1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
|
This version of ifmail has been patched to support access lists in iftoss.
There are three access lists, namely packet header one, message header one
and origin one. They are specified using the following keywords in a main
ifmail configuration file:
packetacl <filename>
messageacl <filename>
originacl <filename>
The three files are of the same format: if a line has a hash ('#') at its
beginning then it is a comment line; otherwise a line specifies a rule and
must have four fields delimited by whitespace characters (spaces or tabs).
The first field specifies the action of the rule: "permit" or "deny".
Those words must be typed in lowercase. The second field is a pattern for
areatag. The third and the fourth ones are patterns for source and destination
addresses, accordingly. The patterns are in the style of Unix shell ones.
See sh(1), fnmatch(3) or fnmatch(5) for their description. No escaping with
a backslash ('\') is available.
The destination address pattern field is ignored in the origin access list
and may be anything, but not empty.
An empty line is considered a error. Use comments to beautify your access
lists.
If any of the three files is not readable or does not exist at all then
the according access list is considered empty.
Access list matching is performed in a such way that the first matching rule
is used. If no matching rules found then the default is to permit anything.
Example (for origin access list):
#
# Allow Alex Semenyaka and his points to post to PVT.EXCH areas
# as he is actually in Msk
#
permit PVT.EXCH.* 2:461/640 *
permit PVT.EXCH.* 2:461/640.* *
#
# Deny posts to PVT.EXCH from R46 (on the Moderator's request)
#
deny PVT.EXCH.* 2:46*/* *
#
# Make this jerk and his points read-only in the famous area FOO.BAR
# because he've got a bang [!] from the Moderator
#
deny FOO.BAR 2:5020/12345 *
deny FOO.BAR 2:5020/12345.* *
#
# This is the default action. Placed here for convenience
#
permit * * *
|
