SpamGeek support for Domino 12.0.2 inbound SPF and DKIM
Daniel Nashed – 13 November 2022 08:09:59
In Domino 12.0.2 Inbound SPF and DKIM is just a simple configuration option in the server configuration document.
The SPF check was already available in Domino 12.0.1 indicated by the Received_SPF item.
When Domino 12.0.2 ships this week, all existing SpamGeek versions can be configured to support a DKIM as well.
Beside the fields Received_SPF and DKIM_Signature there is a new item Authentication_Results.
The item is the standard header Authentication-Results to indicate SPF and DKIM results (see https://www.rfc-editor.org/rfc/rfc7001 for details).
To check the new header, SpamGeek just needs new rule documents.
Because those new fields are not known by SpamGeek out of the box, the rule needs to run on the mail document instead of the log document.
I configured my server to copy the fields into the log document (configuration profile/optional) instead to also have them stored in SpamGeek log.
Enclosed are the new rules already waiting on my servers to work with the Domino 12.0.2 release version.
I added scores also for special cases to see verify the different cases. You might want to add your own weight to those formulas.
Field Name: Authentication_Results
Authentication_Results: notes.lab 1; spf=pass smtp.mailfrom=nsh@notes.lab (sender IP 1.2.3.4); dkim=pass header.s=09302021 header.d=notes.lab; dkim=pass header.s=ed10122021 header.d=notes.lab
In my example the sender uses a RSA and Ed25519 key. The authentication header will contain multiple results in this case.
-- Daniel
SpamGeek for Domino - Rule Document
|
SpamGeek for Domino - Rule Document
|
- Comments [2]
1Xiaoyun 24.12.2022 3:23:00 SpamGeek support for Domino 12.0.2 inbound SPF and DKIM
Hi Daniel,
Thanks for the sharing!
I have a question on what actions we can take on DKIM authentication result or how we can use DKIM authentication result.
For inbound SPF authentication result, we can configure to reject, log it or move it to junk mail in Domino.
For inbound DKIM, if we don't have third party software (SpamGeek in your case), then we can't use the result. Is my understanding correct?
Merry Christmas!
Xiaoyun
2Gonzalo 23.02.2023 14:27:08 SpamGeek support for Domino 12.0.2 inbound SPF and DKIM
Hi Nash,
Its possible to download the SpamGeek solution ?
Thanks !