Spamassassin X-SPAM Flag is not in the Mail Header
-
Hello,
i have migrated my old Zarafa, DSPAM Debian 6 Installation to a Kopano, Spamassassin Debian 9 Installation.
I recieve mails and can send also mails out.I have installed Kopano, Spamassassin, ClamAV, Amavis, Razor,Phyzor, DKIM…
When i get a mail then this mail is not sorted in the Junk Mail Folder in Kopano (what i want).
From my opinion is the reason that there is no X-SPAM Flag in the header for which dagent searches to sort it in the right folder.My postfix main.cf file includes this line:
#ContentFilter: content_filter = smtp-amavis:[127.0.0.1]:10024 receive_override_options = no_address_mappings
My postfix master.cf file has this lines in between:
127.0.0.1:10025 inet n - n - - smtpd -o content_filter= -o local_recipient_maps= -o relay_recipient_maps= -o smtpd_restriction_classes= -o smtpd_helo_restrictions= -o smtpd_sender_restrictions= -o smtpd_recipient_restrictions=permit_mynetworks,reject -o mynetworks=127.0.0.0/8 -o strict_rfc821_envelopes=yes -o smtpd_error_sleep_time=0 -o smtpd_soft_error_limit=1001 -o smtpd_hard_error_limit=1000 -o receive_override_options=no_header_body_checks
and this lines at the end of the file:
smtp-amavis unix - - n - 2 smtp -o smtp_data_done_timeout=1200 -o smtp_send_xforward_command=yes -o disable_dns_lookups=yes
This is my spamassassin file:
# /etc/default/spamassassin # Duncan Findlay # WARNING: please read README.spamd before using. # There may be security risks. # If you're using systemd (default for jessie), the ENABLED setting is # not used. Instead, enable spamd by issuing: # systemctl enable spamassassin.service # Change to "1" to enable spamd on systems using sysvinit: ENABLED=0 # Options # See man spamd for possible options. The -d option is automatically added. # SpamAssassin uses a preforking model, so be careful! You need to # make sure --max-children is not set to anything higher than 5, # unless you know what you're doing. #OPTIONS="--create-prefs --max-children 5 --helper-home-dir" OPTIONS="--create-prefs --max-children 5 --helper-home-dir -u debian-spamd -g debian-spamd -s /var/log/spamd.log" # Pid file # Where should spamd write its PID to file? If you use the -u or # --username option above, this needs to be writable by that user. # Otherwise, the init script will not be able to shut spamd down. PIDFILE="/var/run/spamd.pid" # Set nice level of spamd #NICE="--nicelevel 15" # Cronjob # Set to anything but 0 to enable the cron job to automatically update # spamassassin's rules on a nightly basis CRON=1
Here is a mail abstract
Feb 1 21:50:39 myserver postfix/smtpd[12774]: warning: dict_nis_init: NIS domain name not set - NIS lookups disabled Feb 1 21:50:40 myserver postfix/smtpd[12774]: connect from tools.wormly.com[96.126.113.160] Feb 1 21:50:41 myserver sqlgrey: perf: spent 0s cleaning: from_awl (0) domain_awl (0) connect (0) Feb 1 21:50:41 myserver sqlgrey: grey: from awl match: updating 96.126.113(96.126.113.160), test@tools.wormly.com(test@tools.wormly.com) Feb 1 21:50:41 myserver postfix/smtpd[12774]: B43074C025B: client=tools.wormly.com[96.126.113.160] Feb 1 21:50:42 myserver postfix/cleanup[12778]: B43074C025B: message-id=<31fc0dbde4f9a285a18d058de220099b@blog.wormly.com> Feb 1 21:50:42 myserver opendkim[3326]: B43074C025B: tools.wormly.com [96.126.113.160] not internal Feb 1 21:50:42 myserver opendkim[3326]: B43074C025B: not authenticated Feb 1 21:50:42 myserver opendkim[3326]: B43074C025B: no signature data Feb 1 21:50:42 myserver postfix/qmgr[11599]: B43074C025B: from=<test@tools.wormly.com>, size=830, nrcpt=1 (queue active) Feb 1 21:50:42 myserver postfix/smtpd[12774]: disconnect from tools.wormly.com[96.126.113.160] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7 Feb 1 21:50:43 myserver postfix/smtpd[12783]: connect from localhost.localdomain[127.0.0.1] Feb 1 21:50:43 myserver postfix/smtpd[12783]: 6A5824C025D: client=localhost.localdomain[127.0.0.1] Feb 1 21:50:43 myserver postfix/cleanup[12778]: 6A5824C025D: message-id=<31fc0dbde4f9a285a18d058de220099b@blog.wormly.com> Feb 1 21:50:43 myserver opendkim[3326]: 6A5824C025D: no signing table match for 'test@tools.wormly.com' Feb 1 21:50:43 myserver opendkim[3326]: 6A5824C025D: no signature data Feb 1 21:50:43 myserver postfix/qmgr[11599]: 6A5824C025D: from=<test@tools.wormly.com>, size=1327, nrcpt=1 (queue active) Feb 1 21:50:43 myserver postfix/smtpd[12783]: disconnect from localhost.localdomain[127.0.0.1] ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5 Feb 1 21:50:43 myserver amavis[10893]: (10893-13) Passed CLEAN {RelayedOpenRelay}, [96.126.113.160]:33896 [96.126.113.160] <test@tools.wormly.com> -> <daniel@my-mail.de>, Queue-ID: B43074C025B, Message-ID: <31fc0dbde4f9a285a18d058de220099b@blog.wormly.com>, mail_id: 5YyrLyCvbPCS, Hits: 0, size: 796, queued_as: 6A5824C025D, 1217 ms Feb 1 21:50:43 myserver postfix/smtp[12779]: B43074C025B: to=<daniel@my-mail.de>, relay=127.0.0.1[127.0.0.1]:10024, delay=2.1, delays=0.83/0.01/0/1.2, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 6A5824C025D) Feb 1 21:50:43 myserver postfix/qmgr[11599]: B43074C025B: removed Feb 1 21:50:43 myserver postfix/lmtp[12784]: 6A5824C025D: to=<daniel@my-mail.de>, relay=127.0.0.1[127.0.0.1]:2003, delay=0.3, delays=0.01/0.03/0.06/0.2, dsn=2.1.5, status=sent (250 2.1.5 daniel@my-mail.de Ok) Feb 1 21:50:43 myserver postfix/qmgr[11599]: 6A5824C025D: removed
Has someone a idea why the headers are not there, or could it be that amavis is not trying to give the mail for scanning to spamassassin?
Greetings
Daniel
-
No one any idea?
-
@BMWfan said in Spamassassin X-SPAM Flag is not in the Mail Header:
relay=127.0.0.1[127.0.0.1]:10024
he is obviously giving it to Amavis, so you must be missing some configuration in Amavis. The alternative is that he simply does not classify the message as spam with which you are testing.
-
@fbartels ,i installed now a new server to have no dependencies of all the troubleshooting configurations which ive taken and posted here nearly the complete configuration. I’ve installed a new debian 9 server migrated all data but made the configuration postfix, amavis, clamav new. These are now my configurations:
I’ve changed the values in
/etc/amavis/conf.d/20-debian_defaults
$sa_tag_level_deflt = -999; # add spam info headers if at, or above that level $sa_tag2_level_deflt = 6.0; # add 'spam detected' headers at that level $sa_kill_level_deflt = 21.0; # triggers spam evasive actions $sa_dsn_cutoff_level = 4; # spam level beyond which a DSN is not sent
I comment out this lines in
/etc/amavis/conf.d/15-content_filter_mode
@bypass_virus_checks_maps = ( %bypass_virus_checks, @bypass_virus_checks_acl, $bypass_virus_checks_re); @bypass_spam_checks_maps = ( %bypass_spam_checks, @bypass_spam_checks_acl, $bypass_spam_checks_re);
I’ve changed this record in
/etc/amavis/conf.d/50-user
like the DNS MX Record:$myhostname = 'mail.meine-domain.de';
I added for sure amavis to postfix:
postconf -e 'content_filter = smtp-amavis:[127.0.0.1]:10024'
In the end of the postfix master.cf i added this lines:
smtp-amavis unix - - - - 2 smtp -o smtp_data_done_timeout=1200 -o smtp_send_xforward_command=yes -o disable_dns_lookups=yes -o max_use=20 127.0.0.1:10025 inet n - - - - smtpd -o content_filter= -o local_recipient_maps= -o relay_recipient_maps= -o smtpd_restriction_classes= -o smtpd_delay_reject=no -o smtpd_client_restrictions=permit_mynetworks,reject -o smtpd_helo_restrictions= -o smtpd_sender_restrictions= -o smtpd_recipient_restrictions=permit_mynetworks,reject -o smtpd_data_restrictions=reject_unauth_pipelining -o smtpd_end_of_data_restrictions= -o mynetworks=127.0.0.0/8 -o smtpd_error_sleep_time=0 -o smtpd_soft_error_limit=1001 -o smtpd_hard_error_limit=1000 -o smtpd_client_connection_count_limit=0 -o smtpd_client_connection_rate_limit=0 -o receive_override_options=no_header_body_checks,no_unknown_recipient_checks
I added in the postfix master.cf this lines directly after the pickip transport service:
-o content_filter= -o receive_override_options=no_header_body_checks
Nevertheless it is still not working.
This is the mail.log output if i restart amavis:
Feb 5 16:24:23 myserver amavis[22757]: starting. /usr/sbin/amavisd-new at mail.meine-domain.de amavisd-new-2.10.1 (20141025), Unicode aware, LC_ALL="C" Feb 5 16:24:23 myserver amavis[22765]: Net::Server: Group Not Defined. Defaulting to EGID '122 122' Feb 5 16:24:23 myserver amavis[22765]: Net::Server: User Not Defined. Defaulting to EUID '115' Feb 5 16:24:23 myserver amavis[22765]: Module Amavis::Conf 2.404 Feb 5 16:24:23 myserver amavis[22765]: Module Archive::Zip 1.59 Feb 5 16:24:23 myserver amavis[22765]: Module BerkeleyDB 0.55 Feb 5 16:24:23 myserver amavis[22765]: Module Compress::Raw::Zlib 2.069 Feb 5 16:24:23 myserver amavis[22765]: Module Compress::Zlib 2.069001 Feb 5 16:24:23 myserver amavis[22765]: Module Crypt::OpenSSL::RSA 0.28 Feb 5 16:24:23 myserver amavis[22765]: Module DB_File 1.835 Feb 5 16:24:23 myserver amavis[22765]: Module Digest::MD5 2.54 Feb 5 16:24:23 myserver amavis[22765]: Module Digest::SHA 5.95_01 Feb 5 16:24:23 myserver amavis[22765]: Module Encode 2.80_01 Feb 5 16:24:23 myserver amavis[22765]: Module File::Temp 0.2304 Feb 5 16:24:23 myserver amavis[22765]: Module IO::Socket::INET6 2.72 Feb 5 16:24:23 myserver amavis[22765]: Module IO::Socket::IP 0.37 Feb 5 16:24:23 myserver amavis[22765]: Module MIME::Entity 5.508 Feb 5 16:24:23 myserver amavis[22765]: Module MIME::Parser 5.508 Feb 5 16:24:23 myserver amavis[22765]: Module MIME::Tools 5.508 Feb 5 16:24:23 myserver amavis[22765]: Module Mail::DKIM::Verifier 0.4 Feb 5 16:24:23 myserver amavis[22765]: Module Mail::Header 2.18 Feb 5 16:24:23 myserver amavis[22765]: Module Mail::Internet 2.18 Feb 5 16:24:23 myserver amavis[22765]: Module Mail::SPF v2.009 Feb 5 16:24:23 myserver amavis[22765]: Module Mail::SpamAssassin 3.004002 Feb 5 16:24:23 myserver amavis[22765]: Module Net::DNS 1.07 Feb 5 16:24:23 myserver amavis[22765]: Module Net::LibIDN 0.12 Feb 5 16:24:23 myserver amavis[22765]: Module Net::Patricia 1.22 Feb 5 16:24:23 myserver amavis[22765]: Module Net::Server 2.008 Feb 5 16:24:23 myserver amavis[22765]: Module NetAddr::IP 4.079 Feb 5 16:24:23 myserver amavis[22765]: Module Razor2::Client::Version 2.84 Feb 5 16:24:23 myserver amavis[22765]: Module Scalar::Util 1.4202 Feb 5 16:24:23 myserver amavis[22765]: Module Socket 2.020_03 Feb 5 16:24:23 myserver amavis[22765]: Module Socket6 0.27 Feb 5 16:24:23 myserver amavis[22765]: Module Time::HiRes 1.9733 Feb 5 16:24:23 myserver amavis[22765]: Module URI 1.71 Feb 5 16:24:23 myserver amavis[22765]: Module Unix::Syslog 1.1 Feb 5 16:24:23 myserver amavis[22765]: Amavis::ZMQ code NOT loaded Feb 5 16:24:23 myserver amavis[22765]: Amavis::DB code loaded Feb 5 16:24:23 myserver amavis[22765]: SQL base code NOT loaded Feb 5 16:24:23 myserver amavis[22765]: SQL::Log code NOT loaded Feb 5 16:24:23 myserver amavis[22765]: SQL::Quarantine NOT loaded Feb 5 16:24:23 myserver amavis[22765]: Lookup::SQL code NOT loaded Feb 5 16:24:23 myserver amavis[22765]: Lookup::LDAP code NOT loaded Feb 5 16:24:23 myserver amavis[22765]: AM.PDP-in proto code loaded Feb 5 16:24:23 myserver amavis[22765]: SMTP-in proto code loaded Feb 5 16:24:23 myserver amavis[22765]: Courier proto code NOT loaded Feb 5 16:24:23 myserver amavis[22765]: SMTP-out proto code loaded Feb 5 16:24:23 myserver amavis[22765]: Pipe-out proto code NOT loaded Feb 5 16:24:23 myserver amavis[22765]: BSMTP-out proto code NOT loaded Feb 5 16:24:23 myserver amavis[22765]: Local-out proto code loaded Feb 5 16:24:23 myserver amavis[22765]: OS_Fingerprint code NOT loaded Feb 5 16:24:23 myserver amavis[22765]: ANTI-VIRUS code loaded Feb 5 16:24:23 myserver amavis[22765]: ANTI-SPAM code loaded Feb 5 16:24:23 myserver amavis[22765]: ANTI-SPAM-EXT code NOT loaded Feb 5 16:24:23 myserver amavis[22765]: ANTI-SPAM-C code NOT loaded Feb 5 16:24:23 myserver amavis[22765]: ANTI-SPAM-SA code loaded Feb 5 16:24:23 myserver amavis[22765]: Unpackers code loaded Feb 5 16:24:23 myserver amavis[22765]: DKIM code NOT loaded Feb 5 16:24:23 myserver amavis[22765]: Tools code NOT loaded Feb 5 16:24:23 myserver amavis[22765]: Found $file at /usr/bin/file Feb 5 16:24:23 myserver amavis[22765]: Found $altermime at /usr/bin/altermime Feb 5 16:24:23 myserver amavis[22765]: Internal decoder for .mail Feb 5 16:24:23 myserver amavis[22765]: Found decoder for .Z at /bin/uncompress Feb 5 16:24:23 myserver amavis[22765]: Found decoder for .gz at /bin/gzip -d Feb 5 16:24:23 myserver amavis[22765]: Found decoder for .bz2 at /bin/bzip2 -d Feb 5 16:24:23 myserver amavis[22765]: Found decoder for .xz at /usr/bin/xz -dc Feb 5 16:24:23 myserver amavis[22765]: Found decoder for .lzma at /usr/bin/xz -dc --format=lzma Feb 5 16:24:23 myserver amavis[22765]: No ext program for .lrz, tried: lrzip -q -k -d -o -, lrzcat -q -k Feb 5 16:24:23 myserver amavis[22765]: No ext program for .lzo, tried: lzop -d Feb 5 16:24:23 myserver amavis[22765]: No ext program for .lz4, tried: lz4c -d Feb 5 16:24:23 myserver amavis[22765]: No ext program for .rpm, tried: rpm2cpio.pl, rpm2cpio Feb 5 16:24:23 myserver amavis[22765]: Found decoder for .cpio at /bin/pax Feb 5 16:24:23 myserver amavis[22765]: Found decoder for .tar at /bin/pax Feb 5 16:24:23 myserver amavis[22765]: Found decoder for .deb at /usr/bin/ar Feb 5 16:24:23 myserver amavis[22765]: No ext program for .rar, tried: unrar-free Feb 5 16:24:23 myserver amavis[22765]: Found decoder for .arj at /usr/bin/arj Feb 5 16:24:23 myserver amavis[22765]: Found decoder for .arc at /usr/bin/nomarch Feb 5 16:24:23 myserver amavis[22765]: No ext program for .zoo, tried: zoo Feb 5 16:24:23 myserver amavis[22765]: Found decoder for .doc at /usr/bin/ripole Feb 5 16:24:23 myserver amavis[22765]: Found decoder for .cab at /usr/bin/cabextract Feb 