Incorrect local_network default configuration for rspamd
Summary
In a default setup with mail services the options.inc for rspamd set local_addrs and local_networks. The local_networks point to a non-existing map file, which isn't a problem in itself, but if both local_addrs and local_networks is set, rspamd ignores the local_addrs configuration. This results in all IPs (e.g. private IP ranges and localhosts by default) don't disable a whole bunch of checks on outbound mails.
Steps to reproduce
- Run
rspamc -v -i 10.10.10.10 sample.eml - The mail get's checked and symbols like
R_SPF_FAILandRDNS_NONEare triggered
Correct behaviour
When running rspamc -v -i 10.10.10.10 sample.eml serval checks should be disabled for the outbound mail, as described in the corresponding documentation.
Environment
Server OS: Debian 12 ISPConfig version: latest ISPConfig 3.3.X
Proposed fix
It seems like the map that is configured for local_networks is not even created when installing ISPConfig. So we should edit the options.inc accordingly and remove that line entirely, so rspamd uses the correct default local_addrs instead.
- # This list is generated by ISPConfig, place custom addresses/networks in local_networks.inc.
- local_networks = "/etc/rspamd/local.d/local_networks.inc";