<?xml version="1.0" encoding="utf-8"?><feed xmlns="http://www.w3.org/2005/Atom"><title>GNUcode.me</title><id>https://gnucode.me/feeds/tags/jmp.chat.xml</id><subtitle>Tag: jmp.chat</subtitle><updated>2024-05-01T13:21:27Z</updated><link href="https://gnucode.me/feeds/tags/jmp.chat.xml" rel="self" /><link href="https://gnucode.me" /><entry><title>Status Update May 2022</title><id>https://gnucode.me/status-update-may-2022.html</id><author><name>Joshua Branson</name><email>jbranso@dismail.de</email></author><updated>2022-05-03T18:00:00Z</updated><link href="https://gnucode.me/status-update-may-2022.html" rel="alternate" /><content type="html">&lt;p&gt;I have worked more this month on polishing/cleaning up my currect records for
opensmtpd.  I am still finding more things to do, but I am satisified with
current code base.  It is starting to feel like I have less and less things to do.&lt;/p&gt;&lt;p&gt;I have also written some preleminary documentation.  The OpenBSD folks’ &lt;code&gt;man smtpd.conf&lt;/code&gt;’ is a work of art.  Seriously go read it.  I have shamelessly copied
numerous portions of that documentation to create my own monstrosity.&lt;/p&gt;&lt;p&gt;Whoever ends up committing my code for OpenBSD’s configuration for guix, will
probably have to revise my rough draft of a document.  But at least there is
visible forward movement in the project.  Here is that documentation that I was
telling you about:&lt;/p&gt;&lt;p&gt;Apologies for the weird exported documentation...&lt;/p&gt;&lt;h1&gt;OpenSMTPD Service documentation&lt;/h1&gt;&lt;p&gt;OpenSMTPD is an easy-to-use mail transfer agent (MTA). Its configuration file is
throughly documented in man 5 &lt;code&gt;smtpd.conf&lt;/code&gt;. OpenSMTPD &lt;strong&gt;listens&lt;/strong&gt; for incoming
mail and &lt;strong&gt;matches&lt;/strong&gt; the mail to &lt;strong&gt;actions&lt;/strong&gt;. The following records represent those
stages: &lt;code&gt;&amp;lt;opensmtpd-listen-on-configuration&amp;gt;&lt;/code&gt;,
&lt;code&gt;&amp;lt;opensmtpd-listen-on-socket-configuration&amp;gt;=, =&amp;lt;opensmtpd-match-configuration&amp;gt;&lt;/code&gt;,
&lt;code&gt;&amp;lt;opensmtpd-action-local-delivery-configuration&amp;gt;&lt;/code&gt;, and
&lt;code&gt;&amp;lt;opensmtpd-action-relay-configuration&amp;gt;&lt;/code&gt;.&lt;/p&gt;&lt;p&gt;Additionally, each &lt;code&gt;&amp;lt;opensmtpd-listen-on-configuration&amp;gt;&lt;/code&gt; and
&lt;code&gt;&amp;lt;opensmtpd-listen-on-socket-configuration&amp;gt;&lt;/code&gt; may use a list of
&lt;code&gt;&amp;lt;opensmtpd-filter-configuration&amp;gt;&lt;/code&gt;, and/or
&lt;code&gt;&amp;lt;opensmtpd-filter-phase-configuration&amp;gt;&lt;/code&gt; records to filter email/spam. Also
numerous records’ fieldnames use &lt;code&gt;&amp;lt;opensmtpd-table-configuration&amp;gt;&lt;/code&gt; to hold lists
or key value pairs of data.&lt;/p&gt;&lt;p&gt;A simple example configuration is below:&lt;/p&gt;&lt;pre&gt;&lt;code&gt;(let ((smtp.gnu.org (opensmtpd-pki-configuration
                        (domain &amp;quot;smtp.gnu.org&amp;quot;)
                        (cert &amp;quot;file.cert&amp;quot;)
                        (key &amp;quot;file.key&amp;quot;))))
  (service opensmtpd-service-type
           (opensmtpd-configuration
            (listen-ons (list
                         (opensmtpd-listen-on-configuration
                          (pki smtp.gnu.org))
                         (opensmtpd-listen-on-configuration
                          (pki smtp.gnu.org)
                          (secure-connection &amp;quot;smtps&amp;quot;))))
            (matches (list
                      (opensmtpd-match-configuration
                       (action
                        (opensmtpd-action-local-delivery-configuration
                         (name &amp;quot;local-delivery&amp;quot;))))
                      (opensmtpd-match-configuration
                       (action
                        (opensmtpd-action-relay-configuration
                         (name &amp;quot;relay&amp;quot;)))))))))&lt;/code&gt;&lt;/pre&gt;&lt;ul&gt;&lt;li&gt;&lt;p&gt;Scheme Variable: opensmtpd-service-type&lt;/p&gt;&lt;p&gt;Service type for the OpenSMTPD (&lt;a href=&quot;https://www.opensmtpd.org&quot;&gt;https://www.opensmtpd.org&lt;/a&gt;) email server. The
value for this service type is a  &lt;code&gt;&amp;lt;opensmtpd-configuration&amp;gt;&lt;/code&gt; record.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;Data Type: opensmtpd-configuration&lt;/p&gt;&lt;p&gt;Data type representing the configuration of OpenSMTPD.&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;package&lt;/code&gt; (default: &lt;code&gt;opensmtpd&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;The OpenSMTPD package to use.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;config-file&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;File-like object of the OpenSMTPD configuration file to use.  By default it
listens on the loopback network interface, and allows for mail from users
and daemons on the local machine, as well as permitting email to remote
servers.  Run &lt;code&gt;man smtpd.conf&lt;/code&gt; for more information.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;bounce&lt;/code&gt; (default: &lt;code&gt;(list &amp;quot;4h&amp;quot;)&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;&lt;code&gt;bounce&lt;/code&gt; is a list of strings, which send warning messages to the envelope
sender when temporary delivery failures cause a message to remain in the
queue for longer than string &amp;lt;span class=&amp;quot;underline&amp;quot;&amp;gt;delay&amp;lt;/span&amp;gt;. Each string &amp;lt;span class=&amp;quot;underline&amp;quot;&amp;gt;delay&amp;lt;/span&amp;gt; parameter consists
of a string beginning with a positive decimal integer and a unit s, m, h,
or d. At most four delay parameters can be specified.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;listen-ons&lt;/code&gt; (default: &lt;code&gt;(list (opensmtpd-listen-on-configuration))&lt;/code&gt; )&lt;/p&gt;&lt;p&gt;&lt;code&gt;listen-ons&lt;/code&gt; is a list of &lt;code&gt;&amp;lt;opensmtpd-listen-on-configuration&amp;gt;&lt;/code&gt; records.
This list details what interfaces and ports OpenSMTPD listens on as well as
other information.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;listen-on-socket&lt;/code&gt; (default: &lt;code&gt;(opensmtpd-listen-on-socket-configuration-configuration)&lt;/code&gt; )&lt;/p&gt;&lt;p&gt;Listens for incoming connections on the Unix domain socket.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;includes&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;&lt;code&gt;includes&lt;/code&gt; is a list of string &amp;lt;span class=&amp;quot;underline&amp;quot;&amp;gt;filenames&amp;lt;/span&amp;gt;. Each filename’s contents is
additional configuration that is inserted into the top of the configuration
file.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;matches&lt;/code&gt; default:&lt;/p&gt;&lt;pre&gt;&lt;code&gt;(list (opensmtpd-match-configuration
       (action (opensmtpd-action-local-delivery-configuration
                (name &amp;quot;local&amp;quot;)
                (method &amp;quot;mbox&amp;quot;)))
       (for (opensmtpd-option-configuration
             (option &amp;quot;for local&amp;quot;))))
      (opensmtpd-match-configuration
       (action (opensmtpd-action-relay-configuration
                (name &amp;quot;outbound&amp;quot;)))
       (from (opensmtpd-option-configuration
              (option &amp;quot;from local&amp;quot;)))
       (for (opensmtpd-option-configuration
             (option &amp;quot;for any&amp;quot;)))))&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;&lt;code&gt;matches&lt;/code&gt; is a list of &lt;code&gt;&amp;lt;opensmtpd-match-configuration&amp;gt;&lt;/code&gt; records, which
