[Rspamd-Users] Skip FORGED_RECIPIENTS on mail polled by fetchmail

[Markus Schönhaber]

23.11.24, 20:27 +0100, Achim Lammerts via Users:

> guess this could be done with user settings, have a look:
> https://rspamd.com/doc/configuration/settings.html#settings-structure
> There you can disable symbols or reduce the score of a symbol for 
> specific users or sender/recipient combinations.

Thanks, that is probably what I was searching for! I'll take a look at that.

> Otherwise, why don't use a multimap whitelist with a pre-filtered 
> "accept" for that special cases?
> https://rspamd.com/doc/modules/multimap.html#pre-filter-maps

Actually, I did want those mails checked by rspamd. But the more I think
about it (and also considering what Gerald wrote), skipping spam
checking in this case might be the more sensible thing to do.

Thanks for your input!

-- 
Regards
  mks


> WHITELIST_SENDERS {
>      type = "from";
>      filter = "email";
>      map = "$LOCAL_CONFDIR/local.d/maps.d/senders_whitelist.map";
>      description = "Whitelisted senders map";
>      symbol = "WHITELIST_SENDERS";
>      prefilter = true;
>      action = "accept";
>      }
> 
> or https://rspamd.com/doc/modules/multimap.html#examples:
> 
> SENDER_FROM_WHITELIST_USER {
>      type = "from";
>      filter = "email:user";
>      extract_from = "smtp";
>      map = "$LOCAL_CONFDIR/local.d/maps.d/senders_whitelist.map";
>      action = "accept"; # Prefilter mode
>      }
> 
> /etc/rspamd/local.d/maps.d/senders_whitelist.map:
> some_other at example.net
> 
> Kind regards
> Achim
> 
> Am 23.11.24 um 16:51 schrieb Markus Schönhaber:
>> Hi,
>>
>> a user has the local mailbox local at example.com and another mailbox
>> some_other at example.net at a different provider. The latter is polled by
>> fetchmail which feeds the mail into the local mailbox. Such mail is
>> penalized by rspamd with FORGED_RECIPIENTS because the MIME recipient
>> some_other at example.net differs from the SMTP recipient
>> local at example.com. While it is technically correct to do so, in this
>> special case the difference between MIME and SMTP recipient is not an
>> indication for spam but by design. Therefore I would like rspamd to skip
>> this recipient check for such mail. How can that be accomplished?
>>
>