ISPConfig 3.1.15p2 rspamd whitelist

Discussion in 'Installation/Configuration' started by Olivier BOUMATI, Oct 21, 2019.

  1. Olivier BOUMATI

    Olivier BOUMATI New Member

    Hi,

    What is the best method to whitelist a server ip address or an email ?
    Via ISPConfig interface (Postfix Whitelist or spam filter whitelist) or directly via the rspamd GUI configuration menu in one the following files, and which of them ?
    • /var/lib/rspamd/rspamd_dynamic
    • /var/lib/rspamd/spf_whitelist.inc.local
    • /var/lib/rspamd/dkim_whitelist.inc.local
    • /var/lib/rspamd/dmarc_whitelist.inc.local
    • /var/lib/rspamd/spf_dkim_whitelist.inc.local
    • /var/lib/rspamd/surbl-whitelist.inc.local
    Thank you.
     
  2. Taleman

    Taleman Well-Known Member HowtoForge Supporter

  3. Olivier BOUMATI

    Olivier BOUMATI New Member

    Thank you but this is for postfix, my question (not clear enough) was for rspamd, the new antispam filter replacing amavisd-new.
    Since I replaced amavisd-new by rspamd, some system admin mails sent by one of my servers are consistently seen as spam (subject changed), but since I have every confidence in this server, I wish it were whitelisted.
     
  4. Steini86

    Steini86 Active Member

    I think you can do it in the ispconfig gui. However, I have done the manual way for myself:
    Code:
    # cat /etc/rspamd/local.d/multimap.conf
    IP_WHITELIST {
          type = "ip";
          prefilter = "true";
          map = "${LOCAL_CONFDIR}/local.d/ip_whitelist.map";
          action = "accept";
    }
    
    WHITELIST_SENDER_DOMAIN {
          type = "from";
          filter = "email:domain";
          map = "${LOCAL_CONFDIR}/local.d/whitelist.sender.domain.map";
          action = "accept";
     }
    
    FRIENDLY_SENDER_DOMAIN {
          type = "from";
          filter = "email:domain";
          map = "${LOCAL_CONFDIR}/local.d/friendly.sender.domain.map";
          score = -7.0
     }
    ip_whitelist.map: One Whitelisted IP per line
    whitelist.sender.domain.map: One domain per line which is always accepted
    friendly.sender.domain.map: One domain per line, whose spam score is reduced by 7 (effectively whitelisted, too)
     
    Ludowan likes this.
  5. Olivier BOUMATI

    Olivier BOUMATI New Member

    I tried it and it seems to be good.
    I would still like to know how to do with the GUI and what are the files listed in the "Lists" of the GUI configuration page rspamd (/ rspamd / # configuration)?
     
  6. Olivier BOUMATI

    Olivier BOUMATI New Member

    I replied to myself, just the files have the correct rights and the interface allows you to change. Well play.
     
  7. Ludowan

    Ludowan New Member

    Hello,
    I confirm that doing the manual way as Steini86 said worked for me.
    Code:
    # nano /etc/rspamd/local.d/multimap.conf
    WHITELIST_SENDER_DOMAIN {
          type = "from";
          filter = "email:domain";
          map = "${LOCAL_CONFDIR}/local.d/whitelist.sender.domain.map";
          action = "accept";
     }
    # nano /etc/rspamd/local.d/whitelist.sender.domain.map
    domain1.com
    domain2.com
    systemctl restart rspamd
    Using ISPConfig GUI to whitelist domain didn't change anything although the rules were saved in /etc/rspamd/local.d/users/spamfilter_wblist_xxx.conf.
    Thank you.
     
    Steini86 likes this.
  8. Jesse Norell

    Jesse Norell Well-Known Member Staff Member Howtoforge Staff

    I'm pretty low on bandwidth (ie. available time/capacity to look at it) at the moment, but it sounds like that's a bug, or at least feature request, in the ispconfig ui? You might search the issues in gitlab and if there's not one created for this, go ahead and open one so it gets addressed.
     
    Last edited: Sep 9, 2020
  9. Jesse Norell

    Jesse Norell Well-Known Member Staff Member Howtoforge Staff

    This is a quick request for those using a custom whitelist setup via rspamd's multimap module: I'll add hooks into ispconfig's rspamd config for some filenames that can be used for local whitelists - what all maps are needed?

    Also note that doing so will require ISPConfig to supply a local.d/multimap.conf template, so watch for that in upcoming release notes (I'd guess 3.2.4, unless 3.2.3 lingers for a while longer). You could copy your own local.d/multimap.conf to /usr/local/ispconfig/server/conf-custom/install/rspamd_multimap.conf.master now so your changes persist the update, but you'll need to merge with the upstream template when it exists (or simply remove your custom template and use the "official" whitelist filenames if they cover your needs).
     
    Steini86 likes this.
  10. Taleman

    Taleman Well-Known Member HowtoForge Supporter

    Is this feature request / bug fix still open in gitlab?
     
    Mateus Magen likes this.

Share This Page