Network.DomainAuth.SPF

A library for SPF(http://www.ietf.org/rfc/rfc4408.txt) and Sender-ID(http://www.ietf.org/rfc/rfc4406.txt).

Documentation

runSPF :: Limit -> Resolver -> Domain -> IP -> IO DAResult

Process SPF authentication. IP is an IP address of an SMTP peer. If Domain is specified from SMTP MAIL FROM, authentication is based on SPF. If Domain is specified from the From field of mail header, authentication is based on SenderID. If condition reaches Limit, SpfPermError is returned.

>>> rs <- makeResolvSeed defaultResolvConf

pass (IPv4 & IPv6):

>>> withResolver rs $ \rslv -> runSPF defaultLimit rslv "mew.org" "210.130.207.72"
pass
>>> withResolver rs $ \rslv -> runSPF defaultLimit rslv "iij.ad.jp" "2001:240:bb42:8010::1:126"
pass

hardfail:

>>> withResolver rs $ \rslv -> runSPF defaultLimit rslv "example.org" "192.0.2.1"
hardfail

redirect and include:

>>> withResolver rs $ \rslv -> runSPF defaultLimit rslv "gmail.com" "72.14.192.1"
pass
>>> withResolver rs $ \rslv -> runSPF defaultLimit rslv "gmail.com" "72.14.128.1"
softfail

limit:

>>> let limit1 = defaultLimit { ipv4_masklen = 24 }
>>> withResolver rs $ \rslv -> runSPF limit1 rslv "gmail.com" "72.14.192.1"
softfail
>>> let limit2 = defaultLimit { limit = 2 }
>>> withResolver rs $ \rslv -> runSPF limit2 rslv "nifty.com" "202.248.88.1"
permerror

data Limit

Limit for SPF authentication.

Constructors

Limit

Fields

• limit :: Int

  How many "redirect"/"include" should be followed. DAPermError is returned if reached to this limit.

• ipv4_masklen :: Int

  Ignoring IPv4 range whose mask length is shorter than this.

• ipv6_masklen :: Int

  Ignoring IPv6 range whose mask length is shorter than this.

• reject_plus_all :: Bool

  Whether or not "+all" is rejected.

Instances

Eq Limit

Methods

(==) :: Limit -> Limit -> Bool

(/=) :: Limit -> Limit -> Bool

Show Limit

Methods

showsPrec :: Int -> Limit -> ShowS

show :: Limit -> String

showList :: [Limit] -> ShowS

defaultLimit :: Limit

Default value for Limit.

>>> defaultLimit
Limit {limit = 10, ipv4_masklen = 16, ipv6_masklen = 48, reject_plus_all = True}