This modules performs DCC lookups to determine the bulkiness of a message (e.g. how many recipients have seen it).
This information, which indicates how many recipients have seen the message, is useful for identifying bulk messages in composite rules. For example, if a message is from a freemail domain and is reported as bulk by DCC, it is likely to be spam and can be assigned a higher weight.
Before enabling this module, please make sure to review the License terms on the DCC website.
To use the
dccifd module, you must have the
dccifd daemon properly configured, installed, and running. To do this, follow these steps:
dccifd, it will listen on the UNIX domain socket /var/dcc/dccifd.
To complete the setup, simply inform rspamd of the location where the
dccifd is listening:
# local.d/dcc.conf enabled = true; # Required as default is to disable DCC plugin # Define local socket or TCP servers in upstreams syntax # When sockets and servers are defined - servers is used! servers = "/var/dcc/dccifd"; # Unix socket #servers = "127.0.0.1:10045" # OR TCP upstreams body_max = 999999; # Bulkness threshold for body fuz1_max = 999999; # Bulkness threshold for fuz1 fuz2_max = 999999; # Bulkness threshold for fuz2 symbol_fail = 'DCC_FAIL'; symbol = 'DCC_REJECT'; symbol_bulk = 'DCC_BULK'; timeout = 5.0; # Timeout to wait for checks log_clean = false; retransmits = 2;
enabled = true;: Enable the DCC plugin (default is disabled).
servers: Define local socket or TCP servers in the upstream syntax. a.
servers = "/var/dcc/dccifd";: Specify the Unix socket for communication with the DCC server. b.
#servers = "127.0.0.1:10045": (Commented) Alternative TCP upstream for communication with the DCC server.
fuz2_max: Set bulkiness thresholds for body, fuz1, and fuz2, respectively (all set to 999999).
symbol_fail = 'DCC_FAIL';: Set symbol for a failed DCC check.
symbol = 'DCC_REJECT';: Set symbol for a successful DCC check with spam result.
symbol_bulk = 'DCC_BULK';: Set symbol for a successful DCC check with bulk result.
timeout = 5.0;: Set timeout for DCC checks (5 seconds).
log_clean = false;: Disable logging for clean emails (not spam or bulk) that pass the DCC check.
retransmits = 2;: Set the number of allowed retransmits for the DCC check.
If you prefer, you can configure DCC to listen to a TCP socket on localhost or any remote server. For detailed configuration instructions, refer to the DCC manual. The following configuration line sets up DCCIFD to listen on localhost port 10045 and allows queries from the IP range
DCCIFD_ARGS="-SHELO -Smail_host -SSender -SList-ID -p *,10045,127.0.0.0/8"