rmilter rule to conditionally analyze emails

[marco....@gmail.com]

Hi all,
I am new to rmilter / rspamd.

I am looking for a way to have rmilter passing an email to analyze ONLY if the email contains a specific header "TEST: this is a test".

I think that the right way to achieve this would be to leverage the "rule" syntax. But I found it completely undocumented...(?).

Could you help me out?

How can I check *within rmilter* for the presence of a specific header and act upon?

Thank you in advance
Marco

[Vsevolod Stakhov]

Don't use Rmilter for anything but just passing messages from MTA to
Rspamd. In turn, Rspamd can do what you'd like by writing a simple
prefilter rule like this one:

rspamd_config.TEST_CHECK = {
callback = function(task)
if not task:get_header(...) then
task:set_pre_result('no action')
end
end,
type = 'prefilter',
score = 0.0,

> --
> You received this message because you are subscribed to the Google
> Groups "rspamd" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to rspamd+un...@googlegroups.com
> <mailto:rspamd+un...@googlegroups.com>.
> Visit this group at https://groups.google.com/group/rspamd.


--
Vsevolod Stakhov

[Marco Pizzoli]

Hi Vsevolod,

thank you very much for your answer.

I take your point about using rspamd (and lua) and I tried to go this way.
But I eventually failed to get the rule being executed.

Could you tell me exactly where that ruel is supposed to be written and eventually executed?

I wrote it directly in /etc/rspamd/rspamd.local.lua but that file appears to get ignored...

What am I doing wrong?

Any help is welcome

Thank you again

Marco

> an email to rspamd+unsubscribe@googlegroups.com
> <mailto:rspamd+unsubscribe@googlegroups.com>.

[Andrew Lewis]

Hi Marco,

> I wrote it directly in /etc/rspamd/rspamd.local.lua but that file appears
> to get ignored...

That's the correct place for this stuff to be; have you restarted?-
maybe you have some error in runtime during scan (rspamd log will show
it) or your rule doesn't otherwise work as intended (how does it look?).

Best,
-AL.

[marco....@gmail.com]

Hi Andrew,

Sorry for the late answer but I have been busy with other stuff.
It was indeed my stupid fault. I forgot to make the file readable by the rspamd user

Thank you very much for your help anyway
Marco