Main   Changelog   Spec   Patches   Sources   Download   Gear   Bugs and FR  Repocop 

Policyd (http://www.policyd.org/) is an anti-spam plugin for Postfix >= 2.1.

It does:
- Greylisting
- Sender-(envelope, SASL or host / ip)-based throttling 
  (on messages and/or volume per defined time unit),
- Recipient rate limiting
- Spamtrap monitoring / blacklisting
- HELO auto blacklisting
- HELO randomization prevention

Policyd stores all it's data in MySQL database which allows the
easy ways for viewing and editing it.



Policyd installation consists of several simple steps.

1. Database creation.
Database template is placed in /usr/share/doc/policyd-X.Y/DATABASE.mysql

$ cd /usr/share/doc/policyd-XX
$ mysql -u root -p <DATABASE.mysql
$ mysql -u root -p
> INSERT INTO user (Host, User, Password) VALUES ('localhost','policyd',
  password('My secret policyd password'));
> INSERT INTO db (Host, Db, User, Select_priv, Insert_priv, Update_priv, Delete_priv) 
  VALUES ('localhost', 'policyd', 'policyd', 'Y','Y', 'Y', 'Y');
> FLUSH PRIVILEGES;


2. Setting up database parameters in policyd.conf

# cd /etc/policyd
# cp policyd.conf.sample policyd.conf
# vim policyd.conf

Database login/password must be provided in MYSQLUSER and 
MYSQLPASS variables in policyd.conf.
After successful installation of policyd the DEBUG level 
could be lowered to 0.


3. Postfix tuning.
In /etc/postfix/main.cf parameter smtpd_recipient_restrictions
should be changed like

smtpd_recipient_restrictions =	....
				permit_mynetworks
                                reject_unauth_destination
				check_policy_service inet:127.0.0.1:10031
				....




ALT Linux specific:

- daemon runs under non-privileged user _policyd:_policyd.
- daemon runs in chroot environment.
				
													  
---------------------------------
Notes and comments are welcome.
Nikolay A. Fetisov <naf@altlinux.ru>