From a4d7a2a48ae058d77ba6ee475551a9d7da2ece4e Mon Sep 17 00:00:00 2001
From: Daniel Berteaud <daniel@firewall-services.com>
Date: Tue, 3 May 2016 15:18:15 +0200
Subject: [PATCH] Add regex for DMARC rejection and support for the spf_deny
 plugin

---
 root/var/lib/zabbix/bin/util_parse_mail_in | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/root/var/lib/zabbix/bin/util_parse_mail_in b/root/var/lib/zabbix/bin/util_parse_mail_in
index 0ece15c..0e1bc52 100644
--- a/root/var/lib/zabbix/bin/util_parse_mail_in
+++ b/root/var/lib/zabbix/bin/util_parse_mail_in
@@ -36,7 +36,8 @@ my %denied = (
   check_spamhelo      => qr{((check_spam)?helo\s+90|naughty\s+90\d\s+\(helo\))},
   fcrdns              => qr{fcrdns\s+90},
   karma               => qr{(karma\s+90|naughty\s+90\d\s+\(karma\))},
-  spf                 => qr{sender_permitted_from\s+90},
+  spf                 => qr{(sender_permitted_from|spf_deny)\s+90},
+  dmarc               => qr{dmarc\s+90},
   tls_failed          => qr{tls\s+90},
   resolvable_fromhost => qr{(require_)?resolvable_fromhost}
 );