Hello all,
I'm trying to find a working example for the current stable (Ubuntu)
version of rspamd that allows me to customize scores for e-mails by
source ASN. Of course, this is because I'm receiving a relatively high
amount of spam from one specific ASN (OVH), which is currently
responsible for about 90% of incoming spam on my (private) mail server,
and I want to react accordingly.
The current rspamd version has deprecated the "IP Score" module in favor
of the "Reputation" module, but this module doesn't seem quite right for
what I want to achieve. Or I'm just unable to combine the puzzle pieces.
In a current example of spam delivered through OVH, this is the symbol
for reputation and ASN:
IP_REPUTATION_HAM (-0.002588) [asn: 16276(-0.00), country: FR(0.00), ip:
51.195.123.203(0.00)]
ASN (0) [asn:16276, ipnet:51.195.0.0/16, country:FR]
I'd like to increase scores for everything coming from "known spammy"
ASN, ideally using a local map. I found maps like this in dockerized
setups like here:
<https://github.com/mailcow/mailcow-dockerized/blob/master/data/conf/rspamd/custom/bad_asn.map>
but don't see where the map is used in a rule or selector.
Is there a how-to somewhere, or did some of you already implement this
in rspamd's rule logic?
Thanks,
--cku
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
