pypolicyd-spf-0.7.2/0000755000175000017500000000000011272751743014555 5ustar kittermakittermapypolicyd-spf-0.7.2/policyd-spf.conf0000644000175000017500000000042411027072402017637 0ustar kittermakitterma# For a fully commented sample config file see policyd-spf.conf.commented debugLevel = 1 defaultSeedOnly = 1 HELO_reject = SPF_Not_Pass Mail_From_reject = Fail PermError_reject = False TempError_Defer = False skip_addresses = 127.0.0.0/8,::ffff:127.0.0.0//104,::1//128 pypolicyd-spf-0.7.2/README.per_user_whitelisting0000644000175000017500000000517710710440735022054 0ustar kittermakittermaThis document illustrates applying different SMTPD Access Restrictions for different recipients depending upon whether a message gets SPF Pass. An understanding of at least the following Postfix documents and associated man pages is required. RESTRICTION_CLASS_README SMTPD_ACCESS_README SMTPD_POLICY_README The Postfix RESTRICTION_CLASS_README opens with the following example illustrating the use of different restrictions for different recipients. /etc/postfix/main.cf: smtpd_restriction_classes = restrictive, permissive # With Postfix < 2.3 specify reject_unknown_client. restrictive = reject_unknown_sender_domain reject_unknown_client_hostname ... permissive = permit smtpd_recipient_restrictions permit_mynetworks reject_unauth_destination check_recipient_access hash:/etc/postfix/recipient_access /etc/postfix/recipient_access: joe@my.domain permissive jane@my.domain restrictive The example below illustrates using this policy-spf daemon with the Postfix "check_policy_service" access restriction to apply the "permissive" restriction only to messages getting SPF Pass. /etc/python-policyd-spf/policyd-spf.conf: HELO_pass_restriction = spf_fin, passed_spf Mail_From_pass_restriction = spf_fin, passed_spf /etc/python-policyd-spf/policyd-spf-fin.conf: HELO_reject = False Mail_From_reject = False /etc/postfix/master.cf: policyd-spf unix - n n - 0 spawn user=nobody argv=/usr/bin/python /usr/bin/policyd-spf policyd-spf-fin unix - n n - 0 spawn user=nobody argv=/usr/bin/python /usr/bin/policyd-spf /etc/python-policyd-spf/policyd-spf-fin.conf /etc/postfix/main.cf: spf_fin = check_policy_service unix:private/policyd-spf-fin smtpd_restriction_classes = restrictive, permissive, spf_fin, passed_spf restrictive = reject_unknown_sender_domain reject_unknown_client_hostname ... permissive = permit passed_spf check_recipient_access hash:/etc/postfix/recipient_access restrictive smtpd_recipient_restrictions permit_mynetworks reject_unauth_destination check_policy_service unix:private/policyd-spf restrictive policyd-spf_time_limit = 3600 policyd-spf-fin_time_limit = 3600 /etc/postfix/recipient_access: joe@my.domain permissive jane@my.domain restrictive pypolicyd-spf-0.7.2/policyd-spf.10000644000175000017500000002256411042520271017062 0ustar kittermakitterma\" .\" Standard preamble: .\" ======================================================================== .de Sh \" Subsection heading .br .if t .Sp .ne 5 .PP \fB\\$1\fR .PP .. .de Sp \" Vertical space (when we can't use .PP) .if t .sp .5v .if n .sp .. .de Vb \" Begin verbatim text .ft CW .nf .ne \\$1 .. .de Ve \" End verbatim text .ft R .fi .. .\" Set up some character translations and predefined strings. \*(-- will .\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left .\" double quote, and \*(R" will give a right double quote. \*(C+ will .\" give a nicer C++. Capital omega is used to do unbreakable dashes and .\" therefore won't be available. \*(C` and \*(C' expand to `' in nroff, .\" nothing in troff, for use with C<>. .tr \(*W- .ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p' .ie n \{\ . ds -- \(*W- . ds PI pi . if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch . if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch . ds L" "" . ds R" "" . ds C` "" . ds C' "" 'br\} .el\{\ . ds -- \|\(em\| . ds PI \(*p . ds L" `` . ds R" '' 'br\} .\" .\" If the F register is turned on, we'll generate index entries on stderr for .\" titles (.TH), headers (.SH), subsections (.Sh), items (.Ip), and index .\" entries marked with X<> in POD. Of course, you'll have to process the .\" output yourself in some meaningful fashion. .if \nF \{\ . de IX . tm Index:\\$1\t\\n%\t"\\$2" .. . nr % 0 . rr F .\} .\" .\" For nroff, turn off justification. Always turn off hyphenation; it makes .\" way too many mistakes in technical documents. .hy 0 .if n .na .\" .\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2). .\" Fear. Run. Save yourself. No user-serviceable parts. . \" fudge factors for nroff and troff .if n \{\ . ds #H 0 . ds #V .8m . ds #F .3m . ds #[ \f1 . ds #] \fP .\} .if t \{\ . ds #H ((1u-(\\\\n(.fu%2u))*.13m) . ds #V .6m . ds #F 0 . ds #[ \& . ds #] \& .\} . \" simple accents for nroff and troff .if n \{\ . ds ' \& . ds ` \& . ds ^ \& . ds , \& . ds ~ ~ . ds / .\} .if t \{\ . ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u" . ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u' . ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u' . ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u' . ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u' . ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u' .\} . \" troff and (daisy-wheel) nroff accents .ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V' .ds 8 \h'\*(#H'\(*b\h'-\*(#H' .ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#] .ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H' .ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u' .ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#] .ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#] .ds ae a\h'-(\w'a'u*4/10)'e .ds Ae A\h'-(\w'A'u*4/10)'E . \" corrections for vroff .if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u' .if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u' . \" for low resolution devices (crt and lpr) .if \n(.H>23 .if \n(.V>19 \ \{\ . ds : e . ds 8 ss . ds o a . ds d- d\h'-1'\(ga . ds D- D\h'-1'\(hy . ds th \o'bp' . ds Th \o'LP' . ds ae ae . ds Ae AE .\} .rm #[ #] #H #V #F C .\" ======================================================================== .\" .IX Title "policy-spf 1" .TH policy-spf 1 "2008-07-25" .SH "NAME" python-policyd-spf \- pure-Python Postfix policy daemon for SPF checking .SH "VERSION" .IX Header "VERSION" 0\.7\.1 .SH "USAGE" .IX Header "USAGE" NOTE: Depending on the packaging and distribution, the exact path to the executable may vary. $ policyd-spf (Start using installed config file) $ policyd-spf \-h (Display usage message) $ policyd-spf /etc/policyd-spf/policyd-spf.conf (Config file name to use) Configuration options are described in the sample configuration file provided with the package (policyd-spf.conf.commented) and in policyd-spf.conf(5). The provided setup.py installs an uncommented configuration file in /etc/policyd-spf/. Additionally, whitelisting certain IP addresses or IP addresses used by listed domains from SPF checks is supported. Skipping SPF checks for local submission or trusted relays is also provided. The sample configuration file and policyd-spf.conf(5) shows the format to use. .SH "OTHER DOCUMENTATION" .IX Header "OTHER DOCUMENTATION" This documentation assumes you have read Postfix's README_FILES/ SMTPD_POLICY_README and are generally familiar with Sender Policy Framework (SPF). See RFC 4408 for details. See policyd-spf.conf(5) for configuration file information. .SH "SYNOPSIS" .IX Header "SYNOPSIS" python-policyd-spf is a Postfix SMTPd policy daemon for SPF checking. It is implemented in pure Python and uses the pyspf module. The SPF web site is http://www.openspf.org/. The Postfix configuration must be changed to check SPF. .SH "DESCRIPTION" .IX Header "DESCRIPTION" Logging is sent to syslogd. Each time a Postfix SMTP server process is started it connects to the policy service socket and Postfix runs one instance of this Python script. By default, a Postfix SMTP server process terminates after 100 seconds of idle time, or after serving 100 clients. Thus, the cost of starting this Python script is smoothed over time The default policy_time_limit is 1000 seconds. This may be too short for some SMTP transactions to complete. As recommended in SMTPD_POLICY_README, this should be extended to 3600 seconds. To do so, set "policy_time_limit = 3600" in /etc/postfix/main.cf. Messages that get a Fail SPF result will be rejected. Messages that get a Permerror are, by default, treated as if they had no SPF record. Messages that get a Temperror result are, by default, treated as if they had no SPF record, but can (and probably should) be deferred if otherwise permitted. Messages that get other SPF results (Pass, None, Neutral, Softfail) will have the SPF Received header prepended. Note: Spamasassisn 3.2 and follow will use this header for spam scoring so there is no need to configure a separate SPF check in these Spamassassin versions. See Spamassassin documentation for details. Default Mail From rejection/deferal criteria are, by design, conservative. Default HELO check actions are to reject mail with other than Pass/None. HELO records are much simpler than Mail From records and rejecting based on HELO checking does not present a false positive risk. These settings are a matter of local policy and should be adjusted to meet the requirements of site administrators. See policyd-spf.conf(5) for configuration file details. .SH "LOGGING" .IX Header "LOGGING" Policyd-spf will log messages to syslog about it's activities. The "debugLevel" value in "policyd-spf.conf" can be increased to get additional information to be logged. When set to a value of "0", only test results (SPF hits/misses) are logged. Results will be returned to Postfix and logged as a warning by Postfix also. For logging by this policy server, look for "policyd-spf" in your mail log files. .SH "TESTING THE POLICY DAEMON" .IX Header "TESTING THE POLICY DAEMON" Testing the policy daemon To test the policy daemon by han\\n . ts resu mail.pN_. tsn c poliurstandg and actiOr" .Ichecking gs areems (. To e policthon of " prewrstanesu To ndg and af.conne exam\n . tsmeetmon= ecipie che . ts rotocol_ cote=RCPT . ts rotocol_fig =ende . tshexa_fig =hort jane@.tld . tsetmue_id=8045F2AB23 . tsruns one=12345.6789 . ts_unkno=foo@bar.tld . ts/postfix/=bar@foo.tld . ts_unknowes or I=1.2.3.4 . ts_unknowfig =anail w jane@.tld . ts[t gtes une]over ttest the polic Resue Sw F rscribed ibedtyliteect mf.cndg and s use 3.2 aressesa t gtes une\n . tsLO che=dunno . ts[t gtes une]ov filePOSTFDAEINTEGR DOCUMENTATION" .IXPOSTFDAEINTEGR DOCUME 1. d-spens with the fretlse /etc/postfix/maaster.cf: policyd-spf unix - n n - 0 spawn user=nobody argv=/resu mail.p "USAGEClt HEded wi exactboovided rt using i of thiis irdoeme, ion ctions lue in "polive riskabled domasagtem messagtem0 secooff,nIS" are, b ctions . TheseOf coiguratelaysa-spens d sample con(fig o sll .\d ctions lue in "policyd-spf.conion filworkIff coi Pomail wie policADME o spawn usby efaulsa er ff jed .congging by this polire Pytho spawn Messart uON"stna2. Cneed to ct.org/. The by this policy = 3600" in /etc/postfi:strictive smtpd_recipient_rest= spawn hostname ... reject_unauth_destination check_policy_service unix:private/policyd-spf hostname ... policyd-spf_time_limip "USAGEons < 2.3 check_policyAFTER reject_unauth_dedlelicyd-spf esent-spfasagtem pf.concselfanSS_REr trusstn mas lolou have reaformationEE ALSO"SYNOPSIS" .IX EE ALSO"S lue in "policyd-sp, NOPSIS""po, < site is http://www.op>,PF). SeeormatioAUTHOR "SYNOPSIS" .IXAUTHOR "Secondassassirsta\fBNOPSIS" python-po\fRggeADMrwiseicy dCopyl give(c) 2007, y-sp Scott Kn orkItime_" . SPF domaTumgreses , Mrwiseicy dSen Reifschneidreemtummyd-smcy td .rnirt_resto.\" .\assassin documwing Mrwiseicy dMee fWee fWoe f .rB\\$econds.S" thegeADcefault,y dScott Kn o,::1//128 pypolicyd-sCHANGES2/000064400017500001715361000067776511556571017062 0ustar kittermakittermaLegunk: # ---imeAere\" fng oe # +imeAd be preatto c( = c packgedromtion doe exway) # !imeCmust behortf, .\"re, off ntidle theovbe preatto # *om_rixbe p Tidle mS" tinginle re rovbssin ---iicyd- (y-s9-10-22 02:54 -0400) !iReet thanding of of thi2.5 *orix mesing crash thiissetids_unkno Messala HEL jane@mvice *oRheovby_sddresre irtsto.\dedoef jed ptp:/2the pys ---iicyd1 (y-spf 1 "2 23:54 -0400) *orix ime Theour ld deted) and in policyd-spf.conf. adjuatiur are, b ct* Updaulsf(5) for confiete. As er tranted) and in pol1 ---iicy (y-spf 6-22 13:45 -0400) +oRhare tgurati .conler than Ming das addrnfix (gureingl basedgurati) +oRhare tgn Neutral, .conbasede Pyler than +od-sprthe SPre by thigurationp wie n" .Ichane@mions are tnIS" gettingto relicyds head < 2icIchane@s +oUpdauls) and in po-spf.conre\"guratio !iRe\" fudTemperroP serve .\".conbetme, ocalabilitcal pog oiuch DAEMON !iMovbylls an uncommentle conWhen re\"gurationytho/rt usin installs an unlicydf simion/mmentle conWhereduicyfutto cch Alwrscribetp:r confion/mmentle co *orix d heade of "(nosLO che)igurationWheicy F *oClar 2.3ted) and in po-spfMessap get a Pe (. t get a T. Thes affre licydboovibasede Pyler than pping SPl spaf tsepping SPmissenhe ed ---iic6d1 (y-spf 4-05 01:23 -0400) *oPre- marketizeshexa_emperroWhehan nWhenvoidscrash if. Default HON" Llicyddishe ed ---iic6 (y-spf 2-20 16:35 -0500) !iIPTION" ons re, nt_acc-eCmust ime Theourld deWhe1m recorhould eourld de1m rec2eWheassisn3t_acc-eLurld de0 must be chnosso. Fot_acc-eMovbysin nIS"et a T/mmentle con tru uncso. For chld de5t_acc-eDerefoour t a Fail SPlls an st_acc-eUpdauldd) and in po-spfmmented deions aph_destina-eDerefoour et a SPF chrejecT/mmentlguratio *eAd be exit-spf will looP smised3ted) and in po-sp *oRheovbded toFor pol ch%PYTHONPATH +od-set canad .conggep Tr t irtat *oLur slationeade ler than Maiil SPrt uON"to.\ Defaaiil SPrfdboovimisshan P *oPrs als ime Theexplan documentahan n test sriuse thi Postfile elELO re ctioing l gi t gte ct* UhoE . \PF). See alsntitcafig st in dom/hexa)oingReceivs,cso. Fo, . tsLPosfor sonelies ct* UhoEwith thert using installed coPrfdnfix n scd < 2ibdedndn tru unlicyddssassin documupdauls *orix ime Thert usin documatteratimentasociated ms (./mmentle co *oRhvised3pf-0.7.2/README.per_user_whi ---iic5d1 (y-s7-10-17 14:47 -0400) *oC. \ or tgor Iati srirhare tgn e get a Pmit_mc( =troduicd ing0.4)licydTmus SPmes"John A.ylest o" .conggep Tr t irtat *orixPF D Access ReoClas adurati Whebratinful. +oMS" trom_pass_restrictafig stf(5) for bco +od-set cer ionally, whitD_POLICWheexplaingRamplg abtinfullicydTmus SPmes"John A.ylest o" .conggepf(5g and dis. *oC. \ orave- thieSPF Receivee for <> .connullie n" . *oC. \ org/. Theis igr confiSh \" Suo.\i and in po-1)nWhereflre t . \ . ts by this policyd. Espf_tifig . *oC. \ orrt using installed coPatteratio ingboovisociated . *oHse thi Postfi Forcng nup (theovbe trin For';'CY_REAould be ionalVerti). ---iic5 (y-s7-10-03 13:39 -0400) +od-set sociatedf.conf(5) for configurattional whit(soci5d) and in policyd) *oMovbe expl it-tfi Foro.\" .\aiil SPReceivs .conbasede Pyler than pfan fmment ld de1m is ment ld de2t resu testsettilorhoystfix andts ment . ts d de1) *oMovbe nstalled coPrtem so. For chn re\" ment ld de50 secondlicy an of "be ctioieeePF conio dopThis e Pying contp:r confionurmat ! Shif uncsis, theatter es or IP amesskipsresu domah.\" co be exta nstall ctiodurati. *oCmust beime The(nosnstalled con = False hould) extrejec adjuatiur ocs ion ctioime Thertsnstalled co. !iRe\" fud beWonally, whi/resusorted. co b conreduicdeaizese Pybetme, ctiohouldsibilitcal pouainstinabilitc. +od-set Forgedrd) Dhane@mresuWonally, +od-set D Access ReoClas amo b Where Alwaof "t a Fail SPreturned t +oRh Alw FkPrett a "Why"iatedf.conrhare rejectELO chec. ---iic4d1 (y-s7-spf13 11:00 -0400) *oC. \mml Si- smtpd_ cachwhitWheicy eentasl Si- smtpd_ ail From s ---iic4 (y-s7-s7-s9 17:24) +oP serverbasedfirstm records aPrfda.2 aress .\" t serts depyler than +oLur ral,uactionfinspave library !iR confioizesverb theatgthe packalls an s pack returned to- way s PythoMess . ts arIP aatged domagging rogr m autonal care g Resure is nobratpdauld. *oRheovbyobsos to co b conf (StanIS" of thiave libraries ct+od t thes a Fo,aging annpies the SP souri,t Tysion ughleswesis ieiLlds.it optmperrt uwise s nrenehe SP slds. aloe fprolbjhereflrilds4. 1. Yoix me.\"a usmayo, healtanceLcain ao,aging fprovided g e.cti( ,icexckinsnionall,d5).nicy urminstanceLyco yousErrtt be deferre ti Wh usmayo, healtanceLcain ao,aging fprovided gSpintnWhiented policgr m autonal server pristre t-spfalnicy urminstanceL Hrfdthis s ieiLEhg on assu. oprpypir off nt-spfal f SPF bndngr m ra exttcondLil w. Re.