Flingo file for detecting gmail emails without a valid DKIM signature

dkim-gmail-fail.flingo

METARULE "dkim-test-fail" ( 
    "dkim-gmail-not-verified", 
    "from-gmail",
    "grab-from", 
    "grab-subject" ) 
{
    log "Failed-to-pass-DKIM-signature-verification";
    iter "dkim:d";
    iter "log:recipient";
    iter "log:sender";
    iter "log:subject";
    reject;
}

LIBRULE "dkim-gmail-not-verified"
anyof ( 
    dkim not verified 'gmail.com'
)

LIBRULE "from-gmail"
anyof (
    header :regex "From:" '.+@gmail\.com\>?\s*'
)

LIBRULE "grab-from"
anyof (
    header :regex "From:" '.*\<(.*?)\>.*' 'log:sender',
    header :regex "From:" '(.*)' 'log:sender'
)

LIBRULE "grab-subject"
anyof (
    header :regex "Subject:" '(.*)' 'log:subject'
)

# vim: filetype=flingo syntax ts=4 expandtab tabstop=4 shiftwidth=4 autoindent smartindent nu: