postfix-policyd-spf-perl/trunk/postfix-policyd-spf -> postfix-policyd-spf-perl
* Renamed file. * Moved documentation from executable into separate README and INSTALL files. * Minor and purely cosmetic code clean-up. postfix-policyd-spf-perl/trunk/README * Added, adopting non-installation documentation from postfix-policyd-spf and improving it. postfix-policyd-spf-perl/trunk/INSTALL * Added, adopting installation documentation from postfix-policyd-spf and improving it. postfix-policyd-spf-perl/trunk/CHANGES * Added, describing changes for 1.08 release. postfix-policyd-spf-perl/trunk/debian postfix-policyd-spf-perl/trunk/debian/* * Added.
This commit is contained in:
Julian Mehnle
parent
57be2e1c11
commit
711623e5c9
9 changed files with 211 additions and 88 deletions
15
CHANGES
Normal file
15
CHANGES
Normal file
|
|
@ -0,0 +1,15 @@
|
|||
# Legend:
|
||||
# --- = A new release
|
||||
# + = Added a feature (in a backwards compatible way)
|
||||
# ! = Changed something significant, or removed a feature
|
||||
# * = Fixed a bug, or made a minor improvement
|
||||
|
||||
--- 1.08 (2006-06-17 20:00)
|
||||
|
||||
* Added Debian package control files.
|
||||
* Moved documentation from executable into separate README and INSTALL
|
||||
files. Improved documentation.
|
||||
* Minor and purely cosmetic code clean-up.
|
||||
|
||||
# $Id$
|
||||
# vim:tw=79 sts=2 sw=2
|
||||
32
INSTALL
Normal file
32
INSTALL
Normal file
|
|
@ -0,0 +1,32 @@
|
|||
System Requirements
|
||||
-------------------
|
||||
|
||||
The following Perl version and packages are required for running
|
||||
postfix-policyd-spf-perl:
|
||||
|
||||
Perl 5.6
|
||||
Mail::SPF::Query
|
||||
|
||||
Installing
|
||||
----------
|
||||
|
||||
1. Copy postfix-policyd-spf-perl to /usr/lib/postfix/policyd-spf-perl
|
||||
|
||||
2. Add the following line to /etc/postfix/master.cf:
|
||||
|
||||
policy unix - n n - - spawn
|
||||
user=nobody argv=/usr/bin/perl /usr/lib/postfix/policyd-spf-perl
|
||||
|
||||
3. Configure the Postfix policy service in /etc/postfix/main.cf:
|
||||
|
||||
smtpd_recipient_restrictions =
|
||||
...
|
||||
reject_unauth_destination
|
||||
check_policy_service unix:private/policy
|
||||
...
|
||||
|
||||
NOTE: Specify check_policy_service AFTER reject_unauth_destination or
|
||||
else your system can become an open relay.
|
||||
|
||||
# $Id: README 167 2005-01-17 18:26:45Z julian $
|
||||
# vim:tw=79
|
||||
66
README
Normal file
66
README
Normal file
|
|
@ -0,0 +1,66 @@
|
|||
postfix-policyd-spf-perl 1.08
|
||||
A Postfix SMTPd policy server for SPF checking
|
||||
(C) 2003-2004 Meng Weng Wong <mengwong@pobox.com>
|
||||
Contributions by various members of the SPF project
|
||||
<http://new.openspf.org/Implementations>
|
||||
==============================================================================
|
||||
|
||||
postfix-policyd-spf-perl is a Postfix SMTPd policy daemon for SPF checking.
|
||||
It is implemented in pure Perl and uses the Mail::SPF::Query CPAN module.
|
||||
|
||||
See INSTALL for installation instructions.
|
||||
|
||||
Usage:
|
||||
policyd-spf-perl [-v]
|
||||
|
||||
This documentation assumes you have read Postfix's README_FILES/
|
||||
SMTPD_POLICY_README.
|
||||
|
||||
Logging is sent to syslogd.
