Remove debian dir from svn - more trouble than it's worth.
This commit is contained in:
Scott Kitterman
parent
2fddc34a57
commit
2357259089
8 changed files with 6 additions and 406 deletions
12
README
12
README
|
|
@ -1,18 +1,18 @@
|
|||
postfix-policyd-spf-perl 2.005
|
||||
postfix-policyd-spf-perl 2.006
|
||||
A Postfix SMTPd policy server for SPF checking
|
||||
(C) 2007 Scott Kitterman <scott@kitterman.com> and Julian Mehnle
|
||||
<julian@mehnle.net>
|
||||
(C) 2007-2008 Scott Kitterman <scott@kitterman.com>
|
||||
(C) 2007 Julian Mehnle <julian@mehnle.net>
|
||||
(C) 2003-2004 Meng Weng Wong <mengwong@pobox.com>
|
||||
Thanks for contributions by various members of the SPF project
|
||||
<http://www.openspf.org/Software#postfix-policyd-spf-perl>
|
||||
==============================================================================
|
||||
|
||||
postfix-policyd-spf-perl is a Postfix SMTPd policy daemon for SPF checking.
|
||||
postfix-policyd-spf-perl is a Postfix SMTPd policy server for SPF checking.
|
||||
It is implemented in pure Perl and uses the Mail::SPF CPAN module. Note that
|
||||
Mail::SPF is a complete re-implementation of SPF based on the final SPF RFC,
|
||||
RFC 4408. It shares no code with the older Mail::SPF::Query that was the
|
||||
original SPF development implementation. If you are upgrading from on older
|
||||
version of this policy server you will need to install Mail::SPF.
|
||||
(<< 2.000) version of this policy server you will need to install Mail::SPF.
|
||||
|
||||
This version of the policy server always checks HELO before Mail From (older
|
||||
versions just checked HELO if Mail From was null). It will reject mail that
|
||||
|
|
@ -31,7 +31,7 @@ instead prepends and logs 'SPF skipped - localhost is always allowed.' If you
|
|||
have relays that you want to skip SPF checks for, you can add them to
|
||||
relay_addresses on line 78 using standard CIDR notation in a space separated
|
||||
list. For these addresses, 'X-Comment: SPF skipped for whitelisted relay' is
|
||||
prepended and logged.
|
||||
prepended and logged. IPv6 localhost is also skipped.
|
||||
|
||||
Error conditions within the policy server (that don't result in a crash) or from
|
||||
Mail::SPF will return DUNNO.
|
||||
|
|
|
|||
34
debian/changelog
vendored
34
debian/changelog
vendored
|
|
@ -1,34 +0,0 @@
|
|||
postfix-policyd-spf-perl (2.005-2) UNRELEASED; urgency=low
|
||||
|
||||
* Correct priority (change back to optional)
|
||||
|
||||
-- Scott Kitterman <scott@kitterman.com> Sat, 15 Dec 2007 22:30:55 -0500
|
||||
|
||||
postfix-policyd-spf-perl (2.005-1) unstable; urgency=low
|
||||
|
||||
[ Scott Kitterman ]
|
||||
* New upstream release
|
||||
- Reduce DNS timeout period from 20 seconds to 10 seconds for faster
|
||||
performance with broken DNS servers
|
||||
* Move postfix from recommends to depends
|
||||
* Add watch file
|
||||
* Correct debian/copyright to only refer to GPL V2 and trim excess license
|
||||
quoting
|
||||
* Added Homepage field
|
||||
* Update standards version to 3.7.3 without further change
|
||||
* Clarify package description
|
||||
* Minor updates to postfix-policyd-spf-perl and move from section 8 to
|
||||
section 1
|
||||
* Minor white space cleanup in debian/control
|
||||
|
||||
[ Philipp Kern ]
|
||||
* Added `XS-DM-Upload-Allowed: yes' to `debian/control' to allow uploads
|
||||
from Debian Maintainers.
