docker
/
docker-mailserver
mirror of https://github.com/tomav/docker-mailserver.git
1
0
Fork 0
Code Issues Releases Wiki Activity

add a note to the docs on the importance of DNS

This commit is contained in:
georglauterbach 2024-02-29 16:36:50 +01:00
parent 05b5336855
commit 9d828c51ec
No known key found for this signature in database
GPG Key ID: F367F7C43C118578
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
docs/content/config/security/rspamd.md
View File

@ -100,6 +100,15 @@ DMS does not supply custom values for DNS servers to Rspamd. If you need to use
If you want to see an environment variable (like `RSPAMD_DNS_SERVERS`) to support custom DNS servers for Rspamd being added to DMS, please raise a feature request issue.
!!! warning
Rspamd heavily relies on a functioning DNS. In case your DNS does not work, you will encounter issues in the form of
1. e-mails being marked as spam when they actually are not spam;
2. e-mails being rejected because Rspamd is confident that the e-mails are spam, when they actually are not spam.
An example here are the SPF, DKIM and DMARC checks, all of which are based on DNS records. These checks have a symbol for DNS temporary errors, with a non-zero weight - i.e., they will increase the spam score of the e-mail. This is undesirable, especially because mechanisms like SPF, DKIM and DMARC are frequently used to avoid spam.
!!! danger
While we do not provide values for custom DNS servers by default, we set `soft_reject_on_timeout = true;` by default. This setting will cause a soft reject if a task (presumably a DNS request) timeout takes place.