comparison xml/dnsbl.in @ 174:da0c41b9f672

don't whitelist addresses with embedded spaces
author carl
date Sun, 23 Sep 2007 11:20:12 -0700
parents d3189495ec68
children e726e1a61ef9
comparison
equal deleted inserted replaced
173:83fe0be032c1 174:da0c41b9f672
10 10
11 </partintro> 11 </partintro>
12 12
13 <refentry id="@PACKAGE@.1"> 13 <refentry id="@PACKAGE@.1">
14 <refentryinfo> 14 <refentryinfo>
15 <date>2007-08-30</date> 15 <date>2007-09-07</date>
16 </refentryinfo> 16 </refentryinfo>
17 17
18 <refmeta> 18 <refmeta>
19 <refentrytitle>@PACKAGE@</refentrytitle> 19 <refentrytitle>@PACKAGE@</refentrytitle>
20 <manvolnum>1</manvolnum> 20 <manvolnum>1</manvolnum>
536 </refentry> 536 </refentry>
537 537
538 538
539 <refentry id="@PACKAGE@.conf.5"> 539 <refentry id="@PACKAGE@.conf.5">
540 <refentryinfo> 540 <refentryinfo>
541 <date>2007-08-30</date> 541 <date>2007-09-07</date>
542 </refentryinfo> 542 </refentryinfo>
543 543
544 <refmeta> 544 <refmeta>
545 <refentrytitle>@PACKAGE@.conf</refentrytitle> 545 <refentrytitle>@PACKAGE@.conf</refentrytitle>
546 <manvolnum>5</manvolnum> 546 <manvolnum>5</manvolnum>
626 <refsect1 id='sample.5'> 626 <refsect1 id='sample.5'>
627 <title>Sample</title> 627 <title>Sample</title>
628 <literallayout class="monospaced"><![CDATA[ 628 <literallayout class="monospaced"><![CDATA[
629 context main-default { 629 context main-default {
630 // outbound dnsbl filtering to catch our own customers that end up on the sbl 630 // outbound dnsbl filtering to catch our own customers that end up on the sbl
631 dnsbl localp partial.blackholes.five-ten-sg.com "Mail from %s rejected - local; see http://www.five-ten-sg.com/blackhole.php?%s";
632 dnsbl local blackholes.five-ten-sg.com "Mail from %s rejected - local; see http://www.five-ten-sg.com/blackhole.php?%s";
633 dnsbl sbl sbl-xbl.spamhaus.org "Mail from %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s"; 631 dnsbl sbl sbl-xbl.spamhaus.org "Mail from %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s";
634 dnsbl_list local sbl; 632 dnsbl_list sbl;
635 633
636 // outbound content filtering to prevent our own customers from sending spam 634 // outbound content filtering to prevent our own customers from sending spam
637 content on { 635 content on {
638 filter sbl-xbl.spamhaus.org "Mail containing %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s"; 636 filter sbl-xbl.spamhaus.org "Mail containing %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s";
639 uribl multi.surbl.org "Mail containing %s rejected - surbl; see http://www.rulesemporium.com/cgi-bin/uribl.cgi?bl0=1&domain0=%s"; 637 uribl multi.surbl.org "Mail containing %s rejected - surbl; see http://www.rulesemporium.com/cgi-bin/uribl.cgi?bl0=1&domain0=%s";
663 }; 661 };
664 662
665 context main { 663 context main {
666 dnsbl localp partial.blackholes.five-ten-sg.com "Mail from %s rejected - local; see http://www.five-ten-sg.com/blackhole.php?%s"; 664 dnsbl localp partial.blackholes.five-ten-sg.com "Mail from %s rejected - local; see http://www.five-ten-sg.com/blackhole.php?%s";
667 dnsbl local blackholes.five-ten-sg.com "Mail from %s rejected - local; see http://www.five-ten-sg.com/blackhole.php?%s"; 665 dnsbl local blackholes.five-ten-sg.com "Mail from %s rejected - local; see http://www.five-ten-sg.com/blackhole.php?%s";
668 dnsbl sbl sbl-xbl.spamhaus.org "Mail from %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s"; 666 dnsbl sbl zen.spamhaus.org "Mail from %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s";
669 dnsbl xbl xbl.spamhaus.org "Mail from %s rejected - xbl; see http://www.spamhaus.org/query/bl?ip=%s"; 667 dnsbl xbl xbl.spamhaus.org "Mail from %s rejected - xbl; see http://www.spamhaus.org/query/bl?ip=%s";
670 dnsbl_list local sbl; 668 dnsbl_list local sbl;
671 669
672 content on { 670 content on {
673 filter sbl-xbl.spamhaus.org "Mail containing %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s"; 671 filter sbl-xbl.spamhaus.org "Mail containing %s rejected - sbl; see http://www.spamhaus.org/query/bl?ip=%s";
686 "your mail server %s seems to have a generic name"; 684 "your mail server %s seems to have a generic name";
687 685
688 env_to { 686 env_to {
689 # !! replace this with your domain names 687 # !! replace this with your domain names
690 # child contexts are not allowed to specify recipient addresses outside these domains 688 # child contexts are not allowed to specify recipient addresses outside these domains
691 # or leave this empty to allow unrestricted child contexts 689 include "/etc/mail/local-host-names";
692 # example.com;
693 }; 690 };
694 691
695 context whitelist { 692 context whitelist {
696 content off {}; 693 content off {};
697 env_to { 694 env_to {
702 }; 699 };
703 700
704 context abuse { 701 context abuse {
705 dnsbl_list xbl; 702 dnsbl_list xbl;
706 content off {}; 703 content off {};
704 generic "^$ " " "; # regex cannot match, to disable generic rdns rejects
707 env_to { 705 env_to {
708 abuse@ # no content filtering on abuse reports 706 abuse@ # no content filtering on abuse reports
709 postmaster@ # "" 707 postmaster@ # ""
710 }; 708 };
711 env_from unknown {}; # ignore all parent white/black listing 709 env_from unknown {}; # ignore all parent white/black listing
712 }; 710 };
713 711
714 context minimal { 712 context minimal {
715 dnsbl_list sbl; 713 dnsbl_list sbl;
716 content on {}; 714 content on {};
715 spamassassin 10;
717 generic "^$ " " "; # regex cannot match, to disable generic rdns rejects 716 generic "^$ " " "; # regex cannot match, to disable generic rdns rejects
718 env_to { 717 env_to {
719 }; 718 };
720 }; 719 };
721 720