A.Schulze via users skrev den 2026-02-08 11:18:
Hello,
I like to create SA rules to cover some or all following properties of
a message:
- RFC5322.From TLD: .de
regexp
- RFC5321.MailFrom: mail.$domain
needs pluing imho to test this
- NS-Record: @cloudflare
- MX-Record: @cloudflare
why ?
- DMARC-Policy: p=reject, rua -> @cloudflare
maybe AuthRes ?
- SPF-Record: include: @cloudflare
why ?, spf can have unlimited ips, and some domain owners does not care
- existence of mail.$domain
why ?
- SPF-Record for mail.$domain -> include @amazonses
why ?
- SMTP-Client-IP: $some @amazonses
or all ?
- DKIM-Signatures: 1k RSA by amazonses.com & 2k RSA by $domain
do we need 1k ? :)
- DMARC-Result: pass
AuthRes plugin
Any advise?
make it all combined with meta rule based on all above subrules that all
start with __something
is rspamd doing all the above ?