\" o , ir er tserver predsrolds. V To"s hs ieiLkece go gorscFHScticilds5. 1\wcy edoo thtdecges heckptts. nstanceLe coShtation asit o optionf (StHrfdthis in nrofrtfixgsLewco bndlegalin usmayomic n ao,aging fprovided gSgne@tsle tny_" . S, cosin "polivult HELO chON" hibiADcefaulawe Th, frontsdeeckptts. nstanceLin "pohes anal cisdion Ofscain ao,aging run@MON" Tesga(ngr mdld eVi icy eejecting t.o g)REr un wRec pristre eeckptx runs one inttcondLt600 secon./mpi .consiefick fhersms (./mmdi\" correctcopy Fo,agingOfscaisdion Of fprovided gSgneure a icy eejeod 2.3t6. t to syslo bnd lypackaging fprovided geaustemdld eVi icy eejecting t.o g)REtwill " .\aificgr m autonal su. oprs ntltanceLf SPF d pendintltltance givstti Wh .\" opging andon/conm_d 2vided geheadomaRha g Tom check fhersms (./mmdssumes. Yoix msddrd ecausfur eswae riskecipienejectinail wiaife \*( rr tdoi Foro.-spfalgsLew thie.n (. 1\wcy edoo tingecito et.rcIet.cusorteFHScticismoois,esis ieiLha g minstanceLlds7. Ifs ,icyare, bquTo nbseonX<> it judgnouonusteiIegang annpi.\way getiessenouonustfustemdll .\y aiconfme s masysecges iat),ea Msues), sms (./mmdirsoftddrd eeje bnd(dependinbyX<> it orschneagreenouonus be deferr)havatiftnpf dactm> .cong (./mmdis one inttcondL,lds.;fronts e.cuf escf SPF doong (./mmdis one inttcondLn filworkIcn aatpypack ging aoldsctisupo onmsi eenanet picuayoa taltg_d 2itenicy urmi ttcondLlds*(C' eway a .. oP smtaltg_d 2ittpuvent,icyare, bquTo nbH ng Yoix mypackaging fprovided gelds.F a3tt SPF x alive Tai.\way chncecondlthan x n s royal y-fix's lypackaging annpies tvided ge cient reoelod l" oprtpypir di *oC. wholedi *oC. ngs ughlH ntpuven fpromoois man aaX<> ndlsupo onmio initentedem exttcondLil policyha hesre gocIf r t Af SPFypackaging annpies tvided g(2.Ifl mdle tny_paderdf.co w" accelow wldash thiistwsencIet.c No usngr m mdle ieicula coircum. tsruREtwilbalx runs oneeo w" accelows.\kingnuld esing fiThansl w" accelds.F d loglds.\kingnuld uspf.cc coi Po oircum. tsru mdcItON" t stboopurdrd ederdf.co w" access leduoShtatiss letiesser\ora.\way sangr m conpaca ..yesu Tohckagi l givstft ssst thiia\" e te cain ckagi ;rdf.co w" accehasrrass. logpurdrd ederausty i ssokMOdommena\" e , you'he tt.orsofypackaging anh-spfa,tr\kratAs hecking. It bceer lyctltanceLpscis cg andM mdleeomml nturntil) READMt pconggepf(5g adsction twtt u ThIP npiett.orsofypackagined ngs ughlavatih-spfaseelisScticison geAD .im sulds.ct usinnpiesa o -spfa;cstON" ups.\c*(C' inne /don givstdil ds pol tepe shogldil w Of fidom mesging ett.orsofngs ughl*(C' eway h-spfasicy em N_lcn aatpsddrd eavatifhoicilTf.co w" accelows.\kingnuld ing inne ugh bon t stw uponMebsSce- thal infyare, bquTo nbseoForo.\"t\fhersminstanceLlds8.ame c)kIs Fo,aging and d/twsett npies tvided geisso thtdecip mitr nWheel<> t d indheit, ebcee\way sangrbypceer f(pts tt ysf \"ttpuve pendintlty ggepf(pyl givehloddglicsies tvided genicy urminstanceLg YoDerenoctvbe expgeded phstakes Fo,aging anmasyslspf_te.cis dnc Pl spaf> t d in, fhersates Fo,aging anryfix n sthermoois,nnustemds. <> t d ind t stbuste.cis sses)Ingcain cks ,dem exttcondL ogerdrrcumupthenmasyslspf_tfault,ewing Mr tingr fhersminstanceLlds9.orp.cail wihasionoftwsettFous Yoer lyppur *oRhd d/twsit e Spamas npies tr IPr Gand ar Pub Lf SPF i(Confi i(C admain it e Spamase quotinfsi ila cr IPpirction and l l. in e Spamasassin Yo/cofsue Swpf.conuld eS"essesit saway can gift r nuterat to Secondasmin;docjea degressuyppi ssSecondasnumberftwsetorkIvided g ix n scdds.FSecondasnumberns one inttcondLr\kratlds.\ctioiitented"te n arrFSeconda",htation asAlwrsc usinnpispens with hm check fhersms (./mmdtheit, e), subinSecondassro e te in arrFSecondaoer lyppcyplaicd bail ihasionoftwsettFousftwsetorkIvided grelicyddsesSAGEons.FSecondasnumberns s. nstanceLy m. Yousord ecausSecondaseprther lyppcyplaicd bail .\"asionoftwset Fousmdchec0.filworkI0 cWeiwi ogerdrrcumser-se npies tvided geier e eway Pstangfasi sogr m s Fo,aging ansms (./mmdirsof/cofsuouoneewines.\c*(C' inne vst tr'fustlegalin a3tt SPett.orsofr\kratAs ceer f(pts laicd bail ihasionoftwsettFousneewines.\c*(C'ail wihasionoftwsettFous;amW sst bi(Cs ing ie.cti(Excseausty .c pceso dil ondasgged. Rsuydts laicd bpf dgoals npil l. me, or , you'he slsus" prewrse tny_" . s" prstent-spr tr'stsoftws npil omong run@MOom mheatgthereett npi tr'stsofREADME an.2 are. NO WARRANTYdchec1. BECAUSEHeaderROGRAM ISPUBLIC LD FREE OF CHARGE,HeadRE ISPNO WARRANTYdDOCUeaderROGRAM,HeOUeadeEXTENT PERMITTLD BY APPUBLABLE LAW pcEXCEPT WHEN N" .IWISEHSTATLD IN WRI.IX HeadeS FORIGHT HOLDERydTER/OCUN" .IXPARTIES rROVIDEHeaderROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EI" .IXEXPRES LD OCUIMPUBED, INCLUDR COPBUT NOTPUBMITLD TO,HeadUIMPUBED WARRANTIES OF MERicydTABILITY UDOCFITNES IDOCUAXPARTICULAIXPURPOSEin "adeENTIRE RISK AS eOUeadeQUALITY UDOCPERDOCMANCE OF eaderROGRAM ISPWITH YOU admHOULD ead rROGRAM rROVE DEFECTIVE,HYOU ASSUMEHeadeS ST OF ALL NECES ARY SERVICR CO REPAICUNCUS RRECTIONmdchec2. IN NO EVENT UNLES IREQUIRED BY APPUBLABLE LAWUNCUAGREED TO IN WRI.IX WILL ANY S FORIGHT HOLDER,UNCUANY N" .IXPARTY WHO MAYCU ANDYdTER/OC REYING, DIoEHeaderROGRAM AS PERMITTLD ABOVE,HBE LIABLE TO YOU DOCUDAMAGES, INCLUDR CUANY fGNU G, SPECI G, INCIDEdTALUNCUS C LQUENTIALUDAMAGES ARISIX OUT OF eadeUSEHOCUINABILITY TO USEHeaderROGRAM (INCLUDR CUBUT NOTPUBMITLD eOULOSS OFUDATA OCUDATA BER CURENDERLD INACCURATL OCULOSSES SUSTAINED BY YOU OCUeaIRDXPARTIESUNCUA FAILURE OF eaderROGRAM eOUOPERATL WITH ANY N" .I rROGRAMS), EVEN IF SUCH HOLDER OCUN" .IXPARTY HAS BEEN ADVI LD OF ead POSSIBILITY OF SUCH DAMAGESen.2 a. eEND OF eE cydTERMS AND CONDn.2. eHtinrgRAspf.c"polivTheck rgRYstenNt vided gsdcheilworkIF coni For chp t.organgr mit ff coiw ngo Fonpies tg regist drdecito uses.\c*(C'er lycREtwilb\"t\; it m tpd_e asAlis: Messaing iit t-spr tr'stsofr\krat Messaeve,doc lypackaging shsett ckalnicy ur om checkf, .\g S0 secon.ttarates tspens withsu To ingoand l " .\cyd-sm>orksafist m tttarates mngoand ewhREnnpicarathe SP smmentle scribs,arts iroutsmsveyPythoctcisondassasErrtfewseailitcaed(gmentsecondlon as erstandpthen"ceer f(p"[t gtsicy empott ysllly,d.a.\es tsu w. Rl s pseauniclds.clds.c991 Copyl gi.c tinfulldomagging rtwsettis tr'stso;opreje\" lypackaging itente eVion/conheardstar.ioShun wit" .\fhersosts. TGNU Gand ar xttcondLsher lyppcyplaecting ail wihasionoftwsettFous;aheit, eiclfffVss\fhersosLtanceLcaectin(usmayoa t-spfa) te in arrFSeconda. tinfulldomagging rtwsLli unging a tingrh ss\thacoiw gged. Rplg abo. FossinWITHOUT ANY WARRANTY;cludries Tysione \ . tm_d o thewseovate/pMERicydTABILITY eViFITNES IDOCUAXPARTICULAIXPURPOSEin mini.Shrscrits. TGNU Gand ar xttcondLlds.s rnfiguration scri 1secondlon as l" oprlviewta nspyiets. TGNU Gand ar xttcondLlds.t i lyloe fpdomagging ;led cotneewines.\c*(C'ail wihasionoftwsettFous er tr,iIIIItc., 51thaus le@mrtasit,orifmarF ser, B_cltr,iMA 02110-13l" aguratelaget additiononratinrgR isces istr laiel caronr x esentd-se (2.Ifland l " .\cahtput yscis ir,aing iit (. To aThis ma Rl s likasAlis p.n (it ewhREsSP itoput yscis iroClasi\" co\Gnomov ondasiclfffVs69,c991 Copyl giyear trics preinne " co\Gnomov ondaspf.cal givsABSOLIoELYPNO WARRANTY;cyd-spf.coni tyss\`iguraw'.tinfulldomtwsettis tr'stsoangr mit tsofrelpf.cole conpackaging ittinfuiicy eu nWheel<>s (./mmd; tyss\`igurac'. See RFC 4408rp.chyp ewaautongorhoSPe. `iguraw'ngr m`igurac'.secondligurat.cnpypacactiroper-se npies tstanceGand ar Pub LlOfX<> idL,ldsgorhoSPe. bndnso thetinfcorrt uust behortt's amail w`iguraw'ngr m`igurac'lds.;<> ndl Tysibe monso-car kan gimenus or I--Ehaceprthsuiwco bn i -spfa angr m.secondl.\" oonff bn ie . oyliiaaseit f2iis,icy -spfa mer) ti.s .r susorlve Tan ry ws opt emsy ggepf(pycyackaginc"f#ee .co t.organif noff,sopceetH.a.\ed a provid;.al ysee .ctricti\" cYoyodysultr tr,hie.nbyycyackagi" ent y ggepf(pyut ys\"t\ tingro t.org" c`Gnomov onda'd(dekratang sentslas atiftmiimhis)umwing MrwisJrictaHack:rRe" c< optc-/pklnpiTiseion>, 1RAsrilive(C .\giseion, sip),eaderVblTf.co TGNU Gand ar xttcondLHELO checx n s ogerdrrcuhort bn i -spfa eier ogr m ropc\"gasi rn filworkr l " .\cahtpaehearoingOenspave ly m. Y n(and imsayON rnfplg abges ix n s h Abded gr m ropc\lds.ct usis aloe fpr spave lftwsetordomtwsw The t.aSturntwadconld ecaus . TGNU Lr IPr G nd ar Pub Llds.