On Thu, Nov 14, 2019 at 06:23:32AM +0000, Dominic Raferd wrote: > > > On Thu, 14 Nov 2019 at 05:49, Bill Cole <[1] > sausers-20150...@billmail.scconsult.com> wrote: > > On 14 Nov 2019, at 0:14, Amir Caspi wrote: > > > DMARC_REJECT > > Is not the name of any rule currently distributed by the Apache > SpamAssassin project... > > > This comes from an update to KAM.cf in the last few weeks. It briefly caused > me > problems because I pass all authenticated/local mails through SA and these all > started being scored +10. My solution was to add a line in my [2]local.cf: > score DMARC_REJECT 0 > > This works for me because I run opendmarc as milter - any emails that > non-auth/ > local and which fail DMARC with p=reject will be blocked anyway.
Seems KAM.cf doesn't even check if DKIM/SPF plugins are loaded. :-( meta DMARC_REJECT !(DKIM_VALID_AU || SPF_PASS) && __DMARC_POLICY_REJECT Prolly should look something like (DKIM_INVALID || SPF_FAIL) && __DMARC_POLICY_REJECT.
