# pidfile - path to pid file
pidfile = /run/rmilter.pid;

# bind_socket - socket credits for local bind:
bind_socket = inet:9900

# tempdir - path to directory that contains temporary files
tempdir = /tmp;

# tempfiles_mode - set permission for temp files
tempfiles_mode = 00600;

# max_size - maximum size of scanned mail with clamav and dcc
max_size = 10M;

# strict_auth - strict checks for mails from authenticated senders
strict_auth = no;

# use_dcc - whether use or not dcc system
use_dcc = no;
use_redis = yes;

clamav {
	# servers - clamav socket definitions in format:
	servers = antivirus:3310;
	# connect_timeout - timeout in miliseconds for connecting to clamav
	connect_timeout = 1s;
	# port_timeout - timeout in miliseconds for waiting for clamav port response
	port_timeout = 4s;
	# results_timeout - timeout in miliseconds for waiting for clamav response
	results_timeout = 20s;
	# error_time - time in seconds during which we are counting errors
	error_time = 10;
	# dead_time - time in seconds during which we are thinking that server is down
	dead_time = 300;
	# maxerrors - maximum number of errors that can occur during error_time to make us thinking that
	# Default: 10
	maxerrors = 10;
};

spamd {
	# servers - spamd socket definitions in format:
	servers = r:antispam:11333;
	# connect_timeout - timeout in milliseconds for connecting to spamd
	connect_timeout = 1s;
	# results_timeout - timeout in milliseconds for waiting for spamd response
	results_timeout = 20s;
	# error_time - time in seconds during which we are counting errors
	error_time = 10;
	# dead_time - time in seconds during which we are thinking that server is down
	dead_time = 300;
	# maxerrors - maximum number of errors that can occur during error_time to make us thinking that
	maxerrors = 10;
	# reject_message - reject message for spam
	reject_message = "Spam message rejected; If this is not spam contact abuse";
	# whitelist - list of ips or nets that should be not checked with spamd
	whitelist = 127.0.0.1/32, [::1]/128, {{ WHITELIST }};
	# rspamd_metric - metric for using with rspamd
	rspamd_metric = "default";
  # Do not reject, add header
  spamd_never_reject = yes;
	# Add extended spam headers
	extended_spam_headers = yes;
};

redis {
	# servers_grey - redis servers for greylisting in format:
	servers_grey = redis:6379;
	# servers_white - redis servers for whitelisting in format similar to that is used
	servers_white = redis:6379;
	# servers_limits - redis servers used for limits storing, can not be mirrored
	servers_limits = redis:6379;
	# servers_id - redis servers used for message id storing, can not be mirrored
	servers_id = redis:6379;
	# id_prefix - prefix for extracting message ids from redis
	id_prefix = "message_id.";
	# grey_prefix - prefix for extracting greylisted records from redis
	grey_prefix = "grey.";
	# id_prefix - prefix for extracting whitelisted records from redis
	white_prefix = "white.";
	# connect_timeout - timeout in miliseconds for waiting for redis
	connect_timeout = 1s;
	# error_time - time in seconds during which we are counting errors
	error_time = 10;
	# dead_time - time in seconds during which we are thinking that server is down
	dead_time = 300;
	# maxerrors - maximum number of errors that can occur during error_time to make us thinking that
	maxerrors = 10;
};

# limits section
limits {
	# Whitelisted ip or networks
	limit_whitelist = 127.0.0.1, [::1]/128, {{ WHITELIST }};
	# Whitelisted recipients
	limit_whitelist_rcpt =  postmaster, mailer-daemon;
	# Addrs for bounce checks
	limit_bounce_addrs = postmaster, mailer-daemon, symantec_antivirus_for_smtp_gateways, <>, null, fetchmail-daemon;
	# Limit for bounce mail
	limit_bounce_to = 5:0.000277778;
	# Limit for bounce mail per one source ip
	limit_bounce_to_ip = 5:0.000277778;
	# Limit for all mail per recipient
	limit_to = 20:0.016666667;
	# Limit for all mail per one source ip
	limit_to_ip = 30:0.025;
	# Limit for all mail per one source ip and from address
	limit_to_ip_from = 100:0.033333333;
};


greylisting {
	timeout = 300s;
	expire = 3d;
	whitelist = 127.0.0.1, [::1]/128, {{ WHITELIST }};
};

dkim {
	domain {
		key = /dkim;
    domain = "*";
    selector = "dkim";
	};
  header_canon = relaxed;
  body_canon = relaxed;
  sign_alg = sha256;
  auth_only = yes;
  sign_networks = 127.0.0.1, [::1]/128, {{ WHITELIST }};
};

.try_include /overrides/rmilter.conf