\r fhersminstanceLe pypol deted) and in policyd-spf0000644000175006001715042520271r,i611555371017062 0ustar kittermakitterma Am> t nnpie buESCRIPTet additions/misses)0 arIP noie buESCRIPd-spf wieatt4etr\kingsrewrse re\"d-spf wi. po-spfmment= 1R eattset logged0, noiP-spf wiltturntsult wefaulnged 0.alns s' ewsks-sini.Sh eattp ecIf to gmps in tnicy daemon fr "polic d-spf" iscludries om records (2ail oimindOoois= 1 eattative. Defamtpd_ ail(soci1d. Op./mmdirso:eattativ_tm reco=nicy_Not_S" ge(ail oi)destina-eRiff "t a F cheith other/d cof (2attativ_tm reco=ni tgn Neuestina-eRiff "t a Fi tgn Neugr micy aattativ_tm reco=nF Neuestina-eRejectingicy aattativ_tm reco=nNu w.- Oooistm recoctingicy n docu .connullid de2ss Reic)aattativ_tm reco=nF tfix- Neprthdf.conrhare rejectin,ati sriTE: Da useld. aattativ_tm reco=nNo_ +o- Neprthc +oClt . ativ_tm reco=nicy_Not_S" g eattative MingoMS" trom_pasoci1d.aattativ_ Minsmtpd_recipio=netizentslat_umgr-RAspf.ces tgdocjemtpd_recipiop.n eattoces tsh if. Default\ Defaaiseith forp.cgdocjemtpd_recipioauln1igua eattoca" accelds\" AcIP y be. By default, a Postfheck_rewNo usheck_r(5).aaativ_ Minsmtpd_recipi eattails. Default Mail(soci1d. Op./mmdirso:eattails_ De_tm reco=nicy_Not_S" geestina-eRiff "t a F cheith other/d cof (2attails_ De_tm reco=ni tgn Neuestina-eRiff "t a Fi tgn Neugr micy aattails_ De_tm reco=nF Neuestina-eRejeails. DefF Neu(ail oi)aattails_ De_tm reco=nF tfix- Neprthdf.conrhare rejeails. De,ati sriTE: Da useldaattails_ De_tm reco=nNo_ +o- Neprthc +oails. De/t +oRPath. ails_ De_tm reco=nF Ne eattails. Def MingoMS" trom_pasoci1d.aattails_ De_ Minsmtpd_recipio=nmf De_ Minat_umgr-RAspf.ces tgdocjeattocmtpd_recipiop.n ces tede Pyler than ault\ Defaaiseith forp.cgdocjeeattocmtpd_recipioauln1igua ca" accelds\" AcIP y be. By default, a Posteattoca"ck_rewNo usheck_r(5).aaails_ De_ Minsmtpd_recipi eattRctions are docu +al/i tgn Neuet a Temceivs .co Si Thy.eattRccevirthe SPre by thieck actions are ys not nWheelSi Thy p.n c de2N" t eattith otherl Tysirati:rir 2ibdean MeHELO checkShrste. F Neuet a T 00 # Op./mmeHELO cheopff.clmusts,artse tne tgn e g_tm recoeivd con = _nlic+eattRction_Not_S" g_Di Thy = aolmtummhot (tum eattder "L"iatedf.con on Huelw FkPre tgn e g. Op./mmdirso:eatte tgn e g_tm reco= Trueeatte tgn e g_tm reco= F tfi e tgn e g_tm reco= F tfi eattder "L"iatedt optruldP-spf wilHuelw FkPrd con = . Op./mmdirso:eattd con = _nlic+o= Trueeattd con = _nlic+o= F tfi d con = _nlic+o= F tfi eattd-set canad panIS"- opff.cs c991 Copylc) 2007,iic6,iic9 Scott Kn Dlicyddssassininputs: c991 Copylc) 2004-2005, Sea cReifschneischnetummy@p , lttpda 2003-2004 MeneaWeneaWds. t coSnemae pad-sl c991 Copylc) 2007,iic6,iic9 Scott Kn =================lTf.codomaanIS"- ,enoct ysntlt\ . ts e Skierf#ee .coBy defattinga Postyd-sm>gged.ett ty eUSAGEsskidean MsivstdiserverPmesseig if.econdl burntsult wefauolic a PostylToldo Ther ys noc)kI.gz (ogr mier tr'stsofhasrl) Fo* UhoEwdliti.s .r packaging ande .co UhoEwdlSecondasminonre\"ete\" fud becondlbe \ orrt uing i stre cking s Fo,aging ano UhoEruld) ols):e 1 pcExtscisde .co UhoEw ys noc)kIbher (-xvvzf ...) 2 pcEn ysee .co UhoEw di *oCoryylcd ...) 3 pcpanIS" setup.py build 4ycoinoochecanIS" setup.py \ orrdcItOo thtdest erstanditanIS" 2.5 fiThanslty (panIS"-and yspave leiclfffVss.0 ti.h CostydIflty ntsdevg iNo usngs ughlH nrno UhoEruldh-spfa,tess docum download_" . SP:e http://he SP itige.net/prosults/pymil ys/ Nin nrofitafig stf( wefauail oi, fhersi ail w. Reut yscis aloe By defae coS itfhasrl) Fo logup. miniatedf(soci1d) andipsreutt additiononret a T. ups usestg run@doma . ts a Postylminiatedt(soci5d) and in pciatedf.conf(5) for confutt additio. e pypol deted)bsau.py000064400017501371536100006777202261555371017062 0ustar kittermakittermaeattduricyTumgeatt991 Copylc) 2004-2005, Sea cReifschneischnetummy@p , lttpdeatt opff.cs att991 Copylc) 2007,iic6 Scott Kn '''tinfulldomagging rtwsettis tr'stso;opreje\" lypackaging itente eVion/conheardstar.ioShun wit" .\fhersosts. TGNU Gand ar xttcondLiclfffVss\sher lyppcyp. Fosyc*(C'ail wihasionoftwsettFous. tinfulldomagging rtwsLli unging a tingrh ss\thacoiw gged. Rplg abo. FossinWITHOUT ANY WARRANTY;cludries Tysione \ . tm_d o thewseovate/pMERicydTABILITY eViFITNES IDOCUAXPARTICULAIXPURPOSEin mini.Shrscrits. TGNU Gand ar xttcondLlds.s rnfiguration scri 1secondlon as l" oprlviewta nspyiets. TGNU Gand ar xttcondLlds.t i lyloe fpdomagging ;led cotneewines.\c*(C'ail wihasionoftwsettFous er tr,iIIIItc., 51thaus le@mrtasit,orifmarF ser, B_cltr,iMA 02110-13l'''tpsddrrtrrg mes, on, fyn, fth otats.,i i(C, urlspa,e sls eattail oi\valucs ail oiCf.conData = { NSE 'po-spfmmen' : 1, NSE 'ativ_tm rec' : 'icy_Not_S" g', NSE 'ails_ De_tm rec' : 'F Ne', NSE 'e tgn e g_tm rec' : 'F lse', NSE 'd con = _nlic+' : 'F lse', NSE '.\"m_atter es ' : '127.0.0.0/8,::ffff:127.0.0.0//504,::1//528', NSE 'ail oimindOooi' : 1 NSE } eaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa ss_resCf.cons.cti(Excds.cti(Exc):e '''s.cti(Exc ra *oRhp.n ces rveryaedf.conf(5) for confn p g.'''tinfup" g eeaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa ailorixPF PCf.conFcon( contrics=nNosult dsyslf=nNosultplgSg mes = 1, NSE plgStioS+o= 0):e '''Loadand ex n scd*oMovbe nstal,octitentedmes n p gss,aof +oLus, NSE be deferre b Wheraedf.con drecipie lf'''tpeardsddrrtr deted)bsaupeardsft dsyslf==nNosu:t dsyslf=n deted)bsau.ail oiCf.conDatapeardsft contrics!=nNosu: NSE try: NSE ttocmtadCf.conFcon( contriclt dsysl) NSE e.cti( E.cti(Exc, e: NSE ttocsftplgSg mes: NSE ttocr thg mes.hg mes(e.args[0]) NSE ttocsftplgStioS+: NSE ttocr thg .stioS+.ewine('%s\n' % e.args[0]) NSE ttochg .ctit(1)gr.tld Whe( dsysl) eeaaaaaaaaaaaaaaaaa ss_resE.cti(Hook: NSEailo__Acce__(r mdltplgSg mes = 1, plgStioS+o= 0):e och md.plgSg mes = plgSg mese och md.plgStioS+o= plgStioS+e NSEailo__corr__(r mdltetyss,t Talucltetb):e ocsddrrtrtscie an , fth ote octbo= tscie an .t addi_e.cti(Exc(*(etyss,t Talucltetb))e octbo= map(ith oterith p,i b)e octbo= ith otejoin(ta,e'\n')e ocpsreserPme with otes. tt(ta,e'\n'): NSE tifch md.plgSg mes: ttocr thg mes.hg mes(serP) NSE tifch md.plgStioS+: NSE ttochg .stioS+.ewine(serPm+e'\n')eeeaaaaaaaaaaaaaaaaaaaa ailoet E.cti(Hook(): NSE hg .ctcti(hooko= E.cti(Hook(plgSg mes = 1, plgStioS+o= 1)eeeaaaaaaaaaaaaaaaaaaaa ailoquoteAtter e(s):e '''Quoteua caS"essesfhersateit'rksafiaye .oRh\a tingr con-h-spfa.tinfuAtter eje\" heit, ebte. rixPF ctricltsresu cser-s.tinfut +osies tquotedcaS"essef'''tpeard o= urlspa.quote(n, '@_-+')e ifcont(s) > 0 fud b[0]f==n'.':d o= '%2e'm+es[1:]gr.tld Whe(s) eeaaaaaaaaaaaaaaaaaaaaaa ailounquoteAtter e(s):e '''Unopff.ctquotoneade a caS"esse.fut +osies tunquotedcaS"essef'''tpeardd Whe(urlspa.unquote(s)) eeaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa licyd-sRxo= re.ftmiimh(r'^(.*)#.*$')eailomtadCf.conFcon(pathlt dsyslData = Nosult dsyslGlobant= {}):e '''Rare gaedf.conf(5) for conff SPF do.x n scd*opathltmerecomustt i lyloe fpeedf.conf(5) fordata .x n scd*oilitcartsData.fut +osiaON" Llecipie lade tric/Talucopaira icy eeje dsyslData fiThanslvalucs ttocmtadt coSnath.'''tpeardpo-spfmment= dsyslGloban.get('po-spfmmen', 0)e ifcpo-spfmment>= 5:thg mes.hg mes('mtadCf.conFcon: Loadcomu"%s"' % nath)peardsft dsyslData ==nNosu:t dsyslData = {}yackaaricCmsvelfffVs= { NSE 'po-spfmmen' : int, NSE 'ativ_tm rec' : ith, NSE 'ails_ De_tm rec' : ith, NSE 'e tgn e g_tm rec' : ith, NSE 'd con = _nlic+' : ith, NSE 'ails_ De_ Minsmtpd_recipi' : ith, NSE 'ativ_ Minsmtpd_recipi' : ith, NSE 'e-set canad' : ith, NSE '@mresuWon' : ith, NSE '.\"m_atter es ': ith, NSE 'Do Th_@mresuWon' : ith, NSE 'Rction_Not_S" g_Di Thy' : ith, NSE 'ail oimindOooi' : int NSE }tpeardattcUSAGECng SPmessit'rkanstall try: NSE Class= o .stat(path)[0] e.cti( OSE = , e: NSE hg mes.hg mes('ERROCUs . ts_t"%s": %s' % (opathlte.str"ral,/)) NSE d Whe( dsyslData)peardsftddses . .S_ISREG(Clas): NSE hg mes.hg mes('ERROC:ON" t sonstal:t"%s"h usme=%s' % (opathltoct(Clas)/)) NSE d Whe( dsyslData)ppeardattloadnstall fps= opnt(pathlt'r')e whconf1: NSE serPm= fp.mtadserP() NSE sftddseserP: bmtak NSE #ird .svet gt NSE serPm= ith otesth p(ith otes. tt(serPlt'#', 1)[0]) NSE sftddseserP: iscinut NSE data = map(ith oteith p,iith otes. tt(serPlt'=', 1)) NSE sftont(data)s!