|
||||
|
||||
-- Scott Kitterman <scott@kitterman.com> Sat, 15 Dec 2007 20:32:55 +0100
|
||||
|
||||
postfix-policyd-spf-perl (2.004-1) unstable; urgency=low
|
||||
|
||||
* Initial Debian package (Closes: #236701)
|
||||
|
||||
-- Scott Kitterman <scott@kitterman.com> Tue, 18 April 2007 15:45:00 -0400
|
||||
1
debian/compat
vendored
1
debian/compat
vendored
|
|
@ -1 +0,0 @@
|
|||
5
|
||||
16
debian/control
vendored
16
debian/control
vendored
|
|
@ -1,16 +0,0 @@
|
|||
Source: postfix-policyd-spf-perl
|
||||
Section: mail
|
||||
Priority: optional
|
||||
Maintainer: Scott Kitterman <scott@kitterman.com>
|
||||
Build-Depends: debhelper (>= 5)
|
||||
Standards-Version: 3.7.3
|
||||
Homepage: http://www.openspf.org/Software
|
||||
XS-DM-Upload-Allowed: yes
|
||||
|
||||
Package: postfix-policyd-spf-perl
|
||||
Architecture: all
|
||||
Depends: postfix, libversion-perl, libnetaddr-ip-perl (>= 4), libmail-spf-perl, ${perl:Depends}
|
||||
Description: pure-Perl Postfix policy daemon for RFC 4408 compliant SPF checking
|
||||
postfix-policyd-spf-perl is a Postfix SMTP policy server for SPF checking.
|
||||
It is implemented in pure Perl and uses the Mail::SPF module. The SPF
|
||||
project web site is http://www.openspf.org/.
|
||||
28
debian/copyright
vendored
28
debian/copyright
vendored
|
|
@ -1,28 +0,0 @@
|
|||
This package was debianized by Scott Kitterman <scott@kitterman.com> on
|
||||
Thu, 11 Jan 2007 04:29:13 -0500.
|
||||
|
||||
It was downloaded from <http://www.openspf.org/Software>.
|
||||
|
||||
Upstream authors Meng Weng Wong <mengwong@pobox.com>, Scott Kitterman
|
||||
<scott@kitterman.com>, and Julian Mehnle <julian@mehnle.net>
|
||||
|
||||
Copyright:
|
||||
|
||||
(C) 2007 Scott Kitterman <scott@kitterman.com> and Julian Mehnle
|
||||
<julian@mehnle.net>
|
||||
(C) 2003-2004 Meng Weng Wong <mengwong@pobox.com>
|
||||
|
||||
This is free software; you can redistribute it and/or modify it under the terms
|
||||
of the GNU General Public License (version 2).
|
||||
|
||||
GNU GENERAL PUBLIC LICENSE
|
||||
Version 2, June 1991
|
||||
|
||||
Copyright (C) 1989, 1991 Free Software Foundation, Inc.,
|
||||
51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
|
||||
Everyone is permitted to copy and distribute verbatim copies
|
||||
of this license document, but changing it is not allowed.
|
||||
|
||||
On Debian systems, the complete text of the GPL v2 can be found here:
|
||||
/usr/share/common-licenses/GPL-2
|
||||
|
||||
267
debian/postfix-policyd-spf-perl.1
vendored
267
debian/postfix-policyd-spf-perl.1
vendored
|
|
@ -1,267 +0,0 @@
|
|||
\"
|
||||
.\" Standard preamble:
|
||||
.\" ========================================================================
|
||||
.de Sh \" Subsection heading
|
||||
.br
|
||||
.if t .Sp
|
||||
.ne 5
|
||||
.PP
|
||||
\fB\\$1\fR
|
||||
.PP
|
||||
..
|
||||
.de Sp \" Vertical space (when we can't use .PP)
|
||||
.if t .sp .5v
|
||||
.if n .sp
|
||||
..
|
||||
.de Vb \" Begin verbatim text
|
||||
.ft CW
|
||||
.nf
|
||||
.ne \\$1
|
||||
..
|
||||
.de Ve \" End verbatim text
|
||||
.ft R
|
||||
.fi
|
||||
..
|
||||
.\" Set up some character translations and predefined strings. \*(-- will
|
||||
.\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left
|
||||
.\" double quote, and \*(R" will give a right double quote. \*(C+ will
|
||||
.\" give a nicer C++. Capital omega is used to do unbreakable dashes and
|
||||
.\" therefore won't be available. \*(C` and \*(C' expand to `' in nroff,
|
||||
.\" nothing in troff, for use with C<>.
