ifplugin Mail::SpamAssassin::Plugin::AskDNS


askdns     __DMARC_POLICY_NONE      _dmarc._AUTHORDOMAIN_ TXT /^v\s*=DMARC1 (?=\s*;) .* ;\s* p\s*=\s*none       \s*(?:;|\z)/x
askdns     __DMARC_POLICY_QUAR      _dmarc._AUTHORDOMAIN_ TXT /^v\s*=DMARC1 (?=\s*;) .* ;\s* p\s*=\s*quarantine \s*(?:;|\z)/x
askdns     __DMARC_POLICY_REJECT    _dmarc._AUTHORDOMAIN_ TXT /^v\s*=DMARC1 (?=\s*;) .* ;\s* p\s*=\s*reject     \s*(?:;|\z)/x
askdns     __DMARC_ADKIM_STRICT     _dmarc._AUTHORDOMAIN_ TXT /^v\s*=DMARC1 (?=\s*;) .* ;\s* adkim\s*=\s*s      \s*(?:;|\z)/x

# some common email domains that sign with the author domain
header       __DMARC_SIMPLE_DKIM    From:addr =~ /\@(?:gmail\.com|yahoo\.(?:com|\w\w|co\.\w\w))$/i

meta       __DMARC_TESTS_FAIL       !( DKIM_VALID_AU || DKIM_VALID &&  !__DMARC_ADKIM_S && !__DMARC_SIMPLE_DKIM || __HAS_LIST_ID && DKIM_SIGNED || SPF_PASS)

meta       __DMARC_TESTS_PASS       DKIM_VALID_AU && SPF_PASS


meta         DMARC_FAIL_REJECT      __DMARC_TESTS_FAIL && __DMARC_POLICY_REJECT
describe     DMARC_FAIL_REJECT      DMARC validation failed and policy is to reject
score        DMARC_FAIL_REJECT      1.5

meta         DMARC_FAIL_QUAR        __DMARC_TESTS_FAIL && __DMARC_POLICY_QUAR
describe     DMARC_FAIL_QUAR        DMARC validation failed and policy is quarantine
score        DMARC_FAIL_QUAR        1.0

meta         DMARC_FAIL_NONE        __DMARC_TESTS_FAIL && __DMARC_POLICY_NONE
describe     DMARC_FAIL_NONE        DMARC validation failed and policy is none
score        DMARC_FAIL_NONE        0.1


meta         DMARC_PASS_REJECT      __DMARC_TESTS_PASS && __DMARC_POLICY_REJECT
describe     DMARC_PASS_REJECT      DMARC validation passed and policy is to reject
tflags       DMARC_PASS_REJECT      nice
score        DMARC_PASS_REJECT      -0.1

meta         DMARC_PASS_QUAR        __DMARC_TESTS_PASS && __DMARC_POLICY_QUAR
describe     DMARC_PASS_QUAR        DMARC validation passed and policy is quarantine
tflags       DMARC_PASS_QUAR        nice
score        DMARC_PASS_QUAR        -0.1

meta         DMARC_PASS_NONE        __DMARC_TESTS_PASS && __DMARC_POLICY_NONE
describe     DMARC_PASS_NONE        DMARC validation passed and policy is none
tflags       DMARC_PASS_NONE        nice
score        DMARC_PASS_NONE        -0.001


meta         DMARC_REJ_NO_DKIM      __DMARC_POLICY_REJECT && !DKIM_SIGNED
describe     DMARC_REJ_NO_DKIM      MARC policy is reject without any DKIM signatures
score        DMARC_REJ_NO_DKIM      1.0

meta         DMARC_QUAR_NO_DKIM     __DMARC_POLICY_QUAR && !DKIM_SIGNED
describe     DMARC_QUAR_NO_DKIM     DMARC policy is quarantine without any DKIM signatures
score        DMARC_QUAR_NO_DKIM     1.0

# some temporary informational rules
meta         T_DMARC_TESTS_FAIL     __DMARC_TESTS_FAIL
meta         T_DMARC_TESTS_PASS     __DMARC_TESTS_PASS
meta         T_DMARC_POLICY_NONE    __DMARC_POLICY_NONE
meta         T_DMARC_POLICY_QUAR    __DMARC_POLICY_QUAR
meta         T_DMARC_POLICY_REJECT  __DMARC_POLICY_REJECT
meta         T_DMARC_ADKIM_STRICT   __DMARC_ADKIM_STRICT
meta         T_DMARC_SIMPLE_DKIM    __DMARC_SIMPLE_DKIM

endif