Initial commit

usr/local/etc/rspamd/local.d/actions.conf

@@ -0,0 +1,3 @@
+reject = 15;
+add_header = 8;
+greylist = 7;

usr/local/etc/rspamd/local.d/antivirus.conf

@@ -0,0 +1,11 @@
+clamav {
+  # Scan whole message
+  scan_mime_parts = false;
+  #scan_text_mime = true;
+  #scan_image_mime = true;
+  symbol = "CLAM_VIRUS";
+  type = "clamav";
+  log_clean = true;
+  servers = "/var/run/clamav/clamd.ctl";
+  max_size = 20971520;
+}

usr/local/etc/rspamd/local.d/arc.conf

@@ -0,0 +1,16 @@
+sign_authenticated = true;
+sign_local = true;
+domain {
+  danwin1210.de {
+    selectors [
+     {
+       path: "/usr/local/etc/rspamd/dkim_keys/danwin1210.de-rsa";
+       selector: "20211204-rsa";
+     },
+     {
+       path: "/usr/local/etc/rspamd/dkim_keys/danwin1210.de-ed25519";
+       selector: "20211204-ed25519";
+     }
+   ]
+ }
+}

usr/local/etc/rspamd/local.d/classifier-bayes.conf

@@ -0,0 +1 @@
+autolearn = true;

usr/local/etc/rspamd/local.d/dkim_signing.conf

@@ -0,0 +1,20 @@
+use_domain = "header";
+use_domain_sign_networks = "header";
+use_domain_sign_local = "header";
+allow_username_mismatch = true;
+allow_hdrfrom_mismatch = true;
+try_fallback = false;
+domain {
+  danwin1210.de {
+    selectors [
+     {
+       path: "/usr/local/etc/rspamd/dkim_keys/danwin1210.de-rsa";
+       selector: "20211204-rsa";
+     },
+     {
+       path: "/usr/local/etc/rspamd/dkim_keys/danwin1210.de-ed25519";
+       selector: "20211204-ed25519";
+     }
+   ]
+ }
+}

usr/local/etc/rspamd/local.d/greylist.conf

@@ -0,0 +1 @@
+enabled = false;

usr/local/etc/rspamd/local.d/groups.conf

@@ -0,0 +1,15 @@
+symbols {
+  "CLAM_VIRUS" {
+    "weight": 10.0
+  }
+  "CLAM_VIRUS_ENCRYPTED" {
+    "weight": 1.0
+  }
+  "CLAM_VIRUS_MACRO" {
+    "weight": 1.0
+  }
+  "AUTHENTICATED_USER" {
+    description = "authenticated user should receive higher scoring to prevent outgoing spam";
+    score = 5.0;
+  }
+}

usr/local/etc/rspamd/local.d/logging.inc

@@ -0,0 +1,4 @@
+type = console
+systemd = true
+color = true
+level = notice

usr/local/etc/rspamd/local.d/neural.conf

@@ -0,0 +1,24 @@
+rules {
+  "LONG" {
+    train {
+      max_trains = 200;
+      max_usages = 20;
+      max_iterations = 25;
+      learning_rate = 0.01,
+    }
+    symbol_spam = "NEURAL_SPAM_LONG";
+    symbol_ham = "NEURAL_HAM_LONG";
+    ann_expire = 45d;
+  }
+  "SHORT" {
+    train {
+      max_trains = 100;
+      max_usages = 10;
+      max_iterations = 15;
+      learning_rate = 0.01,
+    }
+    symbol_spam = "NEURAL_SPAM_SHORT";
+    symbol_ham = "NEURAL_HAM_SHORT";
+    ann_expire = 7d;
+  }
+}

usr/local/etc/rspamd/local.d/neural_group.conf

@@ -0,0 +1,18 @@
+symbols = {
+  "NEURAL_SPAM_LONG" {
+    weight = 3.7; # sample weight
+    description = "Neural network spam (long)";
+  }
+  "NEURAL_HAM_LONG" {
+    weight = -4.0; # sample weight
+    description = "Neural network ham (long)";
+  }
+  "NEURAL_SPAM_SHORT" {
+    weight = 2.5; # sample weight
+    description = "Neural network spam (short)";
+  }
+  "NEURAL_HAM_SHORT" {
+    weight = -2.0; # sample weight
+    description = "Neural network ham (short)";
+  }
+}

usr/local/etc/rspamd/local.d/options.inc

@@ -0,0 +1,3 @@
+dns {
+  enable_dnssec = true;
+}

usr/local/etc/rspamd/local.d/phishing.conf

@@ -0,0 +1 @@
+phishtank_enabled = false;

usr/local/etc/rspamd/local.d/ratelimit.conf

@@ -0,0 +1,24 @@
+whitelisted_rcpts = ["postmaster", "mailer-daemon", "daniel@danwin1210.de"]
+whitelisted_user = ["daniel@danwin1210.de"]
+rates {
+  to = {
+    bucket = {
+      burst = 20;
+      rate =  1 / 1m;
+    }
+  }
+  sending_limit_2_per_min {
+    selector = 'user.lower.append("sending_limit_2_per_min")';
+    bucket = {
+      burst = 20;
+      rate = 2 / 1m;
+    }
+  }
+  sending_limit_500_per_day {
+    selector = 'user.lower.append("sending_limit_500_per_day")';
+    bucket = {
+      burst = 400;
+      rate = 50 / 3h;
+    }
+  }
+}

usr/local/etc/rspamd/local.d/redis.conf

@@ -0,0 +1 @@
+servers = "127.0.0.1";

usr/local/etc/rspamd/local.d/statistics_group.conf

@@ -0,0 +1,5 @@
+symbols {
+  "BAYES_SPAM" {
+    "score": 7.0
+  }
+}

usr/local/etc/rspamd/local.d/worker-fuzzy.inc

@@ -0,0 +1,10 @@
+count = 1;
+keypair {
+    privkey = "YOUR_PRIVATE_KEY";
+    type = "kex";
+    algorithm = "curve25519";
+    id = "YOUR_ID";
+    pubkey = "YPUR_PUBLIC_KEY";
+    encoding = "base32";
+}
+encrypted_only = true;

usr/local/etc/rspamd/local.d/worker-proxy.inc

@@ -0,0 +1 @@
+bind_socket = "*:11332";