5 16:24:23 myserver amavis[22765]: Internal decoder for .tnef Feb 5 16:24:23 myserver amavis[22765]: No ext program for .zip, tried: 7za, 7z Feb 5 16:24:23 myserver amavis[22765]: No ext program for .kmz, tried: 7za, 7z Feb 5 16:24:23 myserver amavis[22765]: Internal decoder for .zip Feb 5 16:24:23 myserver amavis[22765]: Internal decoder for .kmz Feb 5 16:24:23 myserver amavis[22765]: No ext program for .7z, tried: 7zr, 7za, 7z Feb 5 16:24:23 myserver amavis[22765]: No ext program for .jar, tried: 7z Feb 5 16:24:23 myserver amavis[22765]: No ext program for .rar, tried: 7z Feb 5 16:24:23 myserver amavis[22765]: No ext program for .swf, tried: 7z Feb 5 16:24:23 myserver amavis[22765]: No ext program for .lha, tried: 7z Feb 5 16:24:23 myserver amavis[22765]: No ext program for .iso, tried: 7z Feb 5 16:24:23 myserver amavis[22765]: No ext program for .rpm, tried: 7z Feb 5 16:24:23 myserver amavis[22765]: Found decoder for .exe at /usr/bin/arj Feb 5 16:24:23 myserver amavis[22765]: No decoder for .7z Feb 5 16:24:23 myserver amavis[22765]: No decoder for .F Feb 5 16:24:23 myserver amavis[22765]: No decoder for .iso Feb 5 16:24:23 myserver amavis[22765]: No decoder for .jar Feb 5 16:24:23 myserver amavis[22765]: No decoder for .lha Feb 5 16:24:23 myserver amavis[22765]: No decoder for .lrz Feb 5 16:24:23 myserver amavis[22765]: No decoder for .lz4 Feb 5 16:24:23 myserver amavis[22765]: No decoder for .lzo Feb 5 16:24:23 myserver amavis[22765]: No decoder for .rar Feb 5 16:24:23 myserver amavis[22765]: No decoder for .rpm Feb 5 16:24:23 myserver amavis[22765]: No decoder for .swf Feb 5 16:24:23 myserver amavis[22765]: No decoder for .zoo Feb 5 16:24:23 myserver amavis[22765]: Using primary internal av scanner code for ClamAV-clamd Feb 5 16:24:23 myserver amavis[22765]: Found secondary av scanner ClamAV-clamscan at /usr/bin/clamscan Feb 5 16:24:23 myserver amavis[22765]: Deleting db files __db.001,snmp.db,__db.003,__db.002,nanny.db in /var/lib/amavis/db Feb 5 16:24:23 myserver amavis[22765]: Creating db in /var/lib/amavis/db/; BerkeleyDB 0.55, libdb 5.3
Here is a example mail:
Return-Path: <mennompfzcfxsteube@gnamx.icu> Received: from mail.meine-domain.de ([::ffff:127.0.0.1]:50044) by vserver.meinserver.de (kopano-dagent) with LMTP; Mon, 04 Feb 2019 19:20:04 +0100 (CET) Received: from localhost (localhost.localdomain [127.0.0.1]) by mail.meine-domain.de (Postfix) with ESMTP id 0D4424A1DEB for <daniel@meine-domain.de>; Mon, 4 Feb 2019 19:20:04 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at mail.meine-domain.de Received: from mail.meine-domain.de ([127.0.0.1]) by localhost (mail.meine-domain.