VRFYDMN(8)

✨ VRFYDMN(8) ✨

okay bestie, welcome to the vrfydmn manual page, straight out of the vrfydmn Manual 💖 this is section 8 of the manual (admin/system tools, the powerful stuff 👑), and it's about to be your new fave.

---

🌸 NAME 🌸

vrfydmn — reject an email message if the RFC5322 From:-address does not comply. periodt 💅

---

🦋 SYNOPSIS 🦋

vrfydmn [OPTIONS] FILE

---

💖 DESCRIPTION 💖

ngl, in email everyone is free to specify any RFC5322 From:-header address they want. like, absolutely any. and the miscreants — virus authors, spammers and phishers — are fully aware of this fact 😭 they forge the RFC5322 From:-header address on purpose to impersonate someone that suits their goal. it's giving identity theft but make it email.

and the average users? they are not aware of this fact. they tend to believe a message really was sent by the person indicated in the RFC5322 From:-header address. bless them 🥺

so vrfydmn verifies RFC5322 From:-headers in mail messages. it compares a message's From:-header field to a list of permitted sender domains assigned to the sender. and if the address does not meet the expectations, vrfydmn may either rectify the RFC5322 From:-header or reject the message. your call, bestie 💅

this program was created to control and reject phishing abuse on SMTP submission ports. it also serves to prevent mail loss in cases when the given address was under DMARC policy, i.e. Yahoo or AOL. iconic behaviour, honestly 🫶

---

✨ OPTIONS ✨

• -u, --user user (default: milter) — run vrfydmn as user user.
• -g, --group group (default: milter) — run vrfydmn as group user. (yes, the man page says "group user", we don't make the rules 🙈)
• -s, --socket socket (default: inet6:30072@[::1]) — specifies the socket vrfydmn should listen on for incoming verification requests. the socket consists of three parts — protocol, port and address. let's break it down 💅
  • protocol — use inet as prefix to indicate an IPv4 socket e.g. inet:10000@127.0.0.1 or inet6 as prefix to indicate an IPv6 socket e.g. inet6:30072@[::1].
  • port — use numbers to indicate the port vrfydmn should establish its socket on e.g. 30072.
  • address — specify an IP address. the address type must correspond to the protocol chosen. IPv6 addresses must be enclosed in square brackets e.g. [address].
• -p, --pid pidfile (default: none) — specifies the name of a file in which vrfydmn should note its process id. cute little receipt of its existence 📝
• -f, --file file (default: none) — this file typically is a postfix(8) map, i.e. a relay_domains file. it should be a map with 2 columns. first column is the domain (the key) and the second column represents some value. the value is totally ignored in vrfydmn! 💀 if a flat file was given, the file can be refreshed during runtime by sending the SIGHUP signal and the result can be dumped to syslog (or standard out, if -d, --debug was given) with the SIGUSR1 signal. signal glow-up fr fr ⭐
• -l, --ldap file (default: none) — specifies the path to a configuration file. the file holds options for LDAP queries. if specified, vrfydmn will establish a persistent LDAP connection. see vrfydmn_ldap(5) for details 👑
• -m, --memcached socket (default: none) — specifies a TCP socket to a memcache server. if enabled, LDAP query results will be cached in the memcache. the socket must be specified as address and port separated by a colon e.g. 127.0.0.1:11211. caching is self-care 🧚
• -f, --fix — if specified, vrfydmn will not reject messages with RFC5322 From:-headers that fail verification. instead it will attempt to fix them ✨ it will copy the erroneous header to a Reply-To:-header (only if none already exists). then it will replace the existing From:-header with the envelope-sender address (MAIL From). this option is recommended for web servers. main character energy tbh 🎀

⚠️ bestie, heads up: -f is doing double duty on this page — there's -f, --file for the map file and -f, --fix for the fixing behaviour. both are listed exactly as the original has them, no cap. read carefully 👀

• -d, --debug — this option is mainly for debugging and development purposes. if specified, vrfydmn will not detach. it will run in foreground and output its activities to stdout. perfect for watching it cook in real time 🍓

---

🌈 SEE ALSO 🌈

vrfydmn_ldap(5)

---

💀 BUGS 💀

there are no known bugs so far. slay 💅 please submit bugs to https://github.com/croessner/vrfydmn/issues.

---

👑 AUTHOR 👑

Christian Roessner <c@roessner.co> wrote the program. ✨

Patrick Ben Koetter <p@sys4.de> wrote this man page. 💖

---

🧚 RESOURCES 🧚

vrfydmn's home is at https://github.com/croessner/vrfydmn.

---

💜 COPYING 💜

Copyright (C) 2014-2015 Christian Roessner. Free use of this software is granted under the terms of the GNU General Public License (GPL).

---

and that's the whole page, bestie — this is vrfydmn 0.4, dated 02/09/2015, from the vrfydmn Manual. go forth and verify those From:-headers, you absolute icon 🫶💖✨