annotate dnsbl.conf @ 176:4ec928b24bab stable-6-0-10

allow manual whitelisting with stamp 1 to remove a whitelist entry
author carl
date Sun, 23 Sep 2007 14:33:00 -0700
parents e726e1a61ef9
children d6531c702be3
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
127
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
1 context main-default {
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
2 // outbound dnsbl filtering to catch our own customers that end up on the sbl
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
3 dnsbl sbl sbl-xbl.spamhaus.org "Mail from %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s";
174
da0c41b9f672 don't whitelist addresses with embedded spaces
carl
parents: 172
diff changeset
4 dnsbl_list sbl;
127
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
5
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
6 // outbound content filtering to prevent our own customers from sending spam
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
7 content on {
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
8 filter sbl-xbl.spamhaus.org "Mail containing %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s";
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
9 uribl multi.surbl.org "Mail containing %s rejected - surbl; see http://www.rulesemporium.com/cgi-bin/uribl.cgi?bl0=1&domain0=%s";
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
10 #uribl black.uribl.com "Mail containing %s rejected - uribl; see http://l.uribl.com/?d=%s";
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
11 ignore { include "hosts-ignore.conf"; };
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
12 tld { include "tld.conf"; };
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
13 cctld { include "cctld.conf"; };
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
14 html_tags { include "html-tags.conf"; };
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
15 html_limit on 20 "Mail containing excessive bad html tags rejected";
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
16 html_limit off;
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
17 host_limit on 20 "Mail containing excessive host names rejected";
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
18 host_limit soft 20;
163
97d7da45fe2a spamassassin changes
carl
parents: 153
diff changeset
19 spamassassin 4;
127
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
20 };
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
21
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
22 // backscatter prevention - don't send bounces for mail that we accepted but could not forward
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
23 // we only send bounces to our own customers
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
24 env_from unknown {
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
25 "<>" black;
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
26 };
136
f4746d8a12a3 add smtp auth rate limits
carl
parents: 127
diff changeset
27
144
31ff00ea6bfb allow parent/child to share a fully qualified env_to address
carl
parents: 140
diff changeset
28 // hourly recipient rate limit by smtp auth client id
140
4028de9b46dd cleanup smtp rate limit code
carl
parents: 136
diff changeset
29 rate_limit 30 { // default
144
31ff00ea6bfb allow parent/child to share a fully qualified env_to address
carl
parents: 140
diff changeset
30 #fred 100; // override default limits
31ff00ea6bfb allow parent/child to share a fully qualified env_to address
carl
parents: 140
diff changeset
31 #joe 10; // ""
136
f4746d8a12a3 add smtp auth rate limits
carl
parents: 127
diff changeset
32 };
127
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
33 };
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
34
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
35 context main {
136
f4746d8a12a3 add smtp auth rate limits
carl
parents: 127
diff changeset
36 dnsbl localp partial.blackholes.five-ten-sg.com "Mail from %s rejected - local; see http://www.five-ten-sg.com/blackhole.php?%s";
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
37 dnsbl local blackholes.five-ten-sg.com "Mail from %s rejected - local; see http://www.five-ten-sg.com/blackhole.php?%s";
174
da0c41b9f672 don't whitelist addresses with embedded spaces
carl
parents: 172
diff changeset
38 dnsbl sbl zen.spamhaus.org "Mail from %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s";
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
39 dnsbl xbl xbl.spamhaus.org "Mail from %s rejected - xbl; see http://www.spamhaus.org/query/bl?ip=%s";
171
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 168
diff changeset
40 dnsbl_list local sbl;
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
41
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
42 content on {
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
43 filter sbl-xbl.spamhaus.org "Mail containing %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s";
122
e8971c595845 fix typo in multi.surbl.org name
carl
parents: 119
diff changeset
44 uribl multi.surbl.org "Mail containing %s rejected - surbl; see http://www.rulesemporium.com/cgi-bin/uribl.cgi?bl0=1&domain0=%s";
119
d9d2f8699621 uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 117
diff changeset
45 #uribl black.uribl.com "Mail containing %s rejected - uribl; see http://l.uribl.com/?d=%s";
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
46 ignore { include "hosts-ignore.conf"; };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
47 tld { include "tld.conf"; };
119
d9d2f8699621 uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 117
diff changeset
48 cctld { include "cctld.conf"; };
