Differences

This shows you the differences between two versions of the page.

--- doc:appunti:linux:sa:rspamd_spamassassin [2024/01/26 15:22] – [ClamAV on TCP socket in Debian 12] niccolo
+++ doc:appunti:linux:sa:rspamd_spamassassin [2024/07/17 18:23] (current) – [Whitelist-From using the multimap module] niccolo
@@ Line 500: / Line 500: @@
 ===== Custom regexp rule with multimap =====
-To add a custom rule using some regular expressions, we will use the **[[https://rspamd.com/doc/modules/multimap.html|multimap]]** module, which is enabled per default in Debian. We can reate a file called **/etc/rspamd/local.d/multimap.conf** and write a **symbol** (rule name) in it:
+To add a custom rule using some regular expressions, we will use the **[[https://rspamd.com/doc/modules/multimap.html|multimap]]** module, which is enabled per default in Debian. We can create a file called **/etc/rspamd/local.d/multimap.conf** and write a **symbol** (rule name) in it:
 <file>
@@ Line 532: / Line 532: @@
 /second example string/gi
 </file>
+If the map file is updated, it will be reloaded automatically.
 If **prefilter** is true, we have to define the //action//. In case of match the action is executed and no filters will be applied.
@@ Line 553: / Line 555: @@
 The **message** is eventually used if the mail matches this rule and the action is set to //reject// or //soft reject//. In this case the sender MTA will be notified with this message in reply to end of DATA command. The SMTP message code will be 554 for reject or 451 for soft reject.
+===== Whitelist-From using the multimap module =====
+It is possibile replicate the **whitelist_from** option found in **SpamAssassin** using the multimap module of **rspamd**. In the **/etc/rspamd/local.d/multimap.conf** we create a symbol called e.g. **WHITELIST_FROM**:
+<file>
+WHITELIST_FROM {
+    description = "Whitelist From regex";
+    type = "from";
+    regexp = true;
+    map = "${LOCAL_CONFDIR}/maps.d/whitelist_from.map";
+    prefilter = true;
+    action = "accept";
+    score = -100;
+}
+</file>
+In the file **/etc/rspamd/maps.d/whitelist_from.map** it is possibile to add one regex per line to mach the **From** header. The header content is cleaned of extra data, e.g. **''%%Niccolo Rigacci <niccolo@rigacci.org>%%''** will be pruned to **''%%niccolo@rigacci.org%%''**.
+Standard regex **meta-characters** can be used, e.g. (see ''man grep'' for a full list):
+^ %%^%%   | Matches the start of the line.  |
+^ %%$%%   | Matches the end of the line.  |
+^ %%.%%   | Matches a single character.  |
+^ %%\.%%  | Matches a single dot.  |
+^ %%\b%%  | Matches the empty string at the edge of a word.  |
+The regex must be enclosed into a pair of **%%/%%** chars and the standard **flags** can be used:
+^ %%i%%   | Case insensitive match.  |
+Here are an example to whitelist a single email address and an entire mail domain (NOTICE: if the map is updated, it will be reloaded automatically):
+<file>
+/^niccolo@texnet\.it$/i
+/@domain\.org$/i
+</file>
 ===== Customizing the headers =====