spammers and apply stricter actions, to better protect your mail system. enforce_ip <comma or space separated list of IPs> Specifies an enforcement list of IP addresses. The usage is similar to “enforce_domain”. Currently only IP v4 is supported. You can use a specific format <x.x.x.x> to exactly match an IP address or the subnet mask pattern <x.x.x.x>/<subnet mask length> to match a series of IP addresses. log_level 0 | 1 | 2 | 3 | 4 Defines the log level. There are 5 log levels. 0: no log > no log will be generated. 1: normal > provides basic information for administration and maintenance. 2: detailed > detailed information, including original SPF check results. 3: diagnostic > all information of level 1 and 2 logs, plus configurations in use. 4: debug > most detailed, only recommended when trouble shooting. pass bypass | tempblock | block SPF queries can return 7 kinds of results: pass, neutral, softfail, fail, none, temperror and
permerror. The parameters with the same names define the corresponding actions. The available actions are: bypass, tempblock and block. Bypass: means the SPF check is not performed Tempblock: returns a 4XX SMTP response to temporarily block the mail. Block: returns a 5XX response to block the mail. Pass: means the host is allowed to send messages for this domain. neutral bypass | tempblock | block Neutral means the validity of this host is not specified. softfail bypass | tempblock | block Softfail means the host is not allowed to send messages but is in transition. fail bypass | tempblock | block Fail means the host is not allowed to send messages. none bypass | tempblock | None means the domain does not have an SPF record or the SPF record does not have a result. temperror bypass | tempblock | block Temperror means a temporary error has occurred. For example: network connections lost. permerror bypass | tempblock | block Permerror means a permanent error has occurred For example: SPF record invalid format. prepend_header yes | no Specify whether to insert a
header in your messages. Micro recommends adding this header for further administration or analysis of messages. tempblock_res <text> | 451 Service temporarily unavailable; SPF check unsuccessful and transaction closed due to the organization's policy. The SMTP response code if temporarily blocking the messages. Both the response code “451” and message can be customized. The response code can be any valid 3 digits starting with 4. Do forget the blank space between the response code and message. white_domain <comma or space separated list of domains> Specify an approved list of domains. Messages from domains will bypass the SPF check. You can add trusted domains to this list. white_ip <comma or space separated list of IPs> | 127.0.0.1 Specify an approved list of domains. Messages from these addresses will bypass the SPF check. You can add trusted domains to this list. pass bypass | tempblock | block Parameters under the “enforce_actions” section define the actions for domains and IP addresses in the enforcement list. Follows the same
behavior as global actions. neutral bypass | tempblock | block Same as above. softfail bypass | tempblock | block Same as above. fail bypass | tempblock | block Same as above. none bypass | tempblock | block Same as above. temperror bypass | tempblock | Same as above. permerror bypass | tempblock | block Same as above.