postfix-policyd-spf-perl-2.007/0000755000175000017500000000000011042506770015461 5ustar scottscottpostfix-policyd-spf-perl-2.007/test_cases0000644000175000017500000000632011042506525017540 0ustar scottscott#HELO and mfrom pass request=smtpd_access_policy client_address=72.81.252.18 helo_name=mailout02.controlledmail.com sender=scott@kitterman.com recipient=bogus@kitterman.org queue_id=q1234 instance=1 #HELO fail and mfrom pass request=smtpd_access_policy client_address=72.81.252.18 helo_name=mailout00.controlledmail.com sender=scott@kitterman.com recipient=bogus@kitterman.org queue_id=q1234 instance=2 #no HELO and mfrom pass request=smtpd_access_policy client_address=72.81.252.18 helo_name=72.81.252.18 sender=scott@kitterman.com recipient=bogus@kitterman.org queue_id=q1234 instance=3 #helo pass and mfrom pass request=smtpd_access_policy client_address=72.81.252.19 helo_name=mailout00.controlledmail.com sender=scott@kitterman.org recipient=bogus@kitterman.org queue_id=q1234 instance=4 #helo pass and mfrom none request=smtpd_access_policy client_address=72.81.252.18 helo_name=mailout02.controlledmail.com sender=scott@yahoo.com recipient=bogus@kitterman.org queue_id=q1234 instance=5 #helo pass and mfrom null request=smtpd_access_policy client_address=72.81.252.18 helo_name=mailout02.controlledmail.com sender= recipient=bogus@kitterman.org queue_id=q1234 instance=6 #helo fail and mfrom null request=smtpd_access_policy client_address=72.81.252.19 helo_name=mailout02.controlledmail.com sender= recipient=bogus@kitterman.org queue_id=q1234 instance=7 #Multi-recipient dunno request=smtpd_access_policy client_address=72.81.252.18 helo_name=mailout03.controlledmail.com sender=scott@kitterman.com recipient=bogus2@kitterman.org queue_id=q1234 instance=3 #localhost bypass request=smtpd_access_policy client_address=127.0.0.1 helo_name=mailout03.controlledmail.com sender=scott@kitterman.com recipient=bogus2@kitterman.org queue_id=q1234 instance=12 #Helo Neutral and mfrom pass request=smtpd_access_policy client_address=72.81.252.18 helo_name=aol.com sender=scott@kitterman.com recipient=bogus2@kitterman.org queue_id=q1234 instance=13 #Whitelist request=smtpd_access_policy client_address=192.168.0.1 helo_name=mailout03.controlledmail.com sender=scott@kitterman.com recipient=bogus2@kitterman.org queue_id=q1234 instance=14 # multi-recipient mfrom fail request=smtpd_access_policy client_address=72.81.252.19 helo_name=mailout00.controlledmail.com sender=scott@kitterman.org recipient=bogus2@kitterman.org queue_id=q1234 instance=4 # multi-recipient HELO fail and mfrom pass request=smtpd_access_policy client_address=72.81.252.18 helo_name=mailout00.controlledmail.com sender=scott@kitterman.com recipient=bogus2@kitterman.org queue_id=q1234 instance=2 # No SPF request=smtpd_access_policy client_address=72.81.252.18 helo_name=mailout00.yahoo.com sender=scott@yahoo.com recipient=bogus2@kitterman.org queue_id=q1234 instance=15 # Permerror reject request=smtpd_access_policy client_address=72.81.252.18 helo_name=elvey.com sender=scott@elvey.com recipient=bogus2@kitterman.org queue_id=q1234 instance=16 # None and None request=smtpd_access_policy client_address=71.17.127.27 helo_name=71-17-127-27.estv.hsdb.sasknet.sk.ca sender=dalbecbhoj@accessamericatransport.com recipient=hostmaster@jamux.com request=smtpd_access_policy client_address=200.120.31.84 helo_name=autohaus-knabe.de sender=daniel.hahnomjy@autohaus-knabe.de recipient=jam@jamux.compostfix-policyd-spf-perl-2.007/CHANGES0000644000175000017500000000561711042506525016463 0ustar scottscott# Legend: # --- = A new release # + = Added a feature (in a backwards compatible way) # ! = Changed something significant, or removed a feature # * = Fixed a bug, or made a minor improvement --- 2.007 (2008-07-25 22:24 -0400) * Update documentation and examples, see Debian bugs 492420 and 492421 for details. --- 2.006 (2008-07-18 00:49 -0400) * Add default logging to make it easier to determine what SPF identity is being used --- 2.005 (2007-12-14 23:29 -0500) * Decreased timeout for DNS queries via UDP to 10s from Net::DNS::Resolver's default of 40s (by doing only 1 retransmission rather than 3 after a query fails). Until Mail::SPF provides an explicit option for this, we just create our own resolver object and make Mail::SPF use that. * Adjust master.cf recommendations in INSTALL for new recommendations from Wietse Venema (postfix-users mailing list). * Other minor documentation cleanup --- 2.004 (2007-04-18 15:36) * Fix header text to work with Postfix (access 5 requirements). --- 2.003 (2007-04-17 08:50) * Minor documentation cleanup. + Add