annotate dnsbl.conf @ 133:b8ce1b31237d stable-5-19

uribl lookups fully qualified; allow two component host names
author carl
date Tue, 01 Aug 2006 15:28:13 -0700
parents 2b1a4701e856
children f4746d8a12a3
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
127
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
1 context main-default {
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
2 // outbound dnsbl filtering to catch our own customers that end up on the sbl
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
3 dnsbl local blackholes.five-ten-sg.com "Mail from %s rejected - local; see http://www.five-ten-sg.com/blackhole.php?%s";
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
4 dnsbl sbl sbl-xbl.spamhaus.org "Mail from %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s";
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
5 dnsbl dul dul.dnsbl.sorbs.net "Mail from %s rejected - dul; see http://www.sorbs.net/lookup.shtml?%s";
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
6 dnsbl_list local sbl dul;
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
7
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
8 // outbound content filtering to prevent our own customers from sending spam
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
9 content on {
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
10 filter sbl-xbl.spamhaus.org "Mail containing %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s";
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
11 uribl multi.surbl.org "Mail containing %s rejected - surbl; see http://www.rulesemporium.com/cgi-bin/uribl.cgi?bl0=1&domain0=%s";
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
12 #uribl black.uribl.com "Mail containing %s rejected - uribl; see http://l.uribl.com/?d=%s";
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
13 ignore { include "hosts-ignore.conf"; };
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
14 tld { include "tld.conf"; };
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
15 cctld { include "cctld.conf"; };
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
16 html_tags { include "html-tags.conf"; };
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
17 html_limit on 20 "Mail containing excessive bad html tags rejected";
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
18 html_limit off;
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
19 host_limit on 20 "Mail containing excessive host names rejected";
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
20 host_limit soft 20;
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
21 };
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
22
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
23 // backscatter prevention - don't send bounces for mail that we accepted but could not forward
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
24 // we only send bounces to our own customers
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
25 env_from unknown {
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
26 "<>" black;
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
27 };
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
28 };
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 122
diff changeset
29
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
30 context main {
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
31 dnsbl local blackholes.five-ten-sg.com "Mail from %s rejected - local; see http://www.five-ten-sg.com/blackhole.php?%s";
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
32 dnsbl sbl sbl-xbl.spamhaus.org "Mail from %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s";
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
33 dnsbl xbl xbl.spamhaus.org "Mail from %s rejected - xbl; see http://www.spamhaus.org/query/bl?ip=%s";
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
34 dnsbl dul dul.dnsbl.sorbs.net "Mail from %s rejected - dul; see http://www.sorbs.net/lookup.shtml?%s";
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
35 dnsbl_list local sbl dul;
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
36
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
37 content on {
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
38 filter sbl-xbl.spamhaus.org "Mail containing %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s";
122
e8971c595845 fix typo in multi.surbl.org name
carl
parents: 119
diff changeset
39 uribl multi.surbl.org "Mail containing %s rejected - surbl; see http://www.rulesemporium.com/cgi-bin/uribl.cgi?bl0=1&domain0=%s";
119
d9d2f8699621 uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 117
diff changeset
40 #uribl black.uribl.com "Mail containing %s rejected - uribl; see http://l.uribl.com/?d=%s";
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
41 ignore { include "hosts-ignore.conf"; };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
42 tld { include "tld.conf"; };
119
d9d2f8699621 uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 117
diff changeset
43 cctld { include "cctld.conf"; };
d9d2f8699621 uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 117
diff changeset
44 html_tags { include "html-tags.conf"; };
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
45 html_limit off;
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
46 host_limit soft 20;
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
47 };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
48
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
49 env_to {
100
63e8633abc34 allow empty env_to at global context to remove all restrictions on child contexts
carl
parents: 94
diff changeset
50 # !! replace this with your domain names
63e8633abc34 allow empty env_to at global context to remove all restrictions on child contexts
carl
parents: 94
diff changeset
51 # child contexts are not allowed to specify recipient addresses outside these domains
63e8633abc34 allow empty env_to at global context to remove all restrictions on child contexts
carl
parents: 94
diff changeset
52 # or leave this empty to allow unrestricted child contexts
63e8633abc34 allow empty env_to at global context to remove all restrictions on child contexts
carl
parents: 94
diff changeset
53 # example.com;
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
54 };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
55
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
56 context whitelist {
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
57 content off {};
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
58 env_to {
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
59 # dcc_to ok { include "/var/dcc/whitecommon"; };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
60 };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
61 env_from white {}; # white forces all unmatched from addresses (everyone in this case) to be whitelisted
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
62 # so all mail TO these env_to addresses is accepted
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
63 };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
64
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
65 context abuse {
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
66 dnsbl_list xbl;
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
67 content off {};
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
68 env_to {
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
69 abuse@ # no content filtering on abuse reports
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
70 postmaster@ # ""
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
71 };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
72 env_from unknown {}; # ignore all parent white/black listing
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
73 };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
74
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
75 context minimal {
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
76 dnsbl_list sbl dul;
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
77 content on {};
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
78 env_to {
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
79 };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
80 };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
81
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
82 context blacklist {
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
83 env_to {
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
84 # dcc_to many { include "/var/dcc/whitecommon"; };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
85 };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
86 env_from black {}; # black forces all unmatched from addresses (everyone in this case) to be blacklisted
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
87 # so all mail TO these env_to addresses is rejected
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
88 };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
89
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
90 env_from unknown {
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
91 abuse@ abuse; # replies to abuse reports use the abuse context
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
92 # dcc_from { include "/var/dcc/whitecommon"; };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
93 };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
94 };
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
95