annotate xml/dnsbl.in @ 172:d3189495ec68 stable-6-0-7

don't do generic rdns filtering on whitelisted recipients
author carl
date Thu, 30 Aug 2007 18:50:00 -0700
parents 8deb51871b3d
children da0c41b9f672
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
1 <reference>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
2 <title>@PACKAGE@ Sendmail milter - Version @VERSION@</title>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
3 <partintro>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
4 <title>Packages</title>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
5 <para>The various source and binary packages are available at <ulink
114
f4f5fb263072 cleanup list of tlds, add trailing / on http package directory reference
carl
parents: 111
diff changeset
6 url="http://www.five-ten-sg.com/@PACKAGE@/packages/">http://www.five-ten-sg.com/@PACKAGE@/packages/</ulink>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
7 The most recent documentation is available at <ulink
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
8 url="http://www.five-ten-sg.com/@PACKAGE@/">http://www.five-ten-sg.com/@PACKAGE@/</ulink>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
9 </para>
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
10
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
11 </partintro>
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
12
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
13 <refentry id="@PACKAGE@.1">
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
14 <refentryinfo>
168
6bac960af6b4 add generic reverse dns filtering regex
carl
parents: 167
diff changeset
15 <date>2007-08-30</date>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
16 </refentryinfo>
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
17
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
18 <refmeta>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
19 <refentrytitle>@PACKAGE@</refentrytitle>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
20 <manvolnum>1</manvolnum>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
21 <refmiscinfo>@PACKAGE@ @VERSION@</refmiscinfo>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
22 </refmeta>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
23
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
24 <refnamediv id='name.1'>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
25 <refname>@PACKAGE@</refname>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
26 <refpurpose>a sendmail milter with per-user dnsbl filtering</refpurpose>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
27 </refnamediv>
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
28
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
29 <refsynopsisdiv id='synopsis.1'>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
30 <title>Synopsis</title>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
31 <cmdsynopsis>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
32 <command>@PACKAGE@</command>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
33 <arg><option>-c</option></arg>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
34 <arg><option>-s</option></arg>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
35 <arg><option>-d <replaceable class="parameter">n</replaceable></option></arg>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
36 <arg><option>-e <replaceable class="parameter">from|to</replaceable></option></arg>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
37 <arg><option>-r <replaceable class="parameter">local-domain-socket</replaceable></option></arg>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
38 <arg><option>-p <replaceable class="parameter">sendmail-socket</replaceable></option></arg>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
39 <arg><option>-t <replaceable class="parameter">timeout</replaceable></option></arg>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
40 </cmdsynopsis>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
41 </refsynopsisdiv>
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
42
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
43 <refsect1 id='options.1'>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
44 <title>Options</title>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
45 <variablelist>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
46 <varlistentry>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
47 <term>-c</term>
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
48 <listitem><para>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
49 Load the configuration file, print a cannonical form
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
50 of the configuration on stdout, and exit.
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
51 </para></listitem>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
52 </varlistentry>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
53 <varlistentry>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
54 <term>-s</term>
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
55 <listitem><para>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
56 Stress test the configuration loading code by repeating
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
57 the load/free cycle in an infinite loop.
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
58 </para></listitem>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
59 </varlistentry>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
60 <varlistentry>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
61 <term>-d <replaceable class="parameter">n</replaceable></term>
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
62 <listitem><para>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
63 Set the debug level to <replaceable class="parameter">n</replaceable>.
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
64 </para></listitem>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
65 </varlistentry>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
66 <varlistentry>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
67 <term>-e <replaceable class="parameter">from|to</replaceable></term>
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
68 <listitem><para>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
69 Print the results of looking up the from and to addresses in the
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
70 current configuration. The | character is used to separate the from and to
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
71 addresses in the argument to the -e switch.
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
72 </para></listitem>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
73 </varlistentry>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
74 <varlistentry>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
75 <term>-r <replaceable class="parameter">local-domain-socket</replaceable></term>
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
76 <listitem><para>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
77 Set the local socket used for the connection to our own dns resolver processes.
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
78 </para></listitem>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
79 </varlistentry>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
80 <varlistentry>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
81 <term>-p <replaceable class="parameter">sendmail-socket</replaceable></term>
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
82 <listitem><para>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
83 Set the socket used for the milter connection to sendmail. This is either
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
84 "inet:port@ip-address" or "local:local-domain-socket-file-name".
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
85 </para></listitem>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
86 </varlistentry>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
87 <varlistentry>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
88 <term>-t <replaceable class="parameter">timeout</replaceable></term>
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
89 <listitem><para>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
90 Set the timeout in seconds used for communication with sendmail.
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
91 </para></listitem>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
92 </varlistentry>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
93 </variablelist>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
94 </refsect1>
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
95
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
96 <refsect1 id='usage.1'>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
97 <title>Usage</title>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
98 <para><command>@PACKAGE@</command> -c</para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
99 <para><command>@PACKAGE@</command> -s</para>
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
100 <para><command>@PACKAGE@</command> -e 'someone@aol.com|localname@mydomain.tld'</para>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
101 <para><command>@PACKAGE@</command> -d 10 -r resolver.sock -p local:dnsbl.sock</para>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
102 </refsect1>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
103
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
104 <refsect1 id='installation.1'>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
105 <title>Installation</title>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
106 <para>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
107 This is now a standard GNU autoconf/automake installation, so the normal
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
108 "./configure; make; su; make install" works. "make chkconfig" will
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
109 setup the init.d runlevel scripts. Alternatively, you can use the
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
110 source or binary RPMs at <ulink
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
111 url="http://www.five-ten-sg.com/@PACKAGE@/packages">http://www.five-ten-sg.com/@PACKAGE@/packages</ulink>.
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
112 </para>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
113 <para>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
114 Note that this has ONLY been tested on Linux, specifically RedHat Linux.
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
115 In particular, this milter makes no attempt to understand IPv6. Your
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
116 mileage will vary. You will need at a minimum a C++ compiler with a
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
117 minimally thread safe STL implementation. The distribution includes a
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
118 test.cpp program. If it fails this milter won't work. If it passes,
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
119 this milter might work.
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
120 </para>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
121 <para>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
122 Modify your sendmail.mc by removing all the "FEATURE(dnsbl" lines, add
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
123 the following line in your sendmail.mc and rebuild the .cf file
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
124 </para>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
125 <para><screen>INPUT_MAIL_FILTER(`dnsbl', `S=local:/var/run/dnsbl/dnsbl.sock, F=T, T=C:30s;S:5m;R:5m;E:5m')</screen></para>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
126 <para>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
127 Modify the default <citerefentry>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
128 <refentrytitle>@PACKAGE@.conf</refentrytitle> <manvolnum>5</manvolnum>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
129 </citerefentry> configuration.
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
130 </para>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
131 </refsect1>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
132
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
133 <refsect1 id='configuration.1'>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
134 <title>Configuration</title>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
135 <para>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
136 The configuration file is documented in <citerefentry>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
137 <refentrytitle>@PACKAGE@.conf</refentrytitle> <manvolnum>5</manvolnum>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
138 </citerefentry>. Any change to the config file, or any file included
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
139 from that config file, will cause it to be reloaded within three
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
140 minutes.
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
141 </para>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
142 </refsect1>
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
143
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
144 <refsect1 id='introduction.1'>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
145 <title>Introduction</title>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
146 <para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
147 Consider the case of a mail server that is acting as secondary MX for a
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
148 collection of clients, each of which has a collection of mail domains.
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
149 Each client may use their own collection of DNSBLs on their primary mail
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
150 server. We present here a mechanism whereby the backup mail server can
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
151 use the correct set of DNSBLs for each recipient for each message. As a
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
152 side-effect, it gives us the ability to customize the set of DNSBLs on a
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
153 per-recipient basis, so that fred@example.com could use SPEWS and the
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
154 SBL, where all other users @example.com use only the SBL.
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
155 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
156 <para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
157 This milter can also verify the envelope from/recipient pairs with the
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
158 primary MX server. This allows the backup mail servers to properly
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
159 reject mail sent to invalid addresses. Otherwise, the backup mail
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
160 servers will accept that mail, and then generate a bounce message when
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
161 the message is forwarded to the primary server (and rejected there with
127
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 124
diff changeset
162 no such user). These rejections are the primary cause of such backscatter.
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
163 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
164 <para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
165 This milter will also decode (uuencode, base64, mime, html entity, url
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
166 encodings) and scan for HTTP and HTTPS URLs and bare hostnames in the
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
167 body of the mail. If any of those host names have A or NS records on
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
168 the SBL (or a single configurable DNSBL), the mail will be rejected
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
169 unless previously whitelisted. This milter also counts the number of
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
170 invalid HTML tags, and can reject mail if that count exceeds your
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
171 specified limit.
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
172 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
173 <para>
136
f4746d8a12a3 add smtp auth rate limits
carl
parents: 127
diff changeset
174 This milter can also impose hourly rate limits on the number of
f4746d8a12a3 add smtp auth rate limits
carl
parents: 127
diff changeset
175 recipients accepted from SMTP AUTH connections, that would otherwise be
f4746d8a12a3 add smtp auth rate limits
carl
parents: 127
diff changeset
176 allowed to relay thru this mail server with no spam filtering.
f4746d8a12a3 add smtp auth rate limits
carl
parents: 127
diff changeset
177 </para>
f4746d8a12a3 add smtp auth rate limits
carl
parents: 127
diff changeset
178 <para>
162
c4bce911c276 don't add auto whitelist for A to A
carl
parents: 161
diff changeset
179 Consider the case of a message from A to B passing thru this milter. If
c4bce911c276 don't add auto whitelist for A to A
carl
parents: 161
diff changeset
180 that message is not blocked, then we might eventually see a reply
156
a220bfb9211f add auto whitelisting
carl
parents: 153
diff changeset
181 message from B to A. If the filtering context for A includes an
162
c4bce911c276 don't add auto whitelist for A to A
carl
parents: 161
diff changeset
182 autowhite entry, and that context does <emphasis>not</emphasis> cover B
c4bce911c276 don't add auto whitelist for A to A
carl
parents: 161
diff changeset
183 as a recipient, then this milter will add an entry in that file to
c4bce911c276 don't add auto whitelist for A to A
carl
parents: 161
diff changeset
184 whitelist such replies for a configurable time period. Suppose A and B
c4bce911c276 don't add auto whitelist for A to A
carl
parents: 161
diff changeset
185 are in the same domain, or at least use the same filtering context. In
c4bce911c276 don't add auto whitelist for A to A
carl
parents: 161
diff changeset
186 that case we don't want to add a whitelist entry for B, since that would
c4bce911c276 don't add auto whitelist for A to A
carl
parents: 161
diff changeset
187 then allow spammers to send mail from B (forged) to B. Such autowhite
160
b3ed72ee6564 allow manual updates to auto whitelist files
carl
parents: 158
diff changeset
188 files need to be writeable by the dnsbl user, where all the other dnsbl
b3ed72ee6564 allow manual updates to auto whitelist files
carl
parents: 158
diff changeset
189 configuration files only need to be readable by the dnsbl user.
156
a220bfb9211f add auto whitelisting
carl
parents: 153
diff changeset
190 </para>
a220bfb9211f add auto whitelisting
carl
parents: 153
diff changeset
191 <para>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
192 The DNSBL milter reads a text configuration file (dnsbl.conf) on
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
193 startup, and whenever the config file (or any of the referenced include
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
194 files) is changed. The entire configuration file is case insensitive.
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
195 If the configuration cannot be loaded due to a syntax error, the milter
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
196 will log the error and quit. If the configuration cannot be reloaded
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
197 after being modified, the milter will log the error and send an email to
152
c7fc218686f5 gpl3, block mail to recipients that cannot reply
carl
parents: 149
diff changeset
198 root from dnsbl@$hostname. You probably want to add dnsbl@$hostname
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
199 to your /etc/mail/virtusertable since otherwise sendmail will reject
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
200 that message.
