contain urls from spammers, and therefore cron mails being marked as spam.
What I did, was setup settings "ignore" rule for certain symbols if mail matches "from" and "ip" …

local.d/settings.conf

	logwatch {
priority = high;
from = "logwatch at localhost";
ip = "127.0.0.1";
apply {
symbols_disabled = ["SH_EMAIL_DBL"];
}
}


So setup, your "from", "ip" and "symbol_disabled" that are triggered on these emails, and it should let them thru.


/Nihad