Themis

Themis is a flexible milter, build on top of pymilter that strictly control your postfix environment. The main goal of this project is not only having control the users, but also to provide useful information about your mail environment.

Full Documentation

See the Wiki for full documentation, examples, operational details and other information.

What does it do?

1) Control all the flow of connections in policies

With this kind of control, you could create flexible policies for each connection, separing logic of MTA behaviors. E.G.: Inbound, Outbound policies

2) Rate limiting of messages

Flexible, you could assign several limits by message

3) Predict rate of messages sent - unstable

The idea is to predict the behavior of a messages sent by each user and have limits by timeframes of time. E.G.: 1min, 5min, 10min, ...

4) SPF check

Use pyspf for checking spf of senders, you can control how these messages are handled with policies features

5) Match headers and assign new ones

If you have another system that insert headers in messages, you could match then and assign new ones

6) Monitoring

Track the total of connections that are handled and for each policy too.

Features

• Rate limit
• SPF support
• Header inclusion
• Monitoring: block rated objects, sent messages and connections
• Policies by pool servers
• Dynamic resync of configuration
• Smart rate limiting
• Rate limiting counting by recipients
• Bypass or block by rated object

## Quick Start Guide

Ubuntu 14.04

Supposing that you have an environment with Zimbra, follow the 2nd step to put themis on route

sudo add-apt-repository -y ppa:sandro-mello/themis-core
sudo add-apt-repository -y ppa:sandro-mello/themis
sudo add-apt-repository -y ppa:chris-lea/python-redis
sudo add-apt-repository -y ppa:chris-lea/python-hiredis
sudo add-apt-repository -y ppa:chris-lea/redis-server
sudo apt-get update

sudo apt-get install -y themis-core themis
sudo apt-get install -y redis-server
tmscli -a --policy default Source any Destination any
tail -f /var/log/themis/themisd.log

CentOS 7

TODO

OR Docker

wget https://raw.githubusercontent.com/sandromello/themis-py/master/src/config/config.yaml && mv config.yaml /tmp
# Change config.yaml to the redis server instance
docker run --name themismilter -v /tmp:/etc/themis sandromello/themis themismilter.py

Docker image

On Zimbra Server

postconf -e milter_default_action=accept
zmprov ms $(zmhostname) zimbraMtaSmtpdMilters 'inet:<themis_server>:8440'
zmprov ms $(zmhostname) zimbraMtaNonSmtpdMilters 'inet:<themis_server>:8440'
zmmtactl restart

This will configure a new policy and monitor every sent and receive message on the Zimbra server.

Requirements

TODO

Get Help

Mail List: https://groups.google.com/d/forum/themis-project

Author

Themis was created by Sandro Mello ([email protected])