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
201 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
202 </refsect1>
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
203
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
204 <refsect1 id='dcc.1'>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
205 <title>DCC Issues</title>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
206 <para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
207 If you are also using the <ulink
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
208 url="http://www.rhyolite.com/anti-spam/dcc/">DCC</ulink> milter, there
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
209 are a few considerations. You may need to whitelist senders from the
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
210 DCC bulk detector, or from the DNS based lists. Those are two very
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
211 different reasons for whitelisting. The former is done thru the DCC
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
212 whiteclnt config file, the later is done thru the DNSBL milter config
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
213 file.
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
214 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
215 <para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
216 You may want to blacklist some specific senders or sending domains.
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
217 This could be done thru either the DCC (on a global basis, or for a
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
218 specific single recipient). We prefer to do such blacklisting via the
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
219 DNSBL milter config, since it can be done for a collection of recipient
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
220 mail domains. The DCC approach has the feature that you can capture the
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
221 entire message in the DCC log files. The DNSBL milter approach has the
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
222 feature that the mail is rejected earlier (at RCPT TO time), and the
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
223 sending machine just gets a generic "550 5.7.1 no such user" message.
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
224 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
225 <para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
226 The DCC whiteclnt file can be included in the DNSBL milter config by the
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
227 dcc_to and dcc_from statements. This will import the (env_to, env_from,
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
228 and substitute mail_host) entries from the DCC config into the DNSBL
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
229 config. This allows using the DCC config as the single point for
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
230 white/blacklisting.
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
231 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
232 <para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
233 Consider the case where you have multiple clients, each with their own
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
234 mail servers, and each running their own DCC milters. Each client is
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
235 using the DCC facilities for envelope from/to white/blacklisting.
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
236 Presumably you can use rsync or scp to fetch copies of your clients DCC
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
237 whiteclnt files on a regular basis. Your mail server, acting as a
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
238 backup MX for your clients, can use the DNSBL milter, and include those
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
239 client DCC config files. The envelope from/to white/blacklisting will
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
240 be appropriately tagged and used only for the domains controlled by each
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
241 of those clients.
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
242 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
243 </refsect1>
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
244
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
245 <refsect1 id='definitions.1'>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
246 <title>Definitions</title>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
247 <para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
248 CONTEXT - a collection of parameters that defines the filtering context
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
249 to be used for a collection of envelope recipient addresses. The
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
250 context includes such things as the list of DNSBLs to be used, and the
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
251 various content filtering parameters.
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
252 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
253 <para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
254 DNSBL - a named DNS based blocking list is defined by a dns suffix (e.g.
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
255 sbl-xbl.spamhaus.org) and a message string that is used to generate the
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
256 "550 5.7.1" smtp error return code. The names of these DNSBLs will be
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
257 used to define the DNSBL-LISTs.
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
258 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
259 <para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
260 DNSBL-LIST - a named list of DNSBLs that will be used for specific
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
261 recipients or recipient domains.
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
262 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
263 </refsect1>
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
264
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
265 <refsect1 id='filtering.1'>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
266 <title>Filtering Procedure</title>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
267 <para>
152
c7fc218686f5 gpl3, block mail to recipients that cannot reply
carl
parents: 149
diff changeset
268 The SMTP envelope 'from' and 'to' values are used in various checks.
c7fc218686f5 gpl3, block mail to recipients that cannot reply
carl
parents: 149
diff changeset
269 The first check is to see if a reply message (swapping the env_from and
160
b3ed72ee6564 allow manual updates to auto whitelist files
carl
parents: 158
diff changeset
270 env_to values) would be unconditionally blocked (just based on the
b3ed72ee6564 allow manual updates to auto whitelist files
carl
parents: 158
diff changeset
271 envelope from address). That check is similar to the main check
b3ed72ee6564 allow manual updates to auto whitelist files
carl
parents: 158
diff changeset
272 described below, but there is no body content to be scanned, and there
b3ed72ee6564 allow manual updates to auto whitelist files
carl
parents: 158
diff changeset
273 is no client connection ip address to be checked against DNSBLs. If
b3ed72ee6564 allow manual updates to auto whitelist files
carl
parents: 158
diff changeset
274 such a reply message would be blocked, we also block the original
b3ed72ee6564 allow manual updates to auto whitelist files
carl
parents: 158
diff changeset
275 outgoing message. This prevents folks from sending mail to recipients
b3ed72ee6564 allow manual updates to auto whitelist files
carl
parents: 158
diff changeset
276 that are unable to reply.
152
c7fc218686f5 gpl3, block mail to recipients that cannot reply
carl
parents: 149
diff changeset
277 </para>
c7fc218686f5 gpl3, block mail to recipients that cannot reply
carl
parents: 149
diff changeset
278 <para>
136
f4746d8a12a3 add smtp auth rate limits
carl
parents: 127
diff changeset
279 If the client has authenticated with sendmail, the rate limits are
f4746d8a12a3 add smtp auth rate limits
carl
parents: 127
diff changeset
280 checked. If the authenticated user has not exceeded the hourly rate
144
31ff00ea6bfb allow parent/child to share a fully qualified env_to address
carl
parents: 140
diff changeset
281 limit, then the mail is accepted, the filtering contexts are not used,
136
f4746d8a12a3 add smtp auth rate limits
carl
parents: 127
diff changeset
282 the dns lists are not checked, and the body content is not scanned. If
f4746d8a12a3 add smtp auth rate limits
carl
parents: 127
diff changeset
283 the client has not authenticated with sendmail, we follow these steps
f4746d8a12a3 add smtp auth rate limits
carl
parents: 127
diff changeset
284 for each recipient.
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
285 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
286 <orderedlist>
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
287 <listitem><para>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
288 The envelope to email address is used to find an initial filtering
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
289 context. We first look for a context that specified the full email
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
290 address in the env_to statement. If that is not found, we look for a
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
291 context that specified the entire domain name of the envelope recipient
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
292 in the env_to statement. If that is not found, we look for a context
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
293 that specified the user@ part of the envelope recipient in the env_to
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
294 statement. If that is not found, we use the first top level context
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
295 defined in the config file.
