- COMMAND LINE PARAMETERS
- OPERATIONAL USAGE
- HOW TO TEST THAT IT'S WORKING
- SEE ALSO
karmad - Karmasphere daemon for postfix and exim
This is a small daemon which listens on a Unix domain socket and interfaces between Postfix or Exim and Mail::Karmasphere::Client.
See the sample configuration and startup files in the eg/ directory of the source distribution for more information.
If you're running postfix, set --mta=postfix and karmad will behave as an SMTPD policy daemon.
If you're running exim, set --mta=exim and use the exim ACL provided with Mail::Karmasphere::Client.
If not specified, defaults to
- --cutoff-pass =item --cutoff-fail
cutoff-failwill turn into a "fail/reject". Scores above
cutoff-passwill turn into a "pass". You should set these thresholds yourself: Karmasphere provides the score, but you decide policy. If you do not, they will default to +300 and -300.
If you're running postfix, you can set --action to one of
reject. Prepend will prepend an X-Karma header. Reject will cause any mail with a karma score below
cutoff-failto be rejected. Use this only if you are happy with the results you've observed.
If not specified, defaults to
If you've set
prepend, this flag will add two fields to the X-Karma header:
identitiesshows what was queried, and
query_idincludes the timestamp and (if available) the MTA's queue ID.) This is useful for debugging purposes: it allows one to replay the query.
Query credentials for authenticated queries. You only need to set this if you're querying a restricted feedset. For more information, see http://www.karmasphere.com/devzone/client/configuration#credentials
Where to listen. Defaults to /tmp/karmad. You probably don't need to set this.
Hostname of the Karmasphere Query Server to connect to. Defaults to query.karmasphere.com. You probably don't need to set this, unless you have set up a local query server, in which case you should be following the directions provided with that server.
The name of the feedset you want to query. Defaults to karmasphere.email-sender. You probably don't need to set this.
Who to listen as; defaults to 'nobody'. The socket file will be chowned to this user and group. You probably don't need to set this.
Mode to chmod the socket. You probably don't need to set this.
- --user =item --group
When running, setuid to this user and group. Defaults to 'nobody', 'nobody'. You probably don't need to set this.
Syslog verbosely to mail.info and mail.debug.
Connect to the socket (default: /tmp/karmad) and send the following newline-terminated stanza:
client_address=192.0.2.1 helo_name=host.example.com email@example.com
Each of the above lines is optional; you may omit whatever is unavailable.
If all goes well, Karmad will return the following stanza:
value=NN opinion=(good|bad|neutral) data=.....
"Value" is a number between -1000 and +1000.
"Opinion" is one of good, bad, or neutral. If the value is greater than 300, opinion is good. If the value is less than -300, the opinion is bad. If it's between, opinion is neutral.
"Data" contains a brief explanation of how the verdict was reached.
If an error occurs, Karmad will return:
usually, something like
error=timeout error=Incorrect user and/or password.
This section assumes you're running Postfix.
% ./karmad --mta=postfix --action=prepend --verbose-header
Then, connect to it:
% perl -MIO::Socket::UNIX -le 'my $sock = IO::Socket::UNIX->new("/tmp/karmad"); print $sock "client_address=127.0.0.2\n\n"; print <$sock>;'
You should get back something along the lines of:
prepend X-Karma verdict=fail score=-1000 identities=ip4=127.0.0.2=smtp.client-ip query_id=karmad-1206640966 comment=cymru.bogons: if-match(0) => return-bad(1.0)
You should expect to see some STDERR from the karmad.
karmac script does pretty much the same thing.
If troubleshooting is necessary, use karmaclient to talk to Karmasphere directly, without going through karmad. Then use karmac to talk to karmad.
In the response, "opinion" might be more correctly termed "verdict".
Copyright (c) 2005 Shevek, Karmasphere. All rights reserved.
This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself.