diff --git a/core/rspamd/conf/force_actions.conf b/core/rspamd/conf/force_actions.conf index 54e893a9..5c4e8eea 100644 --- a/core/rspamd/conf/force_actions.conf +++ b/core/rspamd/conf/force_actions.conf @@ -6,8 +6,8 @@ rules { } ANTISPOOF_DMARC_ENFORCE_LOCAL { action = "reject"; - expression = "((IS_LOCAL_DOMAIN_H | IS_LOCAL_DOMAIN_E) & (DMARC_POLICY_SOFTFAIL | DMARC_POLICY_REJECT | DMARC_POLICY_QUARANTINE)"; - message = "Rejected (anti-spoofing: DMARC is enforced for local domains)"; + expression = "((IS_LOCAL_DOMAIN_H | IS_LOCAL_DOMAIN_E) & (DMARC_POLICY_SOFTFAIL | DMARC_POLICY_REJECT | DMARC_POLICY_QUARANTINE | DMARC_NA)"; + message = "Rejected (anti-spoofing: DMARC compliance is enforced for local domains, regardless of the policy setting)"; } ANTISPOOF_AUTH_FAILED { action = "reject";