[Rspamd-Users] Spamtrap module looks only at To header and not actual recipient

[Alexander Moisseev]

12.07.2020 6:45, George Shammas via Users пишет:
> I'm a big fan of wildcard domains and setting up aliases for all
> services I use. If a service get's compromised it can be bucketed
> towards spam.
> 
> There are now several of these emails that get a significant amount of
> spam, but only about a third actually have a To: header at all. The
> rest either have spoofed To: are missing To: headers. The spamtrap
> module seems to only look at the To: header and so they all squeak by
> the spamtrap rules.
> 
> There doesn't seem to be a method to make the spamtrap module look at
> who the mail was originally intended for. And since spammers are so
> great at spoofing headers it also greatly lowers the effectiveness of
> the module.
> 
> Is there a way to make the spamtrap module look at the recipient
> instead of the To: header?
> 

The spamtrap module doesn't look at the To: header, it checks SMTP recipients.

https://github.com/rspamd/rspamd/blob/1b66df81cd9fa6799f1fd8d2fd92781661d722d8/src/plugins/lua/spamtrap.lua#L40