d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
a15417e7cf
freebsd-dev/etc/mail/sendmail.cf.additions

115 lines
4.1 KiB
Plaintext
Raw Normal View History

improve anti-spam rulesets: check_relay, check_mail, check_rcpt. break each ruleset into identified sections. (called groups). note which groups can be reordered. each group accepts and returns the same strings, as much as possible. reactivate Paul Vixie's RBL (in check_mail) add rules to limit mail relaying to a list of hosts and domains in the R class (check_rcpt, not active on hub.freebsd.org) Submitted by: jmb
1997-12-01 00:15:38 +00:00
# list of hosts and domains for whom we relay mail.
# all .forward hosts, domains must be listed in this file.
# same for hosts and domains in /etc/aliases
FR-o /etc/sendmail.cR
anti-spam filter used by the FreeBSD mailing lists.
1997-10-19 16:40:10 +00:00
# database declarations
Kdenyip hash -o -a.REJECT /etc/mail/denyip.db
improve anti-spam rulesets: check_relay, check_mail, check_rcpt. break each ruleset into identified sections. (called groups). note which groups can be reordered. each group accepts and returns the same strings, as much as possible. reactivate Paul Vixie's RBL (in check_mail) add rules to limit mail relaying to a list of hosts and domains in the R class (check_rcpt, not active on hub.freebsd.org) Submitted by: jmb
1997-12-01 00:15:38 +00:00
Kfakenames hash -o -a.REJECT /etc/mail/fakenames.db
anti-spam filter used by the FreeBSD mailing lists.
1997-10-19 16:40:10 +00:00
Kspamsites hash -o -a.REJECT /etc/mail/spamsites.db
improve anti-spam rulesets: check_relay, check_mail, check_rcpt. break each ruleset into identified sections. (called groups). note which groups can be reordered. each group accepts and returns the same strings, as much as possible. reactivate Paul Vixie's RBL (in check_mail) add rules to limit mail relaying to a list of hosts and domains in the R class (check_rcpt, not active on hub.freebsd.org) Submitted by: jmb
1997-12-01 00:15:38 +00:00
# helper rulsesets; useful for debugging sendmail configurations
#
#
Scheck_rbl
# lookup up an ip address in the Realtime Blackhole List.
R$-.$-.$-.$- $: $(host $4.$3.$2.$1.rbl.maps.vix.com $:OK $)
Sxlat # for sendmail -bt
# sendmail treats "$" and "|" as two distinct tokens
# this rule "pastes" them together into one token
# and then calls check_relay.
R$* $$| $* $: $1 $| $2
R$* $| $* $@ $>check_relay $1 $| $2
anti-spam filter used by the FreeBSD mailing lists.
1997-10-19 16:40:10 +00:00
Scheck_relay
improve anti-spam rulesets: check_relay, check_mail, check_rcpt. break each ruleset into identified sections. (called groups). note which groups can be reordered. each group accepts and returns the same strings, as much as possible. reactivate Paul Vixie's RBL (in check_mail) add rules to limit mail relaying to a list of hosts and domains in the R class (check_rcpt, not active on hub.freebsd.org) Submitted by: jmb
1997-12-01 00:15:38 +00:00
# called with "hostname.tld $| IP address" of connecting host.
# hostname.tld is the fully-qualified domain name
# IP address is dotted-quad with surrounding "[]" brackets.
#
# each group of rules in this ruleset is independent.
# each accepts and return "hostname.tld $| IP address"
# use the ones that you want comment out the rest
# you may rearrange the groups but not the rules in each group.
# each group is preceded and followed by a comment
#
# host must NOT be in the "spamsites" database--BEGIN
R$* $| $* $: <$1 $| $2> $1
R<$*> $+.$+.$+ <$1> $3.$4
R<$*> $+.$+ $: <$1> $(spamsites $2.$3 $)
Ask spammers to mail postmaster@$m, not postmaster@FreeBSD.ORG.
1998-01-23 01:58:49 +00:00
R<$*> $*.REJECT $#error $: 521 blocked. contact postmaster@$m
improve anti-spam rulesets: check_relay, check_mail, check_rcpt. break each ruleset into identified sections. (called groups). note which groups can be reordered. each group accepts and returns the same strings, as much as possible. reactivate Paul Vixie's RBL (in check_mail) add rules to limit mail relaying to a list of hosts and domains in the R class (check_rcpt, not active on hub.freebsd.org) Submitted by: jmb
1997-12-01 00:15:38 +00:00
R<$*> $* $: $1
# host must NOT be in the "spamsites" database--END
# ip address must NOT be in the "denyip" database--BEGIN
anti-spam filter used by the FreeBSD mailing lists.
1997-10-19 16:40:10 +00:00
R$* $| $* $: $1 $| $(denyip $2 $)
Ask spammers to mail postmaster@$m, not postmaster@FreeBSD.ORG.
1998-01-23 01:58:49 +00:00
R$* $| $*.REJECT $#error $: 521 blocked. contact postmaster@$m
improve anti-spam rulesets: check_relay, check_mail, check_rcpt. break each ruleset into identified sections. (called groups). note which groups can be reordered. each group accepts and returns the same strings, as much as possible. reactivate Paul Vixie's RBL (in check_mail) add rules to limit mail relaying to a list of hosts and domains in the R class (check_rcpt, not active on hub.freebsd.org) Submitted by: jmb
1997-12-01 00:15:38 +00:00
# ip address must NOT be in the "denyip" database--END
R$* $@ OK
anti-spam filter used by the FreeBSD mailing lists.
1997-10-19 16:40:10 +00:00
Scheck_mail
improve anti-spam rulesets: check_relay, check_mail, check_rcpt. break each ruleset into identified sections. (called groups). note which groups can be reordered. each group accepts and returns the same strings, as much as possible. reactivate Paul Vixie's RBL (in check_mail) add rules to limit mail relaying to a list of hosts and domains in the R class (check_rcpt, not active on hub.freebsd.org) Submitted by: jmb
1997-12-01 00:15:38 +00:00
# called with envelope sender (everything after ":") in
# "Mail From: xxx", of SMTP conversation
# may or may not have "<" ">"
# the groups of rules in this ruleset ARE NOT independent.
# "remove all RFC-822 comments" must come first
correct an error that i made in check_relay. check_relay cannot return temporary errors. The temporary error is logged in the sendmail log, but on the SMTP protocol level, sendmail returns '550 Access Denied'. Reviewed by: jmb Submitted by: Tor Egge <Tor.Egge@idi.ntnu.no>
1997-12-07 16:50:11 +00:00
# "Connecting Host" and "Paul Vixie's RBL" must be last
improve anti-spam rulesets: check_relay, check_mail, check_rcpt. break each ruleset into identified sections. (called groups). note which groups can be reordered. each group accepts and returns the same strings, as much as possible. reactivate Paul Vixie's RBL (in check_mail) add rules to limit mail relaying to a list of hosts and domains in the R class (check_rcpt, not active on hub.freebsd.org) Submitted by: jmb
1997-12-01 00:15:38 +00:00
#
# use the ones that you want comment out the rest
# each group is preceded and followed by a comment
#
# remove all RFC-822 comments--BEGIN
# MUST be first rule in check_mail rulseset.
R$* $: $>3 $1
# remove all RFC-822 comments--END
# mail must come from a DNS resolvable host--BEGIN
R$* < @ $+ . > $: $1 @ $2
use extended error codes as noted in rfc1893. retain additional message in check_relay ruleset, the message is written into the maillog. this is useful to a site's postmaster. Reviewed by: jmb Submitted by: Ruslan Ermilov ru@ucb.crimea.ua
1998-04-14 02:09:23 +00:00
R$* < @ $+ > $#error $@ 4.1.8 $: "451 Domain does not resolve"
improve anti-spam rulesets: check_relay, check_mail, check_rcpt. break each ruleset into identified sections. (called groups). note which groups can be reordered. each group accepts and returns the same strings, as much as possible. reactivate Paul Vixie's RBL (in check_mail) add rules to limit mail relaying to a list of hosts and domains in the R class (check_rcpt, not active on hub.freebsd.org) Submitted by: jmb
1997-12-01 00:15:38 +00:00
# mail must come from a DNS resolvable host--END
# mail must NOT come from a known source of spam--BEGIN
correct an error that i made in check_relay. check_relay cannot return temporary errors. The temporary error is logged in the sendmail log, but on the SMTP protocol level, sendmail returns '550 Access Denied'. Reviewed by: jmb Submitted by: Tor Egge <Tor.Egge@idi.ntnu.no>
1997-12-07 16:50:11 +00:00
R$+ @$+ $: <$1@$2> $2
R<$*> $+.$+.$+ <$1> $3.$4
improve anti-spam rulesets: check_relay, check_mail, check_rcpt. break each ruleset into identified sections. (called groups). note which groups can be reordered. each group accepts and returns the same strings, as much as possible. reactivate Paul Vixie's RBL (in check_mail) add rules to limit mail relaying to a list of hosts and domains in the R class (check_rcpt, not active on hub.freebsd.org) Submitted by: jmb
1997-12-01 00:15:38 +00:00
R<$*> $* $: $(spamsites $2 $: OK $)
use extended error codes as noted in rfc1893. retain additional message in check_relay ruleset, the message is written into the maillog. this is useful to a site's postmaster. Reviewed by: jmb Submitted by: Ruslan Ermilov ru@ucb.crimea.ua
1998-04-14 02:09:23 +00:00
R$+.REJECT $#error $@ 5.7.1 $: 550 $1
improve anti-spam rulesets: check_relay, check_mail, check_rcpt. break each ruleset into identified sections. (called groups). note which groups can be reordered. each group accepts and returns the same strings, as much as possible. reactivate Paul Vixie's RBL (in check_mail) add rules to limit mail relaying to a list of hosts and domains in the R class (check_rcpt, not active on hub.freebsd.org) Submitted by: jmb
1997-12-01 00:15:38 +00:00
R<$*> $* $: $1
# mail must NOT come from a known source of spam--END
correct an error that i made in check_relay. check_relay cannot return temporary errors. The temporary error is logged in the sendmail log, but on the SMTP protocol level, sendmail returns '550 Access Denied'. Reviewed by: jmb Submitted by: Tor Egge <Tor.Egge@idi.ntnu.no>
1997-12-07 16:50:11 +00:00
# Connecting Host must resolve--BEGIN
R$* $: $1 $: $(dequote "" $&{client_name} $)
R$* $: $>3 foo@$1
use extended error codes as noted in rfc1893. retain additional message in check_relay ruleset, the message is written into the maillog. this is useful to a site's postmaster. Reviewed by: jmb Submitted by: Ruslan Ermilov ru@ucb.crimea.ua
1998-04-14 02:09:23 +00:00
R<$*> $*<@$*> $#error $@ 4.1.8 $: "451 Domain does not resolve"
correct an error that i made in check_relay. check_relay cannot return temporary errors. The temporary error is logged in the sendmail log, but on the SMTP protocol level, sendmail returns '550 Access Denied'. Reviewed by: jmb Submitted by: Tor Egge <Tor.Egge@idi.ntnu.no>
1997-12-07 16:50:11 +00:00
# Connecting Host must resolve--END
improve anti-spam rulesets: check_relay, check_mail, check_rcpt. break each ruleset into identified sections. (called groups). note which groups can be reordered. each group accepts and returns the same strings, as much as possible. reactivate Paul Vixie's RBL (in check_mail) add rules to limit mail relaying to a list of hosts and domains in the R class (check_rcpt, not active on hub.freebsd.org) Submitted by: jmb
1997-12-01 00:15:38 +00:00
# ip address must NOT be in Paul Vixie's RBL--BEGIN
R$* $: $1 $: $(dequote "" $&{client_addr} $)
R$* $: $>check_rbl $1
use extended error codes as noted in rfc1893. retain additional message in check_relay ruleset, the message is written into the maillog. this is useful to a site's postmaster. Reviewed by: jmb Submitted by: Ruslan Ermilov ru@ucb.crimea.ua
1998-04-14 02:09:23 +00:00
R$*.com. $#error $@ 5.7.1 $: "550 Mail refused, see http://maps.vix.com/rbl"
improve anti-spam rulesets: check_relay, check_mail, check_rcpt. break each ruleset into identified sections. (called groups). note which groups can be reordered. each group accepts and returns the same strings, as much as possible. reactivate Paul Vixie's RBL (in check_mail) add rules to limit mail relaying to a list of hosts and domains in the R class (check_rcpt, not active on hub.freebsd.org) Submitted by: jmb
