# HG changeset patch # User carl # Date 1094680005 25200 # Node ID 57607387263d0978b83aa6cd35f5a81125958fbd # Parent 44babba1a9b923ece056435cd61d1d2b4e054b13 updates for 3.6, better documentation on removing content filtering, missing some files in cvs diff -r 44babba1a9b9 -r 57607387263d ChangeLog --- a/ChangeLog Wed Sep 08 14:16:49 2004 -0700 +++ b/ChangeLog Wed Sep 08 14:46:45 2004 -0700 @@ -3,6 +3,8 @@ 3.6 2004-09-08 Contributions from Dan Harkless Better documentation for disabling the content filtering. + Don't bother looking at the body text if we are not doing + content filtering. 3.5 2004-07-17 Extend the error message for content filtering when the NS record diff -r 44babba1a9b9 -r 57607387263d xml/dnsbl.in --- a/xml/dnsbl.in Wed Sep 08 14:16:49 2004 -0700 +++ b/xml/dnsbl.in Wed Sep 08 14:46:45 2004 -0700 @@ -2,7 +2,7 @@ -DNSBL Sendmail milter - Version 3.5 +DNSBL Sendmail milter - Version 3.6
Introduction
@@ -112,9 +112,12 @@ suffix).
  • If the mail has not been accepted or rejected yet, the body content -is scanned for HTTP URLs (after base64, mime and html entity decoding), -and the first 20 host names are checked for their presence on the SBL. -If any host name is on the SBL, the mail is rejected. +is optionally scanned for HTTP URLs (after base64, mime and html entity +decoding), and the first <configurable> host names are checked for +their presence on the SBL. If any host name is on the SBL, the mail is +rejected. If we are doing body content scanning, we also scan for +excessive bad html tags, and if a <configurable> limit is +exceeded, the mail is rejected. diff -r 44babba1a9b9 -r 57607387263d xml/sample.conf --- a/xml/sample.conf Wed Sep 08 14:16:49 2004 -0700 +++ b/xml/sample.conf Wed Sep 08 14:46:45 2004 -0700 @@ -7,14 +7,17 @@ # tld: # second token is the tld suffix - com, net, org, etc # +# # content: # second token is the dns suffix used for the actual lookups # third token? is a string enclosed in single quotes, so it # is not really a token. This is the error message, with # up to two %s parameters for the offending host name and -# client ip address respectively. If this command is not -# present, there is no body scanning for host names or bad -# html tags. +# client ip address respectively. +# +# If this command is not present, there is no body scanning +# for host names or bad html tags. +# # # host_limit: # second token is the integer count of the number of host names @@ -25,6 +28,7 @@ # is not really a token. This is the error message supplied # to the smtp client. # +# # host_soft_limit: # second token is the integer count of the number of host names # or urls that are checked in any one mail body. Zero is @@ -32,6 +36,7 @@ # is larger than this limit, only a random selection of them # are checked against the dnsbl. # +# # html_limit: # second token is the integer count of the number of bad html tags # that are allowed in any one mail body. Zero is unlimited. @@ -39,11 +44,13 @@ # is not really a token. This is the error message supplied # to the smtp client. # +# # html_tag: # second token is a valid html tag, that is added to the list # of valid tags. Any html tag seen in the mail bodies that # that is not in this list is presumed to be invalid. # +# # dnsbl: # second token is the name of this dnsbl # third token is the dns suffix used for the actual lookups @@ -51,10 +58,12 @@ # is not really a token. This is the error message, with # up to two %s parameters for the client ip address. # +# # dnsbl_list: # second token is the name of this list of dnsbls # subsequent tokes are the names of the previously defined dnsbls # +# # env_from: # second token is the name of this envelope-from-map. There will # generally be multiple lines with the same name. @@ -68,6 +77,7 @@ # set that sender back to the default (not white or black listed, # and subject to dnsbl lookups). # +# # env_to: # second token is the envelope recipient value from the smtp conversation, # or just the domain part that follows the @ symbol. @@ -98,8 +108,7 @@ # include_dcc: # second token is the name of an envelope-from-map (EMAP below). # third token is the path name of the dcc whiteclnt config file to be -# included. -# entries from the dcc config are mapped as: +# included. Entries from the dcc config are mapped as: # ok -> WHITE # many -> BLACK # env_from -> env_from EMAP xxx