[Rspamd-Users] Peer has wrong DMARC policy. How to override in order to ACCEPT mail ?

[Florian Piekert]

Hello,

my best guess would be to whitelist them in multimaps with a sufficient set -score.

WHITELIST_SENDER_EMAIL {
     type = "from";
     filter = "email:addr";
     map = "$LOCAL_CONFDIR/local.d/whitelist.sender.map";
     score = -12.0;
     action = "accept";
}

and put in whitelist.sender.map

MAILER-DAEMON at altibox-smtp6.altibox.no

and maybe other smtp5, smtp4, ... or do a regexp with it.

Alternatively put yourself in want_spam, bypassing all rspamd checks whatsoever.

Hope it helps?
Florian

Am 15.10.2025 um 16:10 schrieb Håkon Alstadheim via Users:
> My ISP is on occasion sending me system emails (NDNs) from their internal hosts that are not covered by ther spf and DKIM records. I *want* those status messages. The sending host is below a "protected" (for want of a better word) domain: altibox.no.  What is the cleanest way to do this? Mail headers in the NDN are:
> 
> ------------------
> 
> Return-Path: <>
> X-Original-To:hakon+bnc-angle2-incoming at alstadheim.priv.no
> Delivered-To:hakon+bnc-angle2-incoming at alstadheim.priv.no
> Received: from incoming.alstadheim.priv.no (localhost.alstadheim.priv.no [127.0.0.1])
>      by postfix-local-deliver.alstadheim.priv.no (Postfix) with ESMTP id 236E0C20FD60
>      for<hakon+bnc-angle2-incoming at alstadheim.priv.no>; Wed, 15 Oct 2025 13:47:37 +0200 (CEST)
> Received: from altibox-smtp6.altibox.no (altibox-smtp6.altibox.no [212.97.141.43])
>      by incoming.alstadheim.priv.no (Postfix) with ESMTPS id DA76BD26A00
>      for<nte-bounces at alstadheim.priv.no>; Wed, 15 Oct 2025 13:47:36 +0200 (CEST)
> Authentication-Results: incoming.alstadheim.priv.no;
>      dkim=none;
>      spf=none (incoming.alstadheim.priv.no: domain of altibox-smtp6.altibox.no has no SPF policy when checking 212.97.141.43) smtp.helo=altibox-smtp6.altibox.no;
>      dmarc=fail reason="No valid SPF, No valid DKIM" header.from=altibox.no (policy=reject)
> Received: by altibox-smtp6.altibox.no (Postfix)
>      id 4cmpxn2LHcz7W4MY; Wed, 15 Oct 2025 13:38:37 +0200 (CEST)
> Date: Wed, 15 Oct 2025 13:38:37 +0200 (CEST)
> From:MAILER-DAEMON at altibox-smtp6.altibox.no (Mail Delivery System)
> Subject: =?UTF-8?Q?Mail_not_delivered_/_Courriel_non_d=C3=A9livr=C3=A9_/_Mensaje_no_enviado?=
> To:nte-bounces at alstadheim.priv.no
> Auto-Submitted: auto-replied
> MIME-Version: 1.0
> Content-Type: multipart/report; report-type=delivery-status;
>      boundary="4cmpxm5Qwjz7W0dn.1760528317/altibox-smtp6.altibox.no"
> Message-Id:<4cmpxn2LHcz7W4MY at altibox-smtp6.altibox.no>
> X-Rspamd-Queue-Id: DA76BD26A00
> X-Spam-Status: Yes, score=10.72
> X-Rspamd-Action: add header
> X-Spamd-Result: default: False [10.72 / 100.00];
>      DMARC_POLICY_REJECT(20.00)[altibox.no : No valid SPF, No valid DKIM,reject];
>      BAYES_HAM(-11.33)[97.38%];
>      R_BAD_CTE_7BIT(1.05)[7bit,utf8];
>      ARC_NA(1.00)[];
>      ONCE_RECEIVED(0.20)[];
>      MIME_GOOD(-0.10)[text/plain];
>      BOUNCE(-0.10)[DSN];
>      R_DKIM_NA(0.00)[];
>      MIME_TRACE(0.00)[0:~,1:+,2:~,3:~,4:+];
>      TO_DN_NONE(0.00)[];
>      FROM_NO_DN(0.00)[];
>      R_SPF_NA(0.00)[no SPF record];
>      RCVD_COUNT_ONE(0.00)[1];
>      RCVD_TLS_LAST(0.00)[];
>      ASN(0.00)[asn:48854, ipnet:212.97.140.0/22, country:DK];
>      TO_MATCH_ENVRCPT_ALL(0.00)[];
>      MID_RHS_MATCH_FROM(0.00)[];
>      RCPT_COUNT_ONE(0.00)[1];
>      GREYLIST(0.00)[pass,body];
>      MISSING_XM_UA(0.00)[];
>      REDIRECTOR_URL(0.00)[aka.ms]
> Deliver-To: Junk
> X-Rspamd-Server: garbo
> X-Spam: Yes
> 
> 
> -------------------