|
||||
|
||||
Each time a Postfix SMTP server process is started it connects to the policy
|
||||
service socket, and Postfix runs one instance of this Perl script. By
|
||||
default, a Postfix SMTP server process terminates after 100 seconds of idle
|
||||
time, or after serving 100 clients. Thus, the cost of starting this Perl
|
||||
script is smoothed out over time.
|
||||
|
||||
The default policy_time_limit is 1000 seconds. This may be to short for some
|
||||
SMTP transactions to complete. As recommended in SMTPD_POLICY_README, this
|
||||
should be extended to 3600 seconds. To do so, set "policy_time_limit = 3600"
|
||||
in /etc/postfix/main.cf.
|
||||
|
||||
Testing the policy daemon
|
||||
-------------------------
|
||||
|
||||
To test the policy daemon by hand, execute:
|
||||
|
||||
% perl /usr/lib/postfix/policyd-spf-perl
|
||||
|
||||
Each query is a bunch of attributes. Order does not matter, and the daemon
|
||||
uses only a few of all the attributes shown below:
|
||||
|
||||
request=smtpd_access_policy
|
||||
protocol_state=RCPT
|
||||
protocol_name=SMTP
|
||||
helo_name=some.domain.tld
|
||||
queue_id=8045F2AB23
|
||||
sender=foo@bar.tld
|
||||
recipient=bar@foo.tld
|
||||
client_address=1.2.3.4
|
||||
client_name=another.domain.tld
|
||||
[empty line]
|
||||
|
||||
The policy daemon will answer in the same style, with an attribute list
|
||||
followed by a empty line:
|
||||
|
||||
action=dunno
|
||||
[empty line]
|
||||
|
||||
License
|
||||
-------
|
||||
|
||||
Thingy is free software. You may use, modify, and distribute it under the
|
||||
GNU GPL (version 2 or later).
|
||||
|
||||
# $Id$
|
||||
# vim:tw=79
|
||||
5
debian/changelog
vendored
Normal file
5
debian/changelog
vendored
Normal file
|
|
@ -0,0 +1,5 @@
|
|||
postfix-policyd-spf-perl (1.08) unstable; urgency=low
|
||||
|
||||
* Initial release as a Debian package.
|
||||
|
||||
-- Julian Mehnle <julian@mehnle.net> Sat, 17 Jun 2006 19:32:31 +0000
|
||||
1
debian/compat
vendored
Normal file
1
debian/compat
vendored
Normal file
|
|
@ -0,0 +1 @@
|
|||
5
|
||||
14
debian/control
vendored
Normal file
14
debian/control
vendored
Normal file
|
|
@ -0,0 +1,14 @@
|
|||
Source: postfix-policyd-spf-perl
|
||||
Section: mail
|
||||
Priority: optional
|
||||
Maintainer: Julian Mehnle <julian@mehnle.net>
|
||||
Build-Depends-Indep: debhelper (>= 5), perl (>= 5.6)
|
||||
Standards-Version: 3.7.2
|
||||
|
||||
Package: postfix-policyd-spf-perl
|
||||
Architecture: all
|
||||
Depends: libmail-spf-query-perl
|
||||
Recommends: postfix
|
||||
Description: pure-Perl Postfix policy daemon for SPF checking
|
||||
postfix-policyd-spf-perl is a Postfix SMTPd policy daemon for SPF checking.
|
||||
It is implemented in pure Perl and uses the Mail::SPF::Query module.
|
||||
13
debian/copyright
vendored
Normal file
13
debian/copyright
vendored
Normal file
|
|
@ -0,0 +1,13 @@
|
|||
This is the Debian package for postfix-policyd-spf-perl, which is available
|
||||
from <http://new.openspf.org/Implementations>.
|
||||
|
||||
(C) 2003-2004 Meng Weng Wong <mengwong@pobox.com>
|
||||
Contributions by various members of the SPF project
|
||||
|
||||
Julian Mehnle is the maintainer of the Debian package.
|
||||
|
||||
This is free software; you can redistribute it and/or modify it under the terms
|
||||
of the GNU General Public License (version 2 or later).
