Rspamd: Whitelist single IP for Ratelimit

thn80

Hello,
how can I whitelist a single IP address for the Rspamd Ratelimit (please don’t concentrate on the “why” 😉)?
What I have tried so far:
1) First I added in /opt/mailcow-dockerized/data/conf/rspamd/override.d/ratelimit.conf
whitelisted_ip = "/etc/rspamd/maps.d/ratelimit-whitelist-ip.map";
And in /etc/rspamd/maps.d/ratelimit-whitelist-ip.map I added a single line with the IP address.
However, this seemed to not work as expected.
2) I added the IP address to /opt/mailcow-dockerized/data/conf/rspamd/custom/ip_wl.map and it seems to remove the ratelimit on the specific IP address. However, I’m afraid that this disables all Spam filtering by Rspamd on mails coming from this IP address and not only the Ratelimit.

What is the correct way to disable the Ratelimit?

thn80

Any idea on how to disable the Ratelimit for one single (incoming) IP address?

esackbauer

Why setting a rate limit in the first place? Did you ever do a baseline before setting a rate limit? That would be best practice. What do you think fail2ban is doing?
You can whitelist the IP under the GUI - System - Configuration - Options - Forwarding Hosts.

thn80

esackbauer will die only remove the rate limiting? Will all other spam filtering still be active for such mails?

esackbauer

Depends on how you configure it. Look at the settings you can do there in the mailcow UI.