handler for list of relay addresses to bypass. --- 2.002 (2007-02-20 05:45) * Added Julian Mehnle to copyright statement. * Implemented results cache in order to prevent redundant SPF checks in multiple invocations per message instance. This also enables us to prepend a "Received-SPF" header only once per message instance (as opposed to once per recipient address). * Minor code and comments clean-up. --- 2.001 (2007-02-08 00:36) * Safer check for local connections. --- 2.000 (2007-02-07 17:07) * Change reject reply to 550 for RFC 2821 compliance. * Skip SPF checks for local (127.) connections * Clarified wording for some verbose logging. * Added more information about HELO checking to README. --- 1.990 (2007-02-03 16:00) postfix-policyd-spf-perl: ! Changed from Mail::SPF::Query to Mail::SPF for RFC 4408 compliance ! Removed Testing handler (usage was undocumented). ! Removed debian/ dir from release tarball (still provided via SVN). * Simplified logging. Policy server is less chatty. Logs are clearer. --- 1.08.1 (2007-01-10 21:00) postfix-policyd-spf-perl: * Minor and purely cosmetic code clean-up. Miscellaneous: * Updated README file with new website URL and copyright. * Added LICENSE file as an explicit copy of the GPLv2. Debian: * New maintainer: Scott Kitterman * Priority: extra (was: optional) * Removed Build-Depends-Indep: perl, as there really is no need for it. * Depends: libversion-perl * Updated debian/copyright. --- 1.08 (2006-06-17 20:00) * Added Debian package control files. * Moved documentation from executable into separate README and INSTALL files. Improved documentation. * Minor and purely cosmetic code clean-up. # $Id: CHANGES 204 2008-07-26 02:30:51Z Scott Kitterman $ # vim:tw=79 sts=2 sw=2 postfix-policyd-spf-perl-2.007/README0000644000175000017500000000766111042506525016351 0ustar scottscottpostfix-policyd-spf-perl 2.007 A Postfix SMTPd policy server for SPF checking (C) 2007-2008 Scott Kitterman (C) 2007 Julian Mehnle (C) 2003-2004 Meng Weng Wong Thanks for contributions by various members of the SPF project ============================================================================== postfix-policyd-spf-perl is a Postfix SMTPd policy server for SPF checking. It is implemented in pure Perl and uses the Mail::SPF CPAN module. Note that Mail::SPF is a complete re-implementation of SPF based on the final SPF RFC, RFC 4408. It shares no code with the older Mail::SPF::Query that was the original SPF development implementation. If you are upgrading from on older (<< 2.000) version of this policy server you will need to install Mail::SPF. This version of the policy server always checks HELO before Mail From (older versions just checked HELO if Mail From was null). It will reject mail that fails either Mail From or HELO SPF checks. It will defer mail if there is a temporary SPF error and the message would othersise be permitted (DEFER_IF_PERMIT). If the HELO check produces a REJECT/DEFER result, Mail From will not be checked. If the message is not rejected or deferred, the policy server will PREPEND the appropriate SPF Received header. If Mail From is anything other than completely empty (i.e. <>) then the Mail From result will be used for SPF Received (e.g. Mail From None even if HELO is Pass). The policy server skips SPF checks for connections from the localhost (127.) and instead prepends and logs 'SPF skipped - localhost is always allowed.' If you have relays that you want to skip SPF checks for, you can add them to relay_addresses on line 78 using standard CIDR notation in a space separated list. For these addresses, 'X-Comment: SPF skipped for whitelisted relay' is prepended and logged. IPv6 localhost is also skipped. Error conditions within the policy server (that don't result in a crash) or from Mail::SPF will return DUNNO. See INSTALL for installation instructions. Usage: policyd-spf-perl [-v] This documentation assumes you have read Postfix's README_FILES/ SMTPD_POLICY_README. Logging is sent to syslogd. Each time a Postfix SMTP server process is started it connects to the policy service socket, and Postfix runs one instance of this Perl script. By default, a Postfix SMTP server process terminates after 100 seconds of idle time, or after serving 100 clients. Thus, the cost of starting this Perl script is smoothed out over time. The default policy_time_limit is 1000 seconds. This may be too short for some SMTP transactions to complete. As recommended in SMTPD_POLICY_README, this should be extended to 3600 seconds. To do so, set "policy_time_limit = 3600" in /etc/postfix/main.cf. Testing the policy daemon ------------------------- To test the policy daemon by hand, execute: % /usr/local/lib/policyd-spf-perl Each query is a bunch of attributes. Order does not matter, and the daemon uses only a few of all the attributes shown below: request=smtpd_access_policy protocol_state=RCPT protocol_name=SMTP helo_name=some.domain.tld queue_id= instance=71b0.45e2f5f1.d4da1.0 sender=foo@bar.tld recipient=bar@foo.tld client_address=1.2.3.4 client_name=another.domain.tld [empty line] The policy daemon will answer in the same style, with an attribute list followed by a empty line: action=550 Please see http://www.openspf.org/Why?id=foo@bar.tld&ip=1.2.3.4& receiver=bar@foo.tld [empty line] To test HELO checking sender should be empty: sender= ... More attributes... [empty line] If you want more detail in the system logs change $VERBOSE to 1. License ------- postfix-policyd-spf-perl is free software. You may use, modify, and distribute it under the GNU GPL (version 2 or later); see the LICENSE file. postfix-policyd-spf-perl-2.007/LICENSE0000644000175000017500000004310311042506525016465 0ustar scottscott GNU GENERAL PUBLIC LICENSE Version 2, June 1991 Copyright (C) 1989, 1991 Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. Preamble The licenses for most software are designed to take away your freedom to share and change it. By contrast, the GNU General Public License is intended to guarantee your freedom to share and change free software--to make sure the software is free for all its users. This General Public License applies to most of the Free Software Foundation's software and to any other program whose author faierbatim lic-j/Softwaj/Soft to sco maoftwa425P 0211 D all itl its users. This Genecalhost th is fPF chp * C whoseendede and tg 10 d. Wy emwre-peaknse olicyd-spf-pecit oaIndep noton abou to gua, butitei per Ouitl its users. This Genss for most softwa free softwa you hs alloon ofto guarantmitted to cistribnse olicyd-spf-pe (r freedrgthe s erbatects to i [emin't, If you ha.2.3.4&yd-urce4408. alsF cgconit i [empty it, If you hasF ceedom tware--to make aland tricibnse it ined REolicye and tg;er does you haknowou hasF cdoeparateIf Mas d. Toocol_nullended2, Juicit ocy serve free.tltedor some s yoe sbid 's 110- to mnesigneparate2, Juie alion'sksignepoe soreand distr2, Jui.d see.tltedor some ort GPLeryonerebiae.tlpsomibilkipamble ignei [ mitted to cistribnse ware--to makecondi [eare. ally ace se docume,di [emitted to cistribnse suEacaye and tcithem li nd tiie ale sof daeskip Smm (ogilloon oer=foo@bas uses onl2, Juiet wilumentatirl is frF use ree softwa yo ony 10 ,a.2.3.4&y alsF cgconerved-urce4408.acti doip Smm (oall ks for,arateI USoftwo onyaknowo onir 2, Jui.d. Weocol_nullended2, Jui It shwoe teps: (1)ed Julian Mware--to makece lo(2)nsefof thiserbatim copiewhiEacgillocumenleg us1 USAng onlryone i, mitted to ce l/e e. aware--to mak.d. Al00 se soepolither pSofcol_nul* Updatendeicit ove relaye reenerebia wa yoeA 02110- and s on stwa yo onrked. Iover is y an explito share and c (DEFER_I sco e. itributSMTPd (e.lsoundatlay entatcit mpty itsoer=foo@bas layknowo oMaila yo onyntatiot, but haresuery th seo wa yo's scolowemal PuIf theribut the m result, ep lnullation osuery th ther pr') u [-v] i.d. Fy thl You yEolicye and tot, ththis, sofands ont* CbutSMmost ofpis, r serWeemin'lion'voidoes notom ro oMaiftwitted toons by ato shae and to resuindividu: perobebiaepis, r Pream,ou weefoull).ktfix/maae and towill P Ifry. Toocoache ixplicit otatio = Fiprocchat wa yo's fpis, rSmm (ob PreaCommeneA 02110'sure thand atioot PreaCoat cha.d. per=fateI USofth new skipped.r skippytfi,emitted to* Updat e. ic * Moan atg it GNU GENETERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATIONd. 0.t is 1his General Public 's scolnd to skim licFix hehiEacand bias aioot to plaheribut00 cliJulian Mhs no csaydocumen000 secmitted to d and distrI USofe verbatl its users. This Gen. "Polnd t",he att, ep noblic 's ssuEaccolnd to skFix You maa "Fix hlementation oPolnd t" mert ect mailon oPolnd tcondss snd iv vecFix h and dliJulian Mlaw: wa yoiblic sayscriFix hand biatfix/maiPolnd tconds @accil::SPFit, ct mailopy and d skFIt s e. ic * sce l/e ort GPLdion fr.4 ltomuagn. (Hnrky tf Orde ort GPSTALLal Pcluic LFIt scri, setINSTALL istrI US " e. ic * " th /poli Prea defer list. depen"ume"g iAul*vkipambl From is anypytfi,emitted to* Updats e. ic * s forbuti maoftwa42verbathis Gen;o onynmake utsi Fiproftnypn. aullaf runatfix/maiPolnd tcd. If thltedor rejr does n utp * s for coPolnd t o maoftwand thifiprofand Minor nds itto ce Fix hlementation Polnd tc(ived eandnense tattfixbe em = Fi42vrunatfix/maiPolnd t). Whem