d9d2f8699621 uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 117
diff changeset
49 html_tags { include "html-tags.conf"; };
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
50 html_limit off;
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
51 host_limit soft 20;
163
97d7da45fe2a spamassassin changes
carl
parents: 153
diff changeset
52 spamassassin 5;
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
53 };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
54
175
e726e1a61ef9 allow manual whitelisting with stamp 1 to remove a whitelist entry
carl
parents: 174
diff changeset
55 generic "(^|[.-])(ppp|h|host)?([0-9]{1,3}[.-](Red-|dynamic[.-])?){4}"
168
6bac960af6b4 add generic reverse dns filtering regex
carl
parents: 167
diff changeset
56 "your mail server %s seems to have a generic name";
6bac960af6b4 add generic reverse dns filtering regex
carl
parents: 167
diff changeset
57
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
58 env_to {
100
63e8633abc34 allow empty env_to at global context to remove all restrictions on child contexts
carl
parents: 94
diff changeset
59 # !! replace this with your domain names
63e8633abc34 allow empty env_to at global context to remove all restrictions on child contexts
carl
parents: 94
diff changeset
60 # child contexts are not allowed to specify recipient addresses outside these domains
174
da0c41b9f672 don't whitelist addresses with embedded spaces
carl
parents: 172
diff changeset
61 include "/etc/mail/local-host-names";
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
62 };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
63
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
64 context whitelist {
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
65 content off {};
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
66 env_to {
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
67 # dcc_to ok { include "/var/dcc/whitecommon"; };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
68 };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
69 env_from white {}; # white forces all unmatched from addresses (everyone in this case) to be whitelisted
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
70 # so all mail TO these env_to addresses is accepted
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
71 };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
72
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
73 context abuse {
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
74 dnsbl_list xbl;
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
75 content off {};
174
da0c41b9f672 don't whitelist addresses with embedded spaces
carl
parents: 172
diff changeset
76 generic "^$ " " "; # regex cannot match, to disable generic rdns rejects
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
77 env_to {
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
78 abuse@ # no content filtering on abuse reports
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
79 postmaster@ # ""
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
80 };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
81 env_from unknown {}; # ignore all parent white/black listing
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
82 };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
83
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
84 context minimal {
171
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 168
diff changeset
85 dnsbl_list sbl;
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
86 content on {};
174
da0c41b9f672 don't whitelist addresses with embedded spaces
carl
parents: 172
diff changeset
87 spamassassin 10;
171
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 168
diff changeset
88 generic "^$ " " "; # regex cannot match, to disable generic rdns rejects
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
89 env_to {
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
90 };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
91 };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
92
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
93 context blacklist {
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
94 env_to {
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
95 # dcc_to many { include "/var/dcc/whitecommon"; };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
96 };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
97 env_from black {}; # black forces all unmatched from addresses (everyone in this case) to be blacklisted
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
98 # so all mail TO these env_to addresses is rejected
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
99 };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
100
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
101 env_from unknown {
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
102 abuse@ abuse; # replies to abuse reports use the abuse context
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
103 # dcc_from { include "/var/dcc/whitecommon"; };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
104 };
153
8d7c439bb6fa add auto whitelisting
carl
parents: 144
diff changeset
105
167
9b129ed78d7d actually use spamassassin result, allow build without spam assassin, only call it if some recipient needs it.
carl
parents: 165
diff changeset
106 autowhite 90 "autowhite/my-auto-whitelist";
9b129ed78d7d actually use spamassassin result, allow build without spam assassin, only call it if some recipient needs it.
carl
parents: 165
diff changeset
107 # install should create /etc/dnsbl/autowhite writable by userid dnsbl
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
108 };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
109