/usr/share/doc/mailutils-doc/mailutils.html/mu-acl.html is in mailutils-doc 1:2.99.99-1ubuntu2.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 | <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<!-- Published by the Free Software Foundation,
51 Franklin Street, Fifth Floor
Boston, MA 02110-1301, USA
Copyright (C) 1999-2004, 2008-2012, 2014-2015 Free Software
Foundation, Inc.
Permission is granted to copy, distribute and/or modify this document
under the terms of the GNU Free Documentation License, Version 1.2 or
any later version published by the Free Software Foundation; with no
Invariant Sections, no Front-Cover, and no Back-Cover texts.
A copy of the license is included in the section entitled "GNU Free
Documentation License". -->
<!-- Created by GNU Texinfo 6.1, http://www.gnu.org/software/texinfo/ -->
<head>
<title>GNU Mailutils Manual: mu acl</title>
<meta name="description" content="GNU Mailutils Manual: mu acl">
<meta name="keywords" content="GNU Mailutils Manual: mu acl">
<meta name="resource-type" content="document">
<meta name="distribution" content="global">
<meta name="Generator" content="makeinfo">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<link href="index.html#Top" rel="start" title="Top">
<link href="Function-Index.html#Function-Index" rel="index" title="Function Index">
<link href="index.html#SEC_Contents" rel="contents" title="Table of Contents">
<link href="mu.html#mu" rel="up" title="mu">
<link href="mu-wicket.html#mu-wicket" rel="next" title="mu wicket">
<link href="mu-filter.html#mu-filter" rel="prev" title="mu filter">
<style type="text/css">
<!--
a.summary-letter {text-decoration: none}
blockquote.indentedblock {margin-right: 0em}
blockquote.smallindentedblock {margin-right: 0em; font-size: smaller}
blockquote.smallquotation {font-size: smaller}
div.display {margin-left: 3.2em}
div.example {margin-left: 3.2em}
div.lisp {margin-left: 3.2em}
div.smalldisplay {margin-left: 3.2em}
div.smallexample {margin-left: 3.2em}
div.smalllisp {margin-left: 3.2em}
kbd {font-style: oblique}
pre.display {font-family: inherit}
pre.format {font-family: inherit}
pre.menu-comment {font-family: serif}
pre.menu-preformatted {font-family: serif}
pre.smalldisplay {font-family: inherit; font-size: smaller}
pre.smallexample {font-size: smaller}
pre.smallformat {font-family: inherit; font-size: smaller}
pre.smalllisp {font-size: smaller}
span.nolinebreak {white-space: nowrap}
span.roman {font-family: initial; font-weight: normal}
span.sansserif {font-family: sans-serif; font-weight: normal}
ul.no-bullet {list-style: none}
-->
</style>
</head>
<body lang="en">
<a name="mu-acl"></a>
<div class="header">
<p>
Next: <a href="mu-wicket.html#mu-wicket" accesskey="n" rel="next">mu wicket</a>, Previous: <a href="mu-filter.html#mu-filter" accesskey="p" rel="prev">mu filter</a>, Up: <a href="mu.html#mu" accesskey="u" rel="up">mu</a> [<a href="index.html#SEC_Contents" title="Table of contents" rel="contents">Contents</a>][<a href="Function-Index.html#Function-Index" title="Index" rel="index">Index</a>]</p>
</div>
<hr>
<a name="mu-acl-1"></a>
<h4 class="subsection">2.17.9 mu acl</h4>
<p>The <code>mu acl</code> command tests Mailutils Access Control Lists. By
default it reads ACL from the Mailutils configiration file section
‘<samp>acl</samp>’. The command takes a list of IP addresses as its
arguments, applies the ACL to each of them in turn and prints the result.
</p>
<p>To select the ACL to test, two options are provided. The
<samp>--file</samp> (<samp>-f</samp>) option supplies the name of
configuration file to read instead of the default one. The
<samp>--path</samp> (<samp>-p</samp> option supplies the pathname
(see <a href="Paths.html#Paths">Paths</a>) of the ACL section to use instead of the default ‘<samp>.acl</samp>’. For example, to test ACL in section ‘<samp>server 213.130.1.232</samp>’ of file <samp>/etc/pop3d.conf</samp> use:
</p>
<div class="example">
<pre class="example">mu acl --file=/etc/pop3d.conf \
--path=/server="213.130.1.232"/acl <var>address</var>
</pre></div>
<p>As an example of its use, consider file <samp>test.conf</samp> with the
following contents:
</p>
<div class="example">
<pre class="example">acl {
deny from 10.10.10.1;
deny from 10.10.1.0/24;
log from any "Connect from ${address}";
allow from 10.0.0.0/8;
allow from 192.168.1.0/24;
deny from any;
}
</pre></div>
<p>Then, running <code>mu acl --file=test.conf 127.0.0.1</code> you will get:
</p>
<div class="example">
<pre class="example">Testing 127.0.0.1:
mu: Connect from 127.0.0.1
127.0.0.1: deny
</pre></div>
<p>More examples:
</p>
<div class="example">
<pre class="example">$ mu acl --file=test.conf 127.0.0.1 10.10.10.1 \
10.10.1.3 10.5.3.1 192.168.1.0 192.168.2.0
Testing 127.0.0.1:
mu: Connect from 127.0.0.1
127.0.0.1: deny
Testing 10.10.10.1:
10.10.10.1: deny
Testing 10.10.1.3:
10.10.1.3: deny
Testing 10.5.3.1:
mu: Connect from 10.5.3.1
10.5.3.1: accept
Testing 192.168.1.0:
mu: Connect from 192.168.1.0
192.168.1.0: accept
Testing 192.168.2.0:
mu: Connect from 192.168.2.0
192.168.2.0: accept
</pre></div>
<p>The <code>mu</code> option <samp>--debug-level</samp> will give you a deeper
insight into the address matching algorithm:
</p>
<div class="example">
<pre class="example">$ mu --debug-level=acl.trace9 acl --file test.conf 127.0.0.1
Testing 127.0.0.1:
mu: Checking sockaddr 127.0.0.1
mu: 1:deny: Does 10.10.10.1/255.255.255.255 match 127.0.0.1? no;
mu: 2:deny: Does 10.10.1.0/255.255.255.0 match 127.0.0.1? no;
mu: 3:log: Does any match 127.0.0.1? yes;
mu: Expanding "Connect from ${address}";
mu: Expansion: "Connect from 127.0.0.1";.
mu: Connect from 127.0.0.1
mu: 4:accept: Does 10.0.0.0/255.0.0.0 match 127.0.0.1? no;
mu: 5:accept: Does 192.168.0.0/255.255.0.0 match 127.0.0.1? no;
mu: 6:deny: Does any match 127.0.0.1? yes;
127.0.0.1: deny
</pre></div>
<p>See <a href="Debugging-Categories.html#Debugging-Categories">acl</a>.
</p>
<hr>
<div class="header">
<p>
Next: <a href="mu-wicket.html#mu-wicket" accesskey="n" rel="next">mu wicket</a>, Previous: <a href="mu-filter.html#mu-filter" accesskey="p" rel="prev">mu filter</a>, Up: <a href="mu.html#mu" accesskey="u" rel="up">mu</a> [<a href="index.html#SEC_Contents" title="Table of contents" rel="contents">Contents</a>][<a href="Function-Index.html#Function-Index" title="Index" rel="index">Index</a>]</p>
</div>
</body>
</html>
|