X-Git-Url: http://git.madism.org/?a=blobdiff_plain;f=example%2Fpostlicyd.conf;h=57c5966e9fad5130691b4fb83b68cc49e9358053;hb=8d29aaadbe12876d2b36ba65217013f60cb1f6cc;hp=123c66aef1d5c89d7412fa32d32913036b54c490;hpb=1b0d47e10359293dafc8937b8036168d7ec61a6a;p=apps%2Fpfixtools.git diff --git a/example/postlicyd.conf b/example/postlicyd.conf index 123c66a..57c5966 100644 --- a/example/postlicyd.conf +++ b/example/postlicyd.conf @@ -70,6 +70,11 @@ # declare a file to load. If lock is given, the klist is locked into the # RAM. The weight is a number giving the weight of this blaclist file in the # score of the IP +# - rbldns: (no)?lock:weight:filename +# this is an alias for file. +# - dns: weight:hostname +# use a rbl via DNS resolution with the given weight. If a DNS lookup error occurs +# the IP is considered as beeing "not found". # - soft_threshold: score (default: 1) # minimum score to match the soft_match return value # - hard_threshold: score (default: 1) @@ -77,6 +82,7 @@ # Return value: # The score of a query is the sum of the weight of the blacklist it matched. # - If the IP can not be parsed, returns error +# - If no rbl was available (no file and all dns down), returns error. # - If the score is strictly greater >= than hard_threshold, returns hard_match # - If the score is strictly greater >= than soft_threshold, returns soft_match # - Else, returns fail @@ -117,6 +123,16 @@ spamhaus_and_abuseat { # * a file that contains "postmaster@" in "partial-prefix" mode will match all # postmaster emails. # * a file open without "partial-" modifier match exact strings. +# - rbldns: (no)?lock:weight:filename +# declare a rbldns zone file to load. This is exactly the same as file excepted that it wraps +# parsing of hostname to split them into 2 categories: +# * names beginning with '*' are sorted as 'domains' and are matched as suffix +# * names starting with an alphanumirical character are sorted as 'hostnames' and are +# process via exact matching. +# - dns: weight:hostname +# use a rhbl via DNS resolution with the given weight. If a DNS lookup error occurs +# the hostname is considered as beeing "not found". This can only be used with "hostnames" +# typed fields. # - soft_threshold: score (default: 1) # minimum score to match the soft_match return value # - hard_threshold: score (default: 1) @@ -132,6 +148,7 @@ spamhaus_and_abuseat { # No space is allowed in this parameter. # Return value: # The score of a query is the sum of the weight of the list it matched. +# - If no rhbl was available (no file and all dns down), returns error. # - If the score is strictly greater >= than hard_threshold, returns hard_match # - If the score is strictly greater >= than soft_threshold, returns soft_match # - Else, returns fail @@ -149,7 +166,8 @@ client_whitelist { # configuration file = lock:1:suffix:/var/spool/postlicyd/client_whitelist; - fields = client_name; + rbldns = lock:1:/va/spool/postlicyd/abuse.rfc-ignorant.org; + fields = client_name,sender_domain,helo_name; # hooks on_hard_match = postfix:OK;