[Rspamd-Users] SPF, DKIM and DMARC policy

[Andy Kuhlen]

Hi, and thanks for your reply.

Does it make sense to add something like this to
/etc/rspamd/local.d/dmarc.conf:

actions = {
  quarantine = "add_header";
  reject = "reject";
}

And then to add something like this in
/etc/rspamd/local.d/force_actions.conf:

rules {
    REJECT_DMARC_POLICY_REJECT {
            action = "reject";
            expression = "DMARC_POLICY_REJECT";
            message = "Email rejected per DMARC policy";
        }
    }

Or as alternative to monitor the behaviour:

rules {
  DMARC_HARD_REJECT_TEST {
    expression = "DMARC_POLICY_REJECT";
    action = "add_header";
    description = "Testing DMARC reject rule";
  }
}

Kind regards

Andy

Am 01.06.2025 um 09:59 schrieb lists at at.encryp.ch:
> You could do a force action to reject based on DMARC_POLICY_REJECT symbol presence, but it would break some mailing lists.