options = {
  filters = ["spf", "dkim", "regexp"]
  url_tld = "${URL_TLD}"
  pidfile = "${TMPDIR}/rspamd.pid"
  lua_path = "${INSTALLROOT}/share/rspamd/lib/?.lua"
  dns {
    nameserver = ["8.8.8.8", "8.8.4.4"];
    retransmits = 10;
    timeout = 2s;
        fake_records = [{ # ed25519
          name = "test._domainkey.example.com";
          type = txt;
          replies = ["k=ed25519; p=yi50DjK5O9pqbFpNHklsv9lqaS0ArSYu02qp1S0DW1Y="];
        },
        {
          name = "dkim._domainkey.cacophony.za.org",
          type = "txt";
          replies = ["v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDXtxBE5IiNRMcq2/lc2zErfdCvDFyQNBnMjbOjBQrPST2k4fdGbtpe5Iu5uS01Met+dAEf94XL8I0hwmYw+n70PP834zfJGi2egwGqrakpaWsCDPvIJZLkxJCJKQRA/zrQ622uEXdvYixVbsEGVw7U4wAGSmT5rU2eU1y63AlOlQIDAQAB"];
        },
        {
          name = "eddsa._domainkey.cacophony.za.org",
          type = "txt";
          replies = ["v=DKIM1; k=ed25519; p=+nU+aC33ICeS4zx8VUjFYCtxj0fRbHWQn2gP2hTkm9w="];
        },
        {
          name = "dkim._domainkey.invalid.za.org",
          type = "txt";
          replies = ["v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDEEXmNGQq7PUrr9Mg4UakTFHgXBCy2DOztkrZm+0OrVWtiRzGluxBkbOWTBwuU3/Yw97yTphBMQxzWFN603/f/KPAQcF/Lc1l+6kmIBBxNXjjGuOK/3PYKZVntUdKmqcQBYfnHdzH2Tohbuyx1a7xqnv6VSChqQrZU4CwkeT3+eQIDAQAB"];
        },
        {
          name = "eddsa._domainkey.invalid.za.org",
          type = "txt";
          replies = ["v=DKIM1; k=ed25519; p=Wkkrp5DJTvknDMGWYv8vm3p3sZjiQp03LZo80RregY8="];
        },
        {
          name = "dkim._domainkey.rspamd.com",
          type = "txt";
          replies = ["v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCd/XhZBEGGAss48lEuMmwZv9lOFf6FTllBiQ3sPhdTpDdIPaW9TInW7iYnYD/bXHeVxYAyD/sKhYk6+qGBRu10rEi+iyPvLCIED+Boq0tEQosuKuV6Fjoomb+QhZY9KdjyZTjsrFPZ+wCkUY/30uTmpX2SwSqyxxlK0pUIsRgMAQIDAQAB"];
        },
        {
          name = "_dmarc.rspamd.com",
          type = "txt";
          rcode = 'norec';
        },
        {
          name = "dkim._domainkey.highsecure.ru",
          type = "txt";
          replies = ["p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDK4ZQYky30GH0Ak9OQ1fv3IdFNbpOtpa4S/PR20ZLgPXfd/FCA//ztUmu7kHlELI+/+4f8W+xX0oZlOc/cFxhopRjXZMlSsQqmWOZ40/GxWFBtcqafKu78FCqO7URqZUmMCM5Jlp4zt/yzH3dbYNG3i5PVlB5QtQnZvY+dvBL3dwIDAQAB"];
        },
        {
          name = "_dmarc.cacophony.za.org",
          type = "txt";
          replies = ["v=DMARC1; p=none; sp=reject"];
        },
        {
          name = "_dmarc.my.mom.za.org",
          type = "txt";
          replies = ["v=DMARC1; p=reject"];
        },
        {
          name = "example.net",
          type = "txt";
          replies = ["v=spf1 -all"];
        },
        {
          name = "fail4.org.org.za",
          type = "txt";
          replies = ["v=spf1 redirect=asdfsfewewrredfs"];
        },
        {
          name = "_dmarc.reject.cacophony.za.org",
          type = "txt";
          replies = ["v=DMARC1; p=reject"];
        },
        {
          name = "spf.cacophony.za.org",
          type = "txt";
          replies = ["v=spf1 ip4:8.8.4.4 -all"];
        },
        {
          name = "fail7.org.org.za",
          type = "a";
          rcode = 'norec';
        },
        {
          name = "fail6.org.org.za",
          type = "txt";
          replies = ["v=spf1 ip4:8.8.8.8 mx -all"];
        },
        {
          name = "fail6.org.org.za",
          type = "mx";
          rcode = 'norec';
        },
        {
          name = "fail7.org.org.za",
          type = "aaaa";
          rcode = 'norec';
        },
        {
          name = "_dmarc.quarantine.cacophony.za.org",
          type = "txt";
          replies = ["v=DMARC1; p=quarantine"];
        },
        {
          name = "_dmarc.yo.mom.za.org",
          type = "txt";
          replies = ["v=DMARC1; p=reject; aspf=s; adkim=s;"];
