Re: rule assistence

"Benny Pedersen via users" <[email protected]> Sun, 08 Feb 2026 22:39:24 +0100
Newsgroups gmane.mail.spam.spamassassin.general
Organization junc.eu
Message-ID <[email protected]>
A.Schulze via users skrev den 2026-02-08 11:18:
> Hello,
> 
> I like to create SA rules to cover some or all following properties of 
> a message:
> 
> - RFC5322.From TLD: .de

regexp

> - RFC5321.MailFrom: mail.$domain

needs pluing imho to test this

> - NS-Record: @cloudflare
> - MX-Record: @cloudflare

why ?

> - DMARC-Policy: p=reject, rua -> @cloudflare

maybe AuthRes ?

> - SPF-Record: include: @cloudflare

why ?, spf can have unlimited ips, and some domain owners does not care

> - existence of mail.$domain

why ?

> - SPF-Record for mail.$domain -> include @amazonses

why ?

> - SMTP-Client-IP: $some @amazonses

or all ?

> - DKIM-Signatures: 1k RSA by amazonses.com & 2k RSA by $domain

do we need 1k ? :)

> - DMARC-Result: pass

AuthRes plugin

> Any advise?

make it all combined with meta rule based on all above subrules that all 
start with __something

is rspamd doing all the above ?