# ==============================================================================
# Karmasphere DNS-Based Rules for SpamAssassin
# http://www.karmasphere.com/devzone/client/spamassassin/#dns
# 
#  Karmasphere IP Whitelist
# 
#    karmasphere.email-sender-ip aggregates several IP
#    blacklists and whitelists.  the RBL API exposed at
#    *.karmasphere.email-sender-ip.dnswl.karmasphere.com is
#    meant to be used as a DNSWL.
#    
#  Karmasphere Domain Whitelist
# 
#    karmasphere.manywl aggregregates several domain whitelists.
#    the RHSWL API exposed at *.karmasphere.manywl.karmasphere.com
#    is meant to be used as a RHSWL.
#   
#  Making a Contribution
#   
#    If you think you can improve on the feedsets above, you are
#    welcome to build your own.  After registering an account,
#    you can click on "clone" to produce a feedset you can tweak.
#
#    Then change the *.dnswl.karmasphere.com configuration below.
# 
# ==========================================================

header   __KS_DNSWL_DNS    eval:check_rbl_envfrom('karmasphere.email-sender-ip','karmasphere.email-sender-ip.dnswl.karmasphere.com.')
describe __KS_DNSWL_DNS    SRC IP whitelisted in Karmasphere Email Sender IP Feedset
tflags   __KS_DNSWL_DNS    net nice

ifplugin Mail::SpamAssassin::Plugin::SPF

# 
# karmasphere domain-based whitelist
header   __KS_RHSWL_DNS    eval:check_rbl_envfrom('karmasphere.manywl','karmasphere.manywl.dnswl.karmasphere.com.')
describe __KS_RHSWL_DNS    Envelope sender in Karmasphere Domain Whitelist Feedset
tflags   __KS_RHSWL_DNS    net nice

meta     __KS_AUTH_SPF   (SPF_PASS && __KS_RHSWL_DNS)
describe __KS_AUTH_SPF   Envelope sender is both authenticated and reputable
tflags   __KS_AUTH_SPF   userconf nice noautolearn
score    __KS_AUTH_SPF   -0.01

endif

# support for DKIM and DomainKeys coming soon.

meta     KS_WHITELIST       (__KS_AUTH_SPF || __KS_DNSWL_DNS)
score    KS_WHITELIST       -123