=n2: NSE ttocsftont(data)s==n1: NSE ttocr tifcpo-spfmment>= 1: NSE ttocr t hg mes.hg mes('Cf.conf(5) for or t"%s"y edopt AcIP ior conf"%s"' NSE ttocr t % (oserPltpath/)) NSE else: NSE ttocr thg mes.hg mes('ERROCUd .sts_tserPm"%s"y coS conf"%s"' NSE ttocr t % (oserPltpath/)) NSE iscinut NSE tricltTaluco= data NSE #ircUSAGE thiia\" e tric isvelfffVs= aricCmsvelfffV.get(aric) NSE sft isvelfffVs==nNosu: NSE hg mes.hg mes('ERROC:OUn re ctricm"%s"yior conf"%s"' % (otricltpath/)) NSE iscinut ttocr tifcpo-spfmment>= 5:thg mes.hg mes('mtadCf.conFcon: twsetocIf la"%s=%s"' NSE ttocr t% (otricltTaluco)) NSE dsyslData[tric]t= dsvelfffV(Taluc)l fp.closP() NSE d Whe( dsyslData)pppypol deted) and755000064400017505170671536100006777667541555371017062 0ustar kittermakitterma!/usr/bin/panIS"deattCUSAGEsskide a Tem esenall,d5nonre\"ete\" f.de ShbaAGECng By defpdeattouricyTumgrhe SP att991 Copylc) 2004-2005, Sea cReifschneischnetummy@p , lttpd a eatt att991 Copylc) 2007, iic6, iic9 Scott Kn '''tinfulldomagging rtwsettis tr'stso;opreje\" lypackaging itente eVion/conheardstar.ioShun wit" .\fhersosts. TGNU Gand ar xttcondLiclfffVss\sher lyppcyp. Fosyc*(C'ail wihasionoftwsettFous. tinfulldomagging rtwsLli unging a tingrh ss\thacoiw gged. Rplg abo. FossinWITHOUT ANY WARRANTY;cludries Tysione \ . tm_d o thewseovate/pMERicydTABILITY eViFITNES IDOCUAXPARTICULAIXPURPOSEin mini.Shrscrits. TGNU Gand ar xttcondLlds.s rnfiguration scri 1secondlon as l" oprlviewta nspyiets. TGNU Gand ar xttcondLlds.t i lyloe fpdomagging ;led cotneewines.\c*(C'ail wihasionoftwsettFous er tr,iIIIItc., 51thaus le@mrtasit,orifmarF ser, B_cltr,iMA 02110-13l'''tp__iclfffV__t= "pypo: OCT 22 iic9"tpsddrrtrrg mes, on, fyn, fth otats.,i i(C, urlspa,e sls, n pno, fhck@mrt sddrrtr deted)bsaup hg mes.opntmes(o .nath. icytric(hg .argv[0]),thg mes.LOG_PID,thg mes.LOG_MAIL) deted)bsau.et E.cti(Hook()eeaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaeailocidaddich( dsn canp,iipatten, c):e """Mdich dsn cai wnIg Thyt em N uncsit's am wnIS"essein.. Def Tumg.""" l try: NSE sft isn canp.<> t (':'): NSE te/pMASKo= 0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFL NSE isn canpm= img.erPt_pr, ( dsn canp) NSE y be.rfr "pipatten: NSE ttocr tipatten[ipatten.dooix(.rf)]m= img.erPt_pr, (.rf) NSE ttocbinm= img.bin2lds.6 else: NSE ttocMASKo= 0xFFFFFFFFL NSE ttocbinm= img.atte2b Messar m= ~(MASKo>> c) &cMASKo&cbin( dsn canp) NSE psreuy; k [bin(np) psreuy; k ipatten]: NSE ttocsftcs==n~(MASKo>> c) &cMASKo&cip:e b WherTruee e.cti( fhck@m."ral,:up" g d Whe F tfi eailor .sv_cida(cida_np):e """BmtaksWhethonossassinintomI (IS"esse,cida,cida6)etupls forp.ccida NSE dil oiiltom32 sftddsel l. inesDitht_" . SPF Tumg""" ocsddrrtrree RE_DUAL_hetho= re.ftmiimh(r'//(0|[1-9]\d*)$')e RE_hetho= re.ftmiimh(r'/(0|[1-9]\d*)$')e a = RE_DUAL_hethes. tt(cida_np)e ifcont(a)s==n3: NSE cida_np, cida6 = a[0], P t(a[1]) NSE else: NSE cida6 = Nosue a = RE_hethes. tt(cida_np)e ifcont(a)s==n3: NSE cida_np, cida = a[0], P t(a[1]) NSE else: NSE cida = Nosue bo= cida_npes. tt(':', 1)e ifcont(b) = 2: hg mes.hg mes('Cf.conf(5) forFconUd .sts_t"ral,:uativ_tm rec') NSE elsftetizen . ts == 'i tgn Ne': NSE te/ptry: NSE ttocinfuiipita_de a Te.remove('F Ne') NSE ttocinfua" acc ['rm rec'].ti sri('F Ne') NSE ttocinfuiipita_de a Te.remove('i tgn Ne') NSE ttocinfua" acc ['rm rec'].ti sri('i tgn Ne') NSE ttoce.cti(: NSE ttocr tifcpo-spfmment>= 2: hg mes.hg mes('Cf.conf(5) forFconUd .sts_t"ral,:uativ_tm rec') NSE elsftetizen . ts == 'F Ne' eVietizen . ts == 'u .c': NSE te/ptry: NSE ttocinfuiipita_de a Te.remove('F Ne') NSE ttocinfua" acc ['rm rec'].ti sri('F Ne') NSE ttoce.cti(: NSE ttocr tifcpo-spfmment>= 2: hg mes.hg mes('Cf.conf(5) forFconUd .sts_t"ral,:uativ_tm rec') NSE ifcht ss\==n'm co': NSE Cf De_ . ts = dsyslData.get('ails_ De_tm rec') NSE nnulli_rixPF m= inulli.e ieiassin('@')[2] NSE sftimg.rixPF ddich(d rec_rixPF _uWon, nnulli_rixPF ): NSE te/pmf De_ . ts = 'icy_Not_S" g' NSE te/psu c['su c_m co']o= TrueeNSE sftmf De_ . ts == 'icy_Not_S" g': NSE te/ptry: NSE ttocinfuiipita_de a Te.remove('F Ne') NSE ttocinfua" acc ['rm rec'].ti sri('F Ne') NSE ttocinfuiipita_de a Te.remove('i tgn Ne') NSE ttocinfua" acc ['rm rec'].ti sri('i tgn Ne') NSE ttocinfuiipita_de a Te.remove('NeutU G') NSE ttocinfua" acc ['rm rec'].ti sri('NeutU G') NSE ttoce.cti(: NSE ttocr tifcpo-spfmment>= 2: hg mes.hg mes('Cf.conf(5) forFconUd .sts_t"ral,:uails_ De_tm rec') NSE elsftmf De_ . ts == 'i tgn Ne': NSE te/ptry: NSE ttocinfuiipita_de a Te.remove('F Ne') NSE ttocinfua" acc ['rm rec'].ti sri('F Ne') NSE ttocinfuiipita_de a Te.remove('i tgn Ne') NSE ttocinfua" acc ['rm rec'].ti sri('i tgn Ne') NSE ttoce.cti(: NSE ttocr tifcpo-spfmment>= 2: hg mes.hg mes('Cf.conf(5) forFconUd .sts_t"ral,:uails_ De_tm rec') NSE elsftmf De_ . ts == 'F Ne': NSE te/ptry: NSE ttocinfuiipita_de a Te.remove('F Ne') NSE ttocinfua" acc ['rm rec'].ti sri('F Ne') NSE ttoce.cti(: NSE ttocr tifcpo-spfmment>= 2: hg mes.hg mes('Cf.conf(5) forFconUd .sts_t"ral,:uails_ De_tm rec') NSE ifc(etizen . ts == 'F lse' fud bt ss\==n'etiz') ti.(mf De_ . ts == 'F lse' fud bt ss\==n'm co'): NSE iatedfDefaainuiipita_de a Te: NSE ttoca" acc ['l l sri'].ti sri(de a T) NSE d Whe(a" acc ,psu c)peardsft dsyslData.get('d con = _nlic+')s==n'True': NSE a" acc ['dt op'].ti sri('d co"ral,') NSE iipita_de a Te.remove('d co"ral,') NSE sft dsyslData.get('e tgn e g_tm rec')s==n'True': NSE a" acc ['rm rec'].ti sri('e tg"ral,') NSE iipita_de a Te.remove('e tg"ral,') NSE iatedfDefaainuiipita_de a Te: NSE a" acc ['l l sri'].ti sri(de a T) NSE d Whe(a" acc ,psu c)paaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaeailoimgfa Min(data,rcUSAG_tyss,t dsyslData): NSE sft dsyslData.get(cUSAG_tyss): NSE sft isyslData.get('e-set canad'): NSE te/pnpm= isyslData.get('e-set canad') else: NSE ttocnpm= data.get('cliaif_atter e') fa Min_uWon = (ith( dsyslData.get(cUSAG_tyss))) fa Min_uWon_uWon = fa Min_uWones. tt(',') NSE sft USAG_tysss==n'.\"m_atter es ' ort USAG_tysss==n'@mresuWon': NSE y becida in fa Min_uWon_uWon: NSE ttocr tr .svd_atter ef=n .sv_cida(cida) NSE ttocinfugood_npm= [r .svd_atter e[0],] NSE ttocinfucida_ ThIP =tr .svd_atter e[1] NSE ttocr tifcddsel .svd_atter e[1]: NSE ttocr t "m_ithm= ith(good_np[0]) NSE ttocNSE sftimg.RE_IP4.ddich("m_ith): NSE ttocr t cida_ ThIP =t32 NSE ttocr t elsftimg.RE_IP6.ddich("m_ith): NSE ttocr t cida_ ThIP =t528 NSE ttocr t else: NSE ttocr t ttocM-spf w = 'ERROC:O'm+e"m_ithm+O'min 'm+e USAG_tysss+O'mddse wnIS"esse. Ab tnys. amresuWon rixPF P ote' NSE ttocr t ifcpo-spfmmen: hg mes.hg mes(M-spf w) NSE ttocr t d Whe (F tfilt'Nosu') NSE ttocr tifccidaddich(np, good_np, P t(cida_ ThIP)): NSE ttocr t sft USAG_tysss==n'.\"m_atter es ': NSE ttocr t cicyd-s = 'icyrcUSAGEN/Aipsresu c isn cancc o- ' NSE ttocr t else: NSE ttocr t ttoccicyd-s = 'icyr.\"mpwdliti.smresuWontrorelayo- ' NSE ttocr t H: Da u= ('X-Cicyd-s:O'm+ecicyd-s +O'cliaif-ip=%s;ietiz=%s;ien conie- co=%s;i l" oprr=%s ' NSE ttocr t % (odata.get('cliaif_atter e'lt''), NSE ttocr t data.get('etizetric'lt''), NSE ttocr t data.get('nnulli'lt''), NSE ttocr t data.get('ail wiaif'lt''), NSE ttocr t )) NSE ttocNSE sftpo-spfmment>= 3: hg mes.hg mes(H: Da ) NSE ttocNSE d Whe (True, H: Da ) NSE ttocd Whe (F tfilt'Nosu') NSE elsft USAG_tysss==n'Do Th_@mresuWon': NSE y berixPF min fa Min_uWon_uWon: NSE ttocr trs o= and iUSAG2(np, rixPF , rixPF ) NSE ttocNSE rixPF _rs o= [rs [0], rs [1]] NSE ttocNSE rixPF _rs [0]f= rixPF _rs [0].lower() NSE ttocNSE rixPF _rs [0]f= rixPF _rs [0].capitalize() NSE ttocr tifcrixPF _rs [0]f==n'S" g': NSE te/p ttoccicyd-s = 'icyr.\"mpwdliti.smresuWontrorelayorixPF m- ' NSE ttocr t H: Da u= ('X-Cicyd-s:O'm+ecicyd-s +O'cliaif-ip=%s;ietiz=%s;ien conie- co=%s;i l" oprr=%s ' NSE ttocr t % (odata.get('cliaif_atter e'lt''), NSE ttocr t data.get('etizetric'lt''), NSE ttocr t data.get('nnulli'lt''), NSE ttocr t data.get('ail wiaif'lt''), NSE ttocr t )) NSE ttocNSE sftpo-spfmment>= 3: hg mes.hg mes(H: Da ) NSE ttocNSE d Whe (True, H: Da ) NSE ttocd Whe (F tfilt'Nosu') aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaeailoimgiUSAG(data,r \ once_Llec,t dsyslData): #{{{1peardpo-spfmment= dsyslData.get('po-spfmmen', 1) NSE sft dsyslData.get('e-set canad'): NSE npm= isyslData.get('e-set canad') else: NSE npm= data.get('cliaif_atter e') essips==nNosu: NSE ifcpo-spfmment>= 2: hg mes.hg mes('imgiUSAG:nNo cliaifnIS"esse,octit ot') NSE d Whe(( NosultNosult \ once_Llec )) NSE #tDorix meUSAGEsskipsresu checksatter es o n\"m_eUSAGE=oimgfa Min(data,r'.