li wa yoibliruor m7.) ane] a yo oniPolnd tcattr.d. 1. is free ne is permitted to copy and distribnse warePolnd t'sed-urce4408.epenu ha.2.3.4&yit, (thas smtwiutciase tarbawa you hs ndspicuouslis perr will PREPlisprs. n'le] epoline is prr will PREP liJulian Moot to permitclaim"Recfover is y; keepion aulluses on oot toso oMaiftfesultstis 1his Generdation onlybsetfix ruas sver is y; rdatgillo's softwarer=foo@bas se warePolnd te thae as an s 1his Gen al03-2 It sharePolnd t.d.is free nedrgthf dae an expo physip SPaullafe ort noton a thae ece loys free allendedovides sefof ver is y col_nul* Upu wexeedom to sof dae.d. 2. is free e. aendedhae asrdistribnse warePolnd tcondss s@accil: SPFit, waud.r smon a tFix hlementation oPolnd t,ith new wce lomitted to csuEac e. ic * sc skFix and distrI USofe vSnul* Up1 abmaociase tarbawa you h. IPv6meellusesse warsenew skippedwed by a) is frF uscaand maeo e. itriME anlryoner y col it n Moot toNet::Dolictfix/m you hascyd-spfon of leser does nottix ruas sscyd-s.ed by b) is frF uscaand as svix /m you hamitted to c skprs. n', If yodundantwhs c skiaepirtcand biasc skissnd ivspf-perlwarePolnd tcondss protocirtc onrkof, of r PreaCoAddetwhs catFC 44edrgth fr.ses oirdprotocirtribn and distrI USofe verbathis Gen.ed by c)(DEFER_I e. itricolnd ton * pern asrogramon st Pubra emv othdantwh emrunskip Smm (ocaand it, wh em server runatfixs mayuEan.tld ubra emv hand u want Licensns f thway 10 icoinensramitpdler undantannoutfiriginaPcluion a prr will PREP liJulian Moot to perandantoot to wa yo onrked. Iover is y (meneloftwsaydocu/m you haase tarables uver is y)er does yose Venemyiftwitted tod maeocolnd to and ableswarsenew skippedejr doeelltfix/maise V ll kso viewe thae as an s ableshis Gen. (Excevides: It wiliPolnd tcdtselferal Pubra emv h toet::DNttributen * percoinensuEacantannoutfirigi,aendedFix hlementatableswariPolnd tcd. If thostfid10 icoinenantannoutfirigi.) d see.tostfix (acchp * Cion onl e. itriFix hAddetwhs (DE determfintatisSPF checs an Mailix hAforbutsnd ivspf-perlwarePolnd t, rdatsF cbion asotance andsi FrLdioned eandnenrdatom executlix sLL istmsy.cog 100 nverbathis Genejr doprofI USo,cdoebut cp * Cion oosme=aPF checwh emu hamitted to cs forastom executlix ssharutcwh emu h witted tod maeowill aaPF checastcirtcby atwhs cehiEacf-perFix hlemen ation oPolnd t,ies noitted to* Upse warewhs cmm (ob ation oI USofe erbathis Genej any o1 USAng ond.r skoftwar Prea sDME, thCion on termrrewhs ejr does This epolitate A 02tcirtcregard. PolcfovhIovol_nally ving 1ment, but tementtdnense erbatecul* Upryonlaime2, Juie aland Mst ended2, Jui * Fix herA E weermrr* Cbutend;ly 1 re, tementtdneniblic exer=fateIonl2, Julryoned Debies noitted to* Upse nd iv vecor lillnul vecFix shlementation oPolnd twill checiree Somnrkeaggregao* Upse .4 Fix hlt, Mementation oPolnd t It sharePolnd t (menin thetFix hlementation oPolnd t)tatia volubatif aistoreckesramitted to* UpmtwiutDNttributebrtfix/mai Fix h and amaeownypnfe verbathis Gen.ed b3. is free ne is permitted to charePolnd t (menetFix hlementatiit, and dSnul* Up2)ented our o408. aldocumentatir smn and distrI USofe SaPF chec1s per2 abmaoiase tarbawa you h. IPv6dot, anse wareoan attfiwed by a) Acre (in C wh It sharehat Mail:cor.tlpsoion ampolit -n asntatet::Do-urce4408.,cehiEacmm (ob mitted to d and distrI USofe vSnul* U ables1s per2 abmaoiatia mtwiutDcm (omarilyFrom resul scPubrscyd-s; a,ed by b) Acre (in C wh It saherA E wsefof, vali resul yo: t ththtet::Dyearg 10 tgillo's s oirdtcirty,to sof 4edrgthno line] is aigned by cicense physip Spercerr smon ao-urce4mitted to* U,e that Mailndant polit -n asntatfile as an excor.tlpsoion ao-urce4408.,cof r et::DNitted to d and distrI USofe vSnul* U s1s per2 abmaoiatia mtwiutd by cm (omarilyFrom resul scPubrscyd-s; a,ed by c) Acre (in C wh It shareng. * Addeu ha.2.3.4&CoAddion onlsefofableswntmitted to cisr.tlpsoion ao-urce4408.. (messageubrn vecs ableschanginand thdatioonto cor=f SPmitted to* Updatsnd thifiu h ip=1.2.3.4&d maeocolnd tonted our o408. aldocumentatir smn It syuEan.tlda wsefof, (thacrer LFIt Subecul* Upb abmao.) d yd-urce4408. fmenetFix hmert emaeocos not rir smnse warewix he s ).ktfix e. ic * scrverspace seed LIcumentatiFix Yohat Mail:d-urce 408. mert euses onld-urce4408. fmenesesthe Mas proces biascialuer. associGPLdion errDR ndefini * MoimentaaluermaeownartisFrom ric ned Debihat il * Update. See INSTALse wareLIcumentatpacHngivOrderfer spe=f SPexcevides,s onld-urce4408. Nitted to d cy sebute Pcluic . If Maiwa yoibln * perNitted to d = Act maild-urce4menb f t r sm)h It sharemaj alanmpso (acc(hat ilOrdekbrnelejr dosot, )Lse war ypnrictfixmore