matches incoming mail and sends it to a correspending action. The match
records are evaluated sequentially, with the first match winning. If an
incoming mail does not match any match records, then it is rejected.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;mta-max-deferred&lt;/code&gt; (default: &lt;code&gt;100&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;When delivery to a given host is suspended due to temporary failures, cache
at most &amp;lt;span class=&amp;quot;underline&amp;quot;&amp;gt;number&amp;lt;/span&amp;gt; envelopes for that host such that they can be delivered as
soon as another delivery succeeds to that host. The default is 100.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;queue&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;&lt;code&gt;queue&lt;/code&gt; expects an &lt;code&gt;&amp;lt;opensmtpd-queue-configuration&amp;gt;&lt;/code&gt; record. With it, one may
compress and encrypt queue-ed emails as well as set the default expiration
time for temporarily undeliverable messages.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;smtp&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;&lt;code&gt;smtp&lt;/code&gt; expects an &lt;code&gt;&amp;lt;opensmtpd-smtp-configuration&amp;gt;&lt;/code&gt; record, which lets one
specifiy how large email may be along with other settings.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;srs&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;&lt;code&gt;srs&lt;/code&gt; expects an &lt;code&gt;&amp;lt;opensmtpd-srs-configuration&amp;gt;&lt;/code&gt; record, which lets one set
up SRS, the Sender Rewritting Scheme.&lt;/p&gt;&lt;/li&gt;&lt;/ul&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;Data Type: opensmtpd-listen-on-configuration&lt;/p&gt;&lt;p&gt;Data type representing the configuration of an
&lt;code&gt;&amp;lt;opensmtpd-listen-on-configuration&amp;gt;&lt;/code&gt;. Listen on the fieldname &lt;code&gt;interface&lt;/code&gt; for
incoming connections, using the same syntax as for ifconfig(8). The interface
parameter may also be an string interface group, an string IP address, or a
string domain name. Listening can optionally be restricted to a specific
address fieldname &lt;code&gt;family&lt;/code&gt;, which can be either “inet4” or “inet6”.&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;interface&lt;/code&gt; (default: “lo”)&lt;/p&gt;&lt;p&gt;The string interface to listen for incoming connections. These interface can
usually be found by the command &lt;code&gt;ip link&lt;/code&gt;.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;family&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;The string IP family to use.  Valid strings are “inet4” or “inet6”.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;auth&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;Support SMTPAUTH: clients may only start SMTP transactions after successful
authentication. If &lt;code&gt;auth&lt;/code&gt; is &lt;code&gt;#t&lt;/code&gt;, then users are authenticated against
their own normal login credentials. Alternatively &lt;code&gt;auth&lt;/code&gt; may be an
&lt;code&gt;&amp;lt;opensmtpd-table-configuration&amp;gt;&lt;/code&gt; whose users are authenticated against
their passwords.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;auth-optional&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;Support SMTPAUTH optionally: clients need not authenticate, but may do so.
This allows the &lt;code&gt;&amp;lt;opensmtpd-listen-on-configuration&amp;gt;&lt;/code&gt; to both accept
incoming mail from untrusted senders and permit outgoing mail from
authenticated users (using &lt;code&gt;&amp;lt;opensmtpd-match-configuration&amp;gt;&lt;/code&gt; fieldname
&lt;code&gt;auth&lt;/code&gt;). It can be used in situations where it is not possible to listen on
a separate port (usually the submission port, 587) for users to
authenticate.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;filters&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;A list of one or many &lt;code&gt;&amp;lt;opensmtpd-filter-configuration&amp;gt;&lt;/code&gt; or
&lt;code&gt;&amp;lt;opensmtpd-filter-phase-configuration&amp;gt;&lt;/code&gt; records. The filters are applied
sequentially. These records listen and filter on connections handled by this
listener.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;hostname&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;Use string “hostname” in the greeting banner instead of the default server
name.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;hostnames&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;Override the server name for specific addresses. Use a
&lt;code&gt;&amp;lt;opensmtpd-table-configuration&amp;gt;&lt;/code&gt; containing a mapping of string IP
addresses to hostnames. If the address on which the connection arrives
appears in the mapping, the associated hostname is used.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;mask-src&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;If &lt;code&gt;#t&lt;/code&gt;, then omit the from part when prepending “Received” headers.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;disable-dsn&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;When &lt;code&gt;#t&lt;/code&gt;, then disable the DSN (Delivery Status Notification) extension.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;pki&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;For secure connections, use an &lt;code&gt;&amp;lt;opensmtpd-pki-configuration&amp;gt;&lt;/code&gt;
to prove a mail server’s identity.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;port&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;Listen on the &amp;lt;span class=&amp;quot;underline&amp;quot;&amp;gt;integer&amp;lt;/span&amp;gt; port instead of the default port of 25.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;proxy-v2&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;If &lt;code&gt;#t&lt;/code&gt;, then support the PROXYv2 protocol, rewriting appropriately source
address received from proxy.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;received-auth&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;If &lt;code&gt;#t&lt;/code&gt;, then in “Received” headers, report whether the session was
authenticated and by which local user.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;senders&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;Look up the authenticated user in the supplied
&lt;code&gt;&amp;lt;opensmtpd-table-configuration&amp;gt;&lt;/code&gt; to find the email addresses that user is
allowed to submit mail as.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;secure-connection&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;This is a string of one of these options:&lt;/p&gt;&lt;/li&gt;&lt;/ul&gt;&lt;/li&gt;&lt;/ul&gt;&lt;blockquote&gt;&lt;pre&gt;&lt;code&gt;   |----------------------+---------------------------------------------|
   | &amp;quot;smtps&amp;quot;              | Support SMTPS, by default on port 465.      |
   |----------------------+---------------------------------------------|
   | &amp;quot;tls&amp;quot;                | Support STARTTLS, by default on port 25.    |
   |----------------------+---------------------------------------------|
   | &amp;quot;tls-require-verify&amp;quot; | Like tls, but force clients to establish    |
   |                      | a secure connection before being allowed to |
   |                      | start an SMTP transaction.  With the verify |
   |                      | option, clients must also provide a valid   |
   |                      | certificate to establish an SMTP session.   |
   |----------------------+---------------------------------------------|&lt;/code&gt;&lt;/pre&gt;&lt;/blockquote&gt;&lt;pre&gt;&lt;code&gt;-   `tag` (default: `#f`)
    
