Mercurial > dnsbl
annotate dnsbl.conf @ 127:2b1a4701e856
sendmail no longer guarantees <> wrapper on envelopes
| author | carl |
|---|---|
| date | Sat, 08 Apr 2006 10:06:09 -0700 |
| parents | e8971c595845 |
| children | f4746d8a12a3 |
| rev | line source |
|---|---|
| 127 | 1 context main-default { |
| 2 // outbound dnsbl filtering to catch our own customers that end up on the sbl | |
| 3 dnsbl local blackholes.five-ten-sg.com "Mail from %s rejected - local; see http://www.five-ten-sg.com/blackhole.php?%s"; | |
| 4 dnsbl sbl sbl-xbl.spamhaus.org "Mail from %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s"; | |
| 5 dnsbl dul dul.dnsbl.sorbs.net "Mail from %s rejected - dul; see http://www.sorbs.net/lookup.shtml?%s"; | |
| 6 dnsbl_list local sbl dul; | |
| 7 | |
| 8 // outbound content filtering to prevent our own customers from sending spam | |
| 9 content on { | |
| 10 filter sbl-xbl.spamhaus.org "Mail containing %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s"; | |
| 11 uribl multi.surbl.org "Mail containing %s rejected - surbl; see http://www.rulesemporium.com/cgi-bin/uribl.cgi?bl0=1&domain0=%s"; | |
| 12 #uribl black.uribl.com "Mail containing %s rejected - uribl; see http://l.uribl.com/?d=%s"; | |
| 13 ignore { include "hosts-ignore.conf"; }; | |
| 14 tld { include "tld.conf"; }; | |
| 15 cctld { include "cctld.conf"; }; | |
| 16 html_tags { include "html-tags.conf"; }; | |
| 17 html_limit on 20 "Mail containing excessive bad html tags rejected"; | |
| 18 html_limit off; | |
| 19 host_limit on 20 "Mail containing excessive host names rejected"; | |
| 20 host_limit soft 20; | |
| 21 }; | |
| 22 | |
| 23 // backscatter prevention - don't send bounces for mail that we accepted but could not forward | |
| 24 // we only send bounces to our own customers | |
| 25 env_from unknown { | |
| 26 "<>" black; | |
| 27 }; | |
| 28 }; | |
| 29 | |
| 94 | 30 context main { |
| 31 dnsbl local blackholes.five-ten-sg.com "Mail from %s rejected - local; see http://www.five-ten-sg.com/blackhole.php?%s"; | |
| 32 dnsbl sbl sbl-xbl.spamhaus.org "Mail from %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s"; | |
| 33 dnsbl xbl xbl.spamhaus.org "Mail from %s rejected - xbl; see http://www.spamhaus.org/query/bl?ip=%s"; | |
| 34 dnsbl dul dul.dnsbl.sorbs.net "Mail from %s rejected - dul; see http://www.sorbs.net/lookup.shtml?%s"; | |
| 35 dnsbl_list local sbl dul; | |
| 36 | |
| 37 content on { | |
| 38 filter sbl-xbl.spamhaus.org "Mail containing %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s"; | |
| 122 | 39 uribl multi.surbl.org "Mail containing %s rejected - surbl; see http://www.rulesemporium.com/cgi-bin/uribl.cgi?bl0=1&domain0=%s"; |
| 119 | 40 #uribl black.uribl.com "Mail containing %s rejected - uribl; see http://l.uribl.com/?d=%s"; |
| 94 | 41 ignore { include "hosts-ignore.conf"; }; |
| 42 tld { include "tld.conf"; }; | |
| 119 | 43 cctld { include "cctld.conf"; }; |
| 44 html_tags { include "html-tags.conf"; }; | |
| 94 | 45 html_limit off; |
| 46 host_limit soft 20; | |
| 47 }; | |
| 48 | |
| 49 env_to { | |
|
100
63e8633abc34
allow empty env_to at global context to remove all restrictions on child contexts
carl
parents:
94
diff
changeset
|
50 # !! replace this with your domain names |
|
63e8633abc34
allow empty env_to at global context to remove all restrictions on child contexts
carl
parents:
94
diff
changeset
|
51 # child contexts are not allowed to specify recipient addresses outside these domains |
|
63e8633abc34
allow empty env_to at global context to remove all restrictions on child contexts
carl
parents:
94
diff
changeset
|
52 # or leave this empty to allow unrestricted child contexts |
|
63e8633abc34
allow empty env_to at global context to remove all restrictions on child contexts
carl
parents:
94
diff
changeset
|
53 # example.com; |
| 94 | 54 }; |
| 55 | |
| 56 context whitelist { | |
| 57 content off {}; | |
| 58 env_to { | |
| 59 # dcc_to ok { include "/var/dcc/whitecommon"; }; | |
| 60 }; | |
| 61 env_from white {}; # white forces all unmatched from addresses (everyone in this case) to be whitelisted | |
| 62 # so all mail TO these env_to addresses is accepted | |
| 63 }; | |
| 64 | |
| 65 context abuse { | |
| 66 dnsbl_list xbl; | |
| 67 content off {}; | |
| 68 env_to { | |
| 69 abuse@ # no content filtering on abuse reports | |
| 70 postmaster@ # "" | |
| 71 }; | |
| 72 env_from unknown {}; # ignore all parent white/black listing | |
| 73 }; | |
| 74 | |
| 75 context minimal { | |
| 76 dnsbl_list sbl dul; | |
| 77 content on {}; | |
| 78 env_to { | |
| 79 }; | |
| 80 }; | |
| 81 | |
| 82 context blacklist { | |
| 83 env_to { | |
| 84 # dcc_to many { include "/var/dcc/whitecommon"; }; | |
| 85 }; | |
| 86 env_from black {}; # black forces all unmatched from addresses (everyone in this case) to be blacklisted | |
| 87 # so all mail TO these env_to addresses is rejected | |
| 88 }; | |
| 89 | |
| 90 env_from unknown { | |
| 91 abuse@ abuse; # replies to abuse reports use the abuse context | |
| 92 # dcc_from { include "/var/dcc/whitecommon"; }; | |
| 93 }; | |
| 94 }; | |
| 95 |