NAME
  smtp-gated.conf - The smtp-gated configuration file.
DESCRIPTION
  This file defines configuration to be used by daemon.

  Options are placed one per line, and consists of option name, followed
  by number or spaces or tabs, and option value. Empty lines, and lines
  starting with # or ; (hash or semicolon) are ignored.

MAIN OPTIONS
  proxy_name STRING	Name that appears on communicates generated by daemon.
	(usually errors, or session blocking).
  bind_address IP	Defines IP the daemon listes on. [RESTART]
  port PORT		Defines listen port. [RESTART]
  source_addr IP	Defines IP which appears as source on MTA servers.
  pidfile FILE	Defines .pid file. [RESTART]
  dumpfile FILE		Defined file which will contains status. Status is
	dumped on receiving signal USR1.
  chroot_path PATH	If this setting is defined, daemon chroot()'s to this
	path after forking. This allows to raise security. [RESTART]
  set_user USER		
  set_group GROUP	Daemon changes it UID/GID to the one defined for username
	and groupname. This setting does not allow to specify UID/GID as
	numbers yet. [RESTART]
  priority INT		Daemon changes it's priority when it's defined. 0
	means "no change". Values as in setpriority(2) [RESTART]
  connect_queue INT	Defines listen(2) backlog.
  buffer_size INT	Defines buffer size (in bytes) to track SMTP sessions.
	Should be above 1500.
FILTER MODE
  In this mode, all connections are forwarded to one, defined MTA. This
  may be used to filter SMTP traffic just before ISP SMTP server.
  This mode takes precedance over all other modes.

  fixed_server IP	IP of MTA to connect to.
  fixed_server_port PORT	Port to connect to.
NETFILTER MODE
  In this mode, all connections are forwarded to original MTA. Netfilter
  connection tracking is used to lookup destination IP.
  This setting take precedance over remote ident mode.

  use_netfilter	BOOL	Turns NETFILTER MODE. Probably this is what you want.
REMOTE IDENT MODE
  In this mode, daemon is running on dedicated server. For each incoming
  connection lookup is performed on source IP, to discover destination IP.
  This requires patched ident daemon.
  lookup_port PORT	Port to lookup ident and destination IP.
LOCKING
  When virus/SPAM is found, user's IP or IP+ident can be blocked for certain
  time. After that time, lock is removed, and user is allowed to use SMTP
  again. Lockfile has name same as IP, or IP "-" IDENT if ident is used.

  Administrator can prevent locking some IP (IP+ident), by creating
  corresponding lock file with owner other than daemon runs on. This lock file
  is not automatically deleted. Contents is ignored, so it can be description,
  or sth else.
  lock_duration	INT	Time the lock persists. 0 disables locking, -1 means
	lock forever (or: until manually unlocked).
  lock_path PATH	Directory for lock files.
  lock_perm OCTAL	Lock files permissions as for open(2). Octal value
	must be preceded by zero.
SPOOLING
  spool_path PATH	Directory for temporary message files.
  spool_perm OCTAL	Temporary files permissions as for open(2). Octal
	value must be preceded by zero.
TIMEOUTS
  timeout_direct UINT	Timeout for direct proxy session. This type of session
	is used on TLS connections.
  timeout_lookup UINT	Timeout for lookup (REMOTE IDENT MODE).
  timeout_scanner UINT	Timeout for antivirus scanner engine.
  timeout_spam UINT	Timeout for antispam scanner engine.
  timeout_session UINT	Timeout for fake session (when virus/SPAM is blocked).
  timeout_idle UINT	Timeout for idle sessions. Prevents stale connections.
  timeout_connect UINT	Timeout for connecting to remote MTA.
LIMITS
  Loadavg limits can be disabled by specyfing zero, but this is not
  recommended.
  max_connections UINT	Total maximum connections. [RESTART]
  max_per_host UINT	Maximum connections per source IP.
  max_per_ident UINT	maximum connections per IP+ident (REMOTE IDENT MODE).
  max_load FLOAT	Reject connections if load is above this setting.
  scan_max_size UINT	av-scan messages with size up to this limit.
  spam_block BOOL	Block SPAM-s (like viruses) instead of just logging.
  spam_max_size	INT	SPAM-scan messages with size up to this limit.
  spam_max_load FLOAT	Don't SPAM-scan messages if load above this setting.
  spam_threshold FLOAT	Treat message as SPAM if it's score is equal/greater
	than this value
MISCELLANOUS
  ignore_errors	BOOL	Continue when possible even if error occured (i.e.
	virus scanner failure).
  leave_on_error BOOL	Do not remove spool when error occured.
  leave_on_virus BOOL	Do not remove spool when virus is found.
  leave_on_spam BOOL	Do not remove spool when SPAM is found.
LOGGING
  Daemon logs messages via syslog, facility daemon.
  log_helo BOOL		Logs HELO/EHLO issued by client.
  log_mail_from	UINT	Client MAIL FROM logging mask, sum of following:
		0	[do not log]
		1	log if address is accepted by MTA
		2	log if address is rejected by MTA
		4	log as base64 encoded md5 hash of e-mail
  log_rcpt_to UINT	Client RCPT TO logging mask. (see log_mail_from).
  log_level INT		Defines numeric log level, as used by syslog(3).
		0	Emergency messages (highest priority)
		1	Critical, requires intervention
		2	Critical messages
		3	Errors
		4	Warnings
		5	Normal, but significiant messages
		6	Informational messages
		7	Debugging messages (lowest priority)
MANGLING
  nat_header BOOL	Turns on/off injecting X-NAT-Received headers to
	messages.
  abuse	STRING		Sets "abuse" info in X-NAT-Received header.
SCANNERS
  scanner_path FILE	not used.
  clamd_path FILE	Path for clamd socket.
  spamd_path FILE	Path for spamd socket.
MESSAGES
  All messages sent to user are customisable.

  locale		Changes locale of system errors from strerror(3). See
	setlocale(3). Does not change messages generated by daemon itself.
MESSAGES MAIN
  msg_virus_found	Virus found in message.
  msg_virus_locked	User locked, virus or SPAM found before.
  msg_spam_found	SPAM found in message.
  msg_unknown_virus	Virus name substituted, when it's unknown.
  msg_spool_problem	Spooling file name problem.
  msg_spool_open_fail	Spool creation failed.
  msg_pipeline_full	Pipeline queue full.
  msg_scanner_failed	Scanner has failed.

  msg_cannot_connect	Cannot connect to MTA.
  msg_connect_timeout	Connection to MTA timed out.
MESSAGES FAKE MTA SESSION
  msg_hello		Hello message.
  msg_sign_off		Signing off.
  msg_virus_no_more	Virus found, please end the session.
  msg_session_timeout	Session timed out.
  msg_proto_error	Protocol error.
  msg_transaction_failed	Fake MTA transaction failed.
  msg_unimpl_command	Unimplemented command (SMTP verb).
  msg_temp_unavail	Service temporarily unavailable.
MESSAGES LIMITS
  msg_max_reached	Total connections limit reached, try again later.
  msg_max_per_host	Connections limit for IP reached, try again later.
  msg_max_per_ident	Connections limit for IP+ident reached, try again
	later.
  msg_system_load	System load too high, try again later.
MESSAGES REMOTE IDENT MODE
  msg_malformed_ip	Malformed IP received (REMOTE IDENT MODE).
  msg_lookup_failed	Lookup failed.
  msg_lookup_timeout	Lookup timed out.
  msg_lookup_mismatch	Invalid lookup response format.
  msg_lookup_nomem	Lookup failed, not enough memory.
EXPLANATION
  INT	Signed integer
  UINT	Unsigned number; can be specified as decimal, octal (beginning
	with 0), or hexadecimal (beginning with 0x or 0X)
  BOOL	Boolean (0, 1)
  FLOAT	Floating-point number
  IP	Valid IP address
  PORT	Valid IP port
  STRING	Arbitrary text string
  PATH	Valid directory name
  FILE	Valid file name

  [RESTART]	This option needs full restart to take effect.
SEE ALSO
  smtp-gated(8)
HOMEPAGE
  http://smtp-proxy.klolik.org
AUTHOR
  Bartlomiej Korupczynski <smtp-proxy@smtp-proxy.klolik.org>

