[Rspamd-Users] dkim whitelist and get_tld()
Alexander 'Leo' Bergolth
leo+rspamd at kloburg.at
Thu Nov 5 08:34:34 UTC 2026
Hi!
The whitelist module is using rspamd_util.get_tld() before looking up
the domain in the maps.
This works fine for domains that are correctly handled using the public
suffix list effective_tld_names.dat.
However, nowadays there is a huge number of exchange online domains,
that appear with dkim domains like customer.onmicrosoft.com.
Unfortunately onmicrosoft.com is not on the publicsuffix list and
probably will never be: https://github.com/publicsuffix/list/issues/1485
Thus whitelisting a domain like wu.onmicrosoft.com will not work:
rspamd_util.get_tld("wu.onmicrosoft.com") yields onmicrosoft.com, so I'd
have to whitelist onmicrosoft.com in my maps.
Maybe:
- an additional map lookup for the full name should be tried, if the tld
lookup failed?
- the effective_tld_names.dat list should be extended by addional rspamd
managed extra domains?
- the tld_path config value should be extended to allow custom additions?
Cheers,
--leo
More information about the Users
mailing list