|
4
|
1 # $Id$
|
|
0
|
2 #
|
|
|
3 # lines start with a command token, following by argument tokens
|
|
|
4 # tokens are separated by spaces or tabs
|
|
|
5 #
|
|
|
6 #
|
|
20
|
7 # content:
|
|
|
8 # second token is the dns suffix used for the actual lookups
|
|
|
9 # third token? is a string enclosed in single quotes, so it
|
|
|
10 # is not really a token. This is the error message, with
|
|
|
11 # up to two %s parameters for the offending host name and
|
|
|
12 # client ip address respectively.
|
|
|
13 #
|
|
24
|
14 # html_limit:
|
|
|
15 # second token is the integer count of the number of bad html
|
|
|
16 # tags that are allowed in any one mail body.
|
|
|
17 # third token? is a string enclosed in single quotes, so it
|
|
|
18 # is not really a token. This is the error message supplied
|
|
|
19 # to the smtp client.
|
|
|
20 #
|
|
|
21 # html_tag:
|
|
|
22 # second token is a valid html tag, that is added to the list
|
|
|
23 # of valid tags. Any html tag seen in the mail bodies that
|
|
|
24 # that is not in this list is presumed to be invalid.
|
|
|
25 #
|
|
0
|
26 # dnsbl:
|
|
|
27 # second token is the name of this dnsbl
|
|
|
28 # third token is the dns suffix used for the actual lookups
|
|
|
29 # fourth token? is a string enclosed in single quotes, so it
|
|
|
30 # is not really a token. This is the error message, with
|
|
|
31 # up to two %s parameters for the client ip address.
|
|
|
32 #
|
|
|
33 # dnsbl_list:
|
|
|
34 # second token is the name of this list of dnsbls
|
|
|
35 # subsequent tokes are the names of the previously defined dnsbls
|
|
|
36 #
|
|
|
37 # env_from:
|
|
|
38 # second token is the name of this envelope-from-map. There will
|
|
|
39 # generally be multiple lines with the same name.
|
|
|
40 # third token is the envelope from value from the smtp conversation,
|
|
|
41 # or just the domain part that follows the @ symbol.
|
|
|
42 # fourth token is BLACK, WHITE, or the name of a previously defined
|
|
|
43 # envelope-from-map. BLACK causes mail from this sender to be
|
|
|
44 # rejected with "no such user". WHITE causes mail to be accepted
|
|
|
45 # and the dns based lists are ignored. DEFAULT may be used to override
|
|
|
46 # the contents of other maps that are copied into this map, and
|
|
|
47 # set that sender back to the default (not white or black listed,
|
|
|
48 # and subject to dnsbl lookups).
|
|
|
49 #
|
|
|
50 # env_to:
|
|
|
51 # second token is the envelope recipient value from the smtp conversation,
|
|
|
52 # or just the domain part that follows the @ symbol.
|
|
|
53 # third token is the name of a dnsbl-list, or WHITE or BLACK.
|
|
|
54 # fourth token is the name of an envelope-from-map, or WHITE or BLACK.
|
|
|
55 #
|
|
|
56 # If either one is BLACK, mail to this recipient is rejected with
|
|
|
57 # "no such user", and the dns lists are not checked.
|
|
|
58 #
|
|
|
59 # If the envelope-from-map name is WHITE, mail to this recipient is accepted
|
|
|
60 # and the dns lists are not checked.
|
|
|
61 #
|
|
|
62 # If the envelope-from-map exists, the map is checked for the presence
|
|
|
63 # of the sender. A WHITE or BLACK answer is definitive and the dns lists
|
|
|
64 # are not checked.
|
|
|
65 #
|
|
|
66 # If the dnsbl-list name is WHITE, the dns lists are not checked and the
|
|
|
67 # mail is accepted. Otherwise, the dns lists are checked and the mail
|
|
|
68 # is rejected if any list has an A record for the standard dns based
|
|
|
69 # lookup scheme (reversed octets of the client followed by the dns suffix).
|
|
|
70 #
|
|
|
71 #
|
|
4
|
72 # include:
|
|
|
73 # second token is the path name of the dnsbl milter config file to be
|
|
|
74 # included.
|
|
|
75 #
|
|
|
76 #
|
|
|
77 # include_dcc:
|
|
|
78 # second token is the name of an envelope-from-map (EMAP below).