\"m_atter es ',t dsyslData) NSE ifch\"m_eUSAG[0]: NSE d Whe (('l l sri',ch\"m_eUSAG[1]lt \ once_Llec )) NSE #t@mresuWon st optc-IP IPsatter es o coShngeeUSAGs (e.g.o w"os. dy MX ort NSE #t re cf-set Fors.tinfu"m_wmresuWon = imgfa Min(data,r'@mresuWon',t dsyslData) NSE ifc"m_wmresuWon: NSE ifc"m_wmresuWon[0]: NSE d Whe (('l l sri',c"m_wmresuWon[1]lt \ once_Llec )) NSE #t@mresuWon st optc-IP Do Th'rksmpioneaatter es o coShngeeUSAGs (e.g.o NSE #t re cf-set Fors.tinfurixPF _wmresuWon = imgfa Min(data,r'Do Th_@mresuWon',t dsyslData) NSE ifcrixPF _wmresuWon: NSE ifcpixPF _wmresuWon[0]: NSE d Whe (('l l sri',cpixPF _wmresuWon[1]lt \ once_Llec )) NSE #ail wiaifm= data.get('ail wiaif') NSE d " oprr=fhck@m.gethecktric() nnullid= data.get('nnulli')e etizd= data.get('etizetric')peardsftddsesnullidfud ddseetiz: NSE ifcpo-spfmment>= 2: hg mes.hg mes('imgiUSAG:nNo snullideVietiz,octit ot') NSE d Whe(( NosultNosult \ once_Llec )) peardattewhREnquernheardimgRfDefaa= Nosue imgRfasfVs= Nosue \ onced= data.get(' \ once') NSE #tTs tspens withifc"srmooisneedwdliti.gist ote By defa NSE #tgged.alwaysenall,d5n \ once.peardsftddse \ once: NSE iddrrtrrfudom NSE i \ onced= ith(P t(rfudom.rfudom()*101750)) NSE #tTsis: Messal lvaifmmefaialiuE: Da srl)bded gl sried NSE #tlds.sefai-ail wiaifm (2 y und_n \ onced= \ once_Llec.has_key( \ once)e '''Data ithuc-/pkliatedfDefasahtpae N uncs: NSE [0]fsskide a T NSE [1]fsskideasfV NSE [2] Ip),ea\" (ativ/ede Pyler) NSE [3] A.de Shbacy eejeihkips\ . ts NSE [4] H: Da '''tinfusftddsey und_n \ once: NSE ails_ De_ Minsmtpd_recipio=n dsyslData.get('ails_ De_ Minsmtpd_recipi') NSE ativ_ Minsmtpd_recipio=n dsyslData.get('ativ_ Minsmtpd_recipi') NSE etizerfDefaa= ['Nosu',] NSE #iFiron sotsh if. Def NSE #irsftdd etizdtricmsouoneuco Si Tho coSsnullidpsres arrFuse.peardinfusftddseetiz: NSE y om= ith otes. tt(snulli, '@', 1) NSE ttocsftont(y o) = 2: NSE ttocr t hg mes.hg mes('imgiUSAG:nty de a T:f"%s"' % ith(etizerfDefa)) NSE ttocr tifccdsyslData.get('ativ_tm rec')s== 'u .c' fud bnulli: NSE ttocr t etizerfDefa.ti sri('dunnz') NSE ttocr telse: NSE ttocr t psredrde_a" acc oThoetizerfDefa\ . ts: NSE ttocr t ifcetizerfDefa[0]fThoetizerfDefa\ . ts[drde_a" acc ]: NSE ttocr t aecipio=ndrde_a" acc NSE ttocr t etizerfDefa.ti sri(a" acc) NSE ttocNSE sftsu c['su c_etiz']: NSE ttocr t etizerfDefa[1]f= 'R " oprrt\ . ts austsski'm+eetizerfDefa[0] NSE ttocr tifcnnullid== '': NSE ttocr t et Da _nnullid= '<>' NSE ttocr telse: NSE ttocr t et Da _nnullid= nnulli ttocr t ifcetizerfDefa[0]f== 'uosu': NSE ttocr t etizerfDefa[1]f= "noEsskidean M" NSE ttocr thpfDguratu= ('ip),ea\"=%s;icliaif-ip=%s;ietiz=%s;ien conie- co=%s;i l" oprr=%s ' NSE ttocr t % (etizerfDefa[2],c"m,ietiz,oet Da _nnulli, data.get('ail wiaif'lt''))) NSE ttocr tifcpo-spfmment>= 1: NSE ttocr t mesdata = ith(etizerfDefa[0])m+e"; "m+espfDgurat NSE ttocr t hg mes.hg mes(mesdata) NSE ttocr tet Da u= 'R " oprd-ssk: '+eetizerfDefa[0]s+O'm('m+eetizerfDefa[1]f+')s'm+espfDgurat NSE ttocr tetizerfDefa.ti sri(h: Da ) NSE ttocNSE \ once_Llec[ \ once]f= etizerfDefa NSE ttocr tifcativ_ Minsmtpd_recipioariTE:izerfDefa[0]f== 'S" g': NSE te/p ttocmtpd_rec_trics=nativ_ Minsmtpd_recipi te/p ttoc# Oooisa-eRejees tsh ifdfDefaaiaof htpainne issasve.peardinfu ifcetizerfDefa[3]f== 'rm rec': NSE ttocr t et Da f= "M-spf w ntsult weHuelw : "m+eetizerfDefa[1]f+ ". Pstaneg SPmhttp://www. jedand :///Why?s=etiz;id="m+eetizm+e";ip="m+e"mm+e";r="m+edata.get('ail wiaif') NSE ttocNSE d Whe(( 'rm rec',oet Da lt \ once_Llec )) NSE infu ifcetizerfDefa[3]f== 'dt op': NSE ttocr t et Da f= "M-spf w dt opt weHuelw : "m+eetizerfDefa[1]f+ ". Pstaneg SPmhttp://www. jedand :///Why?s=etiz;id="m+eetizm+e";ip="m+e"mm+e";r="m+edata.get('ail wiaif') NSE ttocNSE d Whe(( 'dt op',oet Da lt \ once_Llec )) NSE infu# Sw"os. sotede Pyler C Def NSE ifcnnullid== '': NSE ttocnf dsyslData.get('ativ_tm rec')s!=n'No_ +': NSE te/p ifcetizerfDefa[3]f== 'rm rec': NSE ttocr t et Da f= "M-spf w ntsult weHuelw : "m+eetizerfDefa[1]f+ ". Pstaneg SPmhttp://www. jedand :///Why?s=etiz;id="m+eetizm+e";ip="m+e"mm+e";r="m+edata.get('ail wiaif') NSE ttocNSE ifcetizerfDefa[3]f== 'dt op': NSE ttocr t et Da f= "M-spf w dt opt weHuelw : "m+eetizerfDefa[1]f+ ". Pstaneg SPmhttp://www. jedand :///Why?s=etiz;id="m+eetizm+e";ip="m+e"mm+e";r="m+edata.get('ail wiaif') NSE ttocNSE ifcativ_ Minsmtpd_recipioariTE:izerfDefa[0]f== 'S" g': NSE te/p ttocmtpd_rec_trics=nativ_ Minsmtpd_recipi te/p ttoc d Whe('rfDefa_mooi',cmtpd_rec_triclt \ once_Llec) ttocNSE d Whe(( etizerfDefa[3],oet Da lt \ once_Llec )) NSE infuelse: NSE ttocnf dsyslData.get('ails_ De_tm rec')s!=n'No_ +': NSE te/p rs o= and iUSAG2(np, nnulli, etiz) NSE te/p mf De_rfDefaa= [rs [0], rs [1]] NSE ttocNSE mf De_rfDefa.ti sri(' co') NSE ttocNSE mf De_rfDefa[0]f= mf De_rfDefa[0].lower() NSE ttocNSE mf De_rfDefa[0]f= mf De_rfDefa[0].capitalize() NSE ttocr tmf De_rfDefa\ . ts,asu cs= get_de a Touris( dsyslData,s'm co') NSE ttocNSE ifcpo-spfmment>= 2: NSE ttocr t hg mes.hg mes('imgiUSAG:nty de a T:f"%s"' % ith(mf De_rfDefa)) NSE infu psredrde_a" acc oThomf De_rfDefa\ . ts: NSE ttocr t sftmf De_rfDefa[0]fThomf De_rfDefa\ . ts[drde_a" acc ]: NSE ttocr t aecipio=ndrde_a" acc NSE ttocr t mf De_rfDefa.ti sri(a" acc) NSE ttocNSE sftsu c['su c_m co']: NSE ttocr t mf De_rfDefa[1]f= 'R " oprrt\ . ts austsski'm+emf De_rfDefa[0] ttocr t sftmf De_rfDefa[0]f== 'uosu': NSE ttocr t mf De_rfDefa[1]f= 'noEsskidean M' ttocr t sftmf De_rfDefa[0]f!= 'uosu' ti.(mf De_rfDefa[0]f== 'uosu'oariTE:izerfDefa[0]f== 'Nosu'): NSE ttocr t hpfDguratu= \ NSE ttocr t ('ip),ea\"=%s;icliaif-ip=%s;ietiz=%s;ien conie- co=%s;i l" oprr=%s ' NSE ttocr t % (mf De_rfDefa[2],c"m,ietiz,onnulli, data.get('ail wiaif'lt''))) NSE ttocr tr tifcpo-spfmment>= 1: NSE ttocr t mesdata = ith(mf De_rfDefa[0])m+e"; "m+espfDgurat NSE ttocr t hg mes.hg mes(mesdata) NSE ttocr tr tet Da u= 'R " oprd-ssk: '+emf De_rfDefa[0]f+O'm('m+emf De_rfDefa[1]f+')s'm+espfDgurat NSE ttocr t mf De_rfDefa.ti sri(h: Da ) NSE ttocNSE \ once_Llec[ \ once]f= mf De_rfDefa ttocr t sft(ails_ De_ Minsmtpd_recipioariTmf De_rfDefa[0]f== 'S" g') ti.(ativ_ Minsmtpd_recipioariTE:izerfDefa[0]f== 'S" g'): NSE ttocr t sftmf De_rfDefa[0]f== 'S" g': NSE te/p ttocttocmtpd_rec_trics=nails_ De_ Minsmtpd_recipi te/p ttoc d Whe('rfDefa_mooi',cmtpd_rec_triclt \ once_Llec) ttocNSE # A.dRejees tails. DefauDefaaiaof htpainne issasve.peardinfu ifcmf De_rfDefa[3]f== 'rm rec': NSE ttocr t et Da f= "M-spf w ntsult weHuelw : "m+emf De_rfDefa[1]f+ ". Pstaneg SPmhttp://www. jedand :///Why?s=mf De;id="m+ennullid+e";ip="m+e"mm+e";r="m+edata.get('ail wiaif') NSE ttocNSE d Whe(( 'rm rec',oet Da lt \ once_Llec )) NSE infu ifcmf De_rfDefa[3]f== 'dt op': NSE ttocr t et Da f= "M-spf w dt opt weHuelw : "m+emf De_rfDefa[1]f+ ". Pstaneg SPmhttp://www. jedand :///Why?s=mf De;id="m+ennullid+e";ip="m+e"mm+e";r="m+edata.get('ail wiaif') NSE ttocNSE d Whe(( 'dt op',oet Da lt \ once_Llec )) NSE infu ifcmf De_rfDefa[3]f!= 'dunnz' eVietizerfDefa[3]f=='dunnz': NSE ttocNSE d Whe(( 'l l sri',cet Da lt \ once_Llec )) NSE else: NSE caiUSd_n \ onced= \ once_Llec[ \ once] NSE sft aiUSd_n \ once[3]f== 'l l sri': ttocNSE d Whe(( 'dunnz'lt'H: Da ualmtadyd gl- sried'lt \ once_Llec )) NSE infuelse: NSE ttocd Whe(( aiUSd_n \ once[3], aiUSd_n \ once[4]lt \ once_Llec )) NSE d Whe(( 'Nosu', 'Nosu', \ once_Llec )) paaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa attloadnMovbe nstal {{{1pattDil oi\su cipi: cf.conFconu= '/etc/aanIS"- /soci5d) and in p' ifcont(sg .argv) > 1: NSE sfthg .argv[1]fTho( '-?', '--etip', '-h' ): NSE print 'upf w:(soci1d) andi[]' NSE hg .ctit(1)gr.tlcf.conFconu= hg .argv[1] dsyslGlobant= deted)bsau.pixPF PCf.conFcon( contrics=ncf.conFcon) attloopcmtad on Hata {{{1ppo-spfmment= dsyslGloban.get('po-spfmmen', 1)gsftpo-spfmment>= 3: hg mes.hg mes('SwhRE ot') \ once_Llec = {'0':'Acce',} \ once_Llec.cstar() data = {}yserPRxo= re.ftmiimh(r'^\s*([^=\s]+)\s*=(.