[milters] Archive

Lists Index Date Thread Search

Article: 545
From: Anthony Howe
Date: 2005-05-03 11:32:53 -0400
Subject: Re: Problem compiling libsnert & milter-sender on SuSE

Removal...........: milters-request@milter.info?subject=remove
More information..: http://www.milter.info/#Support
--------------------------------------------------------

Ugh! The rule set is missing the R designation in front of the rules:

LOCAL_CONFIG
RELAY_DOMAIN(`127.0.0.1')dnl
LOCAL_DOMAIN(`[127.0.0.1]')dnl

LOCAL_RULESETS
#
# Sendmail rules for a "claims to be us" test.
#
# 	http://www.cs.niu.edu/~rickert/cf/bad-ehlo.html
#
# Client software is often broken.  We don't want to reject
# our own users client connections.  Therefore we attempt
# to allow our users to pass the checks.  Otherwise, block
# sites with a HELO/EHLO hostname that is unqualified, or
# is one of our own names
#
# Note that I had to at "127.0.0.1" to class $=R, so that
# local client software would bypass these tests.  I also
# added "[127.0.0.1]" to class $=w, so that the localhost
# IP would count as one of our IPs.
#
SLocal_check_rcpt
R$*				$:$1 $| <$&{auth_authen}>	Get auth info
# Bypass the test for users who have authenticated.
R$* $| <$+>			$:$1				skip if auth
R$* $| <$*>			$:$1 $| <$&{client_addr}>[$&s]	Get connection info
# Bypass for local clients -- IP address starts with $=R
R$* $| <$=R $*>[$*]		$:$1				skip if local client
# Bypass a "sendmail -bs" session, which use 0 for client ip address
R$* $| <0>[$*]		$:$1				skip if sendmail -bs
# Reject our IP - assumes "[ip]" is in class $=w
R$* $| <$*> $=w		$#error $@5.7.1 $:"550 bogus HELO name used: " $&s
# Reject our hostname
R$* $| <$*> [$=w]		$#error $@5.7.1 $:"550 bogus HELO name used: " $&s
# Pass anything else with a "." in the domain parameter
R$* $| <$*> [$+.$+]		$:$1				qualified domain ok
# Reject if there was no "." or only an initial or final "."
R$* $| <$*> [$*]		$#error $@5.7.1 $:"550 bogus HELO name used: " $&s
# fall through to any other local rules.


-- 
Anthony C Howe                                 +33 6 11 89 73 78
http://www.snert.com/       ICQ:
7116561         AIM: Sir Wumpus

in the mist of night / by the silent sea / a siren calls - Anthony

Lists Index Date Thread Search