|
|
|
79 # third token is the path name of the dcc whiteclnt config file to be
|
|
|
80 # included.
|
|
|
81 # entries from the dcc config are mapped as:
|
|
14
|
82 # ok -> WHITE
|
|
|
83 # many -> BLACK
|
|
|
84 # env_from -> env_from EMAP xxx
|
|
|
85 # env_to -> env_to
|
|
|
86 # substitute mail_host -> env_from EMAP xxx
|
|
4
|
87 #
|
|
0
|
88 #
|
|
|
89 #
|
|
|
90 ##############################################
|
|
24
|
91 # content scanning parameters
|
|
|
92 #
|
|
|
93 content sbl-xbl.spamhaus.org 'Mail containing %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s'
|
|
|
94 html_limit 20
|
|
|
95 include html-tags.conf
|
|
|
96
|
|
|
97
|
|
|
98 ##############################################
|
|
0
|
99 # define the dnsbls to use
|
|
|
100 #
|
|
|
101 dnsbl LOCAL blackholes.five-ten-sg.com 'Mail from %s rejected - local; see http://www.five-ten-sg.com/blackhole.php?%s'
|
|
|
102 dnsbl SPEWS blackholes.spews.org 'Mail from %s rejected - spews; see http://www.spews.org/ask.cgi?x=%s'
|
|
|
103 dnsbl SBL sbl-xbl.spamhaus.org 'Mail from %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s'
|
|
|
104
|
|
|
105
|
|
|
106 ##############################################
|
|
|
107 # define the (default and other) lists of dnsbls to use
|
|
|
108 #
|
|
|
109 dnsbl_list DEFAULT LOCAL SPEWS SBL
|
|
|
110 dnsbl_list SIMPLE SBL
|
|
|
111 dnsbl_list CUST1 SBL
|
|
|
112 dnsbl_list CUST2 SPEWS SBL
|
|
|
113
|
|
|
114
|
|
|
115 ##############################################
|
|
|
116 # define the (default and other) env_from maps
|
|
|
117 #
|
|
|
118 env_from DEFAULT spammer@example.com BLACK
|
|
|
119 env_from DEFAULT yahoo.com BLACK
|
|
|
120
|
|
|
121 # special list for the vp
|
|
|
122 env_from TEST dummy-token DEFAULT # inherit the currently defined DEFAULT env_from mapping
|
|
|
123 env_from TEST nai.com BLACK # the vp does not like nai
|
|
14
|
124 env_from TEST yahoo.com DEFAULT #
|
|
0
|
125 env_from TEST mother@spammyisp.com WHITE # suppresses dnsbl checking
|
|
|
126
|
|
|
127
|
|
|
128 ##############################################
|
|
|
129 # specify dnsbl_lists and env_from maps to use for specific recipients
|
|
|
130 #
|
|
|
131 env_to abuse@mydomain.com WHITE WHITE # no dnsbl, no env_from map
|
|
|
132 env_to sales@mydomain.com SIMPLE NULL # sbl only, no env_from map
|
|
|
133 env_to vp@mydomain.com DEFAULT TEST # allow mail from mom
|
|
|
134 env_to old-emp@mydomain.com BLACK BLACK # return no such user even from backup mx machines
|
|
|
135
|
|
|
136 ##############################################
|
|
|
137 # specify dnsbl_lists and env_from maps to use for clients domains
|
|
|
138 #
|
|
|
139 env_to mydomain.com DEFAULT DEFAULT
|
|
14
|
140 env_to customer1.com CUST1 DEFAULT # all customer 1 domains use just sbl
|
|
|
141 env_to customer1a.com CUST1 DEFAULT
|
|
|
142 env_to customer1b.com CUST1 DEFAULT
|
|
|
143 env_to customer2.com CUST2 DEFAULT # all customer 2 domains use spews and sbl
|
|
|
144 env_to customer2a.com CUST2 DEFAULT
|
|
0
|
145
|
|
|
146
|
|
|
147 ##############################################
|
|
|
148 # you can also include nested config files
|
|
|
149 # file names are single tokens, no embedded blanks
|
|
|
150 #
|
|
|
151 include dnsbl.conf # this will generate a recursive include file syslog error message
|
|
14
|
152 include_dcc DEFAULT /var/dcc/whitecommon # this includes the default dcc whitelist file
|
