Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Browse files

karma: make default config more conservative

default config can cause deliverability problems on new installs. This back's off the strictness a bit, and the user can crank it up by tweaking karma.ini
  • Loading branch information...
commit 6dfd5060895aa31379d3d47aede5f2103d8915ae 1 parent 195c96a
@msimerson msimerson authored
Showing with 10 additions and 6 deletions.
  1. +8 −6 config/karma.ini
  2. +2 −0  plugins/karma.js
View
14 config/karma.ini
@@ -30,7 +30,7 @@ max=4
[thresholds]
; negative: the threshold below which a connection is denied/rejected
; Be conservative to avoid false positives!
-negative=-5
+negative=-8
; score above which connections are considered 'good'
positive=3
@@ -82,9 +82,9 @@ reset=10
; maximum number of recipients allowed
[recipients]
-bad=1
-neutral=5
-good=25
+bad=5
+neutral=15
+good=50
[spammy_tlds]
@@ -166,7 +166,7 @@ results.helo.checks.fail@forward_dns = -1 if match
results.helo.checks.fail@dynamic = -2 if match
results.helo.checks.fail@reverse_dns = -1 if match
-relaying = 3
+relaying = 5
notes.auth_user = 7
notes.auth_fails@1 = -1 if gt 0
notes.auth_fails@2 = -2 if gt 1
@@ -216,7 +216,9 @@ notes.spamassassin.hits@s2 = -1 if gt 2
notes.spamassassin.hits@s3 = -1 if gt 3
notes.spamassassin.hits@s4 = -1 if gt 4
notes.spamassassin.hits@s5 = -1 if gt 5
-notes.spamassassin.hits@s6 = -1 if gt 6
+notes.spamassassin.hits@s7 = -2 if gt 7
+notes.spamassassin.hits@s9 = -4 if gt 9
+notes.spamassassin.hits@s20 = -10 if gt 20
results.clamd.fail@virus = -16 if match
results.clamd.fail@phish = -6 if match
View
2  plugins/karma.js
@@ -158,6 +158,8 @@ exports.hook_deny = function (next, connection, params) {
// exceptions, whose 'DENY' should not be captured
if (pi_name === 'karma') return next(); // myself
if (pi_name === 'access') return next(); // ACLs
+ if (pi_name === 'helo.checks') return next(); // has granular reject
+ if (pi_name === 'data.headers') return next(); // has granular reject
if (pi_hook === 'rcpt_to') return next(); // RCPT hooks are special
if (pi_hook === 'queue') return next();
Please sign in to comment.
Something went wrong with that request. Please try again.