comparison dnsbl.conf @ 174:da0c41b9f672

don't whitelist addresses with embedded spaces
author carl
date Sun, 23 Sep 2007 11:20:12 -0700
parents d3189495ec68
children e726e1a61ef9
comparison
equal deleted inserted replaced
173:83fe0be032c1 174:da0c41b9f672
1 context main-default { 1 context main-default {
2 // outbound dnsbl filtering to catch our own customers that end up on the sbl 2 // outbound dnsbl filtering to catch our own customers that end up on the sbl
3 dnsbl localp partial.blackholes.five-ten-sg.com "Mail from %s rejected - local; see http://www.five-ten-sg.com/blackhole.php?%s";
4 dnsbl local blackholes.five-ten-sg.com "Mail from %s rejected - local; see http://www.five-ten-sg.com/blackhole.php?%s";
5 dnsbl sbl sbl-xbl.spamhaus.org "Mail from %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s"; 3 dnsbl sbl sbl-xbl.spamhaus.org "Mail from %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s";
6 dnsbl_list local sbl; 4 dnsbl_list sbl;
7 5
8 // outbound content filtering to prevent our own customers from sending spam 6 // outbound content filtering to prevent our own customers from sending spam
9 content on { 7 content on {
10 filter sbl-xbl.spamhaus.org "Mail containing %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s"; 8 filter sbl-xbl.spamhaus.org "Mail containing %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s";
11 uribl multi.surbl.org "Mail containing %s rejected - surbl; see http://www.rulesemporium.com/cgi-bin/uribl.cgi?bl0=1&domain0=%s"; 9 uribl multi.surbl.org "Mail containing %s rejected - surbl; see http://www.rulesemporium.com/cgi-bin/uribl.cgi?bl0=1&domain0=%s";
35 }; 33 };
36 34
37 context main { 35 context main {
38 dnsbl localp partial.blackholes.five-ten-sg.com "Mail from %s rejected - local; see http://www.five-ten-sg.com/blackhole.php?%s"; 36 dnsbl localp partial.blackholes.five-ten-sg.com "Mail from %s rejected - local; see http://www.five-ten-sg.com/blackhole.php?%s";
39 dnsbl local blackholes.five-ten-sg.com "Mail from %s rejected - local; see http://www.five-ten-sg.com/blackhole.php?%s"; 37 dnsbl local blackholes.five-ten-sg.com "Mail from %s rejected - local; see http://www.five-ten-sg.com/blackhole.php?%s";
40 dnsbl sbl sbl-xbl.spamhaus.org "Mail from %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s"; 38 dnsbl sbl zen.spamhaus.org "Mail from %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s";
41 dnsbl xbl xbl.spamhaus.org "Mail from %s rejected - xbl; see http://www.spamhaus.org/query/bl?ip=%s"; 39 dnsbl xbl xbl.spamhaus.org "Mail from %s rejected - xbl; see http://www.spamhaus.org/query/bl?ip=%s";
42 dnsbl_list local sbl; 40 dnsbl_list local sbl;
43 41
44 content on { 42 content on {
45 filter sbl-xbl.spamhaus.org "Mail containing %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s"; 43 filter sbl-xbl.spamhaus.org "Mail containing %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s";
58 "your mail server %s seems to have a generic name"; 56 "your mail server %s seems to have a generic name";
59 57
60 env_to { 58 env_to {
61 # !! replace this with your domain names 59 # !! replace this with your domain names
62 # child contexts are not allowed to specify recipient addresses outside these domains 60 # child contexts are not allowed to specify recipient addresses outside these domains
63 # or leave this empty to allow unrestricted child contexts 61 include "/etc/mail/local-host-names";
64 # example.com;
65 }; 62 };
66 63
67 context whitelist { 64 context whitelist {
68 content off {}; 65 content off {};
69 env_to { 66 env_to {
74 }; 71 };
75 72
76 context abuse { 73 context abuse {
77 dnsbl_list xbl; 74 dnsbl_list xbl;
78 content off {}; 75 content off {};
76 generic "^$ " " "; # regex cannot match, to disable generic rdns rejects
79 env_to { 77 env_to {
80 abuse@ # no content filtering on abuse reports 78 abuse@ # no content filtering on abuse reports
81 postmaster@ # "" 79 postmaster@ # ""
82 }; 80 };
83 env_from unknown {}; # ignore all parent white/black listing 81 env_from unknown {}; # ignore all parent white/black listing
84 }; 82 };
85 83
86 context minimal { 84 context minimal {
87 dnsbl_list sbl; 85 dnsbl_list sbl;
88 content on {}; 86 content on {};
87 spamassassin 10;
89 generic "^$ " " "; # regex cannot match, to disable generic rdns rejects 88 generic "^$ " " "; # regex cannot match, to disable generic rdns rejects
90 env_to { 89 env_to {
91 }; 90 };
92 }; 91 };
93 92