# $Id: smtp-vilter.conf,v 1.48 2007/01/21 13:09:16 mbalmer Exp $

# smtp-vilter configuration
#
# Security Options
#
# Define the user and group to run as

user=_vilter
group=_vilter

# Define an chroot jail. This directory must contain a subdirectory named tmp
# for temporary data, a directory etc for config files and a file etc/hosts
# which has the same syntax and semantics as /etc/hosts to resolve the hostname
# given in the config file.

chroot=/var/smtp-vilter

# If the temporary files created by smtp-vilter should be made group readable
# (e.g. because both smtp-vilter and the actual scanning engine run with the
# same group id but different user ids) set "tmpfiles=g+r".

tmpfiles=g+r

# If the group ownership of temporary files should be explicitely set to the
# group id smtp-vilter runs as, set "tmpfiles=setgrp".

tmpfiles=setgrp

# Define the path to load backends from

backend-path=/usr/local/lib/smtp-vilter

# Scanning Options
#
# Define the backends to use.  More than one backend can be specified.
#
# clamd:  		Use the Clam AntiVirus clamd daemon
# spamd:  		SpamAssassins spamd
# attachment:		Filter unwanted attachments
# icap:			ICAP 1.0 capable daemons (e.g. SAVSE)
# regex:		Regular Expressions

backend=clamd,spamd,attachment

# Define config files for the various backends (these are the default values,
# they are listed here documentation purposes only)

config-file=clamd:/etc/smtp-vilter/clamd.conf
config-file=spamd:/etc/smtp-vilter/spamd.conf
config-file=icap:/etc/smtp-vilter/icap.conf
config-file=attachment:/etc/smtp-vilter/attachment.conf
config-file=regex:/etc/smtp-vilter/regex.conf

# Define a strategy in case an e-mail message is infected with a virus
#
# discard:		Silently discard the message
# reject:		Reject a message
# mark:			Mark the message with X-SMTP-Vilter
#			headers as infected but deliver it anyway
# notify-recipient:	Notify the recipient of the e-mail that
#			the message had been discarded because it
#			contained a virus.
# ignore:		Ignore it.

# strategy for virus notify-recipient
# strategy for spam discard
# react on virus add to table blacklist
# react on spam add to table spammers

virus-strategy=notify-recipient

# virus strategy notify-recipient action block

# If the strategy is notify-recipient the default message can be overriden by
# indicating a path to a file containing a custom message with
# recipient-notification

recipient-notification=/etc/smtp-vilter/recipient-notification

# "Undocumented" hack:  If the following field is present, only recipients that
# contain the given value in the envelope to field are sent a notification
# message.  The comparison is done using strchr(), so this is really a bad
# hack...
# 
# notify-only=mydomain.org

# Define a strategy in case an e-mail message is considered spam
#
# discard:	Silently discard the message
# mark:		Mark the message with X-SMTP-Vilter
#		headers as spam but deliver it anyway
# ignore:	Ignore it.

spam-strategy=mark

# Prefix the message subject line in case the message is considered spam.  This
# gets added as <prefix> <subjsect>

spam-subject-prefix="* SPAM *"

# Define an (optional) header that is added to spam mails

spam-header="X-Its-A-Nuisance: This is spam"

# Define a strategy in case an e-mail message containes unwanted content, e.g.
# an attachment type that is considered harmful spam
#
# discard:	Silently discard the message
# reject:	Reject the message
# mark:		Mark the message with X-SMTP-Vilter
#		headers as unwanted but deliver it anyway
# ignore:	Ignore it.

unwanted-strategy=mark

# Define a strategy in case the backend can not perform the actual scanning due
# to some error
#
# discard:	Silently discard the message
# mark:		Mark the message with X-SMTP-Vilter headers as
#		unchecked but deliver it anyway
# tempfail:	Return a temporary failure to the sender, i.e.
#		a SMTP "try again later error"
# ignore:	Continue with the next backend

error-strategy=tempfail

# Enable extended options for internally-generated headers passed to backends
#
# At present only one option is available:
#
# 0:	use plain headers as per previous versions
#
# 1:	include a tag of the form "(Authenticated sender: user@domain)" in the
#	Received header, if the MTA indicates that the sender successfully
#	signed in with SASL
#
# The latter setting emulates Postfix's smtpd_sasl_authenticated_header option,
# which is useful if the spam-filter needs rules that depend on whether a user
# is authenticated (e.g. you permit relaying by trusted remote senders)

header-options=0

# Define the socket over which smtp-vilter communicates with sendmail

port=unix:/tmp/smtp-vilter.sock

# Define the path to a directory for temporary files

tmpdir=/tmp

# The log-facility determines the log facility used for syslog() It can be one
# of the following values: user, daemon, mail, local0-7

log-facility=mail

# Define a filename for extended logging

logfile=/var/log/smtp-vilter.log

# Define a filename for writing statistics to

statfile=/var/smtpvilter/stats

# Options regarding logging
#
# logvirus:	Log virus incidents
# logspam:	Log spam incidents
# logunwanted:	Log unwanted content incidents
# logall:	Log clean mails as well

option=logvirus
option=logspam
option=logunwanted
option=logall

# Optional settings
#
# markall:	Mark all messages, even those that are not infected

option=markall

#react on virus add to table blacklist
#react on spam delete from table whitelist
#react on unwanted-content add to table blacklist
#react on clean add to table cleanlist