dee] aiEacwareLIcumentatsocke, a. Polwa yoanmpso (a dtselfeacre (iniin pureLIcumentatp.. oitted to* Upse LIcumentatsored our o408. s 100 Fi42vsefofervework wiryone is-perlar most GPLdiplahe 100 nvsefoferv tostval (a work wiryone is onld-urce4408. fperlwarewill plahe440u(acchs oitted to* Upse wareo-urce4408.,c.g. Mt scghs oirdtcirtinss forbuti mmpeme=miryone is onld-urce4al03-2 It shared our o408..ed b4. is free butehae ecare. Yosrs. Genejsramitted to charePolnd t excevierfeexpist.percoe tarba and disbathis Gen.cti e almailt wfateIoehae ecare. Yosrs. Genjsramitted to charePolnd tcs avoidejr do The pu(omatip SperMTP servelended2, Jui and disbathis Gen. HngivOrdecirtinssvhIotation .3.4&d istribmethin, Juicifperlu ha and amas 1his Gene result, alloon ir PreambMTP servedosotl03-2astouEancirtinssfixbiaeiaefullto 550 for RFd b5. is fAforbutsthostfid10 iworkptverbathis Genejsitfixumentatiobutiost sofrspacHngivOrde4 erv tlsoug is enu ha1 USAng onlryo e. a s mitted to charePolnd tcreallssnd iv vecFix ee forratedPF checaraae ahibittwa42vlawdi [emoebut corkptverbathis Gene forrrlways,a425 e. Mailramitted to*fix/maiPolnd tc(ondss sFix hlementation Polnd t)skip Sindicrvelendedcorkptstfix runs onhis Genetto 3600 se loftware iI USofth new skipped.r skippytfi,emitted to*Mailra e. Ma harePolnd tcreaFix shlementatilly ac6. sent to su ha.2mitted to charePolnd t (menes sFix hlementation Polnd t)sktn oer=foo@ba pu(omatip Spern .3.4&-per. Genjfperlwar:Query tha. Ge alionhae ecmitted to c sk e. awarePolnd t srsour oto waeateI USofth new skippedrl is free bute mpond as sfur .tltedor someation oer=foo@bas' exer=fatese ware2, Jui g is roprirky . is fAforbutsthlpsomibatir sweer sc*Maio 550 for a42verbrdtcirtinssto wabathis Gen.ed b7. Ifderfer andsshowtfix rua440urtcjudgriginmeneseegao* Upse pis, r ng.ferveriginmenfmenes softwarerasot (oot mi Everyopis, rSAngues), ew skipped.mage inddeu ha(them lia42v40urtcd resdergreeriginme wfat)lwa yoand chdictan exco skipped. runs onhis Gen,o onynmoebut excand u hafperlwareco skipped. runs onhis Genment implecannotomitted to csooAddions tii asi SPFlean-ul aendedos. g * sc and disba his Generdat's softwareeus, iginms. g * s 100 nvrfer andsshowtfixu h ree butemitted to charePolnd t at cha.ace se docume,di a pis, r im copiew checbute1 USA roygeuy-re th.2mitted to* Upse warePolnd t 425uses oopiewhoa.2.3.4&yistribndtfict* C skiadtfict* Cthtscghsu h 100 n harend th designv40uhecs tii aboft pror doess 1his Gene checkin, youfrbiaeeermrr* Cfperlmitted to* Upse warePolnd tp.. ss s@accil:nse erbatecul* Upbathelte. vali r alaneer scentats and ass s@irticulaskiircum quesktn obalstfix runsetecul* Upbat Public Lic cp * Cr does necul* UpAddetwhs cral Public Licehp * C nsoftwa iircum quer.d.Ient, but temepurpond se erbatecul* Upryoiadufixumenryoia.ferveo's fpis, rso skim licwilleusyl2, Julnlaimie alionand Mst vali mine ruas suEacnlaimi; erbatecul* Uphaermaeows cpurpond se col_nul*fix/maa Pubgrmine rutn ofto l scmitted to* Upmore d,cehiEacf- PF checking.bisprs. cr. Genjpra emca bunMss s@eochectatio = F g itsntriox.com> Thanksion onlwi Firdom tse sscmitted toed thtscghswa yomore deiae.t0 for a* Misomiss, rSral PcINSTALse waatioore d;1ment, uption onlyher p/donong to mci Fipf n osu sh cral res Ma hntmitted to csscthtscghs's softwarmore deu maa Prea dcannoto mpond wa yoahoiceo instalecul* Upbat Public Licye reeer pscghce achat wa yoiblbt0 evc Lic beer andsshowtfix ruon oerst. runs onhis Genmed b8.(DEFER_Imitted to* Updat/ aland se warePolnd t is thltedor rLL nerebiae40u(atimeoct mailbispis, rso skby liJulian Ldion errDR s 100 :Query thaliJulian Mhs no cwhoaplahes warePolnd t and disbathis Gen ree hecked LICENSE fgelnd phip SPmitted to* Up, setINSTALexcluion oopie40u(atime,ftwo oatPmitted to* Up1301 USA Evend thinnmenem03- 40u(atimeobut teusLexclui pre InnsuEacpf-p,oess 1his Geneitforl if Ms hare, setINSTALaerpf erA E wu want bod as an s 1his Genmed b9. -j/Softwaj/Soft toree prs. n'lrevisd rela/ations e Mail F s an exp its users. This Genefperlwto sion smoo SuEacons e Mail Fl res beesi ilasku wspir whosemaeocosEADMEe Mail is licree e. fcy dae If yoic c list.cons colowemal alandner i.d. sentunder ths 1gilltia mitton u n'*fixunder thnution (DEFER_IPolnd t spe=ffinss xunder thnutionx runs onhis GeneehiEacral Public pror do"as GPL xunder t",xumentatioharenvides seeoan attfidistrI USofth new skipped ct mails an Mail Mail::Srx ruas s GPL xunder t prs. n'eribut00 c- j/Softwaj/Soft t (DEFER_IPolnd tDNttributespe=ffys xunder thnutionx r erbathis Genejys free neoond as sunder the a Pors. n'eribut00 c-to most of the Free .d. 10.nt implemin'lionitforl if Ms@irtbnse warePolnd tcon froftwaro shae and tsj any omitted to* Upew skipped.e. fcyigi,aerA etion onlyher p ion'sksfmen1 USAng on.ace sesscehiEacf-pliJulian Ldibut00 c- j/Softwaj/Soft t,aerA etion onl-j/Softwaj/Soft t;mwre-) # smos e reeexcevidess an explier Ouit mcier the Mail F u dLdibut00 chwoegoalF s acosEAe timetn ofto l tINusmon usesnd iv vesmon nded to ftware Founda s acoomoo*fix/maiee yon a pppedand se tware Foug its ulyg it is noNO WARRANTYd. 