policy_module(smfs, 0.0.8) ######################################## # # Declarations # smf_milter_template(sav) smf_milter_template(spf) # /var/run/smfs is shared by smf milters type smfs_milter_data_t, milter_data_type; files_pid_file(smfs_milter_data_t) ######################################## # # smf-sav local policy # allow smf_sav_milter_t self:netlink_route_socket rw_netlink_socket_perms; allow smf_sav_milter_t self:tcp_socket create_stream_socket_perms; allow smf_sav_milter_t self:udp_socket create_socket_perms; # It makes outbound SMTP connections to verify addresses corenet_tcp_connect_smtp_port(smf_sav_milter_t) sysnet_read_config(smf_sav_milter_t) ######################################## # # smf-spf local policy # # (no additional policy needed - template is sufficient)