LOCAL_CONFIG

dnl the following checks all equal pref mx (with patch)
dnl or all mx (without patch)
ifdef(`_FFR_BESTMX_MULTI_BEST',`dnl
Kallbestmx bestmx -B -z:',`dnl
Kallbestmx bestmx -z:')dnl
dnl the following only checks the bestmx
dnl Kallbestmx bestmx 

LOCAL_RULESETS
dnl this hooks checks against the recipients MX and the senders MX
SLocal_check_rcpt
R$*				$: $>check_mx $1
R$*				$: $>check_mx $&f


Scheck_mx
R$*					$: $1 $| <M> $| $>ParseRecipient $1
R$* $| <M> $| $+ < $* >			$: $1 $| $2 < $3 >
R$* $| <M> $*				$@ $1
R$* $| $+ < @ $=w >			$@ $1 
R$* $| < @ $* >				$@ $1

#comment out the next 10 lines to turn off mailertable interaction
R$* $| $+ < @ $* >			$: $1 $| <M> $| $3 $| $(mailertable $3 $: $) 
R$* $| <M> $| $* $| $+:[$*]		$: $1 $| $4 $| <M>
R$* $| <M> $| $* $| $+:$*		$: $1 $| $4 $| <M>
R$* $| <M> $| $* $| $+			$: $1 $| $3 $| <M>
#uncomment next line to always allow all mailertable entries
#R$* $| $* $| <M>			$@ $1	
R$* $| $* $| <M>			$: $1 $| $| $(allbestmx $2 $: $): $| <M>
R$* $| $| : $| <M>			$@ $1
R$* $| $| $* $| <M>			$: $1 $| $| $2 $| 
R$* $| <M> $| $* $|			$: $1 $| $| $(allbestmx $2 $: $): $|

#uncomment the next line to turn off mailertable interaction
#R$* $| $| $* $|			$: $1 $| $| $(allbestmx $2 $: $): $|

#uncomment the next line to not perform MX detection/domain name resolution check
#R$* $| $| : $|				$@ $1
R$* $| $| : $|				$#error $@ 5.7.1 $: "550 There is no MX for "$1" which is bogus and rejected"
R$* $| $* $| $+.:$* $| $*		$1 $| $2 <D:$3> $| $4 $| $5 <A: $(dnsbl $3 $)> $>check_host $3
R$* $| $+ $| $| $+ <ERROR>		$#error $@ 5.7.1 $: "550 The MX for "$1" is bogus and rejected"	
R$* $| $+ $| $| $+ <TMP>		$#error $@ 4.3.0 $: "451 Temporary system failure. Please try again later."
R$* $| $+ $| $| $+			$: $1 $| $2 $| $3 $| $>SearchList <! MX> $| $3 <> 
R$* $| $+ $| $+ $| <?>			$: $1 $| $2 $| $3 $| $>SearchList <! MX> $| $2 <> 
R$* $| $+ $| $+ $| <?>			$@ $1
R$* $| $+ $| $+ $| $*			$: $1 $| $4
R$* $| $={Accept}			$@ $1
R$* $| <DISCARD>			$#discard $: discard
R$* $| <REJECT>				$#error $@ 5.7.1 $: "550 The MX for "$1" is bogus and rejected"
R$* $| <ERROR:$-.$-.$-:$+>		$#error $@ $2.$3.$4 $: $5
R$* $| <ERROR:$+>			$#error $: $2
R$* $| <<TMPF>>				$#error $@ 4.3.0 $: "451 Temporary system failure. Please try again later."
R$* $| $* 				$#error $: $2
R$* $| $*				$@ $1

Scheck_host
#uncomment next non-comment line to allow non-rfc compliant ip address value for MX record
#this is unreliable since you will match 1.2.3.127 to MX:10
#to compensate, you should adjust your access maps to have seperate IP/domain name tags.
#R$+.$+.$+.$+				$@
R$*					$: $(resolve $1 $)
R$*<OKR>				$@
R$*<TMP>				$@<TMP>
R$*					$@<ERROR>