unkin-agent
ecede40f7f
- tag inbound instead of rejecting, keep virus reject and tempfail when ClamAV fails - score inbound against the first hop before the edge relays - sign and skip GPT only for smarthost mynetworks sources - elect the highest-offset Valkey on full restart, cap memory at 384mb - read a hashed controller password
20 lines
434 B
Plaintext
20 lines
434 B
Plaintext
outbound {
|
|
priority = high;
|
|
ip_map = "/etc/rspamd/local.d/local_networks.map";
|
|
apply {
|
|
symbols_disabled = ["GPT_CHECK"];
|
|
}
|
|
}
|
|
inbound {
|
|
priority = high;
|
|
ip_map = "/etc/rspamd/local.d/local_networks.map";
|
|
inverse = true;
|
|
apply {
|
|
symbols_disabled = ["DKIM_SIGNED"];
|
|
# Tag only; reject stays defined (unreachable by score) so ClamAV's virus reject still applies.
|
|
actions {
|
|
reject = 1000;
|
|
}
|
|
}
|
|
}
|