#	$OpenBSD: smtpd.conf,v 1.14 2019/11/26 20:14:38 gilles Exp $

# This is the smtpd server system-wide configuration file.
# See smtpd.conf(5) for more information.

pki mail.garbash.com cert "/etc/ssl/garbash.com.fullchain.pem"
pki mail.garbash.com key "/etc/ssl/private/garbash.com.key"

filter check_dyndns phase connect match rdns regex { '.*\.dyn\..*', '.*\.dsl\..*' } \
    disconnect "550 no residential connections"

filter check_rdns phase connect match !rdns \
    disconnect "550 no rDNS is so 80s"

filter check_fcrdns phase connect match !fcrdns \
    disconnect "550 no FCrDNS is so 80s"

filter senderscore \
    proc-exec "filter-senderscore -blockBelow 10 -junkBelow 70 -slowFactor 5000"

filter "dkimsign" proc-exec "filter-dkimsign -d garbash.com -s 20210921 -k /etc/mail/dkim/garbash.com.key" user _dkimsign group _dkimsign

table aliases file:/etc/mail/aliases

listen on socket filter "dkimsign"

# To accept external mail, replace with: listen on all
#
listen on all tls pki mail.garbash.com \
    filter { check_dyndns, check_rdns, check_fcrdns, senderscore, dkimsign }

listen on lo0 port submission tls-require pki mail.garbash.com auth filter "dkimsign"

action "local_mail" maildir "~/Maildir/INBOX" junk alias <aliases>
action "outbound" relay helo mail.garbash.com

match from any for domain "garbash.com" action "local_mail"
match from local for local action "local_mail"
match from local for any action "outbound"