    Clients connecting to the listener are tagged with the given string tag.&lt;/code&gt;&lt;/pre&gt;&lt;ul&gt;&lt;li&gt;&lt;p&gt;Data Type: opensmtpd-listen-on-socket-configuration&lt;/p&gt;&lt;p&gt;Data type representing the configuration of an
&lt;code&gt;&amp;lt;opensmtpd-listen-on-socket-configuration&amp;gt;&lt;/code&gt;. Listen for incoming SMTP
connections on the Unix domain socket &lt;code&gt;/var/run/smtpd.sock&lt;/code&gt;. This is done by
default, even if the directive is absent.&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;filters&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;A list of one or many &lt;code&gt;&amp;lt;opensmtpd-filter-configuration&amp;gt;&lt;/code&gt; or
&lt;code&gt;&amp;lt;opensmtpd-filter-phase-configuration&amp;gt;&lt;/code&gt; records. These filter incoming
connections handled by this listener.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;mask-src&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;If &lt;code&gt;#t&lt;/code&gt;, then omit the from part when prepending “Received” headers.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;tag&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;Clients connecting to the listener are tagged with the given string tag.&lt;/p&gt;&lt;/li&gt;&lt;/ul&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;Data Type: opensmtpd-match-configuration&lt;/p&gt;&lt;p&gt;This data type represents the configuration of an
&lt;code&gt;&amp;lt;opensmtpd-match-configuration&amp;gt;&lt;/code&gt; record.&lt;/p&gt;&lt;p&gt;If at least one mail envelope matches the options of one match record, receive
the incoming message, put a copy into each matching envelope, and atomically
save the envelopes to the mail spool for later processing by the respective
&lt;code&gt;&amp;lt;opensmtpd-action-configuration&amp;gt;&lt;/code&gt; found in fieldname &lt;code&gt;action&lt;/code&gt;.&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;action&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;If mail matches this match configuration, then do this action. Valid values
include &lt;code&gt;&amp;lt;opensmtpd-action-local-delivery-configuration&amp;gt;&lt;/code&gt; or
&lt;code&gt;&amp;lt;opensmtpd-action-relay-configuration&amp;gt;&lt;/code&gt;.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;options&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;) &lt;code&gt;&amp;lt;opensmtpd-option-configuration&amp;gt;&lt;/code&gt;
The fieldname ’option’ is a list of unique
&lt;code&gt;&amp;lt;opensmtpd-option-configuration&amp;gt;&lt;/code&gt; records.&lt;/p&gt;&lt;p&gt;Each &lt;code&gt;&amp;lt;opensmtpd-option-configuration&amp;gt;&lt;/code&gt; record’s fieldname ’option’ has some
mutually exclusive options: there can be one “for” and one “from” option.&lt;/p&gt;&lt;p&gt;The following matching options are supported and can all be negated via (not
#t). The options that support a table (anything surrounded with ’&amp;lt;’ and ’&amp;gt;’
eg: &amp;lt;table&amp;gt;), also support specifying regex via (regex #t).&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;for any&lt;/code&gt;&lt;/p&gt;&lt;p&gt;Specify that session may address any destination.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;for local&lt;/code&gt;&lt;/p&gt;&lt;p&gt;Specify that session may address any local domain.  This is the default,
and may be omitted.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;for domain _domain_ | &amp;lt;domain&amp;gt;&lt;/code&gt;&lt;/p&gt;&lt;p&gt;Specify that session may address the string or list table &amp;lt;span class=&amp;quot;underline&amp;quot;&amp;gt;domain&amp;lt;/span&amp;gt;.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;for rcpt-to _recipient_ | &amp;lt;recipient&amp;gt;&lt;/code&gt;&lt;/p&gt;&lt;p&gt;Specify that session may address the string or list table &amp;lt;span class=&amp;quot;underline&amp;quot;&amp;gt;recipient&amp;lt;/span&amp;gt;.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;from any&lt;/code&gt;&lt;/p&gt;&lt;p&gt;Specify that session may originate from any source.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;from auth&lt;/code&gt;&lt;/p&gt;&lt;p&gt;Specify that session may originate from any authenticated user, no matter
the source IP address.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;from auth _user_ | &amp;lt;user&amp;gt;&lt;/code&gt;&lt;/p&gt;&lt;p&gt;Specify that session may originate from authenticated &amp;lt;span class=&amp;quot;underline&amp;quot;&amp;gt;user&amp;lt;/span&amp;gt; or user list
user, no matter the source IP address.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;from local&lt;/code&gt;&lt;/p&gt;&lt;p&gt;Specify that session may only originate from a local IP address, or from
the local enqueuer.  This is the default, and may be omitted.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;from mail-from _sender_ | &amp;lt;sender&amp;gt;&lt;/code&gt;&lt;/p&gt;&lt;p&gt;Specify that session may originate from &amp;lt;span class=&amp;quot;underline&amp;quot;&amp;gt;sender&amp;lt;/span&amp;gt; or table &amp;lt;span class=&amp;quot;underline&amp;quot;&amp;gt;sender&amp;lt;/span&amp;gt;, no
matter the source IP address.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;from rdns&lt;/code&gt;&lt;/p&gt;&lt;p&gt;Specify that session may only originate from an IP address that resolves
to a reverse DNS.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;from rdns _hostname_ | &amp;lt;hostname&amp;gt;&lt;/code&gt;&lt;/p&gt;&lt;p&gt;Specify that session may only originate from an IP address that resolves
to a reverse DNS matching string or list string &amp;lt;span class=&amp;quot;underline&amp;quot;&amp;gt;hostname&amp;lt;/span&amp;gt;.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;from socket&lt;/code&gt;&lt;/p&gt;&lt;p&gt;Specify that session may only originate from the local enqueuer.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;from src _address_ | &amp;lt;address&amp;gt;&lt;/code&gt;&lt;/p&gt;&lt;p&gt;Specify that session may only originate from string or list table address
which can be a specific &amp;lt;span class=&amp;quot;underline&amp;quot;&amp;gt;address&amp;lt;/span&amp;gt; or a subnet expressed in CIDR-notation.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;auth&lt;/code&gt;&lt;/p&gt;&lt;p&gt;Matches transactions which have been authenticated.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;auth _username_ | &amp;lt;username&amp;gt;&lt;/code&gt;&lt;/p&gt;&lt;p&gt;Matches transactions which have been authenticated for user or user list
&amp;lt;span class=&amp;quot;underline&amp;quot;&amp;gt;username&amp;lt;/span&amp;gt;.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;helo _helo-name_ | &amp;lt;helo-name&amp;gt;&lt;/code&gt;&lt;/p&gt;&lt;p&gt;Specify that session’s HELO / EHLO should match the string or list table
&amp;lt;span class=&amp;quot;underline&amp;quot;&amp;gt;helo-name&amp;lt;/span&amp;gt;.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;mail-from _sender_ | &amp;lt;sender&amp;gt;&lt;/code&gt;&lt;/p&gt;&lt;p&gt;Specify that transactions’s MAIL FROM should match the string or list
table &amp;lt;span class=&amp;quot;underline&amp;quot;&amp;gt;sender&amp;lt;/span&amp;gt;.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;rcpt-to _recipient_ | &amp;lt;recipient&amp;gt;&lt;/code&gt;&lt;/p&gt;&lt;p&gt;Specify that transaction’s RCPT TO should match the string or list table
&amp;lt;span class=&amp;quot;underline&amp;quot;&amp;gt;recipient&amp;lt;/span&amp;gt;.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;tag tag&lt;/code&gt;
Matches transactions tagged with the given &amp;lt;span class=&amp;quot;underline&amp;quot;&amp;gt;tag&amp;lt;/span&amp;gt;.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;tls&lt;/code&gt;
Specify that transaction should take place in a TLS channel.&lt;/p&gt;&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;Here is a simple example:&lt;/p&gt;&lt;pre&gt;&lt;code&gt;(opensmtpd-option-configuration
 (not #t)
 (regex #f)
 (option &amp;quot;for domain&amp;quot;)
 (data (opensmtpd-table-configuration
        (name &amp;quot;domain-table&amp;quot;)
        (data (list &amp;quot;gnu.org&amp;quot; &amp;quot;dismail.de&amp;quot;)))))&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;The mail must NOT come from the domains &lt;code&gt;gnu.org&lt;/code&gt; or &lt;code&gt;dismail.de&lt;/code&gt;.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;Data Type: opensmtpd-option-configuration&lt;/p&gt;&lt;/li&gt;&lt;/ul&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;Data Type: opensmtpd-action-local-delivery-configuration&lt;/p&gt;&lt;p&gt;This data type represents the configuration of an
&lt;code&gt;&amp;lt;opensmtpd-action-local-delivery-configuration&amp;gt;&lt;/code&gt; record.&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;name&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;&lt;code&gt;name&lt;/code&gt; is the string name of the relay action.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;method&lt;/code&gt; (default: &lt;code&gt;&amp;quot;mbox&amp;quot;&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;The email delivery option.  Valid options are:&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;&amp;quot;mbox&amp;quot;&lt;/code&gt;&lt;/p&gt;&lt;p&gt;Deliver the message to the user’s mbox with mail.local(8).&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;&amp;quot;expand-only&amp;quot;&lt;/code&gt;&lt;/p&gt;&lt;p&gt;Only accept the message if a delivery method was specified in an aliases
or &amp;lt;span class=&amp;quot;underline&amp;quot;&amp;gt;.forward file&amp;lt;/span&amp;gt;.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;&amp;quot;forward-only&amp;quot;&lt;/code&gt;&lt;/p&gt;&lt;p&gt;Only accept the message if the recipient results in a remote address after
the processing of aliases or forward file.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;&amp;lt;opensmtpd-lmtp-configuration&amp;gt;&lt;/code&gt;&lt;/p&gt;&lt;p&gt;Deliver the message to an LMTP server at
&lt;code&gt;&amp;lt;opensmtpd-lmtp-configuration&amp;gt;&lt;/code&gt;’s fieldname &lt;code&gt;destination&lt;/code&gt;. The location
may be expressed as string host:port or as a UNIX socket. Optionally,
&lt;code&gt;&amp;lt;opensmtpd-lmtp-configuration&amp;gt;&lt;/code&gt;’s fieldname &lt;code&gt;rcpt-to&lt;/code&gt; might be specified
