	FML Security Advisory 1999-001: happy99.exe
	========================================

Topic:	happy99

			Ken'ichi Fukamachi <fukachan@sapporo.iij.ad.jp>

	Copyright (C) 1999 Ken'ichi Fukamachi
		All rights reserved.
-------------------------
------------------------------------------------------------
I	Filtering

1	Filtering Function
1.1	FML Filtering
1.2	use "makefml config"
1.3	write cf 
1.4	write config.ph
1.5	make secure

2	Add a new filtering rule
2.1	cf
2.2	config.ph

II	To reject except for fml

3	bin/multipart.pl
III	Considerations

4	Further investigations
------------------------------------------------------------

-------------------------

See INSTALL manual for more details on how to configure fml.

	http://www.fml.org/fml/INSTALL/

I	Filtering

1	Filtering Function

1.1	FML Filtering

Fml has filtering mechanism based on mail header and body after fml
2.2 (2.2 officially but fml 2.1 current unofficially). You can
deny/reject mail with some patterns. If you can find
$USE_DISTRIBUTE_FILTER in fml source, the version has filtering
function.

In default fml filtering is off. Firstly you should turn on it. 
Consider elena ML hereafter as an example.

To enable filtering function, you can do one of the following methods
which are the same. Please use one you are familliar with.

1.2	use "makefml config"

   "makefml config elena" -> security -> USE_DISTRIBUTE_FILTER -> "y" (yes)

1.3	write cf 

Write

   USE_DISTRIBUTE_FILTER 1

and run to remake config.ph

	% make config.ph

1.4	write config.ph

   $USE_DISTRIBUTE_FILTER = 1;

1.5	make secure

To enable all typical security options, run

   % cd /var/spool/ml/elena
   % make secure

2	Add a new filtering rule

The following ruels are the same. Please use one you are familliar with.

2.1	cf

To add

&DEFINE_FIELD_PAT_TO_REJECT("X-Spanska", ".*Yes.*");

to the last of "cf" (after "LOCAL_CONFIG" line) and run

	% make config.ph

2.2	config.ph

To write 

&DEFINE_FIELD_PAT_TO_REJECT("X-Spanska", ".*Yes.*");

to the last of config.ph (but before the last "1;").

II	To reject except for fml

3	bin/multipart.pl

Put multipart.pl between MTA and fml.pl. 

     MTA -> bin/multipart.pl -> fml.pl

	http://www.fml.org/fml/op/

III	Considerations

4	Further investigations

Hmm, could we make filtering rule collection?