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
296 </para></listitem>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
297 <listitem><para>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
298 The initial filtering context may redirect to a child context based on
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
299 the values in the initial context's env_from statement. We look for [1)
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
300 the full envelope from email address, 2) the domain name part of the
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
301 envelope from address, 3) the user@ part of the envelope from address]
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
302 in that context's env_from statement, with values that point to a child
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
303 context. If such an entry is found, we switch to that child filtering
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
304 context.
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
305 </para></listitem>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
306 <listitem><para>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
307 We lookup [1) the full envelope from email address, 2) the domain name
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
308 part of the envelope from address, 3) the user@ part of the envelope
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
309 from address] in the filtering context env_from statement. That results
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
310 in one of (white, black, unknown, inherit).
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
311 </para></listitem>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
312 <listitem><para>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
313 If the answer is black, mail to this recipient is rejected with "no such
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
314 user", and the dns lists are not checked.
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
315 </para></listitem>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
316 <listitem><para>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
317 If the answer is white, mail to this recipient is accepted and the dns
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
318 lists are not checked.
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
319 </para></listitem>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
320 <listitem><para>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
321 If the answer is unknown, we don't reject yet, but the dns lists will be
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
322 checked, and the content may be scanned.
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
323 </para></listitem>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
324 <listitem><para>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
325 If the answer is inherit, we repeat the envelope from search in the
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
326 parent context.
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
327 </para></listitem>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
328 <listitem><para>
168
6bac960af6b4 add generic reverse dns filtering regex
carl
parents: 167
diff changeset
329 If the mail has not been accepted or rejected yet, the dns lists
6bac960af6b4 add generic reverse dns filtering regex
carl
parents: 167
diff changeset
330 specified in the filtering context are checked and the mail is rejected
6bac960af6b4 add generic reverse dns filtering regex
carl
parents: 167
diff changeset
331 if any list has an A record for the standard dns based lookup scheme
6bac960af6b4 add generic reverse dns filtering regex
carl
parents: 167
diff changeset
332 (reversed octets of the client followed by the dns suffix).
6bac960af6b4 add generic reverse dns filtering regex
carl
parents: 167
diff changeset
333 </para></listitem>
6bac960af6b4 add generic reverse dns filtering regex
carl
parents: 167
diff changeset
334 <listitem><para>
6bac960af6b4 add generic reverse dns filtering regex
carl
parents: 167
diff changeset
335 If the mail has not been accepted or rejected yet, and the filtering
170
bd33eaccfed8 fix pre/post scripts in rpm spec file
carl
parents: 168
diff changeset
336 context (or any ancestor context) specifies a non-empty generic regular
bd33eaccfed8 fix pre/post scripts in rpm spec file
carl
parents: 168
diff changeset
337 expression, then we check the fully qualified client name (obtained via
bd33eaccfed8 fix pre/post scripts in rpm spec file
carl
parents: 168
diff changeset
338 the sendmail macro "_"). The mail is rejected if the client name
bd33eaccfed8 fix pre/post scripts in rpm spec file
carl
parents: 168
diff changeset
339 matches the specified regular expression.
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
340 </para></listitem>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
341 <listitem><para>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
342 If the mail has not been accepted or rejected yet, we look for a
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
343 verification context, which is the closest ancestor of the filtering
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
344 context that both specifies a verification host, and which covers the
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
345 envelope to address. If we find such a verification context, and the
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
346 verification host is not our own hostname, we open an smtp conversation
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
347 with that verification host. The current envelope from and recipient to
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
348 values are passed to that verification host. If we receive a 5xy
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
349 response those commands, we reject the current recipient with "no such
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
350 user".
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
351 </para></listitem>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
352 <listitem><para>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
353 If the mail has not been accepted or rejected yet, and the filtering
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
354 context enables content filtering, and this is the first such recipient
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
355 in this smtp transaction, we set the content filtering parameters from
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
356 this context, and enable content filtering for the body of this message.
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
357 </para></listitem>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
358 </orderedlist>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
359 <para>
160
b3ed72ee6564 allow manual updates to auto whitelist files
carl
parents: 158
diff changeset
360 For each recipient that was accepted, we search for an autowhite entry
b3ed72ee6564 allow manual updates to auto whitelist files
carl
parents: 158
diff changeset
361 starting in the reply filtering context. If an autowhite entry is found,
b3ed72ee6564 allow manual updates to auto whitelist files
carl
parents: 158
diff changeset
362 we add the recipient to that auto whitelist file. This will prevent reply
b3ed72ee6564 allow manual updates to auto whitelist files
carl
parents: 158
diff changeset
363 messages from being blocked by the dnsbl or content filtering.
b3ed72ee6564 allow manual updates to auto whitelist files
carl
parents: 158
diff changeset
364 </para>
b3ed72ee6564 allow manual updates to auto whitelist files
carl
parents: 158
diff changeset
365 <para>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
366 If content filtering is enabled for this body, the mail text is decoded
119
d9d2f8699621 uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 115
diff changeset
367 (uuencode, base64, mime, html entity, url encodings), and scanned for HTTP
d9d2f8699621 uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 115
diff changeset
368 and HTTPS URLs or bare host names. Hostnames must be either ip address
d9d2f8699621 uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 115
diff changeset
369 literals, or must end in a string defined by the TLD list. The first
d9d2f8699621 uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 115
diff changeset
370 &lt;configurable&gt; host names are checked as follows.
d9d2f8699621 uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 115
diff changeset
371 </para>
d9d2f8699621 uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 115
diff changeset
372 <para>
d9d2f8699621 uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 115
diff changeset
373 The only known list that is suitable for the content filter DNSBL is the
d9d2f8699621 uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 115
diff changeset
374 SBL. If the content filter DNSBL is defined, and any of those host
d9d2f8699621 uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 115
diff changeset
375 names resolve to ip addresses that are on that DNSBL (or have
d9d2f8699621 uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 115
diff changeset
376 nameservers that are on that list), and the host name is not on the
d9d2f8699621 uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 115
diff changeset
377 &lt;configurable&gt; ignore list, the mail is rejected.
d9d2f8699621 uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 115
diff changeset
378 </para>
d9d2f8699621 uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 115
diff changeset
379 <para>
d9d2f8699621 uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 115
diff changeset
380 If the content uribl DNSBL is defined, and any of those host names are
d9d2f8699621 uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 115
diff changeset
381 on that DNSBL, and the host name is not on the &lt;configurable&gt;
d9d2f8699621 uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 115
diff changeset
382 ignore list, the mail is rejected.
d9d2f8699621 uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 115
diff changeset
383 </para>
d9d2f8699621 uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 115
diff changeset
384 <para>
167
9b129ed78d7d actually use spamassassin result, allow build without spam assassin, only call it if some recipient needs it.
carl
parents: 164
diff changeset
385 If any non-whitelisted recipient has a filtering context with a non-zero
9b129ed78d7d actually use spamassassin result, allow build without spam assassin, only call it if some recipient needs it.
carl
parents: 164
diff changeset
386 spamassassin limit, then the message is passed thru spamassassin (via
9b129ed78d7d actually use spamassassin result, allow build without spam assassin, only call it if some recipient needs it.
carl
parents: 164
diff changeset
387 spamc), and the message is rejected for those recipients with spamassassin
9b129ed78d7d actually use spamassassin result, allow build without spam assassin, only call it if some recipient needs it.
carl
parents: 164
diff changeset
388 limits less than the resulting spamassassin score.
163
97d7da45fe2a spamassassin changes
carl
parents: 162
diff changeset
389 </para>
97d7da45fe2a spamassassin changes
carl
parents: 162
diff changeset
390 <para>
119
d9d2f8699621 uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 115
diff changeset
391 We also scan for excessive bad html tags, and if a &lt;configurable&gt;
d9d2f8699621 uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 115
diff changeset
392 limit is exceeded, the mail is rejected.
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
393 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
394 </refsect1>
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
395
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
396 <refsect1 id='access.1'>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
397 <title>Sendmail access vs. DNSBL</title>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
398 <para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
399 With the standard sendmail.mc dnsbl FEATURE, the dnsbl checks may be
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
400 suppressed by entries in the /etc/mail/access database. For example,
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
401 suppose you control a /18 of address space, and have allocated some /24s
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
402 to some clients. You have access entries like
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
403 <literallayout class="monospaced"><![CDATA[
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
404 192.168.4 OK
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
405 192.168.17 OK]]></literallayout>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
406 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
407 <para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
408 to allow those clients to smarthost thru your mail server. Now if one
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
409 of those clients happens get infected with a virus that turns a machine
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
410 into an open proxy, and their 192.168.4.45 lands on the SBL-XBL, you
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
411 will still wind up allowing that infected machine to smarthost thru your
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
412 mail servers.
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
413 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
414 <para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
415 With this DNSBL milter, the sendmail access database cannot override the
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
416 dnsbl checks, so that machine won't be able to send mail to or thru your
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
417 smarthost mail server (unless the virus/proxy can use smtp-auth).
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
418 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
419 <para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
420 Using the standard sendmail features, you would add access entries to
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
421 allow hosts on your local network to relay thru your mail server. Those
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
422 OK entries in the sendmail access database will override all the dnsbl
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
423 checks. With this DNSBL milter, you will need to have the local users
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
424 authenticate with smtp-auth to get the same effect. You might find
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
425 <ulink
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
426 url="http://www.ists.dartmouth.edu/classroom/sendmail-ssl-how-to.php">
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
427 these directions</ulink> helpful for setting up smtp-auth if you are on
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
428 RH Linux.
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
429 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
430 </refsect1>
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
431
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
432 <refsect1 id='performance.1'>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
433 <title>Performance Issues</title>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
434 <para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
435 Consider a high volume high performance machine running sendmail. Each
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
436 sendmail process can do its own dns resolution. Typically, such dns
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
437 resolver libraries are not thread safe, and so must be protected by some
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
438 sort of mutex in a threaded environment. When we add a milter to
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
439 sendmail, we now have a collection of sendmail processes, and a
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
440 collection of milter threads.
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
441 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
442 <para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
443 We will be doing a lot of dns lookups per mail message, and at least
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
444 some of those will take many tens of seconds. If all this dns work is
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
445 serialized inside the milter, we have an upper limit of about 25K mail
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
446 messages per day. That is clearly not sufficient for many sites.
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
447 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
448 <para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
449 Since we want to do parallel dns resolution across those milter threads,
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
450 we add another collection of dns resolver processes. Each sendmail
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
451 process is talking to a milter thread over a socket, and each milter
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
452 thread is talking to a dns resolver process over another socket.
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
453 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
454 <para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
455 Suppose we are processing 20 messages per second, and each message
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
456 requires 20 seconds of dns work. Then we will have 400 sendmail
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
457 processes, 400 milter threads, and 400 dns resolver processes. Of
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
458 course that steady state is very unlikely to happen.
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
459 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
460 </refsect1>
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
461
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
462
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
463 <refsect1 id='rejected.1'>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
464 <title>Rejected Ideas</title>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
465 <para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
466 The following ideas have been considered and rejected.
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
467 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
468 <para>
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
469 Add max_recipients setting to the context configuration. Recipients in
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
470 excess of that limit will be rejected, and all the non-whitelisted
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
471 recipients will be removed. Current spammers *very* rarely send more
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
472 than ten recipients in a single smtp transaction, so this won't stop any
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
473 significant amount of spam.
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
474 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
475 <para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
476 Add poison addresses to the configuration. If any recipient is
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
477 poison, all recipients are rejected even if they would be whitelisted,
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
478 and the data is rejected if sent. I have a collection of spam trap
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
479 addresses that would be suitable for such use. Based on my log files,
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
480 any mail to those spam trap addresses is rejected based on either dnsbl
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
481 lookups or the DCC. So this won't result in blocking any additional
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
482 spam.
