haraka-plugin-batv

This Bounce Address Tag Validation plugin prevents being "spammed" by bounce messages. Bounce messages which aren't actually responses to messages that the user have sent out can be blocked with this SRS integration. It automatically changes the user of the sender for outgoing e-mails, by adding a generated key. And when an e-mail is recived with an empty sender (a bounce e-mail), by using the mentioned key, it checks whether it is a legitimate bounce message (a reply to a previous outgoing message). If it is a spam, drops it, if not, decodes the e-mail address and forwards it to the correct user.

This plugin uses srs.js script directly. For more information, please check: https://www.npmjs.com/package/srs.js

& IMPORTANT: this plugin must appear in config/plugins before other plugins that run on hook_rcpt

How it works

Assume that the user uses the address [email protected] and will send an e-mail.

Before the e-mail is sent, [email protected] will automatically change to: [email protected]

If the e-mail bounces, after checking if the key is correct or not or whether there is a key at all, it will be forwarded to [email protected].

Configuration

Please select a secret key and (optionally) a maxAge and save it in the config/batv.ini file. Default configuration:

[srs]
secret=asecretkey
maxAgeDays=21