|
||||
|
||||
On Debian systems, the complete text of the GPL v2 can be found here:
|
||||
/usr/share/common-licenses/GPL-2
|
||||
56
debian/rules
vendored
Executable file
56
debian/rules
vendored
Executable file
|
|
@ -0,0 +1,56 @@
|
|||
#!/usr/bin/make -f
|
||||
|
||||
PACKAGE = $(shell dh_listpackages)
|
||||
|
||||
ifndef PERL
|
||||
PERL = /usr/bin/perl
|
||||
endif
|
||||
|
||||
TMP = $(CURDIR)/debian/$(PACKAGE)
|
||||
|
||||
build: build-stamp
|
||||
# Nothing to do.
|
||||
|
||||
clean:
|
||||
dh_testdir
|
||||
dh_testroot
|
||||
dh_clean build-stamp install-stamp
|
||||
|
||||
install: install-stamp
|
||||
install-stamp:
|
||||
dh_testdir
|
||||
dh_testroot
|
||||
dh_clean -k
|
||||
|
||||
install -D postfix-policyd-spf-perl $(TMP)/usr/lib/postfix/policyd-spf-perl
|
||||
|
||||
touch install-stamp
|
||||
|
||||
# Build architecture-independent files here:
|
||||
binary-indep: build install
|
||||
dh_testdir
|
||||
dh_testroot
|
||||
|
||||
dh_install
|
||||
dh_installdirs
|
||||
dh_installdocs README
|
||||
dh_installchangelogs CHANGES
|
||||
#dh_installexamples examples/*
|
||||
#dh_installman
|
||||
#dh_link
|
||||
|
||||
dh_compress
|
||||
dh_fixperms
|
||||
dh_installdeb
|
||||
dh_perl
|
||||
dh_gencontrol
|
||||
dh_md5sums
|
||||
dh_builddeb
|
||||
|
||||
# Build architecture-dependent files here:
|
||||
binary-arch:
|
||||
# Nothing to do.
|
||||
|
||||
binary: binary-indep binary-arch
|
||||
|
||||
.PHONY: build clean binary-indep binary-arch binary install
|
||||
|
|
@ -1,23 +1,25 @@
|
|||
#!/usr/bin/perl
|
||||
|
||||
# postfix-policyd-spf-perl
|
||||
# http://www.openspf.org/source/software/postfix-policyd-spf/
|
||||
# http://www.openspf.org/source/software/postfix-policyd-spf-perl/
|
||||
# version 1.08
|
||||
# $Id: postfix-policyd-spf 147 2006-03-14 21:51:58Z julian $
|
||||
|
||||
our $VERSION = '1.08';
|
||||
|
||||
use strict;
|
||||
|
||||
use Fcntl;
|
||||
use Sys::Syslog qw(:DEFAULT setlogsock);
|
||||
use strict;
|
||||
use Mail::SPF::Query;
|
||||
|
||||
# ----------------------------------------------------------
|
||||
# configuration
|
||||
# ----------------------------------------------------------
|
||||
|
||||
# to use SPF, install Mail::SPF::Query from CPAN or from the SPF website at http://www.openspf.org/downloads.html
|
||||
|
||||
my @HANDLERS;
|
||||
push @HANDLERS, "testing";
|
||||
push @HANDLERS, "sender_permitted_from"; use Mail::SPF::Query;
|
||||
my @HANDLERS;
|
||||
push @HANDLERS, "testing";
|
||||
push @HANDLERS, "sender_permitted_from";
|
||||
|
||||
my $VERBOSE = 0;
|
||||
|
||||
|
|
@ -35,87 +37,6 @@ my $syslog_options = "pid";
|
|||
my $syslog_priority = "info";
|
||||
my $syslog_ident = "postfix/policy-spf";