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f0Ip6mFBBdxP for <daniel@meine-domain.de>; Mon, 4 Feb 2019 19:20:02 +0100 (CET) Received: from disagree.gnamx.icu (unknown [185.234.183.34]) by mail.meine-domain.de (Postfix) with ESMTP id 2D7694A1DE9 for <daniel@meine-domain.de>; Mon, 4 Feb 2019 19:20:02 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=dkim; d=gnamx.icu; h=Date:Message-ID:Reply-To:List-Unsubscribe:From:To:MIME-Version:Subject:Content-Type:Content-Transfer-Encoding; i=mennompfzcfxsteube@gnamx.icu; bh=xF+txZ8UQURgeUDonGZ5VLXitF0=; b=MjBMDkbeByu6xF5XKjAH24dgHbmyVD1DlooGVJjKNHe5xzuCzGXEOEaEcLIORaaQaXg0g3jXPF9W +uHYolBUJKiJ12cjzj1RR18fDA2eKHbhVS5ElA0B7S0qZyPZYAOcl0HHhRuOOAHSVcoXDG7YFG5y 0e922GNo7iMD8rM2Pek= DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=dkim; d=gnamx.icu; b=EWpilJeS2STqRL+IaMSZWXX7ye3EYBCZDUknaavtEmA6Vh0FX2WMG8Bsn53FJ0hWbMxFUVvwFkVJ xm1ePhI7bFHq5fOA6uwKy5Kt0QN1mFsrMeFRodBDGraAF+CTCuHsg+1/HYoACslnqtG+bBU2dE5O DBQaCUM1N3kMUSBjp+s=; Date: Mon, 4 Feb 2019 19:20:01 +0100 X-Report-Abuse: <http://gnamx.icu/aa.php?a=k94ug182252082j0zca1yr01j9kqay3b3a49ia0f> Message-ID: <fzdgxuks.wuwqtyjgnphkimaewtzji@rzpzm.gnamx.icu> Reply-To: mennompfzcfxsteube@gnamx.icu List-Unsubscribe: <http://gnamx.icu/ub.php?b=k94ug182252082j0zca1yr01j9kqay3b3a49ia0f> From: =?UTF-8?Q?Menno_Steube?= <mennompfzcfxsteube@gnamx.icu> To: <daniel@meine-domain.de> MIME-Version: 1.0 Subject: =?UTF-8?Q?Hier_ist_die_chirurgische_Premium-Behandlung_zu_Schn=C3=A4ppchenpreisen....?= Content-Type: multipart/alternative; boundary=b1_duevpnoedq4gr7zq6-fKtDZgWRB2; charset="UTF-8" Content-Transfer-Encoding: 8bit
-
@BMWfan said in Spamassassin X-SPAM Flag is not in the Mail Header:
I’ve changed the values in /etc/amavis/conf.d/20-debian_defaults
its better to use and other file. something like :
/etc/amavis/conf.d/21-debian_defaults-personal-overrides
This helps you when you upgrading packages/the full server.
if you use the same tag ( like -personal-override) that is pretty easy to track all you change over the complete server.to your problem.
add in spamassassin this to
/etc/spamassassin/local.cf
always_add_headers 1
should work, if not, read :
http://blog.dmitryleskov.com/small-hacks/forcing-spamassassin-to-add-the-x-spam-status-header-to-ham-for-debugging/
and
https://wiki.apache.org/spamassassin/IntegratedInPostfixWithAmavisGreetz,
Louis
-
@thctlo thank you but in your first link is described that adding this
always_add_headers 1
is obsolete for spamassassin version 3.x and it will be skipped if you will add it:
Feb 6 20:17:46.619 mail.meinserver.de /usr/sbin/amavisd-new[6742]: SA info: config: failed to parse line, skipping, in "/etc/spamassassin/local.cf": always_add_headers 1
I use spamassassin version 3.4.2. I already saw this provided first link before and built up my configuration like it. The second link includes also not more as my configuration.
@fbartels or someone else, do you have any idea depending on the new configuration?
-
I could solve this issue. This entry was missing in
/etc/amavis/conf.d/50-user
:@local_domains_acl = ( "." );```