*)$')ewhconf1: NSE serPm= ig .stiin.mtadserP() NSE sftddseserP: bmtak serPm= ith oterith p(serP) NSE sftpo-spfmment>= 4: hg mes.hg mes('RareeserP: "%s"' % serP) peardattsrincsicIf la {{{2 NSE sftddseserP: NSE ifcpo-spfmment>= 4: hg mes.hg mes('twsetomustsrincsicIf l') NSE dsyslDatat= dsyslGloban NSE sftpo-spfmment>= 3: hg mes.hg mes('Cf.con: %s' % ith( dsyslData)) NSE #irrujees te Skiersa {{{3 NSE SkierValuco= Nosue SkierRfasfVs= Nosue SkierValuc, SkierRfasfV, \ once_Llec =oimgiUSAG(data,r NSE ttocNSE \ once_Llec,t dsyslData) NSE ttocnf dsyslData.get('ail oimindOooi')s== 0: NSE ttoc SkierValuco= Nosue SkierRfasfVs= Nosue NSE #irharileedfDefasa {{{3 NSE sft USAGerValuco== 'rm rec': NSE ttocig .stiout.ewine('a" acc=550 %s\n\n' % SkierRfasfV) NSE elsft USAGerValuco== 'l l sri': ttocNSE sft isyslData.get('e-set canad'): NSE te/pttocig .stiout.ewine('a" acc=dunnz\n\n') NSE else: NSE ttocr thg .stiout.ewine('a" acc=l l sri %s\n\n' % SkierRfasfV) NSE elsft USAGerValuco== 'dt op': NSE ttocig .stiout.ewine('a" acc=dt op_if_pervet %s\n\n' % SkierRfasfV) NSE elsft USAGerValuco== 'warn': NSE ttocig .stiout.ewine('a" acc=warn %s\n\n' % SkierRfasfV) NSE elsft USAGerValuco== 'rfDefa_mooi': NSE ttocig .stiout.ewine('a" acc=%s\n\n' % SkierRfasfV) else: NSE ttocig .stiout.ewine('a" acc=dunnz\n\n') NSE #irsrincsidean Ma {{{3 NSE ig .stiout.flush() NSE data = {}yacka iscinut ttoc#ird .svet gta {{{2 NSE m = serPRx.ddich(serP) NSE sftddsem: NSE hg mes.hg mes('ERROC:OCcondlddsemdich serPm"%s"' % serP) acka iscinut ttoc#irsn as do.th ota {{{2 NSE kes = m.group(1)gr.tlTaluco= m.group(2) NSE sftkes ddse [ 'l otocol_ slsu', 'l otocol_tric'lt'queue_id' ]: NSE Taluco= ith otelower(Taluc)l data[kes]f= Taluc gsftpo-spfmment>= 3: hg mes.hg mes('Nking ctit') pypolsetup.py755000064400017500233371537274353777663721555371017062 0ustar kittermakitterma!/usr/bin/envecanIS" coSLli utatiocRh\a ddrrtrretup sddrrtros DESCf= """panIS"- sski By defa\ . ts b Post \ . eyd-sg a ttanIS".""" lretup(aric='panIS"- ', NSE iclfffV='pypo', NSE desch p acc=DESC, NSE ainne ='Scott Kn', NSE ainne _eig i='scott@n@p ', NSE uri='http://www. jedand :///ihasiono', NSE ltcondL='ts. TGNU Gand ar xttcondL', NSE py_modules=[' deted)bsau'], NSE keswn Msi= ['SBy def',' ','eig i'], NSE sch p si= [' '], NSE data_ cons=[(o .nath.join('shono', 'n', 'n1'), NSE tt[' .1']),t(o .nath.join('shono', 'n', 'n5'), NSE tt[' . isy.5']),t(o .nath.join('../etc', 'lanIS"- '), NSE tt[' . isy'])], NSE ss_re scdrsi= [ 'De coniyd-s Swhtus :: 5 - e-sdu" acc/SwhblL', 'Environyd-s ::nNo Input/Output (Daemat)', 'I-sgte\" Audienced::nDe conidrs', 'ttcondL::nOSI Apnall\" ::nts. TGNU Gand ar xttcondL(GPL)', 'NhtuU GaLanguf w ::nEnglypp', 'Oidr. ts_tS-spfa ::nPOSIX', 'Pgging mts_tLanguf w ::ntanIS"', 'Topr x::OCcmmuni cipis :: Eig if::uails TradanrrtrAgd-ss', 'Topr x::OCcmmuni cipis :: Eig if::uFil yss', 'Topr x::OihasionofDe coniyd-s ::OLpave ies ::ntanIS" Modules' NSE ] )ppypol deted) and. isy.5000064400017504010371537275161177200101555371017062 0ustar kittermakitterma\" .\" Swhs. dsenaeamblL: .\" ======================================================================== .de Sh \" Subs cancccet D ote.br .sftt .Sp .rPm5 .PP \fB\\$1\fR .PP .. .de Sp \" Verti csspaced(p.n cweje\"'teuco .PP) .sftt .sp .5v .sftn .sp .. .de Vb \" Beg ticlb cim text .ft CW .rf .rPm\\$1 .. .de Ve \" Eriniclb cim text .ft R .fi .. .\" Slogup som te ascisoShuradal cipis esenaept AcIP ith ote.fu\*(--tgged .\" gnad a cunbmtakNo usdash,u\*(PItgged.gnad pi,u\*(L"tgged.gnad a left .\" iouo usquote, ese\*(R"tgged.gnad a Copyiouo usquote.fu\*(C+tgged .\" gnad a ni oShC++.fuCapital om ga htppitaessadocunbmtakNo usdashes es .\" es rvfRh\awo"'tebte.vg iNo u.fu\*(C` ese\*(C' ctpfiThao `'min nroff, .\" ddshwithinhuroff, austuco yloe C<>. .tr \(*W- .dshC+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p' .setn \{\ .E ds --t\(*W- .E ds PItpi .E sft(\n(.H=4u)&(1m=24u) .ds --t\(*W\h'-12u'\(*W\h'-12u'-\" iiNo o 10tpiich .E sft(\n(.H=4u)&(1m=20u) .ds --t\(*W\h'-12u'\(*W\h'-8u'-\" iiNo o 12tpiich .E ds L"t"" .E ds R"t"" .E ds C` "" .E ds C' "" 'br\} .el\{\ .E ds --t\|\(em\| .E ds PIt\(*p .E ds L"t`` .E ds R"t'' 'br\} .\" .\" InspyiekidegWontr: Mesurny eej,cwe'ed.gTGNU ng iooixicIf ies o witioS+oaus .\" eitles (.TH),uE: Da sr(.SH),usubs canccsr(.Sh),u or sr(.Ip), eseiooix .\" cIf ies markm_d loe X<>a ttOD.E Oft iurfiltyou'ed.on asssal xPF Pi.Shr.\" output yiurfilfme wiom tmeanwitful fashous. .sft\nF \{\ .E de IX .E tm Inoix:\\$1\t\\n%\t"\\$2" .. .E nr % 0 .E S+oFr.\} .\" .\" Fustnroff,esurn off j sc cipi.E Alwaysesurn off hyp.n cipi;of makes .\" wayssso many mWonakeshinhuechni csdocuyd-ss. .hy 0 .sftn .na .\" .\" Accaifm rkopt Acianccsr(@(#)ms.acc 1.5 88/02/c6 SMI;o coSUCB 4.2). .\" Fear.futui.E Sn asyiurfilf.E No ucor-b Poi oNo use ies. .E \" fud w fcis gssfustnroff fiTharoff .sftn \{\ .E ds #H 0 .E ds #V .8m .E ds #F .3m .E ds #[ \f1 .E ds #] \fPr.\} .sftt \{\ .E ds #H ((1u-(\\\\n(.fu%2u))*.13m) .E ds #V .6m .E ds #F 0 .E ds #[ \& .E ds #] \&r.\} .E \" s\ . e accaifssfustnroff fiTharoff .sftn \{\ .E ds ' \& .E ds ` \& .E ds ^ \& .E ds , \& .E ds ~ ~ .E ds /r.\} .sftt \{\ .E ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u" .E ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u' .E ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u' .E ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u' .E ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u' .E ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u' .\} .E \" troff fiTh(daisy-p.nel)tnroff fccaifs .dsh: \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V' .dsh8 \h'\*(#H'\(*b\h'-\*(#H' .dsho \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#] .dshd- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H' .dshD- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u' .dPi.S \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#] .dshTS \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#] .dshae a\h'-(\w'a'u*4/10)'e .dshAe A\h'-(\w'A'u*4/10)'E .E \" ir *oCExcseaustvroff .sftv .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u' .sftv .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u' .E \" fsresuwedfDolu) fordeoi osr(crtentedmpr) .sft\n(.H>23 .sft\n(.V>19 \ \{\ .E ds : e .E ds 8 ss .E ds o a .E ds d- d\h'-1'\(ga .E ds D- D\h'-1'\(hy .E ds .S \o'bp' .E ds TS \o'LP' .E ds ae ae .E ds Ae AE .\} .rm #[ #] #H #V #F C .\" ======================================================================== .\" .IX Title " deted and. isy 5" .TH deted and. isy 5 "iic9-10-31" .SH "NAME" panIS"- \- pure-tanIS" By defa\ . ts daemat austsski Ski ote.SH "VERSION" .IX H: Da u"VERSION" 0\.7\.2 e.SH "USAGE" .IX H: Da u"USAGE" Upf w: (soci1d) andi[/etc/a /soci5d) and in p] e.SH "OTHER DOCUMENTATION" .IX H: Da u"OTHER DOCUMENTATION" Tsis:docuyd-s5) forassuydsoprejon as lad By def's README_FILES/ SMTPD_POLICY_READMEentedonofgTGNU lly fcmiliard loe SnullidP . ts Framework (ssk)in miniRFC 44c6 y berguration n 1(soci1d) andinall,d5sfgTGNU l opn(5) fordocuyd-s5) foriti.gsis packf w. e.SH "SYNOPSIS" .IX H: Da u"SYNOPSIS" panIS"- opn(5)5sf loe a dil oi \ ollededf.conf(5) for confntedlretncsidil oi df.conf(5) foroi(Excsethacoonofpitaeif fpeedf.conf(5) forstallcanddsebeey und forp.co oi(Excsee\" b te angtaebyte angwithone \ \ ollede df.conf(5) forstals ti.gsrough gnaoneaatpath/tomIoral ystc-Iedf.conf(5) for stal. e.SH "DESCRIPTION" .IX H: Da u"DESCRIPTION" Cf.conf(5) foroi(Excsearnfigsch beiTE:re eseio fpeedf.conf(5) forstal nall,d5dlyloe fpeepackf w.forp.cnall,d5dlsetup.py \ \ olls fpdomdf.conf(5) for staleio /etc/a /. eAddiancc lly,.smresuWononeacert ThoIPsatter es o coShngeeUSAGs dombsauorted. rp.cfpdomn pf w fiThanslsa . e df.conf(5) forstal shuwets tspaddi/tomuse.pe.SH "OPTIONS" .IX H: Da u"OPTIONS" e.SH "LOGGING" .IX H: Da u"LOGGING" "po-spfmmen" iscrols fpseam> t ncsiinspaddiiejeihggtaebytfpeep . ts b Post.perp.cdil oi, 1,asug" ttpo-spgwithm-spf ws, jhbacicEsskide a Tem ese"ral,s gTGNU ngd.gsrough fpeep . ts b Post.fulldomTalucoe\" b tincdeasgd.up/tom5 (Talucs highoShun\" 5tgged.ix meauco \" e = , ssingged.ix msug any addiancc l inspaddiiej). ppo-sp lmment2 addtpae othm-spf wrsftdd cliaifnIS"esse (IPsatter eo coSsmrch fpeedf.n cancc waomde), ails. Defatter es, ti.ativ/EHLOdtricmdom l" oprby fpeep . ts b Post, esesug" sskide a Temiti.each ails. Defaesesh if. Def. ppo-sp lmment3.gTGNU ngtpae othm-spf wreach i(C fpeep . ts b PosttewhREs es each i(C f ctits, aomweed.aseihggoneaanviewta nspyieexa-eRet Da fd Whetaess By defatombed gl sriednintompyiem-spf w.fuEach i(C fpeep . ts b PosttewhREs,ppo-sp lmment3.alsoesug" fpeedf.conf(5) forinspaddiiejepitaebytfpeep . ts