[Rspamd-Users] rbl check sender domain part

[Vsevolod Stakhov]

On 10/09/2020 10:30, Manuel Garbin wrote:
> Hi, 
> today there was a massive spam from .*.icu new domain, none was matched against rbl like spam eating monkey. 
> I've digged deeper into lua code for rbl against from domain and see that there is no function to match this type of information. 
> 
> The function that seems to match the email domain is check_emails but it will get the email only from message body ( it use extract_specific_urls lua util ) , not header. 
> 
> [ https://github.com/rspamd/rspamd/blob/2a4a393ff51b2f110426ea9d52936d136a5ddcd3/src/plugins/lua/rbl.lua | https://github.com/rspamd/rspamd/blob/2a4a393ff51b2f110426ea9d52936d136a5ddcd3/src/plugins/lua/rbl.lua ] 
> 
> 

Use selectors.