|
||||
|
||||
# ----------------------------------------------------------
|
||||
# minimal documentation
|
||||
# ----------------------------------------------------------
|
||||
|
||||
#
|
||||
# Usage: smtpd-policy.pl [-v]
|
||||
#
|
||||
# Demo delegated Postfix SMTPD policy server.
|
||||
# This server implements SPF.
|
||||
# Another server implements greylisting.
|
||||
# Postfix has a pluggable policy server architecture.
|
||||
# You can call one or both from Postfix.
|
||||
#
|
||||
# The SPF handler uses Mail::SPF::Query to do the heavy lifting.
|
||||
#
|
||||
# This documentation assumes you have read Postfix's README_FILES/SMTPD_POLICY_README
|
||||
#
|
||||
# Logging is sent to syslogd.
|
||||
#
|
||||
# How it works: each time a Postfix SMTP server process is started
|
||||
# it connects to the policy service socket, and Postfix runs one
|
||||
# instance of this PERL script. By default, a Postfix SMTP server
|
||||
# process terminates after 100 seconds of idle time, or after serving
|
||||
# 100 clients. Thus, the cost of starting this PERL script is smoothed
|
||||
# out over time.
|
||||
# The default policy_time_limit is 1000 seconds. This may be to short
|
||||
# for some SMTP transactions to complete. As recommended in
|
||||
# SMTPD_POLICY_README, this should be extended to 3600 seconds. To do
|
||||
# so, set "policy_time_limit = 3600" in /etc/postfix/main.cf.
|
||||
#
|
||||
# To run this from /etc/postfix/master.cf:
|
||||
#
|
||||
# policy unix - n n - - spawn
|
||||
# user=nobody argv=/usr/bin/perl /usr/libexec/postfix/smtpd-policy.pl
|
||||
#
|
||||
# To use this from Postfix SMTPD, use in /etc/postfix/main.cf:
|
||||
#
|
||||
# smtpd_recipient_restrictions =
|
||||
# ...
|
||||
# reject_unauth_destination
|
||||
# check_policy_service unix:private/policy
|
||||
# ...
|
||||
#
|
||||
# NOTE: specify check_policy_service AFTER reject_unauth_destination
|
||||
# or else your system can become an open relay.
|
||||
#
|
||||
# To test this script by hand, execute:
|
||||
#
|
||||
# % perl smtpd-policy.pl
|
||||
#
|
||||
# Each query is a bunch of attributes. Order does not matter, and
|
||||
# the demo script uses only a few of all the attributes shown below:
|
||||
#
|
||||
# request=smtpd_access_policy
|
||||
# protocol_state=RCPT
|
||||
# protocol_name=SMTP
|
||||
# helo_name=some.domain.tld
|
||||
# queue_id=8045F2AB23
|
||||
# sender=foo@bar.tld
|
||||
# recipient=bar@foo.tld
|
||||
# client_address=1.2.3.4
|
||||
# client_name=another.domain.tld
|
||||
# [empty line]
|
||||
#
|
||||
# The policy server script will answer in the same style, with an
|
||||
# attribute list followed by a empty line:
|
||||
#
|
||||
# action=dunno
|
||||
# [empty line]
|
||||
#
|
||||
|
||||
# Jul 23 18:43:29 dumbo/dumbo policyd[21171]: Attribute: client_address=208.210.125.227
|
||||
# Jul 23 18:43:29 dumbo/dumbo policyd[21171]: Attribute: client_name=newbabe.mengwong.com
|
||||
# Jul 23 18:43:29 dumbo/dumbo policyd[21171]: Attribute: helo_name=newbabe.mengwong.com
|
||||
# Jul 23 18:43:29 dumbo/dumbo policyd[21171]: Attribute: protocol_name=ESMTP
|
||||
# Jul 23 18:43:29 dumbo/dumbo policyd[21171]: Attribute: protocol_state=RCPT
|
||||
# Jul 23 18:43:29 dumbo/dumbo policyd[21171]: Attribute: queue_id=
|
||||
# Jul 23 18:43:29 dumbo/dumbo policyd[21171]: Attribute: recipient=mengwong@dumbo.pobox.com
|
||||
# Jul 23 18:43:29 dumbo/dumbo policyd[21171]: Attribute: request=smtpd_access_policy
|
||||
# Jul 23 18:43:29 dumbo/dumbo policyd[21171]: Attribute: sender=mengwong@newbabe.mengwong.com
|
||||
|
||||
# ----------------------------------------------------------
|
||||
# initialization
|
||||
# ----------------------------------------------------------
|
||||
Loading…
Add table
Add a link
Reference in a new issue