|
||||
.tr \(*W-
|
||||
.ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p'
|
||||
.ie n \{\
|
||||
. ds -- \(*W-
|
||||
. ds PI pi
|
||||
. if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch
|
||||
. if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch
|
||||
. ds L" ""
|
||||
. ds R" ""
|
||||
. ds C` ""
|
||||
. ds C' ""
|
||||
'br\}
|
||||
.el\{\
|
||||
. ds -- \|\(em\|
|
||||
. ds PI \(*p
|
||||
. ds L" ``
|
||||
. ds R" ''
|
||||
'br\}
|
||||
.\"
|
||||
.\" If the F register is turned on, we'll generate index entries on stderr for
|
||||
.\" titles (.TH), headers (.SH), subsections (.Sh), items (.Ip), and index
|
||||
.\" entries marked with X<> in POD. Of course, you'll have to process the
|
||||
.\" output yourself in some meaningful fashion.
|
||||
.if \nF \{\
|
||||
. de IX
|
||||
. tm Index:\\$1\t\\n%\t"\\$2"
|
||||
..
|
||||
. nr % 0
|
||||
. rr F
|
||||
.\}
|
||||
.\"
|
||||
.\" For nroff, turn off justification. Always turn off hyphenation; it makes
|
||||
.\" way too many mistakes in technical documents.
|
||||
.hy 0
|
||||
.if n .na
|
||||
.\"
|
||||
.\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2).
|
||||
.\" Fear. Run. Save yourself. No user-serviceable parts.
|
||||
. \" fudge factors for nroff and troff
|
||||
.if n \{\
|
||||
. ds #H 0
|
||||
. ds #V .8m
|
||||
. ds #F .3m
|
||||
. ds #[ \f1
|
||||
. ds #] \fP
|
||||
.\}
|
||||
.if t \{\
|
||||
. ds #H ((1u-(\\\\n(.fu%2u))*.13m)
|
||||
. ds #V .6m
|
||||
. ds #F 0
|
||||
. ds #[ \&
|
||||
. ds #] \&
|
||||
.\}
|
||||
. \" simple accents for nroff and troff
|
||||
.if n \{\
|
||||
. ds ' \&
|
||||
. ds ` \&
|
||||
. ds ^ \&
|
||||
. ds , \&
|
||||
. ds ~ ~
|
||||
. ds /
|
||||
.\}
|
||||
.if t \{\
|
||||
. ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u"
|
||||
. ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u'
|
||||
. ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u'
|
||||
. ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u'
|
||||
. ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u'
|
||||
. ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u'
|
||||
.\}
|
||||
. \" troff and (daisy-wheel) nroff accents
|
||||
.ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V'
|
||||
.ds 8 \h'\*(#H'\(*b\h'-\*(#H'
|
||||
.ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#]
|
||||
.ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H'
|
||||
.ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u'
|
||||
.ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#]
|
||||
.ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#]
|
||||
.ds ae a\h'-(\w'a'u*4/10)'e
|
||||
.ds Ae A\h'-(\w'A'u*4/10)'E
|
||||
. \" corrections for vroff
|
||||
.if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u'
|
||||
.if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u'
|
||||
. \" for low resolution devices (crt and lpr)
|
||||
.if \n(.H>23 .if \n(.V>19 \
|
||||
\{\
|
||||
. ds : e
|
||||
. ds 8 ss
|
||||
. ds o a
|
||||
. ds d- d\h'-1'\(ga
|
||||
. ds D- D\h'-1'\(hy
|
||||
. ds th \o'bp'
|
||||
. ds Th \o'LP'
|
||||
. ds ae ae
|
||||
. ds Ae AE
|
||||
.\}
|
||||
.rm #[ #] #H #V #F C
|
||||
.\" ========================================================================
|
||||
.\"
|
||||
.IX Title "postfix-policyd-spf-perl 1p"
|
||||
.TH postfix-policyd-spf-perl 1 "2007-12-14"
|
||||
.SH "NAME"
|
||||
postfix-policyd-spf-perl \- pure-Perl Postfix policy server for SPF checking
|
||||
.SH "VERSION"
|
||||
.IX Header "VERSION"
|
||||
2\.005
|
||||
|
||||
.SH "USAGE"
|
||||
.IX Header "USAGE"
|
||||
Usage:
|
||||
policyd-spf-perl [-v]
|
||||
|
||||
.SH "OTHER DOCUMENTATION"
|
||||
.IX Header "OTHER DOCUMENTATION"
|
||||
This documentation assumes you have read Postfix's README_FILES/
|
||||
SMTPD_POLICY_README.