1997-12-01 00:15:38 +00:00
# ip address must NOT be in Paul Vixie's RBL--END
R$* $@ OK
Scheck_rcpt
# called with envelope recipient (everything after ":") in
# "Rcpt To: xxx", of SMTP conversation
# may or may not have "<" ">" and or RFC-822 comments.
# let ruleset 3 clean this up for us.
#
# do NOT reorder these two groups of rules.
# restrict mail relaying to host and domains listed in /etc/sendmail.cR
#
# mail must NOT be addressed "fakenames"--BEGIN
R$* $: <$1> $>3 $1
R<$*> $+ < @ $+ > $: <$1> $(fakenames $2 $: OK $)
use extended error codes as noted in rfc1893. retain additional message in check_relay ruleset, the message is written into the maillog. this is useful to a site's postmaster. Reviewed by: jmb Submitted by: Ruslan Ermilov ru@ucb.crimea.ua
1998-04-14 02:09:23 +00:00
R$+.REJECT $#error $@ 5.2.1 $: 550 $1
improve anti-spam rulesets: check_relay, check_mail, check_rcpt. break each ruleset into identified sections. (called groups). note which groups can be reordered. each group accepts and returns the same strings, as much as possible. reactivate Paul Vixie's RBL (in check_mail) add rules to limit mail relaying to a list of hosts and domains in the R class (check_rcpt, not active on hub.freebsd.org) Submitted by: jmb
1997-12-01 00:15:38 +00:00
R<$*> $* $: $1
# mail must NOT be addressed "fakenames"--END
# mail must come from or go to this machine or machines we allow to relay--BEGIN
# R$* $: $>Parse0 $>3 $1
# R$+ < @ $* . > $* $: $1 < @ $2 >
fix a type in the rulesets same fix as recorded in misc/5924 that problem report was filed against the stable branch but that's not a reason not to fix it here as well ;) Reviewed by: jmb Submitted by: Ruslan Ermilov <ru@ucb.crimea.ua>
1998-03-05 18:38:57 +00:00
# R$+ < @ $=w> $@ OK
# R$+ < @ $* $=R> $@ OK
improve anti-spam rulesets: check_relay, check_mail, check_rcpt. break each ruleset into identified sections. (called groups). note which groups can be reordered. each group accepts and returns the same strings, as much as possible. reactivate Paul Vixie's RBL (in check_mail) add rules to limit mail relaying to a list of hosts and domains in the R class (check_rcpt, not active on hub.freebsd.org) Submitted by: jmb
1997-12-01 00:15:38 +00:00
# R$* $: $(dequote "" $&{client_name} $)
# R$=w $@ OK
# R$* $=R $@ OK
# R$@ $@ OK
use extended error codes as noted in rfc1893. retain additional message in check_relay ruleset, the message is written into the maillog. this is useful to a site's postmaster. Reviewed by: jmb Submitted by: Ruslan Ermilov ru@ucb.crimea.ua
1998-04-14 02:09:23 +00:00
# R$* $#error $@ 5.7.1 $: "550 Relaying Denied"
- Fix some very minor typos.
1997-12-15 04:38:15 +00:00
# mail must come from or go to this machine or machines we allow to relay--END
improve anti-spam rulesets: check_relay, check_mail, check_rcpt. break each ruleset into identified sections. (called groups). note which groups can be reordered. each group accepts and returns the same strings, as much as possible. reactivate Paul Vixie's RBL (in check_mail) add rules to limit mail relaying to a list of hosts and domains in the R class (check_rcpt, not active on hub.freebsd.org) Submitted by: jmb
1997-12-01 00:15:38 +00:00
R$* $@ OK
anti-spam filter used by the FreeBSD mailing lists.
1997-10-19 16:40:10 +00:00
Reference in New Issue Copy Permalink