----- Message from Henrik K <h...@hege.li> ---------
Date: Mon, 19 Apr 2021 17:11:41 +0300
From: Henrik K <h...@hege.li>
Reply-To: users@spamassassin.apache.org
Subject: Re: KAM_DMARC_REJECT on internal emails
To: users@spamassassin.apache.org
On Mon, Apr 19, 2021 at 10:05:21PM +1000, Simon Wilson wrote:
askdns __KAM_DMARC_POLICY_REJECT _dmarc._AUTHORDOMAIN_ TXT
/^v=DMARC1;.*\bp=reject;/
run anyway? Or only if the resultant metas which call on them have a score
value <> 0?
Askdns is like any other rule, it does what it's told to do with little
regard to anything else. So yes you must disable it specifically, if you
don't want it to do something.
Well this thread kinda developed a life of its own... lol...
Anyhoo... until the ALL_INTERNAL question is sorted, how do I disable
an "askdns" rule from running so it is not making unnecessary DNS
calls? I have for now put this in local.cf:
score KAM_DMARC_STATUS 0.0
score KAM_DMARC_REJECT 0.0
score KAM_DMARC_QUARANTINE 0.0
score KAM_DMARC_NONE 0.0
so it disables the meta rules... but how to stop the askdns queries,
e.g. in KAM.cf:
askdns __KAM_DMARC_POLICY_REJECT _dmarc._AUTHORDOMAIN_ TXT
/^v=DMARC1;.*\bp=reject;/
rather than change the channel distributed KAM.cf, what needs to go in
local.cf to tell that not to run? *CAN* it be disabled from local.cf,
or can it only be done by commenting out the entry in KAM.cf?
Simon.
--
Simon Wilson
M: 0400 12 11 16
