From 8929f54de5ff960c316d2c76292cb32e2c716b5c Mon Sep 17 00:00:00 2001 From: Florent Daigniere Date: Thu, 20 Oct 2022 11:32:58 +0200 Subject: [PATCH] clarify Also cover the case where the DKIM sig is for another domain and there is no explicit DMARC policy --- core/rspamd/conf/force_actions.conf | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/core/rspamd/conf/force_actions.conf b/core/rspamd/conf/force_actions.conf index 54e893a9..5c4e8eea 100644 --- a/core/rspamd/conf/force_actions.conf +++ b/core/rspamd/conf/force_actions.conf @@ -6,8 +6,8 @@ rules { } ANTISPOOF_DMARC_ENFORCE_LOCAL { action = "reject"; - expression = "((IS_LOCAL_DOMAIN_H | IS_LOCAL_DOMAIN_E) & (DMARC_POLICY_SOFTFAIL | DMARC_POLICY_REJECT | DMARC_POLICY_QUARANTINE)"; - message = "Rejected (anti-spoofing: DMARC is enforced for local domains)"; + expression = "((IS_LOCAL_DOMAIN_H | IS_LOCAL_DOMAIN_E) & (DMARC_POLICY_SOFTFAIL | DMARC_POLICY_REJECT | DMARC_POLICY_QUARANTINE | DMARC_NA)"; + message = "Rejected (anti-spoofing: DMARC compliance is enforced for local domains, regardless of the policy setting)"; } ANTISPOOF_AUTH_FAILED { action = "reject";