[Rspamd-Users] dkim whitelist and get_tld()

[Michelle Sullivan]

build a new map, add them to that map.. you can do it by etld (and add onmicrosoft.com to the etld list if you need) or better you can add a map using the X-MS-Crosstenant-Id header and whitelist that.. which means the tenancy is whitelisted instead of a domain name or multiple domains that might change...


Michelle Sullivan
http://www.mhix.org/
If we don't find a way out of this soon, I'm gonna lose it. Lose it... It means go crazy, nuts, insane, bonzo, no longer in possession of ones faculties, three fries short of a Happy Meal, wacko!

> On 5 Nov 2026, at 19:39, Alexander 'Leo' Bergolth via Users <users at lists.rspamd.com> wrote:
> 
> Hi!
> 
> The whitelist module is using rspamd_util.get_tld() before looking up the domain in the maps.
> 
> This works fine for domains that are correctly handled using the public suffix list effective_tld_names.dat.
> 
> However, nowadays there is a huge number of exchange online domains, that appear with dkim domains like customer.onmicrosoft.com.
> 
> Unfortunately onmicrosoft.com is not on the publicsuffix list and probably will never be: https://github.com/publicsuffix/list/issues/1485
> 
> Thus whitelisting a domain like wu.onmicrosoft.com will not work: rspamd_util.get_tld("wu.onmicrosoft.com") yields onmicrosoft.com, so I'd have to whitelist onmicrosoft.com in my maps.
> 
> Maybe:
> 
> - an additional map lookup for the full name should be tried, if the tld lookup failed?
> 
> - the effective_tld_names.dat list should be extended by addional rspamd managed extra domains?
> 
> - the tld_path config value should be extended to allow custom additions?
> 
> Cheers,
> --leo
> 
> --
> Users mailing list
> Users at lists.rspamd.com
> https://lists.rspamd.com/mailman/listinfo/users