Skip to content

Incorrect local_network default configuration for rspamd

Summary

In a default setup with mail services the options.inc for rspamd set local_addrs and local_networks. The local_networks point to a non-existing map file, which isn't a problem in itself, but if both local_addrs and local_networks is set, rspamd ignores the local_addrs configuration. This results in all IPs (e.g. private IP ranges and localhosts by default) don't disable a whole bunch of checks on outbound mails.

Steps to reproduce

  1. Run rspamc -v -i 10.10.10.10 sample.eml
  2. The mail get's checked and symbols like R_SPF_FAIL and RDNS_NONE are triggered

Correct behaviour

When running rspamc -v -i 10.10.10.10 sample.eml serval checks should be disabled for the outbound mail, as described in the corresponding documentation.

Environment

Server OS: Debian 12 ISPConfig version: latest ISPConfig 3.3.X

Proposed fix

It seems like the map that is configured for local_networks is not even created when installing ISPConfig. So we should edit the options.inc accordingly and remove that line entirely, so rspamd uses the correct default local_addrs instead.

- # This list is generated by ISPConfig, place custom addresses/networks in local_networks.inc.
- local_networks = "/etc/rspamd/local.d/local_networks.inc";