to use the recipient email address (after expansion) instead of the local
user in the LMTP session as RCPT TO.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;&amp;lt;opensmtpd-maildir-configuration&amp;gt;&lt;/code&gt;&lt;/p&gt;&lt;p&gt;Deliver the message to the maildir in
&lt;code&gt;&amp;lt;opensmtpd-maildir-configuration&amp;gt;&lt;/code&gt;’s fieldname &lt;code&gt;pathname&lt;/code&gt; if specified,
or by default to &lt;code&gt;~/Maildir&lt;/code&gt;.&lt;/p&gt;&lt;p&gt;The pathname may contain format specifiers that are expanded before use
(see the below section about Format Specifiers).&lt;/p&gt;&lt;p&gt;If &lt;code&gt;&amp;lt;opensmtpd-maildir-configuration&amp;gt;&lt;/code&gt;’s record fieldname &lt;code&gt;junk&lt;/code&gt; is &lt;code&gt;#t&lt;/code&gt;,
then message will be moved to the ‘Junk’ folder if it contains a positive
‘X-Spam’ header. This folder will be created under fieldname &lt;code&gt;pathname&lt;/code&gt; if
it does not yet exist.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;&amp;lt;opensmtpd-mda-configuration&amp;gt;&lt;/code&gt;&lt;/p&gt;&lt;p&gt;Delegate the delivery to the &lt;code&gt;&amp;lt;opensmtpd-mda-configuration&amp;gt;&lt;/code&gt;’s fieldname
&lt;code&gt;command&lt;/code&gt; (type string) that receives the message on its standard input.&lt;/p&gt;&lt;p&gt;The &lt;code&gt;command&lt;/code&gt; may contain format specifiers that are expanded before use
(see Format Specifiers).&lt;/p&gt;&lt;/li&gt;&lt;/ul&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;alias&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;Use the mapping table for aliases expansion. &lt;code&gt;alias&lt;/code&gt; is an
&lt;code&gt;&amp;lt;opensmtpd-table-configuration&amp;gt;&lt;/code&gt;.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;ttl&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;&lt;code&gt;ttl&lt;/code&gt; is a string specify how long a message may remain in the queue.  It’s
format is &lt;code&gt;n{s|m|h|d}&lt;/code&gt;.  eg: “4m” is four minutes.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;user&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt; )&lt;/p&gt;&lt;p&gt;&lt;code&gt;user&lt;/code&gt; is the string username for performing the delivery, to be looked up
with getpwnam(3).&lt;/p&gt;&lt;p&gt;This is used for virtual hosting where a single username is in charge of
handling delivery for all virtual users.&lt;/p&gt;&lt;p&gt;This option is not usable with the mbox delivery method.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;userbase&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;&lt;code&gt;userbase&lt;/code&gt; is an &lt;code&gt;&amp;lt;opensmtpd-table-configuration&amp;gt;&lt;/code&gt; record for mapping user
lookups instead of the getpwnam(3) function.&lt;/p&gt;&lt;p&gt;The fieldnames &lt;code&gt;user&lt;/code&gt; and &lt;code&gt;userbase&lt;/code&gt; are mutually exclusive.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;virtual&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;&lt;code&gt;virtual&lt;/code&gt; is an &lt;code&gt;&amp;lt;opensmtpd-table-configuration&amp;gt;&lt;/code&gt; record is used for virtual
expansion.&lt;/p&gt;&lt;/li&gt;&lt;/ul&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;Data Type: opensmtpd-action-relay-configuration&lt;/p&gt;&lt;p&gt;This data type represents the configuration of an
&lt;code&gt;&amp;lt;opensmtpd-action-relay-configuration&amp;gt;&lt;/code&gt; record.&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;name&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;&lt;code&gt;name&lt;/code&gt; is the string name of the relay action.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;backup&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;When &lt;code&gt;#t&lt;/code&gt;, operate as a backup mail exchanger delivering messages to any
mail exchanger with higher priority.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;backup-mx&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;Operate as a backup mail exchanger delivering messages to any mail exchanger
with higher priority than mail exchanger identified as string name.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;helo&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;Advertise string heloname as the hostname to other mail exchangers during
the HELO phase.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;helo-src&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt; )&lt;/p&gt;&lt;p&gt;Use the mapping &lt;code&gt;&amp;lt;openmstpd-table-configuration&amp;gt;&lt;/code&gt; to look up a hostname
matching the source address, to advertise during the HELO phase.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;domain&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;Do not perform MX lookups but look up destination domain in an
&lt;code&gt;&amp;lt;opensmtpd-table-configuration&amp;gt;&lt;/code&gt; and use matching relay url as relay host.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;host&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;Do not perform MX lookups but relay messages to the relay host described by
the string relay-url. The format for relay-url is
&lt;code&gt;[proto://[label@]]host[:port]&lt;/code&gt;. The following protocols are available:&lt;/p&gt;&lt;p&gt;Unless noted, port defaults to 25.&lt;/p&gt;&lt;p&gt;The label corresponds to an entry in a credentials table, as documented in
&lt;code&gt;table(5)&lt;/code&gt;. It is used with the &lt;code&gt;&amp;quot;smtp+tls&amp;quot;&lt;/code&gt; and &lt;code&gt;&amp;quot;smtps&amp;quot;&lt;/code&gt; protocols for
authentication. Server certificates for those protocols are verified by
default.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;pki&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;For secure connections, use the certificate associated with
&lt;code&gt;&amp;lt;opensmtpd-pki-configuration&amp;gt;&lt;/code&gt; (declared in a pki directive) to prove the
client’s identity to the remote mail server.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;srs&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;If &lt;code&gt;#t&lt;/code&gt;, then when relaying a mail resulting from a forward, use the Sender
Rewriting Scheme to rewrite sender address.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;tls&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;) boolean or string “no-verify”&lt;/p&gt;&lt;p&gt;When &lt;code&gt;#t&lt;/code&gt;, Require TLS to be used when relaying, using mandatory STARTTLS by
default. When used with a smarthost, the protocol must not be
&lt;code&gt;&amp;quot;smtp+notls://&amp;quot;&lt;/code&gt;. When string &lt;code&gt;&amp;quot;no-verify&amp;quot;&lt;/code&gt;, then do not require a valid
certificate.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;auth&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;) &lt;code&gt;&amp;lt;opensmtpd-table-configuration&amp;gt;&lt;/code&gt;&lt;/p&gt;&lt;p&gt;Use the alist &lt;code&gt;&amp;lt;opensmtpd-table-configuration&amp;gt;&lt;/code&gt; for connecting to relay-url
using credentials. This option is usable only with fieldname &lt;code&gt;host&lt;/code&gt; option.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;mail-from&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;) string&lt;/p&gt;&lt;p&gt;Use the string &amp;lt;span class=&amp;quot;underline&amp;quot;&amp;gt;mailaddress&amp;lt;/span&amp;gt; as MAIL FROM address within the SMTP transaction.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;src&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;) string | &lt;code&gt;&amp;lt;opensmtpd-table-configuration&amp;gt;&lt;/code&gt;&lt;/p&gt;&lt;p&gt;Use the string or &lt;code&gt;&amp;lt;opensmtpd-table-configuration&amp;gt;&lt;/code&gt; sourceaddr for the
source IP address, which is useful on machines with multiple interfaces. If
the list contains more than one address, all of them are used in such a way
that traffic is routed as efficiently as possible.&lt;/p&gt;&lt;/li&gt;&lt;/ul&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;Data Type: opensmtpd-filter-configuration&lt;/p&gt;&lt;p&gt;This data type represents the configuration of an
&lt;code&gt;&amp;lt;opensmtpd-filter-configuration&amp;gt;&lt;/code&gt;. This is the filter record one should use
if they want to use an external package to filter email eg: rspamd or
spamassassin.&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;name&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;The string name of the filter.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;proc&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;The string command or process name.  If &lt;code&gt;proc-exec&lt;/code&gt; is &lt;code&gt;#t&lt;/code&gt;, &lt;code&gt;proc&lt;/code&gt; is
treated as a command to execute.  Otherwise, it is a process name.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;proc-exec&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;/li&gt;&lt;/ul&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;Data Type: opensmtpd-filter-phase-configuration&lt;/p&gt;&lt;p&gt;This data type represents the configuration of an
&lt;code&gt;&amp;lt;opensmtpd-filter-phase-configuration&amp;gt;&lt;/code&gt;.&lt;/p&gt;&lt;p&gt;In a regular workflow, smtpd(8) may accept or reject a message based only on
the content of envelopes. Its decisions are about the handling of the message,
not about the handling of an active session.&lt;/p&gt;&lt;p&gt;Filtering extends the decision making process by allowing smtpd(8) to stop at
each phase of an SMTP session, check that options are met, then decide if a
session is allowed to move forward.&lt;/p&gt;&lt;p&gt;With filtering via an &lt;code&gt;&amp;lt;opensmtpd-filter-phase-configuration&amp;gt;&lt;/code&gt; record, a
session may be interrupted at any phase before an envelope is complete. A
message may also be rejected after being submitted, regardless of whether the
envelope was accepted or not.&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;name&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;The string name of the filter phase.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;phase-name&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;The string name of the phase. Valid values are:&lt;/p&gt;&lt;/li&gt;&lt;/ul&gt;&lt;/li&gt;&lt;/ul&gt;&lt;pre&gt;&lt;code&gt;-   `options` (default `#f`)
    
