f92e99bd9c
* plugins/rcpt_ok Split check_relay into two plugins * config/plugins Reorder plugins to take advantage of the new check_relay * lib/Qpsmtpd/Connection.pm Add support for relay_client() method * lib/Qpsmtpd/SMTP.pm Copy connection relay settings to transaction object when created * lib/Qpsmtpd/Auth.pm Use the connection->relay_client() instead of setting an env var git-svn-id: https://svn.perl.org/qpsmtpd/trunk@326 958fd67b-6ff1-0310-b445-bb7760255be9
41 lines
1.1 KiB
Plaintext
41 lines
1.1 KiB
Plaintext
# this plugin checks the standard rcpthosts config
|
|
#
|
|
# It should be configured to be run _LAST_!
|
|
#
|
|
|
|
sub register {
|
|
my ($self, $qp) = @_;
|
|
$self->register_hook("rcpt", "rcpt_ok");
|
|
}
|
|
|
|
sub rcpt_ok {
|
|
my ($self, $transaction, $recipient) = @_;
|
|
my $host = lc $recipient->host;
|
|
|
|
my @rcpt_hosts = ($self->qp->config("me"), $self->qp->config("rcpthosts"));
|
|
|
|
# Allow 'no @' addresses for 'postmaster' and 'abuse'
|
|
# qmail-smtpd will do this for all users without a domain, but we'll
|
|
# be a bit more picky. Maybe that's a bad idea.
|
|
my $user = $recipient->user;
|
|
$host = $self->qp->config("me")
|
|
if ($host eq "" && (lc $user eq "postmaster" || lc $user eq "abuse"));
|
|
|
|
# Check if this recipient host is allowed
|
|
for my $allowed (@rcpt_hosts) {
|
|
$allowed =~ s/^\s*(\S+)/$1/;
|
|
return (OK) if $host eq lc $allowed;
|
|
return (OK) if substr($allowed,0,1) eq "." and $host =~ m/\Q$allowed\E$/i;
|
|
}
|
|
|
|
my $more_rcpt_hosts = $self->qp->config('morercpthosts', 'map');
|
|
return (OK) if exists $more_rcpt_hosts->{$host};
|
|
|
|
if ( $self->qp->connection->relay_client ) { # failsafe
|
|
return (OK);
|
|
}
|
|
else {
|
|
return (DENY);
|
|
}
|
|
}
|