Mercurial > dnsbl
annotate xml/sample.conf @ 27:43a4f6b3e668 stable-2-3
add configurable host name limit and bad html tag limits.
author | carl |
---|---|
date | Sat, 22 May 2004 22:30:45 -0700 |
parents | 2e23b7184d2b |
children | 33e1e3910506 |
rev | line source |
---|---|
4 | 1 # $Id$ |
0 | 2 # |
3 # lines start with a command token, following by argument tokens | |
4 # tokens are separated by spaces or tabs | |
5 # | |
6 # | |
20 | 7 # content: |
8 # second token is the dns suffix used for the actual lookups | |
9 # third token? is a string enclosed in single quotes, so it | |
10 # is not really a token. This is the error message, with | |
11 # up to two %s parameters for the offending host name and | |
12 # client ip address respectively. | |
13 # | |
27
43a4f6b3e668
add configurable host name limit and bad html tag limits.
carl
parents:
24
diff
changeset
|
14 # host_limit: |
43a4f6b3e668
add configurable host name limit and bad html tag limits.
carl
parents:
24
diff
changeset
|
15 # second token is the integer count of the number of host names |
43a4f6b3e668
add configurable host name limit and bad html tag limits.
carl
parents:
24
diff
changeset
|
16 # or urls that are allowed in any one mail body. Zero is |
43a4f6b3e668
add configurable host name limit and bad html tag limits.
carl
parents:
24
diff
changeset
|
17 # unlimited. |
43a4f6b3e668
add configurable host name limit and bad html tag limits.
carl
parents:
24
diff
changeset
|
18 # third token? is a string enclosed in single quotes, so it |
43a4f6b3e668
add configurable host name limit and bad html tag limits.
carl
parents:
24
diff
changeset
|
19 # is not really a token. This is the error message supplied |
43a4f6b3e668
add configurable host name limit and bad html tag limits.
carl
parents:
24
diff
changeset
|
20 # to the smtp client. |
43a4f6b3e668
add configurable host name limit and bad html tag limits.
carl
parents:
24
diff
changeset
|
21 # |
24 | 22 # html_limit: |
27
43a4f6b3e668
add configurable host name limit and bad html tag limits.
carl
parents:
24
diff
changeset
|
23 # second token is the integer count of the number of bad html tags |
43a4f6b3e668
add configurable host name limit and bad html tag limits.
carl
parents:
24
diff
changeset
|
24 # that are allowed in any one mail body. Zero is unlimited. |
24 | 25 # third token? is a string enclosed in single quotes, so it |
26 # is not really a token. This is the error message supplied | |
27 # to the smtp client. | |
28 # | |
29 # html_tag: | |
30 # second token is a valid html tag, that is added to the list | |
31 # of valid tags. Any html tag seen in the mail bodies that | |
32 # that is not in this list is presumed to be invalid. | |
33 # | |
0 | 34 # dnsbl: |
35 # second token is the name of this dnsbl | |
36 # third token is the dns suffix used for the actual lookups | |
37 # fourth token? is a string enclosed in single quotes, so it | |
38 # is not really a token. This is the error message, with | |
39 # up to two %s parameters for the client ip address. | |
40 # | |
41 # dnsbl_list: | |
42 # second token is the name of this list of dnsbls | |
43 # subsequent tokes are the names of the previously defined dnsbls | |
44 # | |
45 # env_from: | |
46 # second token is the name of this envelope-from-map. There will | |
47 # generally be multiple lines with the same name. | |
48 # third token is the envelope from value from the smtp conversation, | |
49 # or just the domain part that follows the @ symbol. | |
50 # fourth token is BLACK, WHITE, or the name of a previously defined | |
51 # envelope-from-map. BLACK causes mail from this sender to be | |
52 # rejected with "no such user". WHITE causes mail to be accepted | |
53 # and the dns based lists are ignored. DEFAULT may be used to override | |
54 # the contents of other maps that are copied into this map, and | |
55 # set that sender back to the default (not white or black listed, | |
56 # and subject to dnsbl lookups). | |
57 # | |
58 # env_to: | |
59 # second token is the envelope recipient value from the smtp conversation, | |
60 # or just the domain part that follows the @ symbol. | |
61 # third token is the name of a dnsbl-list, or WHITE or BLACK. | |
62 # fourth token is the name of an envelope-from-map, or WHITE or BLACK. | |
63 # | |
64 # If either one is BLACK, mail to this recipient is rejected with | |
65 # "no such user", and the dns lists are not checked. | |
66 # | |
67 # If the envelope-from-map name is WHITE, mail to this recipient is accepted | |
68 # and the dns lists are not checked. | |
69 # | |
70 # If the envelope-from-map exists, the map is checked for the presence | |
71 # of the sender. A WHITE or BLACK answer is definitive and the dns lists | |
72 # are not checked. | |
73 # | |
74 # If the dnsbl-list name is WHITE, the dns lists are not checked and the | |
75 # mail is accepted. Otherwise, the dns lists are checked and the mail | |
76 # is rejected if any list has an A record for the standard dns based | |
77 # lookup scheme (reversed octets of the client followed by the dns suffix). | |
78 # | |
79 # | |
4 | 80 # include: |
81 # second token is the path name of the dnsbl milter config file to be | |
82 # included. | |
83 # | |
84 # | |
85 # include_dcc: | |
86 # second token is the name of an envelope-from-map (EMAP below). | |
87 # third token is the path name of the dcc whiteclnt config file to be | |
88 # included. | |
89 # entries from the dcc config are mapped as: | |
14 | 90 # ok -> WHITE |
91 # many -> BLACK | |
92 # env_from -> env_from EMAP xxx | |
93 # env_to -> env_to | |
94 # substitute mail_host -> env_from EMAP xxx | |
4 | 95 # |
0 | 96 # |
97 # | |
98 ############################################## | |
24 | 99 # content scanning parameters |
100 # | |
101 content sbl-xbl.spamhaus.org 'Mail containing %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s' | |
27
43a4f6b3e668
add configurable host name limit and bad html tag limits.
carl
parents:
24
diff
changeset
|
102 host_limit 20 'Mail containing too many host names rejected' |
43a4f6b3e668
add configurable host name limit and bad html tag limits.
carl
parents:
24
diff
changeset
|
103 html_limit 20 'Mail containing excessive bad html tags rejected' |
24 | 104 include html-tags.conf |
105 | |
106 | |
107 ############################################## | |
0 | 108 # define the dnsbls to use |
109 # | |
110 dnsbl LOCAL blackholes.five-ten-sg.com 'Mail from %s rejected - local; see http://www.five-ten-sg.com/blackhole.php?%s' | |
111 dnsbl SPEWS blackholes.spews.org 'Mail from %s rejected - spews; see http://www.spews.org/ask.cgi?x=%s' | |
112 dnsbl SBL sbl-xbl.spamhaus.org 'Mail from %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s' | |
113 | |
114 | |
115 ############################################## | |
116 # define the (default and other) lists of dnsbls to use | |
117 # | |
118 dnsbl_list DEFAULT LOCAL SPEWS SBL | |
119 dnsbl_list SIMPLE SBL | |
120 dnsbl_list CUST1 SBL | |
121 dnsbl_list CUST2 SPEWS SBL | |
122 | |
123 | |
124 ############################################## | |
125 # define the (default and other) env_from maps | |
126 # | |
127 env_from DEFAULT spammer@example.com BLACK | |
128 env_from DEFAULT yahoo.com BLACK | |
129 | |
130 # special list for the vp | |
131 env_from TEST dummy-token DEFAULT # inherit the currently defined DEFAULT env_from mapping | |
132 env_from TEST nai.com BLACK # the vp does not like nai | |
14 | 133 env_from TEST yahoo.com DEFAULT # |
0 | 134 env_from TEST mother@spammyisp.com WHITE # suppresses dnsbl checking |
135 | |
136 | |
137 ############################################## | |
138 # specify dnsbl_lists and env_from maps to use for specific recipients | |
139 # | |
140 env_to abuse@mydomain.com WHITE WHITE # no dnsbl, no env_from map | |
141 env_to sales@mydomain.com SIMPLE NULL # sbl only, no env_from map | |
142 env_to vp@mydomain.com DEFAULT TEST # allow mail from mom | |
143 env_to old-emp@mydomain.com BLACK BLACK # return no such user even from backup mx machines | |
144 | |
145 ############################################## | |
146 # specify dnsbl_lists and env_from maps to use for clients domains | |
147 # | |
148 env_to mydomain.com DEFAULT DEFAULT | |
14 | 149 env_to customer1.com CUST1 DEFAULT # all customer 1 domains use just sbl |
150 env_to customer1a.com CUST1 DEFAULT | |
151 env_to customer1b.com CUST1 DEFAULT | |
152 env_to customer2.com CUST2 DEFAULT # all customer 2 domains use spews and sbl | |
153 env_to customer2a.com CUST2 DEFAULT | |
0 | 154 |
155 | |
156 ############################################## | |
157 # you can also include nested config files | |
158 # file names are single tokens, no embedded blanks | |
159 # | |
160 include dnsbl.conf # this will generate a recursive include file syslog error message | |
14 | 161 include_dcc DEFAULT /var/dcc/whitecommon # this includes the default dcc whitelist file |