|
||||
|
||||
.SH "SYNOPSIS"
|
||||
.IX Header "SYNOPSIS"
|
||||
|
||||
postfix-policyd-spf-perl is a Postfix SMTP policy server for SPF checking.
|
||||
It is implemented in pure Perl and uses the Mail::SPF CPAN module. Note that
|
||||
Mail::SPF is a complete re-implementation of SPF based on the final SPF RFC,
|
||||
RFC 4408. It shares no code with the older Mail::SPF::Query that was the
|
||||
original SPF development implementation. If you are upgrading from on older
|
||||
version of this policy server you will need to install Mail::SPF.
|
||||
|
||||
This version of the policy server always checks HELO before Mail From (older
|
||||
versions just checked HELO if Mail From was null). It will reject mail that
|
||||
fails either Mail From or HELO SPF checks. It will defer mail if there is a
|
||||
temporary SPF error and the message would othersise be permitted
|
||||
(DEFER_IF_PERMIT). If the HELO check produces a REJECT/DEFER result, Mail From
|
||||
will not be checked.
|
||||
|
||||
If the message is not rejected or deferred, the policy server will PREPEND the
|
||||
appropriate SPF Received header. If Mail From is anything other than completely
|
||||
empty (i.e. <>) then the Mail From result will be used for SPF Received (e.g.
|
||||
Mail From None even if HELO is Pass).
|
||||
|
||||
The policy server skips SPF checks for connections from the localhost (127.) and
|
||||
instead prepends and logs 'SPF skipped - localhost is always allowed.' If you
|
||||
have relays that you want to skip SPF checks for, you can add them to
|
||||
relay_addresses on line 78 using standard CIDR notation in a space separated
|
||||
list. For these addresses, 'X-Comment: SPF skipped for whitelisted relay' is
|
||||
prepended and logged.
|
||||
|
||||
Error conditions within the policy server (that don't result in a crash) or from
|
||||
Mail::SPF will return DUNNO.
|
||||
|
||||
.SH "DESCRIPTION"
|
||||
.IX Header "DESCRIPTION"
|
||||
|
||||
Logging is sent to syslogd.
|
||||
|
||||
Each time a Postfix SMTP server process is started it connects to the policy
|
||||
service socket and Postfix runs one instance of this Perls script. By
|
||||
default, a Postfix SMTP server process terminates after 100 seconds of idle
|
||||
time, or after serving 100 clients. Thus, the cost of starting this Perl
|
||||
script is smoothed over time.
|
||||
|
||||
The default policy_time_limit is 1000 seconds. This may be too short for some
|
||||
SMTP transactions to complete. As recommended in SMTPD_POLICY_README, this
|
||||
should be extended to 3600 seconds. To do so, set "policy_time_limit = 3600"
|
||||
in /etc/postfix/main.cf.
|
||||
|
||||
.SH "TESTING THE POLICY DAEMON"
|
||||
.IX Header "TESTING THE POLICY DAEMON"
|
||||
Testing the policy daemon
|
||||
|
||||
To test the policy daemon by hand, execute:
|
||||
|
||||
% perl /usr/sbin/postfix-policyd-spf-perl
|
||||
|
||||
Each query is a bunch of attributes. Order does not matter, and the server
|
||||
uses only a few of all the attributes shown below:
|
||||
|
||||
request=smtpd_access_policy
|
||||
protocol_state=RCPT
|
||||
protocol_name=SMTP
|
||||
helo_name=some.domain.tld
|
||||
queue_id=
|
||||
instance=71b0.45e2f5f1.d4da1.0
|
||||
sender=foo@bar.tld
|
||||
recipient=bar@foo.tld
|
||||
client_address=1.2.3.4
|
||||
client_name=another.domain.tld
|
||||
[empty line]
|
||||
|
||||
The policy daemon will answer in the same style, with an attribute list
|
||||
followed by a empty line:
|
||||
|
||||
action=550 Please see http://www.openspf.org/Why?id=foo@bar.tld&ip=1.2.3.4&
|
||||
receiver=bar@foo.tld
|
||||
[empty line]
|
||||
|
||||
To test HELO checking sender should be empty:
|
||||
|
||||
sender=
|
||||
... More attributes...
