[Rspamd-Users] replies-module

[G.W. Haywood]

Hi there,

On Wed, 26 Jun 2024, Kim Sindalsen via Users wrote:

> Is it possible (how) to configure the replies-module to check
> spf/dkim/dmarc?

As I understand it, the replies module concerns itself mainly with
'Message-ID' and 'In-Reply-To' headers.  Mail messages often contain
'In-Reply-To' headers, which headers themselves contain references to
'Message-ID' headers.  Using this information threaded mail readers
(for example) can list individual messages of an email conversation in
the correct order - so that you can 'follow the thread'.  However it's
also possible to modify your filtering if you have knowledge of the
messages (Message-IDs) which have been sent.  You can for example drop
messages which fraudulently claim to be replies to messages which were
*not* in fact sent by you, and/or you can subject messages which are
replies to messages which you *did* send to filtering different from
your 'normal' filtering.  This might reduce the false positive count
in the spam bucket.

SPF, DKIM and DMARC have no great relevance to these considerations.
They are more concerned with forgery, verification of message senders
and message content, that sort of thing.  Security-type stuff.  The
'Message-ID' and 'In-Reply-To' headers can be part of the data signed
with DKIM, but that's just to permit a recipient to verify that they
haven't been tampered with in transit.

What is it you want to achieve?  There are many ways of using the
techniques to which you refer, but first you really should be familiar
with their purpose and design.  The RFCs contain the specifications
but they are not what I'd call easy reading.  Wikipedia has some good
articles about them.

-- 

73,
Ged.