happyDomain/postfix-policyd-spf-perl
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add option to skip SPF checks on exempt domains based on /etc/postfix/exempt_spf_domains

Browse source
This commit is contained in:
Scott Savarese 2018-07-26 00:42:40 -04:00 • committed by Scott Kitterman
commit b916c542c6
2 changed files with 57 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
README
View file

@ -36,6 +36,12 @@ relay_addresses on line 78 using standard CIDR notation in a space separated
list. For these addresses, 'X-Comment: SPF skipped for whitelisted relay' is
prepended and logged. IPv6 localhost is also skipped.
A configuration file, /etc/postfix/exempt_spf_domains, can be used to
ignore domains that have broken SPF configurations that would normally
fail. For those domains, add the domain to the file (one per line), and
restart postfix so that the policy server can reload its configuration.
The policy server will ignore the domain going forward.
Error conditions within the policy server (that don't result in a crash) or from
Mail::SPF will return DUNNO.

51
postfix-policyd-spf-perl
View file

@ -64,6 +64,10 @@ my @HANDLERS = (
code => \&exempt_relay
},
{
name => 'exempt_domains',
code => \&exempt_domains
},
{
name => 'sender_policy_framework',
code => \&sender_policy_framework
}
@ -73,6 +77,9 @@ my $VERBOSE = 0;
my $DEFAULT_RESPONSE = 'DUNNO';
# Read in exempt domains list
my $exempt_domains = get_exempt_domains( "/etc/postfix/exempt_spf_domains" );
#
# Syslogging options for verbose mode and for fatal errors.
# NOTE: comment out the $syslog_socktype line if syslogging does not
@ -184,6 +191,50 @@ while (<STDIN>) {
%attr = ();
}
# ----------------------------------------------------------
# handler: domain exemption
# ----------------------------------------------------------
sub get_exempt_domains {
my ( $file ) = @_;
my $list = {};
# Return nothing if file not found
if ( ! -r $file ) {
return $list;
}
# Read the file into one variable, split on space or comma (or all)
open ( FILE, $file ) or die "Can't open $file: $!\n";
my $text = "";
while ( my $tmp = <FILE> ) {
$text .= $tmp;
}
close( FILE );
foreach my $domain ( split( /[\s,]+/, $text ) ) {
$list->{$domain} = 1;
}
return $list;
}
sub exempt_domains {
my %options = @_;
my $attr = $options{attr};
my $domain = ( split( /\@/, $attr->{sender} ) )[1];
return 'DUNNO' if ( ( ! defined( $domain ) ) or ( $domain eq '' ) );
# Check the domain against our list of ignored domains
if ( defined( $exempt_domains->{$domain} ) ) {
return "PREPEND Authentication-Results: $host; none " .
"(SPF exempted by policy)";
}
return 'DUNNO';
}
# ----------------------------------------------------------
# handler: localhost exemption
# ----------------------------------------------------------