<?xml version='1.0' standalone='yes'?>
<spfilter_trusted_local_config>

<!--
# optional spfilter-local.xml.sample
# copy to ./spfilter-local.xml and use with '-x ./spfilter-local.xml'
# changes should be done exclusively in this file.
# -->

<!-- start of spfilter config section -->
<!-- nearly all long arguments may be set heer -->

<config program="spfilter" version="0.57" date="021026">

	<!-- DEFAULT sources used (if none specified on commandline) -->
	<!-- source>SPEWS,SPAMSITE,PDL</source --> <!-- not implemented -->

	<!-- output format, same as argument -f -->
	<!-- format>octets</format --> <!-- not implemented -->

	<!-- keyring used by spfilter - dont use any other keyring -->
	<!-- searched for in . and /usr/local/etc if no slash -->
	<!-- setting keyring to 'NULL' disables gpg-functionality -->
	<!-- keyring>spfilter-keyring.gpg</keyring -->
	<!-- keyring>NULL</keyring -->

	<!-- USER without privilegies, executes external programs -->
	<!-- only used if spfilter is run by root, dont do that -->
	<!-- defaults to 'nobody', override with argument '-u name' -->
	<!-- user>spfilter</user -->

	<!-- WORKDIR causes spfilter to chdir, simplify operation from cron -->
	<!-- defaults to none (no chdir done), overwrite with argument '-w /wher/ever' -->
	<!-- workdir>.</workdir -->

	<!-- CACHEDIR specifies default location for cached sources -->
	<!-- defaults to './cache' or '.', overwrite with argument '-c ./cache' -->
	<!-- cachedir>./cache</cachedir -->

	<!-- OUTDIR specifies the default location for output data -->
	<!-- defaults to './outdir' or '.', overwrite with argument '-o ./outdir' -->
	<!-- outdir>./outdir</outdir -->

	<!-- PATH for untainting, should not include . -->
	<exec_path>/bin/:/usr/bin:/usr/local/bin</path>

	<!-- gets \-\-keyring {keyring} and --verbose appended... -->
	<!-- exec_gpgv>gpgv</exec_gpgv -->

	<!-- exec_http called for http- and ftp-sources -->
	<!-- macros {AGENT}, {AUTH} and {MODIFIED} expanded -->
	<!-- exec_http>wget -nv \-\-header="{AGENT}" \-\-header="{AUTH}" \-\-header="{MODIFIED}" \-\-ignore-length -O "{FILE}" "{URL}"</exec_http -->

	<!-- decompress files from urls ending with *.bz2 -->
	<!-- default: bunzip2, source filename appended -->
	<!-- exec_bunzip>/usr/bin/bunzip2 -f "{FILE}"</exec_bunzip -->
	<!-- gzip not tested - nobody uses that for distribution -->
	<!-- exec_qunzip>/usr/bin/gunzip -f "{FILE}"</exec_gunzip -->

	<!-- rsync used for urls starting with 'rsync://' (PERMBLOCK,DSBL) -->
	<!-- exec_rsync>rsync -zv \-\-partial \-\-bwlimit=16 \-\-timeout=20</exec_rsync -->

</config>	<!-- end of spfilter config section -->

<source>	<!-- start of source section for input -->
<!--
#########################################################
# input prefix and source, set default => 0 to disable source
# default sources: SPEWS2, SPAMSITE, PERMBLOCK, PDL
# alternatively specify sources with -s (not implemented)
# default (boolean): set to 1 or use the argument -s ...
# interval (days): how long reuse cached copy (default 1 day)
# url: http://, ftp://, file://, relative and absolute path
# append: appends (optional) text/link and ip-address
# -->

<!-- merge local lists into output, without archive copy -->
<!-- url considered local if not started with ^(http|ftp):// -->
<!-- since KOREA and CHINA are already available via www -->
<!-- here are TAIWAN and HONGKONG as local copies -->

<DIALUP interval="-1" type="cidr/16">
	<title>Dialup, Cable and DSL Block (local file></title>
	<comment>just another example for local sources</comment>
	<url>file:/./local/dialup</url>
</DIALUP>

<!--
# alternatively read in the complete directory (prefix 'dir:/' optional)
# multiple choices provided to suit my needs for test and production ;)
# this names wont get changed, feel free to use (or symlink) them
# -->

<LOCAL interval="-1" type="cidr/10" minsize="1" maxsize="6000">
	<title>Read all files from local directory</title>
	<comment>Blacklisted</comment>
	<url>dir:/./local</url>	
</LOCAL>

<BADHOST interval="-1" type="cidr/16" minsize="1" maxsize="10000">
	<title>Read all files from local directory</title>
	<comment>here are all the ip-based lists</comment>
	<tag>REJECT</tag>
    <url>dir:/./badhost</url>
</BADHOST>

<BADFROM interval="-1" type="cidr/16" minsize="1" maxsize="8000">
	<title>Read all files from local directory</title>
	<comment>here are all the ip-based lists</comment>
	<tag>BadFROM</tag>
	<url>dir:/./badfrom</url>
</BADFROM>


<EXAMPLE interval="999" type="addr">
	<url>rsync://mirror1.example.com/dnsbl/cidr.txt</url>
	<url>ftp://mirror2.example.com/dnsbl/cidr.bz2</url>
	<url>http://mirror3.example.com/dnsbl/cidr.txt</url>
	<comment>this entry deactivates the corresponding key from remote config</comment>
</EXAMPLE>

<OCTETS type="addr">
	<url>./outdir/SPFILTER.octets</url>
	<comment>
		for use with multiple passes: (not needed, but its here)
		- first pass creates the octets only (argument -f octets)
		- next pass ready the octets as input (argument -s OCTECS)
	</comment>
</OCTETS>	


<!--
# and some more just for fun, not functional:
# http://www.cluecentral.net/rbl/ (format not implemented)
# http://www.blackholes.us/korea.txt (format not implemented)
# http://www.blackholes.us/china.txt (format not implemented)
# http://www.srkconsulting.com/access/ (format not implemented)
# -->

</source>	<!-- end of input source section -->

<format>	<!-- start of output format section -->
<!--
#########################################################
# output format options, all keys optional
# default (boolean): 0=disabled, 1=enabled (default 0)
#   alternatively specify output with -o (not implemented)
# notation (notation): use 'reverse' for dns (default 'octet')
# head (string): prepended on each line, usually empty
# separator (string): between $addr and $text (default "\t")
# tail (string): appended after $text (default none)
# search+replace (string): search/replace in $text on output
# magic_update (boolean): preserve lines not inserted by spfilter
# -->

</format>	<!-- end of output format section -->
        
</spfilter_trusted_local_config>	<!-- end of document -->

