[Rspamd-Users] RSPAMD not rejecting email despite rule?

[Srikrishnan Chitoor]

Thanks for the suggestion. Any idea why the previous rule did not work? 






On Monday, November 28, 2022 at 03:02:36 PM GMT+5:30, Jörg Backschues via Users <users at lists.rspamd.com> wrote: 





Am 28.11.22 um 10:02 schrieb Srikrishnan Chitoor via Users:

>    We have a rule in force_actions.conf as follows:
> 
> ** START  RISFORGED1 {
>      action = "reject";
>      expression = "!RISWHITELISTED & RISFORGED & !DMARC_POLICY_ALLOW";
>      message = "Email rejected due to sender spoofing.";
>    }
> ** END
>   We have checked that
> 
> 1. RISWHITELISTED does not exist in log.2. RISFORGED does exist in log3. DMARC_POLICY_ALLOW does not exist in log.
> Then this rule is supposed to fire and reject the email, but it is not happening. Any idea on what the issue can be?
> Thanks,-Krishnan.

Please try this in /etc/rspamd/local.d/force_actions.conf:

rules {

  DMARC_POLICY {
    action = "reject";
    expression = "DMARC_POLICY_REJECT";
    message = "Email rejected due to sender spoofing.";
  }

-- 
Regards
Jörg Backschues
-- 
Users mailing list
Users at lists.rspamd.com
https://lists.rspamd.com/mailman/listinfo/users