    A list of unique `&amp;lt;opensmtpd-option-configuration&amp;gt;` records.
    
    At each phase, various options, specified by a list of
    `&amp;lt;opensmtpd-option-configuration&amp;gt;`, may be checked. The
    `&amp;lt;opensmtpd-option-configuration&amp;gt;`&amp;amp;rsquo;s fieldname &amp;amp;rsquo;option&amp;amp;rsquo; values of: &amp;amp;ldquo;fcrdns&amp;amp;rdquo;,
    &amp;amp;ldquo;rdns&amp;amp;rdquo;, and &amp;amp;ldquo;src&amp;amp;rdquo; data are available in all phases, but other data must have
    been already submitted before they are available. Options with a `&amp;lt;table&amp;gt;`
    next to them require the `&amp;lt;opensmtpd-option-configuration&amp;gt;`&amp;amp;rsquo;s fieldname
    `data` to be an `&amp;lt;opensmtpd-table-configuration&amp;gt;`. There are the available
    options:
    
    
    These conditions may all be negated by setting
    `&amp;lt;opensmtpd-option-configuration&amp;gt;`&amp;amp;rsquo;s fieldname `not` to `#t`.
    
    Any conditions that require a table may indicate that tables include regexs
    setting `&amp;lt;opensmtpd-option-configuration&amp;gt;`&amp;amp;rsquo;s fieldname `regex` to `#t`.

-   `decision`
    
    A string decision to be taken. Some decisions require an `message` or
    `value`. Valid strings are:
    
    Decisions that involve a message require that the message be RFC valid,
    meaning that they should either start with a 4xx or 5xx status code.
    Descisions can be taken at any phase, though junking can only happen before
    a message is committed.

-   `message` (default `#f`)
    
    A string message beginning with a 4xx or 5xx status code.

-   `value` (default: `#f`)
    
    A number value.  `value` and `message` are mutually exclusive.&lt;/code&gt;&lt;/pre&gt;&lt;ul&gt;&lt;li&gt;&lt;p&gt;Data Type: opensmtpd-option-configuration&lt;/p&gt;&lt;p&gt;This data type represents the configuration of an
&lt;code&gt;&amp;lt;opensmtpd-option-configuration&amp;gt;&lt;/code&gt;, which is used by
&lt;code&gt;&amp;lt;opensmtpd-filter-phase-configuration&amp;gt;&lt;/code&gt; and &lt;code&gt;&amp;lt;opensmtpd-match-configuration&amp;gt;&lt;/code&gt;
to match various options for email.&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;conditition&lt;/code&gt; (default &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;A string option to be taken. Some options require a string or an
&lt;code&gt;&amp;lt;opensmtpd-table-configuration&amp;gt;&lt;/code&gt; via the fieldname data. When the option
record is used inside of an &lt;code&gt;&amp;lt;opensmtpd-filter-phase-configuration&amp;gt;&lt;/code&gt;, then
valid strings are:&lt;/p&gt;&lt;p&gt;At each phase, various options may be matched. The fcrdns, rdns, and src
data are available in all phases, but other data must have been already
submitted before they are available.&lt;/p&gt;&lt;/li&gt;&lt;/ul&gt;&lt;/li&gt;&lt;/ul&gt;&lt;pre&gt;&lt;code&gt;    When `&amp;lt;opensmtpd-option-configuration&amp;gt;` is used inside of an
    `&amp;lt;opensmtpd-match-configuration&amp;gt;`, then valid strigs for fieldname `option`
    are: &amp;amp;ldquo;for&amp;amp;rdquo;, &amp;amp;ldquo;for any&amp;amp;rdquo;, &amp;amp;ldquo;for local&amp;amp;rdquo;, &amp;amp;ldquo;for domain&amp;amp;rdquo;, &amp;amp;ldquo;for rcpt-to&amp;amp;rdquo;, &amp;amp;ldquo;from any&amp;amp;rdquo;
    &amp;amp;ldquo;from auth&amp;amp;rdquo;, &amp;amp;ldquo;from local&amp;amp;rdquo;, &amp;amp;ldquo;from mail-from&amp;amp;rdquo;, &amp;amp;ldquo;from rdns&amp;amp;rdquo;, &amp;amp;ldquo;from socket&amp;amp;rdquo;,
    &amp;amp;ldquo;from src&amp;amp;rdquo;, &amp;amp;ldquo;auth&amp;amp;rdquo;, &amp;amp;ldquo;helo&amp;amp;rdquo;, &amp;amp;ldquo;mail-from&amp;amp;rdquo;, &amp;amp;ldquo;rcpt-to&amp;amp;rdquo;, &amp;amp;ldquo;tag&amp;amp;rdquo;, or &amp;amp;ldquo;tls&amp;amp;rdquo;.