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
483 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
484 <para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
485 Add an option to only allow one recipient if the return path is
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
486 empty. Based on my log files, there is no mail that violates this
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
487 check.
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
488 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
489 <para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
490 Reject the mail if the envelope from domain name contains any MX
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
491 records pointing to 127.0.0.0/8. I don't see any significant amount of
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
492 spam sent with such domain names.
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
493 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
494 </refsect1>
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
495
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
496 <refsect1 id='todo.1'>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
497 <title>TODO</title>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
498 <para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
499 The following ideas are under consideration.
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
500 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
501 <para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
502 Add a per-context option to reject mail if the number of digits in
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
503 the reverse dns client name exceeds some threshold.
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
504 </para>
115
07e5d4721213 use larger resolver buffer
carl
parents: 114
diff changeset
505 <para>
07e5d4721213 use larger resolver buffer
carl
parents: 114
diff changeset
506 Look for href="hostname/path" strings that are missing the required
07e5d4721213 use larger resolver buffer
carl
parents: 114
diff changeset
507 http:// protocol header. Such references are still clickable in common
07e5d4721213 use larger resolver buffer
carl
parents: 114
diff changeset
508 mail software.
07e5d4721213 use larger resolver buffer
carl
parents: 114
diff changeset
509 </para>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
510 </refsect1>
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
511
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
512 <refsect1 id='copyright.1'>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
513 <title>Copyright</title>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
514 <para>
163
97d7da45fe2a spamassassin changes
carl
parents: 162
diff changeset
515 Copyright (C) 2007 by 510 Software Group &lt;carl@five-ten-sg.com&gt;
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
516 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
517 <para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
518 This program is free software; you can redistribute it and/or modify it
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
519 under the terms of the GNU General Public License as published by the
160
b3ed72ee6564 allow manual updates to auto whitelist files
carl
parents: 158
diff changeset
520 Free Software Foundation; either version 3, or (at your option) any
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
521 later version.
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
522 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
523 <para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
524 You should have received a copy of the GNU General Public License along
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
525 with this program; see the file COPYING. If not, please write to the
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
526 Free Software Foundation, 675 Mass Ave, Cambridge, MA 02139, USA.
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
527 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
528 </refsect1>
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
529
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
530 <refsect1 id='version.1'>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
531 <title>CVS Version</title>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
532 <para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
533 $Id$
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
534 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
535 </refsect1>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
536 </refentry>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
537
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
538
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
539 <refentry id="@PACKAGE@.conf.5">
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
540 <refentryinfo>
168
6bac960af6b4 add generic reverse dns filtering regex
carl
parents: 167
diff changeset
541 <date>2007-08-30</date>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
542 </refentryinfo>
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
543
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
544 <refmeta>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
545 <refentrytitle>@PACKAGE@.conf</refentrytitle>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
546 <manvolnum>5</manvolnum>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
547 <refmiscinfo>@PACKAGE@ @VERSION@</refmiscinfo>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
548 </refmeta>
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
549
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
550 <refnamediv id='name.5'>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
551 <refname>@PACKAGE@.conf</refname>
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
552 <refpurpose>configuration file for @PACKAGE@ sendmail milter</refpurpose>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
553 </refnamediv>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
554
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
555 <refsynopsisdiv id='synopsis.5'>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
556 <title>Synopsis</title>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
557 <cmdsynopsis>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
558 <command>@PACKAGE@.conf</command>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
559 </cmdsynopsis>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
560 </refsynopsisdiv>
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
561
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
562 <refsect1 id='description.5'>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
563 <title>Description</title>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
564 <para>The <command>@PACKAGE@.conf</command> configuration file is
148
9330b8d6a56b add documentation fixes, allow env_from target of inherit
carl
parents: 144
diff changeset
565 specified by this partial bnf description. Comments start with //
9330b8d6a56b add documentation fixes, allow env_from target of inherit
carl
parents: 144
diff changeset
566 or # and extend to the end of the line. To include the contents
9330b8d6a56b add documentation fixes, allow env_from target of inherit
carl
parents: 144
diff changeset
567 of some file verbatim in the dnsbl.conf file, use
9330b8d6a56b add documentation fixes, allow env_from target of inherit
carl
parents: 144
diff changeset
568 <literallayout class="monospaced"><![CDATA[include "<file>";]]></literallayout>
9330b8d6a56b add documentation fixes, allow env_from target of inherit
carl
parents: 144
diff changeset
569 </para>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
570
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
571 <literallayout class="monospaced"><![CDATA[
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
572 CONFIG = {CONTEXT ";"}+
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
573 CONTEXT = "context" NAME "{" {STATEMENT}+ "}"
168
6bac960af6b4 add generic reverse dns filtering regex
carl
parents: 167
diff changeset
574 STATEMENT = (DNSBL | DNSBLLIST | CONTENT | ENV-TO | VERIFY | GENERIC
6bac960af6b4 add generic reverse dns filtering regex
carl
parents: 167
diff changeset
575 | AUTOWHITE | CONTEXT | ENV-FROM | RATE-LIMIT) ";"
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
576
124
ea6f9c812faa put hostname in smtp message for uribl style lookups
carl
parents: 122
diff changeset
577 DNSBL = "dnsbl" NAME DNSPREFIX ERROR-MSG1
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
578
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
579 DNSBLLIST = "dnsbl_list" {NAME}+
