[Rspamd-Users] SPF, DKIM and DMARC policy

[jose.celestino at gmail.com]

To reject invalid DKIM records the easiest way is to go to /#symbols,
on the web interface, and adjust the relevant DMARC_* symbol score(s)
(DMARC_POLICY_SOFTFAIL).

On Sat, May 31, 2025 at 10:57 PM Andy Kuhlen via Users
<users at lists.rspamd.com> wrote:
>
> Hello,
>
> Lately I have been receiving spam mails that are currently being handled
> with the standard configuration of SPF, DKIM and DMARC tests and are
> also being properly moved to the spam folder. I find this less than
> satisfactory and would like to reject mails where the check shows the
> following results:
>
> ARC-Authentication-Results: i=2;
>         axe.mydomain.de;
>         dkim=none ("invalid DKIM record") header.d=choibaidoithuong.com header.s=zoho header.b=RI8h0T1U;
>         dmarc=fail reason="No valid SPF" header.from=choibaidoithuong.com (policy=none);
>         arc=pass ("us.zohomail360.com:s=zohoarc:i=1");
>         spf=none (axe.mydomain.de: domain of contact at choibaidoithuong.com has no SPF policy when checking 136.143.188.167) smtp.mailfrom=contact at choibaidoithuong.com
>
> I have set up a reject policy for DMARC in the DNS settings for my domain. Now I would also like to set a reject policy for Rspamd. Does that make sense?
>
> How should I handle mails where all checks fail? What is reasonable/practicable?
>
> Unfortunately, the documentation of the SPF, DKIM and DMARC modules of Rspamd is not very informative in this regard. Does anyone have any advice / guidance?
>
>
> --
> Users mailing list
> Users at lists.rspamd.com
> https://lists.rspamd.com/mailman/listinfo/users