summaryrefslogtreecommitdiffstats
path: root/src/smtpd/smtpd_dnswl.in
blob: db25474436ba833b3e41e5a474921d0f9b99fd04 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
#
# Initialize.
#
#msg_verbose 1
smtpd_delay_reject 0
mynetworks 127.0.0.0/8,168.100.3.0/28
mydestination porcupine.org
relay_domains porcupine.org
helo foobar

#
# DNSWL (by IP address)
#

# Allowlist overrides reject.
client_restrictions permit_dnswl_client,wild.porcupine.org,reject
client spike.porcupine.org 168.100.3.2

# Allowlist does not fire - reject.
client_restrictions permit_dnswl_client,porcupine.org,reject
client spike.porcupine.org 168.100.3.2

# Allowlist does not override reject_unauth_destination.
client_restrictions permit
recipient_restrictions permit_dnswl_client,wild.porcupine.org,reject_unauth_destination
# Unauthorized destination - reject.
rcpt rname@rdomain
# Authorized destination - accept.
rcpt wietse@porcupine.org

#
# RHSWL (by domain name)
#

# Allowlist overrides reject.
client_restrictions permit_rhswl_client,dnswl.porcupine.org,reject
# Non-allowlisted client name - reject.
client spike.porcupine.org 168.100.3.2
# Allowlisted client name - accept.
client example.tld 168.100.3.2

# Allowlist does not override reject_unauth_destination.
client_restrictions permit
recipient_restrictions permit_rhswl_client,dnswl.porcupine.org,reject_unauth_destination
# Non-allowlisted client name.
client spike.porcupine.org 168.100.3.2
# Unauthorized destination - reject.
rcpt rname@rdomain
# Authorized destination - accept.
rcpt wietse@porcupine.org
# Allowlisted client name.
client example.tld 168.100.3.2
# Unauthorized destination - reject.
rcpt rname@rdomain
# Authorized destination - accept.
rcpt wietse@porcupine.org
# Numeric TLD - dunno.
rcpt wietse@12345
rcpt wietse@12345.porcupine.org
rcpt wietse@porcupine.12345