[Rspamd-Users] dkim whitelist and get_tld()

Alexander 'Leo' Bergolth leo+rspamd at kloburg.at
Thu Nov 5 08:34:34 UTC 2026


Hi!

The whitelist module is using rspamd_util.get_tld() before looking up 
the domain in the maps.

This works fine for domains that are correctly handled using the public 
suffix list effective_tld_names.dat.

However, nowadays there is a huge number of exchange online domains, 
that appear with dkim domains like customer.onmicrosoft.com.

Unfortunately onmicrosoft.com is not on the publicsuffix list and 
probably will never be: https://github.com/publicsuffix/list/issues/1485

Thus whitelisting a domain like wu.onmicrosoft.com will not work: 
rspamd_util.get_tld("wu.onmicrosoft.com") yields onmicrosoft.com, so I'd 
have to whitelist onmicrosoft.com in my maps.

Maybe:

- an additional map lookup for the full name should be tried, if the tld 
lookup failed?

- the effective_tld_names.dat list should be extended by addional rspamd 
managed extra domains?

- the tld_path config value should be extended to allow custom additions?

Cheers,
--leo



More information about the Users mailing list