|
||||
[empty line]
|
||||
|
||||
If you want more detail in the system logs change $VERBOSE to 1.
|
||||
|
||||
.SH "POSTFIX INTEGRATION"
|
||||
.IX Header "POSTFIX INTEGRATION"
|
||||
|
||||
1. Add the following to /etc/postfix/master.cf:
|
||||
|
||||
policy unix - n n - 0 spawn
|
||||
user=nobody argv=/usr/bin/perl /usr/sbin/postfix-policyd-spf-perl
|
||||
|
||||
2. Configure the Postfix policy service in /etc/postfix/main.cf:
|
||||
|
||||
smtpd_recipient_restrictions =
|
||||
...
|
||||
reject_unauth_destination
|
||||
check_policy_service unix:private/policy
|
||||
...
|
||||
policy_time_limit = 3600
|
||||
|
||||
NOTE: Specify check_policy_service AFTER reject_unauth_destination or
|
||||
else your system can become an open relay.
|
||||
|
||||
3. Restart Postfix.
|
||||
|
||||
.SH "SEE ALSO"
|
||||
.IX Header "SEE ALSO"
|
||||
libmail-spf-perl, <http://www.openspf.org>
|
||||
|
||||
.SH "AUTHORS"
|
||||
.IX Header "AUTHORS"
|
||||
This version of \fBpolicyd-spf-perl\fR was written by Meng Weng Wong
|
||||
<mengwong+spf@pobox.com> and updated for libmail-spf-perl by Scott Kitterman
|
||||
<scott@kitterman.com> and Julian Mehnle <julian@mehnle.net>.
|
||||
.PP
|
||||
This man-page was written by Scott Kitterman <scott@kitterman.com>.
|
||||
|
||||
52
debian/rules
vendored
52
debian/rules
vendored
|
|
@ -1,52 +0,0 @@
|
|||
#!/usr/bin/make -f
|
||||
|
||||
PACKAGE = $(shell dh_listpackages)
|
||||
|
||||
ifndef PERL
|
||||
PERL = /usr/bin/perl
|
||||
endif
|
||||
|
||||
TMP = $(CURDIR)/debian/$(PACKAGE)
|
||||
|
||||
build:
|
||||
# Nothing to do.
|
||||
|
||||
clean:
|
||||
dh_testdir
|
||||
dh_testroot
|
||||
dh_clean build-stamp install-stamp
|
||||
|
||||
install: install-stamp
|
||||
install-stamp:
|
||||
dh_testdir
|
||||
dh_testroot
|
||||
dh_clean -k
|
||||
|
||||
install -D postfix-policyd-spf-perl $(TMP)/usr/sbin/postfix-policyd-spf-perl
|
||||
touch install-stamp
|
||||
|
||||
# Build architecture-independent files here:
|
||||
binary-indep: build install
|
||||
dh_testdir
|
||||
dh_testroot
|
||||
|
||||
dh_installdocs
|
||||
dh_installman debian/postfix-policyd-spf-perl.1
|
||||
dh_installchangelogs CHANGES
|
||||
|
||||
dh_compress
|
||||
dh_fixperms
|
||||
dh_installdeb
|
||||
dh_perl
|
||||
dh_gencontrol
|
||||
dh_md5sums
|
||||
dh_builddeb
|
||||
|
||||
# Build architecture-dependent files here:
|
||||
binary-arch:
|
||||
# Nothing to do.
|
||||
|
||||
binary: binary-indep binary-arch
|
||||
|
||||
.PHONY: build clean binary-indep binary-arch binary install
|
||||
|
||||
2
debian/watch
vendored
2
debian/watch
vendored
|
|
@ -1,2 +0,0 @@
|
|||
version=3
|
||||
http://www.openspf.org/blobs/postfix-policyd-spf-perl-(.*)\.tar\.gz debian uupdate
|
||||
Loading…
Add table
Add a link
Reference in a new issue