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
580
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
581 CONTENT = "content" ("on" | "off") "{" {CONTENT-ST}+ "}"
119
d9d2f8699621 uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 115
diff changeset
582 CONTENT-ST = (FILTER | URIBL | IGNORE | TLD | CCTLD | HTML-TAGS |
163
97d7da45fe2a spamassassin changes
carl
parents: 162
diff changeset
583 HTML-LIMIT | HOST-LIMIT | SPAMASS) ";"
97d7da45fe2a spamassassin changes
carl
parents: 162
diff changeset
584 SPAMASS = "spamassassin" INTEGER
124
ea6f9c812faa put hostname in smtp message for uribl style lookups
carl
parents: 122
diff changeset
585 FILTER = "filter" DNSPREFIX ERROR-MSG2
ea6f9c812faa put hostname in smtp message for uribl style lookups
carl
parents: 122
diff changeset
586 URIBL = "uribl" DNSPREFIX ERROR-MSG3
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
587 IGNORE = "ignore" "{" {HOSTNAME [";"]}+ "}"
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
588 TLD = "tld" "{" {TLD [";"]}+ "}"
119
d9d2f8699621 uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 115
diff changeset
589 CCTLD = "cctld" "{" {TLD [";"]}+ "}"
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
590 HTML-TAGS = "html_tags" "{" {HTMLTAG [";"]}+ "}"
124
ea6f9c812faa put hostname in smtp message for uribl style lookups
carl
parents: 122
diff changeset
591 ERROR-MSG1 = string containing exactly two %s replacement tokens
ea6f9c812faa put hostname in smtp message for uribl style lookups
carl
parents: 122
diff changeset
592 both are replaced with the client ip address
ea6f9c812faa put hostname in smtp message for uribl style lookups
carl
parents: 122
diff changeset
593 ERROR-MSG2 = string containing exactly two %s replacement tokens
ea6f9c812faa put hostname in smtp message for uribl style lookups
carl
parents: 122
diff changeset
594 the first is replaced with the hostname, and the second
ea6f9c812faa put hostname in smtp message for uribl style lookups
carl
parents: 122
diff changeset
595 is replaced with the ip address
ea6f9c812faa put hostname in smtp message for uribl style lookups
carl
parents: 122
diff changeset
596 ERROR-MSG3 = string containing exactly two %s replacement tokens
ea6f9c812faa put hostname in smtp message for uribl style lookups
carl
parents: 122
diff changeset
597 both are replaced with the hostname
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
598
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
599 HTML-LIMIT = "html_limit" ("on" INTEGER ERROR-MSG | "off")
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
600
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
601 HOST-LIMIT = "host_limit" ("on" INTEGER ERROR-MSG | "off" |
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
602 "soft" INTEGER)
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
603
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
604 ENV-TO = "env_to" "{" {(TO-ADDR | DCC-TO)}+ "}"
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
605 TO-ADDR = ADDRESS [";"]
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
606 DCC-TO = "dcc_to" ("ok" | "many") "{" DCCINCLUDEFILE "}" ";"
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
607
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
608 VERIFY = "verify" HOSTNAME ";"
168
6bac960af6b4 add generic reverse dns filtering regex
carl
parents: 167
diff changeset
609 GENERIC = "generic" REGULAREXPRESSION ERROR-MSG4 ";"
6bac960af6b4 add generic reverse dns filtering regex
carl
parents: 167
diff changeset
610 ERROR-MSG4 = string containing exactly one %s replacement token
6bac960af6b4 add generic reverse dns filtering regex
carl
parents: 167
diff changeset
611 which is replaced with the client name
153
8d7c439bb6fa add auto whitelisting
carl
parents: 152
diff changeset
612 AUTOWHITE = "autowhite" DAYS FILENAME ";"
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
613
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
614 ENV_FROM = "env_from" [DEFAULT] "{" {(FROM-ADDR | DCC-FROM)}+ "}"
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
615 FROM-ADDR = ADDRESS VALUE [";"]
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
616 DCC-FROM = "dcc_from" "{" DCCINCLUDEFILE "}" ";"
136
f4746d8a12a3 add smtp auth rate limits
carl
parents: 127
diff changeset
617
140
4028de9b46dd cleanup smtp rate limit code
carl
parents: 136
diff changeset
618 RATE-LIMIT = "rate_limit" [DEFAULTLIMIT] "{" (RATE)+ "}"
136
f4746d8a12a3 add smtp auth rate limits
carl
parents: 127
diff changeset
619 RATE = USER LIMIT [";"]
f4746d8a12a3 add smtp auth rate limits
carl
parents: 127
diff changeset
620
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
621 DEFAULT = ("white" | "black" | "unknown" | "inherit" | "")
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
622 ADDRESS = (USER@ | DOMAIN | USER@DOMAIN)
148
9330b8d6a56b add documentation fixes, allow env_from target of inherit
carl
parents: 144
diff changeset
623 VALUE = ("white" | "black" | "unknown" | "inherit" | CHILD-CONTEXT-NAME)]]></literallayout>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
624 </refsect1>
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
625
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
626 <refsect1 id='sample.5'>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
627 <title>Sample</title>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
628 <literallayout class="monospaced"><![CDATA[
127
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 124
diff changeset
629 context main-default {
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 124
diff changeset
630 // outbound dnsbl filtering to catch our own customers that end up on the sbl
144
31ff00ea6bfb allow parent/child to share a fully qualified env_to address
carl
parents: 140
diff changeset
631 dnsbl localp partial.blackholes.five-ten-sg.com "Mail from %s rejected - local; see http://www.five-ten-sg.com/blackhole.php?%s";
127
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 124
diff changeset
632 dnsbl local blackholes.five-ten-sg.com "Mail from %s rejected - local; see http://www.five-ten-sg.com/blackhole.php?%s";
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 124
diff changeset
633 dnsbl sbl sbl-xbl.spamhaus.org "Mail from %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s";
171
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
634 dnsbl_list local sbl;
127
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 124
diff changeset
635
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 124
diff changeset
636 // outbound content filtering to prevent our own customers from sending spam
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 124
diff changeset
637 content on {
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 124
diff changeset
638 filter sbl-xbl.spamhaus.org "Mail containing %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s";
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 124
diff changeset
639 uribl multi.surbl.org "Mail containing %s rejected - surbl; see http://www.rulesemporium.com/cgi-bin/uribl.cgi?bl0=1&domain0=%s";
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 124
diff changeset
640 #uribl black.uribl.com "Mail containing %s rejected - uribl; see http://l.uribl.com/?d=%s";
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 124
diff changeset
641 ignore { include "hosts-ignore.conf"; };
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 124
diff changeset
642 tld { include "tld.conf"; };
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 124
diff changeset
643 cctld { include "cctld.conf"; };
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 124
diff changeset
644 html_tags { include "html-tags.conf"; };
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 124
diff changeset
645 html_limit on 20 "Mail containing excessive bad html tags rejected";
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 124
diff changeset
646 html_limit off;
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 124
diff changeset
647 host_limit on 20 "Mail containing excessive host names rejected";
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 124
diff changeset
648 host_limit soft 20;
171
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
649 spamassassin 4;
127
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 124
diff changeset
650 };
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 124
diff changeset
651
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 124
diff changeset
652 // backscatter prevention - don't send bounces for mail that we accepted but could not forward
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 124
diff changeset
653 // we only send bounces to our own customers
