[Rspamd-Users] rbl check sender domain part

Manuel Garbin manuel at studiostorti.com
Thu Sep 10 09:30:29 UTC 2020

today there was a massive spam from .*.icu new domain, none was matched against rbl like spam eating monkey. 
I've digged deeper into lua code for rbl against from domain and see that there is no function to match this type of information. 

The function that seems to match the email domain is check_emails but it will get the email only from message body ( it use extract_specific_urls lua util ) , not header. 

[ https://github.com/rspamd/rspamd/blob/2a4a393ff51b2f110426ea9d52936d136a5ddcd3/src/plugins/lua/rbl.lua | https://github.com/rspamd/rspamd/blob/2a4a393ff51b2f110426ea9d52936d136a5ddcd3/src/plugins/lua/rbl.lua ] 

More information about the Users mailing list