[Rspamd-Users] Disable specific spam rule?

[Panayotis Katsaloulis]

Indeed, in principle you are right and this should have been a better 
approach.

Since I am trying to move forward and backward my work email to my 
private email (where, on my own private email rspamd is sitting on), 
it's not always the localhost the source of the email, but sometimes the 
web interface of the company, and on top of that the email goes a bit 
around...

At any case, thank you for the insight :)


Στις 30/10/23 10:58, ο/η G.W. Haywood via Users έγραψε:
> Hi there,
>
> On Mon, 30 Oct 2023, Panayotis Katsaloulis via Users wrote:
>
>> Hello all and thank you for accepting me in your community.
>>
>> I have a question. I want to disable a specific rule with rspamd, and 
>> specifically REPLYTO_EQ_TO_ADDR since it's common for me to send 
>> emails to myself, for various reasons, and this rule with value of 
>> "5.0" makes all these emails from myself "spam".
>>
>> I know and understand that this is what also spammers do (claim that 
>> they send emails from your own email) but for my case this is not a 
>> "problem".
>
> There are better ways than what you propose to achieve your objective.
>
> You could for example whitelist mail which is genuinely from yourself.
>
> Because it is so easy to forge the 'From:' address, your whitelisting
> rule(s) would probably need to check a number of other features of the
> mail, such as the sending IP address.  If you are sending from a local
> MTA then simply checking for a sending address of 127.0.0.1 (or ::1)
> should be sufficient.
>
> A risk of whitelisting all mail from localhost is that if you suffer a
> compromise and find yourself sending malicious messages, then you will
> whitelist those too.  A cautious approach is advisable with any kind
> of whitelisting.  In your case whitelisting mail from yourself, sent
> only to yourself, and sent by localhost should be safe enough. Then
> if the worst happens you would whitelist only malicious messages which
> you sent to yourself. :)
>