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 124
diff changeset
654 env_from unknown {
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 124
diff changeset
655 "<>" black;
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 124
diff changeset
656 };
136
f4746d8a12a3 add smtp auth rate limits
carl
parents: 127
diff changeset
657
144
31ff00ea6bfb allow parent/child to share a fully qualified env_to address
carl
parents: 140
diff changeset
658 // hourly recipient rate limit by smtp auth client id
140
4028de9b46dd cleanup smtp rate limit code
carl
parents: 136
diff changeset
659 rate_limit 30 { // default
171
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
660 #fred 100; // override default limits
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
661 #joe 10; // ""
136
f4746d8a12a3 add smtp auth rate limits
carl
parents: 127
diff changeset
662 };
127
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 124
diff changeset
663 };
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 124
diff changeset
664
171
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
665 context main {
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
666 dnsbl localp partial.blackholes.five-ten-sg.com "Mail from %s rejected - local; see http://www.five-ten-sg.com/blackhole.php?%s";
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
667 dnsbl local blackholes.five-ten-sg.com "Mail from %s rejected - local; see http://www.five-ten-sg.com/blackhole.php?%s";
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
668 dnsbl sbl sbl-xbl.spamhaus.org "Mail from %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s";
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
669 dnsbl xbl xbl.spamhaus.org "Mail from %s rejected - xbl; see http://www.spamhaus.org/query/bl?ip=%s";
171
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
670 dnsbl_list local sbl;
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
671
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
672 content on {
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
673 filter sbl-xbl.spamhaus.org "Mail containing %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s";
122
e8971c595845 fix typo in multi.surbl.org name
carl
parents: 119
diff changeset
674 uribl multi.surbl.org "Mail containing %s rejected - surbl; see http://www.rulesemporium.com/cgi-bin/uribl.cgi?bl0=1&domain0=%s";
119
d9d2f8699621 uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 115
diff changeset
675 #uribl black.uribl.com "Mail containing %s rejected - uribl; see http://l.uribl.com/?d=%s";
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
676 ignore { include "hosts-ignore.conf"; };
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
677 tld { include "tld.conf"; };
119
d9d2f8699621 uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 115
diff changeset
678 cctld { include "cctld.conf"; };
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
679 html_tags { include "html-tags.conf"; };
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
680 html_limit off;
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
681 host_limit soft 20;
171
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
682 spamassassin 5;
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
683 };
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
684
172
d3189495ec68 don't do generic rdns filtering on whitelisted recipients
carl
parents: 171
diff changeset
685 generic "(^|[.-])(h(ost|))?([0-9]{1,3}[.-](Red-|dynamic[.-])?){4}"
171
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
686 "your mail server %s seems to have a generic name";
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
687
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
688 env_to {
171
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
689 # !! replace this with your domain names
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
690 # child contexts are not allowed to specify recipient addresses outside these domains
171
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
691 # or leave this empty to allow unrestricted child contexts
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
692 # example.com;
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
693 };
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
694
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
695 context whitelist {
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
696 content off {};
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
697 env_to {
171
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
698 # dcc_to ok { include "/var/dcc/whitecommon"; };
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
699 };
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
700 env_from white {}; # white forces all unmatched from addresses (everyone in this case) to be whitelisted
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
701 # so all mail TO these env_to addresses is accepted
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
702 };
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
703
171
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
704 context abuse {
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
705 dnsbl_list xbl;
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
706 content off {};
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
707 env_to {
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
708 abuse@ # no content filtering on abuse reports
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
709 postmaster@ # ""
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
710 };
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
711 env_from unknown {}; # ignore all parent white/black listing
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
712 };
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
713
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
714 context minimal {
171
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
715 dnsbl_list sbl;
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
716 content on {};
171
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
717 generic "^$ " " "; # regex cannot match, to disable generic rdns rejects
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
718 env_to {
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
719 };
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
720 };
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
721
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
722 context blacklist {
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
723 env_to {
171
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
724 # dcc_to many { include "/var/dcc/whitecommon"; };
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
725 };
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
726 env_from black {}; # black forces all unmatched from addresses (everyone in this case) to be blacklisted
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
727 # so all mail TO these env_to addresses is rejected
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
728 };
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
729
171
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
730 env_from unknown {
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
731 abuse@ abuse; # replies to abuse reports use the abuse context
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
732 # dcc_from { include "/var/dcc/whitecommon"; };
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
733 };
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
734
171
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
735 autowhite 90 "autowhite/my-auto-whitelist";
8deb51871b3d fix pre/post scripts in rpm spec file
carl
parents: 170
diff changeset
736 # install should create /etc/dnsbl/autowhite writable by userid dnsbl
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
737 };]]></literallayout>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
738 </refsect1>
94
e107ade3b1c0 fix dos line terminators
carl
parents: 92
diff changeset
739
111
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
740 <refsect1 id='version.5'>
d0dad5610980 move to autoconf/automake/docbook
carl
parents: 108
diff changeset
741 <title>CVS Version</title>
108
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
742 <para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
743 $Id$
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
744 </para>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
745 </refsect1>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
746
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
747 </refentry>
1c7677042b78 move to autoconf/automake/docbook
carl
parents: 104
diff changeset
748 </reference>