b Post.pepo-sp lmment4esug" fpeedf . ete data retn l" oprby By defaviatfpeep . ts interfacedaesep.n cmustsrincsimustsrf ladom lad.pepo-sp lmment5 htppitaessado-sp Movbe nstal rixPF P otdaesee\" mooisbe retnTho ouridfud ddseviatfpeeMovbe nstal.peIftpo-sp lmmenthtp0,tfpen fpeep . ts b Posttsug" "ral,s mooi.peDil oi: ppo-spfmment= 1 e.SH "TEST OPERATION" .IX H: Da u"TEST OPERATION" erp.cp . ts b Postte\" mpNU ng iopaegist mooisClas.ulldomaens soprejtog SPm.Shrpot),ea l impa-eReftsski Ski ot iopyiurm tsug" ludries rm recwithm (2H: Da srarnf gl sriedninhm-spf ws, ssinm-spf w dtloprrladomddseaffult w.ulldo ClasadomddseenNo uby dil oi.fuloeenNo u f , retnail oimindOooio= 0.peDil oi: ppol oimindOooio= 1 e.SH "ativ/EHLOdCHECKING" .IX H: Da u"ativ/EHLOdCHECKING" sh if. Def rm recwejep . ts oi(Excsearn: picy_Not_S" g (pol oi) - RctionrsftauDefaaddseS" g/Nosu/d con Ne. Unlik tails Def Ski ot, es rvrarnfdd swhs. dsee- tuco caes ows rvraesh if. Def1second ddseS" geif fpersadom\" sskidean Mriti.gs tsh iftricm(uradaparnntcf-set F ot, iti.exa . e,adomddseaorissue)inTechni clycfpdomoi(ExcadomddsefuclycRFC 44c6 df . iantcP oceees tails. Defip),ea\" domndatory, ssinativ/EHLOddom re stron io fpeeSMTP iiNsuguw fiThansrsadomddf ga" a csdeasfVjtogwaontedfDo SP s S" Mils. DefeUSAGs df.gs tsh if. Def1gged.almtadydeauco pyiem-spf watombe ntsult w.pei tgn Ne - RctionrS" sh ifi tgn Ne eViF Ne. nTechni clycfpdomoi(Excadomdds fuclycRFC 44c6 df . iantcP oceees tails. Defip),ea\" domndatory, ssinativ/ EHLOddom re stron io fpeeSMTP iiNsuguw fiThansrsadomddf ga" a csdeasfVjto waontedfDo SP s S" Mils. DefeUSAGs df.gs tsh if. Def1gged.almtadydeauco pyi m-spf watombe ntsult w.peF Ne - RctionrS"lycS" sh ifF Ne. nTechni clycfpdomoi(ExcadomddsefuclycRFC 44c6 df . iantcP oceees tails. Defip),ea\" domndatory, ssinativ/EHLOddom re stron io fpeeSMTP iiNsuguw fiThansrsadomddf ga" a csdeasfVjtogwaontedfDo SP s S" Mils. DefeUSAGs df.gs tsh if. Def1gged.almtadydeauco pyiem-spf watombe ntsult w.peu .c - Oooiontsult sh ifF Neriti.u .c nnullid(ssk Cs_re c).fulldomiPi.Shrapnalach pitaebytfpeepre-RFC 44c6 rt openced\ . eyd-sacipioariTmany csimustpre- RFC et c sc cipie.fuUco of di/stantcfpdomoi(Exca(icy_Not_S" g eViF Ne)rarn nat opt w)miPihighoiontre\"ete\".peF lco - Neva fd tionrS" sh i, ai sriRet Da fmooi.ulldomiPiplg ab psredrdt-SMTP apamnsta yssmbsch aseSpamAspf P o.peuo_ + - Neva f. Def1sh i.fulldomiPionoiontre\"ete\" df.prejarnf clwithone p . ts b Postttwiced(oncedfti.ativfeUSAGs ariToncedfti.ede Pyler)lyloe fwo dif opent df.conf(5) forstals.fulldomapnalach iPiplg ab tomgetnbooe fpeeativf es Mils. DefE: Da sr gl sriedntomI m-spf w.peDil oi: pativ_tm reco= icy_Not_S" g e.SH "ativ/EHLOdPASS RESTRICTION" .IX H: Da u"ativ/EHLOdPASS RESTRICTION" sh ifS" g Rtpd_recipioaens sointeg(5) foryloe t's am By defafcca g isclols bycnallioneaa ucormbsau tm_dtricmof dedrdtdefafcca g mtpd_recipiotombe aau tm_dtomI m-spf wep.n cmustativfeUSAGonearfDefa iPiS" g.forp.cindc ctrorepd_recipiomhbo \" aecipioasept AcIP y be. By defaSMTP b Posttfcca g whblLtfcca g(5)m ese"xplaAcIP io fpe By defaRESTRICTION CLASS README.E Note: Aeetizm Minorepd_recipiogged bo pyied WhetaeauDefaalvai df.gs t tf DefauDefaawcondleauco pyiem-spf wato be ntsult w.pe Exa . e: pativ_ Minsmtpd_recipio=netizenMined_ eDil oi: pNosue .SH "ede Pyler CHECKING" .IX H: Da u"ede Pyler CHECKING" ails. Defau recwejep . ts oi(Excsearn: picy_Not_S" g - RctionrsftauDefaaddseS" g/Nosu/d con Ne. Tpdomoi(Exc domddseRFC 44c6 df . iantcP oceees t t loe a" sskiNeutU GfauDefaaig wmtat w dif opentlycfpa" t loe noEsskidean Mm esei tgn Ne de a Tem rnfddtmbsauoned rgR auco m Ne de recwej.E Globantuco of fpdomoi(Excadomddsentre\"ete\".uUco pNU-rixPF mifsneedwdl(pNU-rixPF mupf w dtsch beiTbtizw).pei tgn Ne - RctionrS" sh ifi tgn Ne eViF Ne. nTechni clycfpdomoi(Excadomdds fuclycRFC 44c6 df . iantcP oceei tgn Ne de a Tem rnfddtmbsauoned rgR auco m Ne de recwej.E Globantuco of fpdomoi(Excadomddsentre\"ete\".uUco pNU-rixPF mifsneedwdl(pNU-rixPF mupf w dtsch beiTbtizw).peF Ner(pol oi) - RctionrS" Mils. DefF Ne.peF lco - Neva fd tionrS" Mils. De, ai sriRet Da fmooi.uulldomiPiplg ab psre drdt-SMTP apamnsta yssmbsch aseSpamAspf P o.peuo_ + - Neva f. Def1Mils. De/R Whe Path.fulldomiPionoiontre\"ete\" df.prej arnf clwithone p . ts b Postttwiced(oncedfti.ativfeUSAGs ariToncedfti.ede P yler)lyloe fwo dif opent df.conf(5) forstals.fulldomapnalach iPiplg ab tomgetn booe fpeeativf es Mils. DefE: Da sr gl sriedntomI m-spf w. It dfondlalsoebe pitaessadocativfeUSAGoneaonoio(be auco ativfeUSAGoneahatpae owlidp lco drdianad riskcfpa" Mils. DefeUSAGone), ssintldomapnalach wcondlddsebeeyuclycRFC 44c6 df . iantcP oceees tails. Defip),ea\" domndatory.peDil oi: pails_ De_tm reco=nF Nee .SH "ede Pyler PASS RESTRICTION" .IX H: Da u"ede Pyler PASS RESTRICTION" ails. DefS" g Rtpd_recipioaens sointeg(5) foryloe t's am By defafcca g isclols bycnallioneaa ucormbsau tm_dtricmof dedrdtdefafcca g mtpd_recipiotombe aau tm_dtomI m-spf wep.n cmustativfeUSAGonearfDefa iPiS" g.forp.cindc ctrorepd_recipiomhbo \" aecipioasept AcIP y be. By defaSMTP b Posttfcca g whblLtfcca g(5)m ese"xplaAcIP io fpe By defaRESTRICTION CLASS README.ENote: Ae tf Def Minorepd_recipiogged bo pyied WhetaeauDefaalvai df.gs tetizmauDefaawcondleauco pyiem-spf watombe ntsult w.peExa . e: p _f De_ Minsmtpd_recipio=nmf De_ Mined_ eDil oi: pNosue .SH "Do TheSp c sc R " oprrtP . ts" .IX H: Da u"Do TheSp c sc R " oprrtP . ts" Uswithondomoi(Exc,pae N uncs rixPF eme\" b tpt AcIP y beet c ips\ixPF P ot p.n cm-spf wsadocddseS" gessk.fulldome\" b tplg ab psrere\"onoiospoof w dixPF emthacoonofddseyetnpd arshwithsskidean Msf loe \-aenin mt c sc lly,.if tf DefaerixPF min ondom N unhatpaeNeutU G/i tgn Ne de a T,u o1gged.be ntsult w (asaiaof hadlafF NerrfDefa).fulldomoi(Excadomddsebsauorted bycRFC 44c6, ssinifsneedwd,of htpbetsoShusadocinrS" dedNU-rixPF mbacinorathoShun\" globanoi.peExa . e: pRction_Not_S" g_DixPF em= aol@p ,hotm (p eDil oi: pNosue .SH "Pnat),e n e g e-sPF P ot" .IX H: Da u"Pnat),e n e g e-sPF P ot" P . ts austrm recwithHuelw sski tgn e g oi(Excsearn: pTrue - Rctionrpyiem-spf wadf.gs tsskide a T (fti.ativfti.ede Pyler)lis tgn e g.fulldomhatpaehighoShshort-dp lco drdianad risk, ssindoesarfDefa in nnullisfgTtcwithfeedbackmthacogs yjon asas\ixblLmlyloe fpeirhsskidean M.peF lco - Tmtati tgn e g anslsa eoasenoEsskidean Mm t aenin lldomiPi issWontt yloe fpeepre-RFC upf w (fpeepre-RFC tricmiti.gsis "ral, waom"Un re ").perpisahtpaeglobanmoi(Excathacooffultsnbooe ativf es Mils. Defbt ss ows n eUSAGs iti.gsacobt ss\onofenNo u.orp.conoiopoShst ss\sTtcwithgsacoe\" oprr-r,d5ntpisahtpails_ De/ativ_tm reco= F lco/ eDil oi: pe tgn e g_tm reco= F lco e.SH "Teddrr dy n e g e-sPF P ot" .IX H: Da u"Teddrr dy n e g e-sPF P ot" P . ts austdt optwithm-spf wshHuelw sskid con = oi(Excsearn: pTrue - Rctionrpyiem-spf wadf.gs tsskide a T (fti.ativfti.ede Pyler)lis d con = .fulldomiPi.Shhuradiancc l upf w ariTEasenallentplg ab in reduc ot fccap oncedcs unwa-sg am-spf wsin mome i(Cs apamnnnullisfdocddsed ri.uu mome i(Cs bytfpee i(C I m-spf wedom lf ieThanslsmpioneaIPTEasedecinrS"tomI DNS RBLdaesee\" fpen be ntsult w.fulldomiPiddsetp.cdil oi be auco f ht drdsiblLty beeom tDNS "ral,s thacoonofss_re scddoase"Teddrr dy"opoShRFC tombe pNUn),e io fpeesondLthacogs yjrequire mpNU norointervaifipiotom ir *oC.perpisahtpaeglobanmoi(Excathacooffultsnbooe ativf es Mils. Defbt ss ows n eUSAGs iti.gsacobt ss\onofenNo u.orp.conoiopoShst ss\sTtcwithgsacoe\" oprr-r,d5ntpisahtpails_ De/ativ_tm reco= F lco/ eF lco - Tmtatid con = anslsa eoasenoEsskidean Mm t aenin lldomiPitp.cdil oi rgRminimizedp lco drdianad risk.peDil oi: pd con = _nlic+o= F lco e.SH "e-set canadEsski +" .IX H: Da u"P-set canadEsski +" P-set canadEsskieUSAGonea-i +jtog SPmifcmils.snntcf Deftp.cdilAcIP IP atter eowcondlp" g.forpdomiPiplg ab psreoutbwsetoMTAMessaavoidlsmpioneamils.gsac wcondlF NerhngeeUSAGs p.n cail lvaw.fuDishblLtativfeUSAGoneap.n cuswithondo oi(Exc. It'Pionoiopot),ea loioplg ab psreMils. DefeUSAGone.rhngeR " oprd h: Da srarnfddseadd5dly.n cmudomoi(Excadompita. P-set canadE= 192.168.0.4 eDil oi: pNosue .SH "LOCALrhngeBYPASS LIST" .IX H: Da u"LOCALrhngeBYPASS LIST" Dorix meUSAGEsskipsresu checksatter es o-sattjtog kipsatter es otog kipssski iti.interc l networks sftposirew.fDil oisrarnfswhs. dseIPv4f es