#	$OpenBSD: smtpd.conf,v 1.14 2019/11/26 20:14:38 gilles Exp $

# This is the smtpd server system-wide configuration file.
# See smtpd.conf(5) for more information.

######################### TABLES ######################################

table aliases file:/etc/mail/aliases
table vdomains file:/etc/mail/vdomains
table vusers file:/etc/mail/vusers
table passwd file:/etc/mail/passwd
table vaddr file:/etc/mail/vaddr
#table blackhole file:/etc/mail/blackhole
table addrnames file:/etc/mail/addrnames
#table pkicerts file:/etc/mail/pkinames

########################## PKI ########################################

pki mail.consulting-diy-construction.com cert "/etc/ssl/mail.consulting-diy-construction.com.fullchain.pem"
pki mail.consulting-diy-construction.com key "/etc/ssl/private/mail.consulting-diy-construction.com.key"


######################### FILTERS AND FILTER CHAINS ###################

filter check_dyndns phase connect match rdns regex { '.*\.dyn\..*', '.*\.dsl\..*' } \
     disconnect "550 no residential connections"

filter check_rdns phase connect match !rdns \
     disconnect "550 no rDNS is so 80s"

filter check_fcrdns phase connect match !fcrdns \
     disconnect "550 no FCrDNS is so 80s"

filter senderscore \
     proc-exec "filter-senderscore -blockBelow 10 -junkBelow 70 -slowFactor 5000"

filter c01 chain { check_dyndns, check_rdns, check_fcrdns, senderscore }

############################ LISTEN ###################################

listen on socket #filter { check_dyndns, check_rdns, check_fcrdns, senderscore }

listen on lo0
#listen on all
listen on lo0 port 10028 tag DKIM_OUT
listen on 172.107.198.229 hostnames <addrnames> tls pki mail.consulting-diy-construction.com filter c01

########################### ACTIONS ###################################

action a01 lmtp "/var/dovecot/lmtp" rcpt-to alias <aliases>
action a02 lmtp "/var/dovecot/lmtp" rcpt-to virtual <vusers>
action a03 relay
action a04 relay host smtp://127.0.0.1:10027

action "local_mail" maildir alias <aliases>
action "add_dkim" relay host smtp://127.0.0.1:10027
action "outbound" relay helo "mail.consulting-diy-construction.com"

########################### MATCHES ###################################

match from local for local action a01
match from any for domain <vdomains> rcpt-to <vaddr> action a02
match from local tag DKIM_OUT for any action a03
match auth from any for any action a04

match tag DKIM_OUT for any action "outbound"
match from any for domain "mail.consulting-diy-construction.com" action "local_mail"
match from local for any action "add_dkim"
match from local for local action "local_mail"
match from local for any action "outbound"