haraka-plugin-karma 2.2.0 → 2.3.0

package/CHANGELOG.md

@@ -4,6 +4,11 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/).
 
 ### Unreleased
 
+### [2.3.0] - 2026-05-05
+
+- allow rspamd to greylist image-only spam
+- allow rspamd to greylist Google Groups messages
+
 ### [2.2.0] - 2026-03-31
 
 #### Added
@@ -165,3 +170,4 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/).
 [2.1.7]: https://github.com/haraka/haraka-plugin-karma/releases/tag/v2.1.7
 [2.1.8]: https://github.com/haraka/haraka-plugin-karma/releases/tag/v2.1.8
 [2.2.0]: https://github.com/haraka/haraka-plugin-karma/releases/tag/v2.2.0
+[2.3.0]: https://github.com/haraka/haraka-plugin-karma/releases/tag/v2.3.0

package/config/karma.ini

@@ -64,9 +64,7 @@ hooks=rcpt, queue, queue_outbound
 
 
 [greylist]
-; When a connection comes from one of the listed ASNs and both SpamAssassin
-; and rspamd scores exceed their respective thresholds, allow rspamd to
-; greylist (DENYSOFT) instead of karma intercepting the denial.
+; allow rspamd to greylist (DENYSOFT) instead of karma intercepting the denial.
 ; This is only relevant when rspamd is NOT in [deny_excludes] plugins.
 ;
 ; asn[] = 55286 ; ASN numbers eligible for greylisting
@@ -75,9 +73,6 @@ hooks=rcpt, queue, queue_outbound
 ;
 ; spamassassin_score = SpamAssassin hits score must exceed this value
 ; spamassassin_score = 5
-;
-; rspamd_score = rspamd score must exceed this value
-; rspamd_score = 6
 
 
 [spammy_tlds]

package/index.js

@@ -402,25 +402,22 @@ exports.should_rspamd_greylist = function (connection) {
 
   // check SpamAssassin score exceeds configured threshold
   const saScore = parseFloat(
-    connection.transaction?.results?.get('spamassassin')?.hits,
+    connection.transaction?.results?.get('spamassassin')?.hits ?? 0,
   )
-  const saThreshold = parseFloat(this.cfg.greylist?.spamassassin_score)
-  if (isNaN(saScore) || isNaN(saThreshold) || saScore <= saThreshold)
-    return false
+  const saThreshold = parseFloat(this.cfg.greylist?.spamassassin_score ?? 5)
+  if (saScore >= saThreshold) return true
 
-  // check rspamd score exceeds configured threshold
-  const rspamdScore = parseFloat(
-    connection.transaction?.results?.get('rspamd')?.score,
-  )
-  const rspamdThreshold = parseFloat(this.cfg.greylist?.rspamd_score)
+  if (connection.transaction.header.get('X-Google-Group-Id')) return true
+
+  // image-only spam: message body is a single embedded image
   if (
-    isNaN(rspamdScore) ||
-    isNaN(rspamdThreshold) ||
-    rspamdScore <= rspamdThreshold
+    connection.transaction.header
+      .get('content-type')
+      ?.startsWith('multipart/related')
   )
-    return false
+    return true
 
-  return true
+  return false
 }
 
 exports.should_we_deny = function (next, connection, hook) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "haraka-plugin-karma",
-  "version": "2.2.0",
+  "version": "2.3.0",
   "description": "A heuristics scoring and reputation engine for SMTP connections",
   "main": "index.js",
   "files": [