11. BECAUSE THE PROGRAM IS GNU GEND FREE OFe clRGE, THERE IS NO WARRANTYdFOR THE PROGRAM, TO THE EXTENT rmitteTND BY APPGNUABLE LAWer EXCEPT WHEN OTHERWISE STATND IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OFeANY KIND, EITHER EXPRESEND OR IMPGNED, INCLUDING, BUT NOT GNtteND TO, THE IMPGNED WARRANTIES OF MER cleTABILITY AND FITNESE FOR A PARTICULAR PURPOSEe foHE ENTIRE RISK AS TO THE QUALITY AND rmiFORMANCE OFeTHE PROGRAM IS WITH YOUo SHOULDeTHE PROGRAM PROVE proCTIVE, YOU ASSUME THE COST OFeALL NECESEARY SERVICING, REPAIR OR CORRoCTION.d. 12. IN NO EVENT UNLESE REQUIRED BY APPGNUABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE PROGRAM AS rmitteTND ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY , SPECI, INCIDEeTAL OR COGENQUENTIAL DAMAGES ARISING OUT OFeTHE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT GNtteND TO LOSS OF DATA OR DATA BEING RENDERND INACCURATN OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OFeTHE PROGRAM TO OrmiATN WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVIEND OFeTHE POSSIBILITY OF SUCH DAMAGESg it cy sOFeTERMS AND CONDITIONS it Hl kso Ap * CorrateT USofso Yndedv2. Polnd tsd. t imples the os xons colnd t,ith n [empty it of r se waregthis,st. Lmibatiusetion onlprs. csktn obrst. des0 iwoh evcuns oniblic default to ftware FouehiEaceA 02110-sF c.2mitted to cr freedom t and distateI USo d. Too 3600 settaEacwareoan attfidoot toso semaeocolnd tpor HEtaleaf,st.0 iwttaEacwarmo semaeo servpse LaEacd-urce4 * ic Liceneefoulmv othew vey pureLIcluail::SPFver is y; tate aEac * LO chectatio yo: t hare"liJulian " relayu maa poon er * Fonrkewareouesult, to is an an.ed by <110-relay0 tgillomaeocolnd t'ribill u maa btimafteealcfovhay it attr.>d by ion 2, June 19y ed by nstale and tot, to ftware Fo;ou hasF c.2mitted to cpror d/e e. n.tld tn and distrI USofe vert. By contrast, the1his GenersPors. n'eribuableswari-j/Softwaj/Soft t;mct mailopyer the G vert.L Genejsrables(allendedovides)uas s GPL xunder t.ed by nstale and tot, Nitted to d u want hypnfthay it e Mail Fromoue,d by blicWITHOUT ANY WARRANTY;LFIt scri.g. Mt malitriFer is y r by MER cleTABILITY e FITNESE FOR A PARTICULAR PURPOSEe fSsion 2 its users. This Genefe ne] If ys.ed by is fLO chectatio.2.3.4&CoAfile as an exp By contrast, the1his Generl03-hdantwIt shatale and t;rpf lt,,aerA etion onl-j/Softwaj/Soft tSoftware Foundation, Inc., 51 Franklin Street, Fifth Floor, Bostong iAIPv6heckng. * Adde Uphl kso ces bullendibutelnulronhe1ndatlaphecks. will not be and tot, Pubra emv , default utp *as. Thilt, to likcuns o wh emito servs (thasl Pubra emv h eowed by Gnomovier thopyer th69, ion 2, June 19year bill on uher pd by Gnomovier thco docwIt sABSOLUTELY NO WARRANTY;efe If ys typnf`all kw'.d by nstalt, to ftware Fo,ith n [e Foueelco dkso .2mitted to cprd by and dlerebiae40 skipped; typnf`all kc'efe If ysothed ohypoftwtip Sogramon st`all kw'ith n`all kc'eLO checall ks frr will PREP @irtbnse warel its users. This Gen. Ofv40uren,o onogramon stu ha sio =y beep Sp way) # ! =l From is a`all kw'ith n`all kc';o onyn40uhec.g. Mbe mo si-c. kal almenucprems--vhaye a Psui enu hede and t.d.is fLO chec IPv6gconu hedemaloyhin i [emix hAddete and tmert resignedsneool,di any 10 iost aa "liJulian Mmitclaim"R" an expo polnd t,iif neenderry. Hll deferewilplo;ogeubrexpo billdwed bYoyodyneSoftwarprirkbyMmitclaim eusesliJulian M Pubrrst.ror condolnd t `Gnomovier t'a(thiEacmefastlay es yoanmpilOrs) erA E wbyMJilld Hackty. y , 1 April991 . Ty ioon,ot asindnense Vis instal contrast, the1his GeneNttribute1 USA itforl if ! =u hede and tcon f will P Ifryye and tgment implrbe and tot, a srsroto*Mo libif tejys free andsi Frumen0 ne]romoueeryop USA on,ktfixwill P Ifryyral PcINSTAs2 It shar libif t (DEFERtalt, wf you have relayd0 sand maeo11 D all itl its u ers. This Genecalhostas an s 1his Genmepostfix-polireturn 000064400012150001750000000060011042506525016465 0ustar scottscottSore deRtostfix (acg the policy daemon thed ooan attfide insopyer thndatla * AsoaIndepostfid1an erunatfi. License ------- postfwed be ins5.6d bopyer td bNetAddr-IP ientn a end (oot n a end -e old)ill See tfi.cy daemon th 1. ion 007-01-10 21:00) postfelayd, execute: % /usr/local/lib 