1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
|
#!/usr/bin/env python
# -*- encoding: utf-8 -*-
# check_recipient_access.py
# Copyright (C) 2013 LEAP
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>.
"""
Classes for resolving postfix recipient access.
The resolver is queried by the mail server before delivery to the mail spool
directory, and should check if the address is able to receive messages.
Examples of reasons for denying delivery would be that the user is out of
quota, is user, or have no pgp public key in the server.
Test this with postmap -v -q "foo" tcp:localhost:2244
"""
from twisted.protocols import postfix
from leap.mx.tcp_map import LEAPPostfixTCPMapServerFactory
from leap.mx.tcp_map import TCP_MAP_CODE_SUCCESS
from leap.mx.tcp_map import TCP_MAP_CODE_TEMPORARY_FAILURE
from leap.mx.tcp_map import TCP_MAP_CODE_PERMANENT_FAILURE
class LEAPPostFixTCPMapAccessServer(postfix.PostfixTCPMapServer):
"""
A postfix tcp map recipient access checker server.
The server potentially receives the uuid and a PGP key for the user, which
are looked up by the factory, and will return a permanent or a temporary
failure in case either the user or the key don't exist, respectivelly.
"""
def _cbGot(self, value):
"""
Return a code and message depending on the result of the factory's
get().
If there's no pgp public key for the user, we currently return a
temporary failure saying that the user account is disabled.
For more info, see: http://www.postfix.org/access.5.html
:param value: The uuid and public key.
:type value: list
"""
uuid, pubkey = value
if uuid is None:
self.sendCode(
TCP_MAP_CODE_PERMANENT_FAILURE,
postfix.quote("REJECT"))
elif pubkey is None:
self.sendCode(
TCP_MAP_CODE_TEMPORARY_FAILURE,
postfix.quote("4.7.13 USER ACCOUNT DISABLED"))
else:
self.sendCode(
TCP_MAP_CODE_SUCCESS,
postfix.quote("OK"))
class CheckRecipientAccessFactory(LEAPPostfixTCPMapServerFactory):
"""
A factory for the recipient access checker.
When queried, the factory looks up the user's uuid and a PGP key for that
user and returns the result to the server's _cbGot() method.
"""
protocol = LEAPPostFixTCPMapAccessServer
@property
def _query_message(self):
return "check recipient access"
|
