Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Fix] Do not exclude authenticated users from URIBL lookups #4144

Merged

Conversation

twesterhever
Copy link
Contributor

Due to this line in the RBL module default configuration file, mails from authenticated users are not subject to any DNSBL lookups. This certainly makes sense for RBLs (i. e. IP-based DNSBLs), but in order to improve detection on outbound spam, URIBLs should be enabled for authenticated users too, so rspamd will notice if a compromised account starts emitting mails containing known bad FQDNs.

Therefore, this patch enables URIBL lookups against SURBL, URIBL, Spamhaus DBL and rspamd.com's DBL for authenticated users. Hopefully it helps reducing the amount of spam sent out though cracked accounts a bit. :-)

@vstakhov
Copy link
Member

vstakhov commented Apr 9, 2022

Yes, that's a good point!

@vstakhov vstakhov merged commit ded0cff into rspamd:master Apr 9, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants