You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
bors[bot] 0839490beb
Merge #2479
2479: Rework the anti-spoofing rule r=mergify[bot] a=nextgens

## What type of PR?

Feature

## What does this PR do?

We shouldn't assume that Mailu is the only MTA allowed to send emails on behalf of the domains it hosts.
We should also ensure that it's non-trivial for email-spoofing of hosted domains to happen

Previously we were preventing any spoofing of the envelope from; Now we are preventing spoofing of both the envelope from and the header from unless some form of authentication passes (is a RELAYHOST, SPF, DKIM, ARC)

### Related issue(s)
- close #2475

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2 years ago
..
antivirus.conf Update deprecated rspamd config option 2 years ago
arc.conf PoC rspamd use dkimkeys from admin using vault api 3 years ago
classifier-bayes.conf enable rspamd's autolearn feature 2 years ago
dkim_signing.conf PoC rspamd use dkimkeys from admin using vault api 3 years ago
force_actions.conf doh 2 years ago
fuzzy_check.conf Move services into core and optional 5 years ago
headers_group.conf Fix score of RCVD_NO_TLS_LAST 3 years ago
history_redis.conf Move services into core and optional 5 years ago
logging.inc Move services into core and optional 5 years ago
metrics.conf Move services into core and optional 5 years ago
milter_headers.conf Remove the username from the milter_headers 4 years ago
multimap.conf Revert "Admin may not have started up when this loads" 2 years ago
options.inc Tell rspamd about RELAYNETS 3 years ago
redis.conf Move services into core and optional 5 years ago
whitelist.conf Revert "Admin may not have started up when this loads" 2 years ago
worker-controller.inc Remove POD_ADDRESS_RANGE 2 years ago
worker-fuzzy.inc Move services into core and optional 5 years ago
worker-normal.inc Move services into core and optional 5 years ago
worker-proxy.inc Move services into core and optional 5 years ago