external/ibm-public/postfix/dist/src/smtpd/smtpd_check.in

   1 #
   2 # Initialize.
   3 #
   4 #! ../bin/postmap smtpd_check_access
   5 #msg_verbose 1
   6 smtpd_delay_reject 0
   7 mynetworks 127.0.0.0/8,168.100.189.0/28
   8 relay_domains porcupine.org
   9 maps_rbl_domains dnsbltest.porcupine.org
  10 #
  11 # Test the client restrictions.
  12 #
  13 client_restrictions permit_mynetworks,reject_unknown_client,hash:./smtpd_check_access
  14 client unknown 131.155.210.17
  15 client unknown 168.100.189.13
  16 client random.bad.domain 123.123.123.123
  17 client friend.bad.domain 123.123.123.123
  18 client bad.domain 123.123.123.123
  19 client wzv.win.tue.nl 131.155.210.17
  20 client aa.win.tue.nl 131.155.210.18
  21 client_restrictions permit_mynetworks
  22 #
  23 # Test the helo restrictions
  24 #
  25 helo_restrictions permit_mynetworks,reject_unknown_client,reject_invalid_hostname,reject_unknown_hostname,hash:./smtpd_check_access
  26 client unknown 131.155.210.17
  27 helo foo.
  28 client foo 123.123.123.123
  29 helo foo.
  30 helo foo
  31 helo spike.porcupine.org
  32 helo_restrictions permit_mynetworks,reject_unknown_client,reject_invalid_hostname,hash:./smtpd_check_access
  33 helo random.bad.domain
  34 helo friend.bad.domain
  35 helo_restrictions reject_invalid_hostname,reject_unknown_hostname
  36 helo 123.123.123.123
  37 helo [123.123.123.123]
  38 helo [::]
  39 helo [ipv6:::]
  40 helo [ipv6::::]
  41 helo_restrictions permit_naked_ip_address,reject_invalid_hostname,reject_unknown_hostname
  42 helo 123.123.123.123
  43 #
  44 # Test the sender restrictions
  45 #
  46 sender_restrictions permit_mynetworks,reject_unknown_client
  47 client unknown 131.155.210.17
  48 mail foo@watson.ibm.com
  49 client unknown 168.100.189.13
  50 mail foo@watson.ibm.com
  51 client foo 123.123.123.123
  52 mail foo@watson.ibm.com
  53 sender_restrictions reject_unknown_address
  54 mail foo@watson.ibm.com
  55 mail foo@bad.domain
  56 sender_restrictions hash:./smtpd_check_access
  57 mail bad-sender@any.domain
  58 mail bad-sender@good.domain
  59 mail reject@this.address
  60 mail Reject@this.address
  61 mail foo@bad.domain
  62 mail foo@Bad.domain
  63 mail foo@random.bad.domain
  64 mail foo@friend.bad.domain
  65 #
  66 # Test the recipient restrictions
  67 #
  68 recipient_restrictions permit_mynetworks,reject_unknown_client,check_relay_domains
  69 client unknown 131.155.210.17
  70 rcpt foo@watson.ibm.com
  71 client unknown 168.100.189.13
  72 rcpt foo@watson.ibm.com
  73 client foo 123.123.123.123
  74 rcpt foo@watson.ibm.com
  75 rcpt foo@porcupine.org
  76 recipient_restrictions check_relay_domains
  77 client foo.porcupine.org 168.100.189.13
  78 rcpt foo@watson.ibm.com
  79 rcpt foo@porcupine.org
  80 client foo 123.123.123.123
  81 rcpt foo@watson.ibm.com
  82 rcpt foo@porcupine.org
  83 recipient_restrictions hash:./smtpd_check_access
  84 mail bad-sender@any.domain
  85 mail bad-sender@good.domain
  86 mail reject@this.address
  87 mail foo@bad.domain
  88 mail foo@random.bad.domain
  89 mail foo@friend.bad.domain
  90 #
  91 # RBL
  92 #
  93 client_restrictions reject_maps_rbl
  94 client spike.porcupine.org 168.100.189.2
  95 client foo 127.0.0.2
  96 #
  97 # Hybrids
  98 #
  99 recipient_restrictions check_relay_domains
 100 client foo 131.155.210.17
 101 rcpt foo@watson.ibm.com
 102 recipient_restrictions check_client_access,hash:./smtpd_check_access,check_relay_domains
 103 client foo 131.155.210.17
 104 rcpt foo@porcupine.org
 105 helo_restrictions permit_mynetworks,reject_unknown_client,reject_invalid_hostname,hash:./smtpd_check_access
 106 recipient_restrictions check_helo_access,hash:./smtpd_check_access,check_relay_domains
 107 helo bad.domain
 108 rcpt foo@porcupine.org
 109 helo 131.155.210.17
 110 rcpt foo@porcupine.org
 111 recipient_restrictions check_sender_access,hash:./smtpd_check_access,check_relay_domains
 112 mail foo@bad.domain
 113 rcpt foo@porcupine.org
 114 mail foo@friend.bad.domain
 115 rcpt foo@porcupine.org
 116 #
 117 # MX backup
 118 #
 119 #mydestination spike.porcupine.org,localhost.porcupine.org
 120 #inet_interfaces 168.100.189.2,127.0.0.1
 121 #recipient_restrictions permit_mx_backup,reject
 122 #rcpt wietse@wzv.win.tue.nl
 123 #rcpt wietse@trouble.org
 124 #rcpt wietse@porcupine.org
 125 #
 126 # Deferred restrictions
 127 #
 128 client_restrictions permit
 129 helo_restrictions permit
 130 sender_restrictions permit
 131 recipient_restrictions check_helo_access,hash:./smtpd_check_access,check_sender_access,hash:./smtpd_check_access
 132 helo bad.domain
 133 mail foo@good.domain
 134 rcpt foo@porcupine.org
 135 helo good.domain
 136 mail foo@bad.domain
 137 rcpt foo@porcupine.org
 138 #
 139 # FQDN restrictions
 140 #
 141 helo_restrictions reject_non_fqdn_hostname
 142 sender_restrictions reject_non_fqdn_sender
 143 recipient_restrictions reject_non_fqdn_recipient
 144 helo foo.bar.
 145 helo foo.bar
 146 helo foo
 147 mail foo@foo.bar.
 148 mail foo@foo.bar
 149 mail foo@foo
 150 mail foo
 151 rcpt foo@foo.bar.
 152 rcpt foo@foo.bar
 153 rcpt foo@foo
 154 rcpt foo
 155 #
 156 # Numerical HELO checks
 157 #
 158 helo_restrictions permit_naked_ip_address,reject_non_fqdn_hostname
 159 helo [1.2.3.4]
 160 helo [321.255.255.255]
 161 helo [0.255.255.255]
 162 helo [1.2.3.321]
 163 helo [1.2.3]
 164 helo [1.2.3.4.5]
 165 helo [1..2.3.4]
 166 helo [.1.2.3.4]
 167 helo [1.2.3.4.5.]
 168 helo 1.2.3.4
 169 helo 321.255.255.255
 170 helo 0.255.255.255
 171 helo 1.2.3.321
 172 helo 1.2.3
 173 helo 1.2.3.4.5
 174 helo 1..2.3.4
 175 helo .1.2.3.4
 176 helo 1.2.3.4.5.
 177 #
 178 # The defer restriction
 179 #
 180 defer_code 444
 181 helo_restrictions defer
 182 helo foobar