[Rspamd-Users] RSPAMD not rejecting email despite rule?

[Jörg Backschues]

Am 28.11.22 um 10:02 schrieb Srikrishnan Chitoor via Users:

>    We have a rule in force_actions.conf as follows:
> 
> ** START  RISFORGED1 {
>      action = "reject";
>      expression = "!RISWHITELISTED & RISFORGED & !DMARC_POLICY_ALLOW";
>      message = "Email rejected due to sender spoofing.";
>    }
> ** END
>   We have checked that
> 
> 1. RISWHITELISTED does not exist in log.2. RISFORGED does exist in log3. DMARC_POLICY_ALLOW does not exist in log.
> Then this rule is supposed to fire and reject the email, but it is not happening. Any idea on what the issue can be?
> Thanks,-Krishnan.

Please try this in /etc/rspamd/local.d/force_actions.conf:

rules {

  DMARC_POLICY {
    action = "reject";
    expression = "DMARC_POLICY_REJECT";
    message = "Email rejected due to sender spoofing.";
  }

-- 
Regards
Jörg Backschues