[Rspamd-Users] SPF, DKIM and DMARC policy

[lists at at.encryp.ch]

You could do a force action to reject based on DMARC_POLICY_REJECT symbol presence, but it would break some mailing lists.

2025-05-31T22:38:45Z Andy Kuhlen via Users <users at lists.rspamd.com>:

> Hello,
> 
> Lately I have been receiving spam mails that are currently being handled
> with the standard configuration of SPF, DKIM and DMARC tests and are
> also being properly moved to the spam folder. I find this less than
> satisfactory and would like to reject mails where the check shows the
> following results:
> 
> ARC-Authentication-Results: i=2;
>     axe.mydomain.de;
>     dkim=none ("invalid DKIM record") header.d=choibaidoithuong.com header.s=zoho header.b=RI8h0T1U;
>     dmarc=fail reason="No valid SPF" header.from=choibaidoithuong.com (policy=none);
>     arc=pass ("us.zohomail360.com:s=zohoarc:i=1");
>     spf=none (axe.mydomain.de: domain of contact at choibaidoithuong.com has no SPF policy when checking 136.143.188.167) smtp.mailfrom=contact at choibaidoithuong.com
> 
> I have set up a reject policy for DMARC in the DNS settings for my domain. Now I would also like to set a reject policy for Rspamd. Does that make sense?
> 
> How should I handle mails where all checks fail? What is reasonable/practicable?
> 
> Unfortunately, the documentation of the SPF, DKIM and DMARC modules of Rspamd is not very informative in this regard. Does anyone have any advice / guidance?
> 
>