-   `data` (default `#f`) `&amp;lt;opensmtpd-table-configuration&amp;gt;`
    
    Some options require a table to be present. One would specify that table
    here.
-   `regex` (default: `#f`) boolean
    
    Any options using a table may indicate that tables hold regex by
    prefixing the table name with the keyword regex.
-   `not` (default: `#f`) boolean
    
    When `#t`, this option record is negated.&lt;/code&gt;&lt;/pre&gt;&lt;ul&gt;&lt;li&gt;&lt;p&gt;Data Type: opensmtpd-table-configuration&lt;/p&gt;&lt;p&gt;This data type represents the configuration of an
&lt;code&gt;&amp;lt;opensmtpd-table-configuration&amp;gt;&lt;/code&gt;.&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;name&lt;/code&gt; (default &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;&lt;code&gt;name&lt;/code&gt; is the name of the &lt;code&gt;&amp;lt;opensmtpd-table-configuration&amp;gt;&lt;/code&gt; record.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;data&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;&lt;code&gt;data&lt;/code&gt; expects a list of strings or an alist, which is a list of
cons cells.  eg: &lt;code&gt;(data (list (&amp;quot;james&amp;quot; . &amp;quot;password&amp;quot;)))&lt;/code&gt; OR
&lt;code&gt;(data (list (&amp;quot;gnu.org&amp;quot; &amp;quot;fsf.org&amp;quot;)))&lt;/code&gt;.&lt;/p&gt;&lt;/li&gt;&lt;/ul&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;Data Type: opensmtpd-pki-configuration&lt;/p&gt;&lt;p&gt;This data type represents the configuration of an
&lt;code&gt;&amp;lt;opensmtpd-pki-configuration&amp;gt;&lt;/code&gt;.&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;domain&lt;/code&gt; (default &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;&lt;code&gt;domain&lt;/code&gt; is the string name of the &lt;code&gt;&amp;lt;opensmtpd-pki-configuration&amp;gt;&lt;/code&gt; record.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;cert&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;&lt;code&gt;cert&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;&lt;code&gt;cert&lt;/code&gt; is the string certificate filename to use for this pki.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;key&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;&lt;code&gt;key&lt;/code&gt; is the string certificate falename to use for this pki.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;dhe&lt;/code&gt; (default: &lt;code&gt;&amp;quot;none&amp;quot;&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;Specify the DHE string parameter to use for DHE cipher suites with host
pkiname. Valid parameter values are “none”, “legacy”, or “auto”. For “legacy”, a
fixed key length of 1024 bits is used, whereas for “auto”, the key length is
determined automatically. The default is “none”, which disables DHE cipher
suites.&lt;/p&gt;&lt;/li&gt;&lt;/ul&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;Data Type: opensmtpd-maildir-configuration&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;pathname&lt;/code&gt; (default: &lt;code&gt;&amp;quot;~/Maildir&amp;quot;&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;Deliver the message to the maildir if pathname if specified, or by default
to &lt;code&gt;~/Maildir&lt;/code&gt;.&lt;/p&gt;&lt;p&gt;The pathname may contain format specifiers that are expanded before use
(see FORMAT SPECIFIERS).&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;junk&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;If the junk argument is &lt;code&gt;#t&lt;/code&gt;, then the message will be moved to the &lt;code&gt;‘Junk’&lt;/code&gt;
folder if it contains a positive &lt;code&gt;‘X-Spam’&lt;/code&gt; header. This folder will be
created under pathname if it does not yet exist.&lt;/p&gt;&lt;/li&gt;&lt;/ul&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;Data Type: opensmtpd-mda-configuration&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;name&lt;/code&gt;&lt;/p&gt;&lt;p&gt;The string name for this MDA command.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;command&lt;/code&gt;&lt;/p&gt;&lt;p&gt;Delegate the delivery to a command that receives the message on its standard
input.&lt;/p&gt;&lt;p&gt;The command may contain format specifiers that are expanded before use (see
FORMAT SPECIFIERS).&lt;/p&gt;&lt;/li&gt;&lt;/ul&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;Data Type: opensmtpd-queue-configuration&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;compression&lt;/code&gt; (default &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;Store queue files in a compressed format. This may be useful to save disk
space.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;encryption&lt;/code&gt; (default &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;Encrypt queue files with EVP&amp;lt;sub&amp;gt;aes&amp;lt;/sub&amp;gt;&amp;lt;sub&amp;gt;256&amp;lt;/sub&amp;gt;&amp;lt;sub&amp;gt;gcm&amp;lt;/sub&amp;gt;(3). If no key is specified, it is
read with getpass(3). If the string stdin or a single dash (‘-’) is given
instead of a key, the key is read from the standard input.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;ttl-delay&lt;/code&gt; (default &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;Set the default expiration time for temporarily undeliverable messages,
given as a positive decimal integer followed by a unit s, m, h, or d. The
default is four days (“4d”).&lt;/p&gt;&lt;/li&gt;&lt;/ul&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;Data Type: opensmtpd-smtp-configuration&lt;/p&gt;&lt;p&gt;Data type representing an &lt;code&gt;&amp;lt;opensmtpd-smtp-configuration&amp;gt;&lt;/code&gt; record.&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;ciphers&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;Set the control string for SSL&amp;lt;sub&amp;gt;CTX&amp;lt;/sub&amp;gt;&amp;lt;sub&amp;gt;set&amp;lt;/sub&amp;gt;&amp;lt;sub&amp;gt;cipher&amp;lt;/sub&amp;gt;&amp;lt;sub&amp;gt;list&amp;lt;/sub&amp;gt;(3).  The default is
“HIGH:!aNULL:!MD5”.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;limit-max-mails&lt;/code&gt; (default: &lt;code&gt;100&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;Limit the number of messages to count for each sessio&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;limit-max-rcpt&lt;/code&gt; (default: &lt;code&gt;1000&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;Limit the number of recipients to count for each transaction.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;max-message-size&lt;/code&gt; (default: &lt;code&gt;35M&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;Reject messages larger than size, given as a positive number of bytes or as
a string to be parsed with scan&amp;lt;sub&amp;gt;scaled&amp;lt;/sub&amp;gt;(3).&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;sub-addr-delim character&lt;/code&gt; (default: &lt;code&gt;+&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;When resolving the local part of a local email address, ignore the ASCII
character and all characters following it. This is helpful for email
filters. &lt;code&gt;&amp;quot;admin+bills@gnu.org&amp;quot;&lt;/code&gt; is the same email address as
&lt;code&gt;&amp;quot;admin@gnu.org&amp;quot;&lt;/code&gt;. BUT an email filter can filter emails addressed to first
email address into a ’Bills’ email folder.&lt;/p&gt;&lt;/li&gt;&lt;/ul&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;Data Type: opensmtpd-srs-configuration&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;key&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;Set the secret key to use for SRS, the Sender Rewriting Scheme.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;backup-key&lt;/code&gt; (default: &lt;code&gt;#f&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;Set a backup secret key to use as a fallback for SRS. This can be used to
implement SRS key rotation.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;&lt;code&gt;ttl-delay&lt;/code&gt; (default: &lt;code&gt;&amp;quot;4d&amp;quot;&lt;/code&gt;)&lt;/p&gt;&lt;p&gt;Set the time-to-live delay for SRS envelopes. After this delay, a bounce
reply to the SRS address will be discarded to limit risks of forged
addresses.&lt;/p&gt;&lt;/li&gt;&lt;/ul&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;Format Specifiers&lt;/p&gt;&lt;p&gt;Some configuration records support expansion of their parameters at
runtime. Such records (for example
&lt;code&gt;&amp;lt;opensmtpd-maildir-configuration&amp;gt;&lt;/code&gt;, &lt;code&gt;&amp;lt;opensmtpd-mda-configuration&amp;gt;&lt;/code&gt;) may use
format specifiers which are expanded before delivery or relaying. The
following formats are currently supported:&lt;/p&gt;&lt;/li&gt;&lt;/ul&gt;&lt;pre&gt;&lt;code&gt;Expansion formats also support partial expansion using the optional bracket notations
with substring offset.  For example, with recipient domain `“example.org”`:


In addition, modifiers may be applied to the token.  For example, with recipient
`“User+Tag@Example.org”`:&lt;/code&gt;&lt;/pre&gt;</content></entry><entry><title>Status Update April 2022</title><id>https://gnucode.me/status-update-april-2022.html</id><author><name>Joshua Branson</name><email>jbranso@dismail.de</email></author><updated>2022-04-01T18:00:00Z</updated><link href="https://gnucode.me/status-update-april-2022.html" rel="alternate" /><content type="html">&lt;p&gt;I am back to working on various records to support &lt;code&gt;&amp;lt;opensmtpd-configuration&amp;gt;&lt;/code&gt;
for the &lt;code&gt;opensmtpd-service-type&lt;/code&gt;.  I decided about a week ago, to just do some
of the changes in the records that I want to do.  Once I am satisfied with the
updates, then I will work on making the code output the &lt;code&gt;smtpd.conf&lt;/code&gt; file.  I am
fairly please with some of the changes to the records that I have made.&lt;/p&gt;&lt;p&gt;Feel free to play with the examples below from my repo!&lt;/p&gt;&lt;pre&gt;&lt;code&gt;https://notabug.org/jbranso/linode-guix-system-configuration.git
guile -L .
scheme@(guile-user)&amp;gt; ,use (opensmtpd-records)
scheme@(guile-user)&amp;gt; ,m (opensmtpd-records)
(opensmtpd-table (name &amp;quot;table&amp;quot;) (values (list &amp;quot;hello&amp;quot; &amp;quot;world&amp;quot;)))&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Please note, that I am still working on changing the record names, so various
things that work as described in the blog post may not work in a week or two.&lt;/p&gt;&lt;h2&gt;a pretty useful &lt;code&gt;&amp;lt;opensmtpd-configuration&amp;gt;&lt;/code&gt; gives no errors&lt;/h2&gt;&lt;pre&gt;&lt;code&gt;(define example-opensmtpd-configuration
  (let ([interface &amp;quot;lo&amp;quot;]
        [creds-table (opensmtpd-table
                      (name &amp;quot;creds&amp;quot;)
                      (values
                       (list
                        (cons &amp;quot;joshua&amp;quot;
                              &amp;quot;$some$encrypted$password&amp;quot;))))]
        [receive-action (opensmtpd-action-local-delivery-configuration
                         (name &amp;quot;receive&amp;quot;)
                         (method (opensmtpd-maildir-configuration
                                  (pathname &amp;quot;/home/%{rcpt.user}/Maildir&amp;quot;)
                                  (junk #t)))
                         (virtual (opensmtpd-table
                                   (name &amp;quot;virtual&amp;quot;)
                                   (values (list &amp;quot;josh&amp;quot; &amp;quot;jbranso@dismail.de&amp;quot;)))))]
        [filter-dkimsign (opensmtpd-filter
                          (name &amp;quot;dkimsign&amp;quot;)
                          (exec #t)
                          (proc (string-append &amp;quot;/path/to/dkimsign  -d gnucode.me -s 2021-09-22 -c relaxed/relaxed -k &amp;quot;
                                               &amp;quot;/path/to/dkimsign-key user nobody group nobody&amp;quot;)))]
        [smtp.gnucode.me (opensmtpd-pki
                          (domain &amp;quot;smtp.gnucode.me&amp;quot;)
                          (cert &amp;quot;opensmtpd.scm&amp;quot;)
                          (key &amp;quot;opensmtpd.scm&amp;quot;))])
    (opensmtpd-configuration
     (mta-max-deferred 50)
     (queue
      (opensmtpd-queue-configuration
       (compression #t)))
     (smtp
      (opensmtpd-smtp-configuration
       (max-message-size &amp;quot;10M&amp;quot;)))
     (srs
      (opensmtpd-srs-configuration
       (ttl-delay &amp;quot;5d&amp;quot;)))
     (listen-ons
      (list
       (opensmtpd-listen-on
        (interface interface)
        (port 25)
        (secure-connection &amp;quot;tls&amp;quot;)
        (filters (list (opensmtpd-filter-phase
                        (name &amp;quot;noFRDNS&amp;quot;)
                        (phase &amp;quot;commit&amp;quot;)
                        (conditions (list (opensmtpd-conditions-configuration
                                           (condition &amp;quot;fcrdns&amp;quot;)
                                           (not #t))))
                        (decision &amp;quot;disconnect&amp;quot;)
                        (message &amp;quot;No FCRDNS&amp;quot;))))
        (pki smtp.gnucode.me))
       ;; this lets local users logged into the system via ssh send email
       (opensmtpd-listen-on
        (interface interface)
        (port 465)
        (secure-connection &amp;quot;smtps&amp;quot;)
        (pki smtp.gnucode.me)
        (auth creds-table)
        (filters (list filter-dkimsign)))
       (opensmtpd-listen-on
        (interface interface)
        (port 587)
        (secure-connection &amp;quot;tls-require&amp;quot;)
        (pki smtp.gnucode.me)
        (auth creds-table)
        (filters (list filter-dkimsign)))))
     (matches (list
               (opensmtpd-match
                (action (opensmtpd-action-relay-configuration
                         (name &amp;quot;relay&amp;quot;)))
                (for (opensmtpd-match-configuration
                      (option &amp;quot;for any&amp;quot;)))
                (from (opensmtpd-match-configuration
                       (option &amp;quot;from any&amp;quot;)))
                (auth (opensmtpd-match-configuration
                       (option &amp;quot;auth&amp;quot;))))
               (opensmtpd-match
                (action receive-action)
                (from (opensmtpd-match-configuration
                       (option &amp;quot;from any&amp;quot;)))
                (for (opensmtpd-match-configuration
                      (option &amp;quot;for domain&amp;quot;)
                      (value (opensmtpd-table
                              (name &amp;quot;domain-table&amp;quot;)
                              (values (list &amp;quot;gnucode.me&amp;quot; &amp;quot;gnu-hurd.com&amp;quot;)))))))
               (opensmtpd-match
                (action receive-action)
                (for (opensmtpd-match-configuration
                      (option &amp;quot;for local&amp;quot;)))))))))&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;However there’s still some work to do because this doesn’t work:&lt;/p&gt;&lt;pre&gt;&lt;code&gt;(opensmtpd-configuration-&amp;gt;mixed-text-file example-opensmtpd-configuration)

ice-9/boot-9.scm:1685:16: In procedure raise-exception:
error: value: unbound variable

