[Rspamd-Users] Skip FORGED_RECIPIENTS on mail polled by fetchmail

[Markus Schönhaber]

24.11.24, 00:10 +0100, Gerald Galster:

>> a user has the local mailbox local at example.com and another mailbox
>> some_other at example.net at a different provider. The latter is polled by
>> fetchmail which feeds the mail into the local mailbox. Such mail is
>> penalized by rspamd with FORGED_RECIPIENTS because the MIME recipient
>> some_other at example.net differs from the SMTP recipient
>> local at example.com. While it is technically correct to do so, in this
>> special case the difference between MIME and SMTP recipient is not an
>> indication for spam but by design. Therefore I would like rspamd to skip
>> this recipient check for such mail. How can that be accomplished?
> 
> In addition to Achim's hints, there may be more trouble waiting if
> fetchmail delivers from non-local addresses, like direct spf violation.

Indeed, I didn't think of that!

> It might be sufficient to multimap/prefilter/accept the ip address
> fetchmail is bound to, e.g. if it runs inside a container or virtual
> machine.
> 
> In case you are running dovecot or another lmtp capable mail store
> backend, another option is to completely skip rspamd processing
> and let fetchmail deliver directly via lmtp to the mail store.
> You should also take into account legal aspects when meddling with
> emails that have already been delivered to an external and final
> destination, that you are just going to fetch for convenience.
Yes, I think I'll let fetchmail dump mail directly to dovecot. If
upstream accepted spam, it's not my part to somehow set that straight.

Thanks for your input!

-- 
Regards
  mks