2. Addcwareoan attfidlayd_limit = 3600"that. wed by rotoc[empty aix -by rotonby rotonby roto-by roto0by rotospawnbar.tld&ip=1ise V=nobod aargv=d, execute: % /usr/local/lib 3. ionfigsoftwarept. By ditions wit to iime_limit = 3600" in /wed by rotoelow: er=foo@ba_.tltedor some=bar.tld&ip=1i... Moreeeeeeeeethe me_unuher_dpostfINSTA Moreeeeeeeeeine] equest=_ wit to aix:p iv e/quest=smtpdld&ip=1i... s noNOTES: smtpdld&iSpe=ffysine] equest=_ wit to AFToducee me_unuher_dpostfINSTAjsrablessssstlsoumplrbmore desF cbico dka wspenped fo.ed by rotoTmaise V 'nobod 'nt, us d u wanise docume. nstalt, r will PREP ifiu h ip=11111moebut tatio s softwarmwit tos runatfixHELOobod .nt impled0 s this, a ip=11111medicrvedise V an explit wit to ented i1mentalhost ed 4. Addcds. To do so, set "policylic de in /ed 5.eRt servppt. Byee the LICENSE file. postfix-polipostf0001755000064400026400017500000002230011042506525016465 0ustar scottscott#!d, exbin/al/lib#007-01-10 21:00) postfb#0f the SPF project (C) 2007 Julian Mehnle < Sr for Smehnle.net> (C) 2003-2004 Meng Weng Wong new( ip=1.2 ort => 5, #via UDP to 10s fromout over: 5 ip=1.2 oy => 2, #via UDP to 10s fromout over: ient_a#1n kamble atioSee0500) * Decor Ded timeos a5s *he = que. ); imy $ct _lt, a P=code with thSt, a ->new( ip=1dns_ creat => $ crea ); i# Addtfix re ! Remoalt, easy:imy @cleDLERS = ( ip=1{ ip=11111bill => 'exailt_d and log', ip=11111408. => \&exailt_d and log ip=1}, ip=1{ ip=11111bill => 'exailt_ed for, ip=11111408. => \&exailt_ed fo ip=1}, ip=1{ ip=11111bill => 'uld beequest=_fd temix r, ip=11111408. => \&uld beequest=_fd temix ip=1} ); imy $ystem lo= 0; imy $DEFAULT_RESPOGENo= 'l::SP'; i#i# Soggin docuovidess an ed wordinmdress). an efaSee0is a s.e#oNOTE: * Min scri onl$Loggin_locktypnfrelaypf soggin docuNttribute#omix hddeu hrbmore d.e#rimy $coggin_locktypnf= ' aix';a#1elat, aix,1ltee t,iandsoleimy $coggin_facilkiyf= 'ks. '; my $coggin_ovidess f= 'pid'; my $coggin_indnen f= 'pt = 360quest= '; id i1ands onted and logn add them => map( ip=1NetAddr::IP->new($_), ip=1qw( 127.0.0.0/8 ::ffff:127.0.0.0/017 ::1 ) );_a#1Dttript. By e a Psay "nt=bar@foo.tld ::ffff:"? id i1ands onteou can add them => map( ip=1NetAddr::IP->new($_), ip=1qw( ) );_# heckefor list of qw ( ) abmaoiotation iCbutSpahes autho 78 using sta.rimy %t. * _mplem;_a#1byeader only once p e rem ini alizINSTA e #i# Lo a pris a tempoabmrt.e#rsubefaSee_exit { ip=1coggin(is => "faSee_exit: @_"); ip=1coggin(/Soatfix=> "faSee_exit: @_"); ip=1coggin(ng. => "faSee_exit: @_"); ip=1die("faSee: @_"); }e #i# Unbu fcy s on line utp .e#rSTDOUT->pu(oflush(1); i#i# nstale ark wiocketAddet line],ftwoprocaicy gin 0 iwbMTP serl. U# ---cogginftwo oatP@eochecPF chctu: perea d hrbader ons.e#recotailock($coggin_locktypn); rojegin($coggin_indne, $coggin_ovidess, $coggin_facilkiy); e rem de i e #i# ll be uperl Each query is a ,c.galuaod maeocuest=,ould uon oers *.e#rmy %uery; wh * () { ip=1chomp; ip=1n.tld f (/=/)1{ ip=11111my ($kny 1$galue) =salit (/=/ 1$_, 2); ip=11111$uery{$kny}f= $galue; ip=11111next; ip=1} ip=1els f (l4 Mth)1{ ip=11111coggin(/Soatfix=> scoinef("/Soatfi: ignoyon ag dirge: %.100s" 1$_)); ip=11111next; ip=1} ip=1n.tld f ($ystem l)1{ ip=11111an e(s Thiknys %uery)1{ ip=111111111coggin(debuix=> "Aery is a: %s=%s" 1$_,1$uery{$_}); ip=11111} ip=1} ip=1n.tldmy $ader on_d Postfix=1$uery{d Postfi};n.tldmy $mpleme=ndefined($ader on_d Postfi) ? $ * _mplem{$ader on_d Postfi} ||= {} : {}; ip=1n.tldmy $dPF chx=1$DEFAULT_RESPOGEN; ip=1n.tldwaysaEacmy $ ! Remove@cleDLERS)1{ ip=11111my $ ! Remo_bill = $ ! Remo->{bill}; ip=11111my $ ! Remo_408. = $ ! Remo->{408.}; ip=11111 ip=11111my $thlpsom. = $ ! Remo_408.->(uery => \%uery,Impleme=> $mplem); ip=11111 ip=11111 f ($ystem l)1{ ip=111111111coggin(debuix=> " ! Remov%s: %s" 1$ ! Remo_bill, $thlpsom.); ip=11111} ip=11111 ip=11111# Pick vhaye a Pthlpsom. t, but 'l::SP' ip=11111 f ($thlpsom. empo$thlpsom. !~ /^l::SP/i)1{ ip=111111111coggin(ng. => " ! Remov%s: issndcierve." 