[Rspamd-Users] Problem with rspamd behaviour when interpreting whitelisting

Albrecht Backhaus albrecht.backhaus at dojokun.ch
Sun Oct 27 11:02:52 UTC 2024


Hello

I use some maps to whitelist or blacklist certain domains. In my 
multimap configuration I have entered “email:domain” as a filter for 
those maps.

Now I lately have the following phenomenon:

For example, if I whitelist the following domain in my maps: "test.org" 
and receive an email from a domain "somethingtest.org", this domain is 
considered whitelisted by rspamd obviously because it has the "test.org" 
at the end, which from my point of view is wrong.

Here is a part of my multimap.conf and an example whitelisting map

sender_header_from_whitelisted_domain {
             type ="header";
             header = "from";
             filter = "email:domain";
             map = 
"file:///etc/rspamd/local.d/maps.d/whitelist_from_domain.map";
             regexp = true;
             symbol = "HEADER_SENDER_FROM_WHITELISTED_DOMAIN";
}

/etc/rspamd/local.d/maps.d/whitelist_from_domain.map
# whitelisted domains
test.org

I use this configuration for a long time now and never recognized that 
behavior before.

Have I overseen something ?

Thanks in advance für any helpful advice


More information about the Users mailing list