Themis is a flexible milter, build on top of pymilter that strictly control your postfix environment. The main goal of this project is not only having control the users, but also to provide useful information about your mail environment.

See the Wiki for full documentation, examples, operational details and other information.

With this kind of control, you could create flexible policies for each connection, separing logic of MTA behaviors. E.G.: Inbound, Outbound policies

Flexible, you could assign several limits by message

The idea is to predict the behavior of a messages sent by each user and have limits by timeframes of time. E.G.: 1min, 5min, 10min, ...

Use pyspf for checking spf of senders, you can control how these messages are handled with policies features

If you have another system that insert headers in messages, you could match then and assign new ones

Track the total of connections that are handled and for each policy too.

• Rate limit
• SPF support
• Header inclusion
• Monitoring: block rated objects, sent messages and connections
• Policies by pool servers
• Dynamic resync of configuration
• Smart rate limiting
• Rate limiting counting by recipients
• Bypass or block by rated object

sudo add-apt-repository -y ppa:sandro-mello/themis-core
sudo add-apt-repository -y ppa:sandro-mello/themis
sudo add-apt-repository -y ppa:chris-lea/python-redis
sudo add-apt-repository -y ppa:chris-lea/python-hiredis
sudo add-apt-repository -y ppa:chris-lea/redis-server
sudo apt-get update

sudo apt-get install -y themis-core themis
sudo apt-get install -y redis-server
tmscli -a --policy default Source any Destination any
tail -f /var/log/themis/themisd.log

wget https://raw.githubusercontent.com/sandromello/themis-py/master/src/config/config.yaml && mv config.yaml /tmp
# Change config.yaml to the redis server instance
docker run --name themismilter -v /tmp:/etc/themis sandromello/themis themismilter.py

Docker image

On Zimbra Server

postconf -e milter_default_action=accept
zmprov ms $(zmhostname) zimbraMtaSmtpdMilters 'inet:<themis_server>:8440'
zmprov ms $(zmhostname) zimbraMtaNonSmtpdMilters 'inet:<themis_server>:8440'
zmmtactl restart

This will configure a new policy and monitor every sent and receive message on the Zimbra server.

TODO

Mail List: https://groups.google.com/d/forum/themis-project

Themis was created by Sandro Mello (sandromll@gmail.com)