1$ ! Remo_bill); ip=111111111$dPF chx=1$thlpsom.; ip=111111111last; ip=11111} ip=1} ip=1n.tldcoggin(ng. => "%s: implifia empty%s" 1$uery{ome.doma},1$dPF ch); ip=1n.tldSTDOUT->coine("a empty$dPF ch\h\h"); ip=1%uery = (); }e #e rem ! Remo:ed and loggexailtSTA e subeexailt_d and log1{ ip=1my %ovidess = @_;n.tldmy $uery = $ovidess{uery}; ip=1 f ($uery->{4t=bar@foo.tld} != '')1{ ip=11111my $4t=bar@foo.tldt=via Addr::IP->new($uery->{4t=bar@foo.tld}); ip=11111rom Mai'policy s these addressebut cp *icntatstoed and loggips SPF ch -es, 'X-Coine] ' ip=111111111 f grep($_->ces bias($4t=bar@foo.tld),ed and logn add them); ip=1}; ip=1rom Mai'l::SP'; }e #e rem ! Remo:eou cagexailtSTA e subeexailt_ou cag{ ip=1my %ovidess = @_;n.tldmy $uery = $ovidess{uery}; ip=1 f ($uery->{4t=bar@foo.tld} != '')1{ ip=11111my $4t=bar@foo.tldt=via Addr::IP->new($uery->{4t=bar@foo.tld}); ip=11111rom Mai'policy s these addresses, 'X-Comment: SPF skipped for ip=111111111 f grep($_->ces bias($4t=bar@foo.tld),eou can add them); ip=1}; ip=1rom Mai'l::SP'; }e #e rem ! Remo:eess e subeuld beequest=_fd temix g{ ip=1my %ovidess = @_;n.tldmy $uery = $ovidess{uery}; ip=1my $mpleme = $ovidess{mplem}; ip=1n.tlde.tldAed - ldoIF_PERMIT). fir spacIf ltIF_PERcuest=,oit' and th110-rookup.e.tldmessagvoids warecy servedc 's sMAIL FROMle ark wtfixs maO ifeuld be.n.tlde.tld ip=1my $ocol_server = $mplem->{ocol_server}; ip=1n.tld f (butsndfined($ocol_server))1{ ip=11111# NtIF_PERserver haerbe emmplempf-perleart=brou want o waniseader on. Moreeeee ip=11111my $ col_sehown = .gal1{ ip=111111111ode with thRehown ->new( ip=1111111111111wnypnfffffffffff=> ' colr, ip=1111111111111 etermtyffffffff=> $uery->{ocol_name}, ip=1111111111111 p@foo.tldtfffff=> $uery->{4t=bar@foo.tld} ip=111111111); ip=11111}; ip=11111 ip=11111 f ($@)1{ ip=111111111Anlanexp messais a toccuot riduyon asehown thist tS ip=111111111coloance duelionitvali rinp *daSe! ip=111111111my $is msg = $@; ip=111111111$is msg = $is msg->text1 f UNIystSAL::isa($@, 'ode with thExcevides'); ip=111111111coggin( ip=1111111111111 g. => "%s:F_PERMIT). fde and lode with ->new(% ,c% ,c% ) fde an: %s" ip=1111111111111$uery->{ome.doma},1$dery->{4t=bar@foo.tld},1$dery->{uld be},1$dery->{ocol_name}, $is msg ip=111111111); ip=111111111rom Ma; ip=11111} ip=11111 ip=11111$ocol_server = $mplem->{ocol_server} = $ct _lt, a ->coark w($ col_sehown ); ip=1}e.tld ip=1my $ocol_server_408. = $ocol_server->cedm;_a#1'lay ', 'fde ', etc. ip=1my $ocol_d and_exp=11111= $ocol_server->d and_explafINSTA; ip=1my $ocol_uher pmty_exp=1= $ocol_server->uher pmty_explafINSTA ip=11111 f $ocol_server->is_408.('fde '); ip=1my $ocol_ct _riate 11111= $ocol_server->.2.3.4&C_ct _riate ; ip=1n.tld f ($ystem l)1{ ip=11111coggin( ip=111111111ng. => "%s: esse%s: F_PE/EHLO:c% ,cIP Add.tld:c% ,cRr=foo@ba: %s" ip=111111111$uery->{ome.doma},1$ocol_server,1$dery->{ocol_name}, $dery->{4t=bar@foo.tld}, ip=111111111$uery->{er=foo@ba} ip=11111); ip=1}; ip=1n.tldRee me o wF_PERfde pacDtfesuo wF_PERmailis a t f ader onl chec wfatn.tldbeerorkpt pre Und maeoF_PERserver pppedm Mais maO ifeuld be.n.tld f ($ocol_server->is_408.('fde '))1{ ip=11111coggin( ip=111111111ng. => "%s: esse%s: F_PE/EHLO:c% " ip=111111111$uery->{ome.doma},1$ocol_server,1$dery->{ocol_name} ip=11111); ip=11111edm Mai" lin$ocol_uher pmty_exp"; ip=1} ip=1els f ($ocol_server->is_408.('mailis a '))1{ ip=11111coggin( ip=111111111ng. => "%s: esse%s: F_PE/EHLO:c% " ip=111111111$uery->{ome.doma},1$ocol_server,1$dery->{ocol_name} ip=11111); ip=11111edm Mai" proR_IF_rmitte ess-Rerver=$ocol_d and_exp"; ip=1} ip=1els f ($dery->{uld be} eq '')1{ ip=11111coggin( ip=111111111ng. => "%s: esse%s: F_PE/EHLO (N ifeSld be):c% " ip=111111111$uery->{ome.doma},1$ocol_server,1$dery->{ocol_name} ip=11111); ip=11111edm Mai"policy s$ocol_ct _riate " ip=111111111 a. Pol$mplem->{foo&C_ct _riate }++; ip=1}e.tld ip=1e.tldDosMAIL FROMlMIT). (aerF_PERdiecbutegillo'ndefini v oers *)n.tlde.tld ip=1my $m-per_server = $mplem->{m-per_server}; ip=1n.tld f (butsndfined($m-per_server))1{ ip=11111# NtIMAIL FROMlserver haerbe emmplempf-perleart=brou want o waniseader on. Moreeeee ip=11111my $m-per_sehown = .gal1{ ip=111111111ode with thRehown ->new( ip=1111111111111wnypnfffffffffff=> 'm-perr, ip=1111111111111 etermtyffffffff=> $uery->{uld be}, ip=1111111111111 p@foo.tldtfffff=> $uery->{4t=bar@foo.tld}, ip=1111111111111ocol_ etermtyfff=> $uery->{ocol_name}11# s ma%{h}t poro LICansSTA Moreeeeeeeee); ip=11111}; ip=11111 ip=11111 f ($@)1{ ip=111111111Anlanexp messais a toccuot riduyon asehown thist tS ip=111111111coloance duelionitvali rinp *daSe! ip=111111111my $is msg = $@; ip=111111111$is msg = $is msg->text1 f UNIystSAL::isa($@, 'ode with thExcevides'); ip=111111111coggin( ip=1111111111111 g. => "%s:1ode Fperl(uld be)RMIT). fde and lode with ->new(% ,c% ,c% ) fde an: %s" ip=1111111111111$uery->{ome.doma},1$dery->{4t=bar@foo.tld},1$dery->{uld be},1$dery->{ocol_name}, $is msg ip=111111111); ip=111111111rom Ma; ip=11111} ip=11111 ip=11111$m-per_server = $mplem->{m-per_server} = $ct _lt, a ->coark w($m-per_sehown ); ip=1}e.tld ip=1my $m-per_server_408. = $m-per_server->cedm;_a#1'lay ', 'fde ', etc. ip=1my $m-per_d and_exp=1111= $m-per_server->d and_explafINSTA; ip=1my $m-per_uher pmty_exp== $m-per_server->uher pmty_explafINSTA ip=11111 f $