Entering a new prompt.  Type `,bt' for a backtrace or `,q' to continue.
scheme@(opensmtpd-records) [12]&amp;gt; ,bt
In /home/joshua/prog/gnu/guix/guix-config/linode-guix-system-configuration/opensmtpd-records.scm:
   1667:3  4 (opensmtpd-configuration-&amp;gt;mixed-text-file #&amp;lt;&amp;lt;opensmtpd-configuration&amp;gt; package: #&amp;lt;package opensmtpd@6.8.0p2 gnu/packages/mail.scm:2979 7f1e1a3…&amp;gt;)
   1628:9  3 (opensmtpd-configuration-fieldname-&amp;gt;string _ _ _)
  1634:10  2 (list-of-records-&amp;gt;string _ _)
  1669:99  1 (_ _)
In ice-9/boot-9.scm:
  1685:16  0 (raise-exception _ #:continuable? _)&lt;/code&gt;&lt;/pre&gt;&lt;h2&gt;I have also sanitized the &lt;code&gt;&amp;lt;opensmtpd-conditions-configuration&amp;gt;&lt;/code&gt;&lt;/h2&gt;&lt;p&gt;If you type in various incorrectly written
&lt;code&gt;&amp;lt;opensmtpd-conditions-configuration&amp;gt;&lt;/code&gt; records, then you will get some helpful
error messages:&lt;/p&gt;&lt;ol&gt;&lt;li&gt;&lt;p&gt;if condition is rdns, src, helo, mail-from, rcpt-to, then they must also provide a table&lt;/p&gt;&lt;p&gt;What is interesting, is that I do not know how to sanitize a whole record when
the record is initiated.  I can only have a parent record sanitize it.  For
example the following record is invalid, because if the ’condition’ is “src”,
then you need to provide a table. However, the following works in a REPL.&lt;/p&gt;&lt;pre&gt;&lt;code&gt;(opensmtpd-conditions-configuration
    (condition &amp;quot;src&amp;quot;))&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;&lt;code&gt;$11 = #&amp;lt;&amp;lt;opensmtpd-conditions-configuration&amp;gt; condition: &amp;quot;src&amp;quot; not: #f regex: #f table: #f&amp;gt;&lt;/code&gt;&lt;/p&gt;&lt;p&gt;But when you put the same incorrect &lt;code&gt;&amp;lt;opensmtpd-conditions-configuration&amp;gt;&lt;/code&gt;
into an &lt;code&gt;&amp;lt;opensmtpd-filter-phase&amp;gt;&lt;/code&gt;, then you get the right error message.&lt;/p&gt;&lt;pre&gt;&lt;code&gt;(opensmtpd-filter-phase
 (name &amp;quot;filter&amp;quot;)
 (phase &amp;quot;helo&amp;quot;)
 (decision &amp;quot;bypass&amp;quot;)
 (conditions
  (list
   (opensmtpd-conditions-configuration
    (condition &amp;quot;src&amp;quot;)))))

&amp;lt;opensmtpd-conditions-configuration&amp;gt;'s fieldname 'condition' values of
'src', 'helo', 'mail-from', or 'rcpt-to' need a corresponding 'table'
 of type &amp;lt;opensmtpd-table&amp;gt;. eg:
(opensmtpd-conditions-configuration
   (condition &amp;quot;src&amp;quot;)
   (table (opensmtpd-table
              (name &amp;quot;src-table&amp;quot;)
              (values (list &amp;quot;hello&amp;quot; &amp;quot;cat&amp;quot;)))))
ice-9/boot-9.scm:1685:16: In procedure raise-exception:
Throw to key `bad!' with args `((#&amp;lt;&amp;lt;opensmtpd-conditions-configuration&amp;gt; condition: &amp;quot;mail-from&amp;quot; not: #f regex: #f table: #f&amp;gt;))'.
    
Entering a new prompt.  Type `,bt' for a backtrace or `,q' to continue.&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;make sure that there are no duplicate conditions&lt;/p&gt;&lt;pre&gt;&lt;code&gt;(opensmtpd-filter-phase
 (name &amp;quot;noFRDNS&amp;quot;)
 (phase &amp;quot;commit&amp;quot;)
 (conditions (list (opensmtpd-conditions-configuration
                    (condition &amp;quot;fcrdns&amp;quot;)
                    (not #t))
                   (opensmtpd-conditions-configuration
                    (condition &amp;quot;fcrdns&amp;quot;)
                    (not #t))))
 (decision &amp;quot;disconnect&amp;quot;)
 (message &amp;quot;No FCRDNS&amp;quot;))

&amp;lt;opensmtpd-filter-phase&amp;gt; fieldname: 'conditions' is a list of unique
&amp;lt;opensmtpd-conditions-configuration&amp;gt; records.
ice-9/boot-9.scm:1685:16: In procedure raise-exception:
Throw to key `bad!' with args `((#&amp;lt;&amp;lt;opensmtpd-conditions-configuration&amp;gt; condition: &amp;quot;fcrdns&amp;quot; not: #t regex: #f table: #f&amp;gt; #&amp;lt;&amp;lt;opensmtpd-conditions-configuration&amp;gt; condition: &amp;quot;fcrdns&amp;quot; not: #t regex: #f table: #f&amp;gt;))'.
    
Entering a new prompt.  Type `,bt' for a backtrace or `,q' to continue.&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;sanitize the phase-name&lt;/p&gt;&lt;pre&gt;&lt;code&gt;(opensmtpd-filter-phase
 (name &amp;quot;filter&amp;quot;)
 (phase &amp;quot;hello&amp;quot;)
 (decision &amp;quot;bypass&amp;quot;)
 (conditions
  (list
   (opensmtpd-conditions-configuration
    (condition &amp;quot;auth&amp;quot;)))))

&amp;lt;opensmtpd-filter-phase&amp;gt; fieldname: 'phase' is of type string.  The string can be either 'connect', 'helo', 'mail-from', 'rcpt-to', 'data', or 'commit.'
 ice-9/boot-9.scm:1685:16: In procedure raise-exception:
Throw to key `bad!' with args `(&amp;quot;hello&amp;quot;)'.
    
Entering a new prompt.  Type `,bt' for a backtrace or `,q' to continue.&lt;/code&gt;&lt;/pre&gt;&lt;/li&gt;&lt;/ol&gt;&lt;h2&gt;Changes to the records eleminate potential errors like&lt;/h2&gt;&lt;p&gt;misspelling a table name, or calling an action that is not defined.&lt;/p&gt;&lt;p&gt;The &lt;code&gt;&amp;lt;opensmtpd-configuration&amp;gt;&lt;/code&gt; used to be defined this way:&lt;/p&gt;&lt;pre&gt;&lt;code&gt;(service opensmtpd-service
         (opensmtpd-configuration
          (includes ...)
          (tables ...)
          (pkis ...)
          (filters ...)
          (listen-on ...)
          (actions ...)
          (matches ...)))&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;It would be possible to give a table a name of “password-table”, but then later
to refer to it as “passwords-table”, which would NOT have worked.  Like so:&lt;/p&gt;&lt;pre&gt;&lt;code&gt;(service opensmtpd-service
         (opensmtpd-configuration
          (tables (list (opensmtpd-table
                         (name &amp;quot;&amp;lt;passwords-table&amp;gt;&amp;quot;)
                         (values
                          (list
                           (cons &amp;quot;joshua&amp;quot;
                                 &amp;quot;$encrypted$password&amp;quot;))))))
          (listen-on
           (list (opensmtpd-listen-on
                  (auth &amp;quot;&amp;lt;password-table&amp;gt;&amp;quot; ))))
          (actions ...)
          (matches ...)))&lt;/code&gt;&lt;/pre&gt;&lt;p&gt;Now instead, you define the table where it is used!&lt;/p&gt;&lt;pre&gt;&lt;code&gt;(opensmtpd-listen-on
 (interface interface)
 (port 587)
 (secure-connection &amp;quot;tls-require&amp;quot;)
 (pki smtp.gnucode.me)
 (auth (opensmtpd-table
        (name &amp;quot;creds&amp;quot;)
        (values
         (list
          (cons &amp;quot;joshua&amp;quot;
                &amp;quot;$encrypted$password&amp;quot;)))))
 (filters (list filter-dkimsign)))&lt;/code&gt;&lt;/pre&gt;</content></entry><entry><title>JMP.chat</title><id>https://gnucode.me/jmpchat.html</id><author><name>Joshua Branson</name><email>jbranso@dismail.de</email></author><updated>2018-07-13T18:00:00Z</updated><link href="https://gnucode.me/jmpchat.html" rel="alternate" /><content type="html">&lt;p&gt;I heard about &lt;a href=&quot;https://jmp.chat&quot;&gt;jmp.chat&lt;/a&gt; recently, and I decided to give it a
go.  It's a cellular provider that sends all communication over wifi, and it's
freedom software!   You can pay jmp for this service, or you could install your
own jmp server and run it yourself!&lt;/p&gt;&lt;p&gt;So why use JMP?  Do you want to support freedom software?  Do you like the idea
of sending and receiving communication via freedom software?  If you do then
give it a try.  You'll learn about XMPP, which is a federated instant messaging
protocol.  You'll also save a lot on your phone bill, because JMP only costs $3
a month!&lt;/p&gt;</content></entry></feed>