On 01/19/2018 08:24 AM, Chip wrote:
Ok point take - I should have mentioned earlier that *part* of the reason to stick with SA is because it does spf and dkim checks.  My mistake.

Moving on now, David, good suggestions!  Enlighten me about the Shortcirtcuit plugin please.  How does one activate it or use it?


1. Enable the Shorcircuit plugin simply by uncommenting it in the v320.pre like I said below. This file will be in the same directory as your local.cf usually /etc/mail/spamassassin.

2. I gave the exact 4 lines to put in your local.cf below.

Try this and check your mail logs for a bit. Play around with SA settings in your local.cf and see what happens. This is how you learn SA. It's taken me years of doing this almost daily to understand how SA works and I am not an SA guru like some on this list.

The manual gives an example as follows, so is it correct to simply put this into my local.cf and let it run?  It looks like it simply activates by adding the line: shortcircuit TEST on.

    =over 4

       body TEST /test/
       describe TEST test rule that scores barely over spam threshold
       score TEST 5.5
       priority TEST -100
       shortcircuit TEST on



On 01/19/2018 08:38 AM, David Jones wrote:
On 01/18/2018 05:49 PM, Chip wrote:
Very well stated.  Bravo!

The end point here is to examine the email headers that specifically
refer to dkim and spf signatures.  Based on fail or pass, or some
combination in concert with the sender's email address, they get moved
into fail or pass folders.

That's it!


Finally we get some details!  :)  This is very simple then:

1. Enable the Shortcircuit plugin in v320.pre

2. Enable these SPF and DKIM rules to be shortcircuit'd in your local.cf:

shortcircuit SPF_PASS on
shortcircuit DKIM_VALID_AU on
score SPF_PASS -100
score DKIM_VALID_AU -100

3. Now you should see the SHORTCIRCUIT rule hit in your logs. Setup a sieve rule to look for those 2 rules above to move them to the pass folder.  They will always be ham (score very low) and never be blocked by the "glue" even with the default required_score.

P.S. Technically, you could just set the 2 scores and not enable the shortcircuit plugin.  The 2 score lines in the local.cf should do what you want to do.




--
David Jones

Reply via email to