        },
        {
          name = "yo.mom.za.org",
          type = "txt";
          replies = ["v=spf1 ip4:37.48.67.26 -all"];
        },
        {
          name = "testdkim._domainkey.mom.za.org",
          type = "txt";
          replies = ["v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC3v4VPE1QMHUzsMRbC8VzXNq82mDjiv9Gi1NB/YYC+vIYZT+sE/Uxnr0Clk8C2jgzEr3jcxgQEWZfMtEEg/EfEJvh4SrXWv9c0gw1EEfxKxX9i+r8yBQtc/EWospWVDkhF2lAvQAK1lV1ZiU7psJ6fh1CI39uZyWdAktZzWLf0zQIDAQAB"];
        },
        {
          name = "_dmarc.rspamd.tk",
          type = "txt";
          replies = ["bio=a263adeab8acdcdb8b89e127b67d696061fdfbee"];
        },
        {
          name = "fail2.org.org.za",
          type = "txt";
          replies = ["v=spf1 ip4:8.8.4.4 include:www.dnssec-failed.org -all"];
        },
        {
          name = "fail3.org.org.za",
          type = "txt";
          replies = ["v=spf1 ip4:8.8.8.8 include:total.barf -all"];
        },
        {
          name = "mom.za.org",
          type = "txt";
          replies = ["v=spf1 ip4:37.48.67.26 -all"];
        },
        {
          name = "testdkim._domainkey.asdf.rspamd.tk", # testdkim._domainkey.asdf.rspamd.tk is an alias for rspamd.tk
          type = "txt";
          replies = ["bio=a263adeab8acdcdb8b89e127b67d696061fdfbee"];
        },
        {
          name = "testdkim._domainkey.rspamd.tk", # testdkim._domainkey.rspamd.tk is an alias for rspamd.tk
          type = "txt";
          replies = ["bio=a263adeab8acdcdb8b89e127b67d696061fdfbee"];
        },
        {
          name = "pass1.org.org.za",
          type = "txt";
          replies = ["v=spf1 include:pass2.org.org.za -all"];
        },
        {
          name = "95.142.99.88.in-addr.arpa",
          type = "ptr";
          replies = ["mail.highsecure.ru"];
        },
        {
          name = "mail.highsecure.ru",
          type = "a";
          replies = ["88.99.142.95"];
        },
        {
          name = "mail.highsecure.ru",
          type = "aaaa";
          rcode = 'norec';
        },
        {
          name = "1.0.66.128.in-addr.arpa",
          type = "ptr";
          rcode = 'nxdomain';
        },
        {
          name = "182.216.85.209.in-addr.arpa",
          type = "ptr";
          replies = ["mail-qt0-f182.google.com"];
        },
        {
          name = "crazyspf.cacophony.za.org",
          type = "txt";
          replies = ["v=spf1 ptr:cacophony.za.org ptr:rspamd.com ptr:yahoo.com ptr:yahoo.net ptr:highsecure.ru -all"];
        },
        {
          name = "pass2.org.org.za",
          type = "txt";
          replies = ["v=spf1 ip4:8.8.8.8 -all"];
        },
        {
          name = "_dmarc.yoni.za.org",
          type = "txt";
          replies = ["v=DMARC1; p=reject; sp=none;"];
        },
        {
          name = "fail10.org.org.za",
          type = "txt";
          replies = ["v=spf1 redirect=fail5.org.org.za"];
        },
        {
          name = "fail5.org.org.za",
          type = "txt";
          replies = ["v=spf1 OMGBARF"];
        },
        {
          name = "fail7.org.org.za",
          type = "txt";
          replies = ["v=spf1 ip4:8.8.8.8 a -all"];
        },
        {
          name = "co.za",
          type = "txt";
          rcode = 'norec';
        },
        {
          name = "testdkim1._domainkey.yoni.za.org",
          type = "txt";
          replies = ["v=DKIM1; k=rsa; p=BARF"];
        },
        {
          name = "_dmarc.yoni.za.net",
          type = "txt";
          replies = ["v=DMARC1; p=none; sp=quarantine"];
        },
        {
          name = "za",
          type = "txt";
          replies = ["Top-level domain for South Africa"];
        },
        {
          name = "_dmarc.foo.yoni.za.org",
          type = "txt";
          rcode = 'nxdomain';
        },
        {
          name = "_dmarc.foo.cacophony.za.org",
          type = "txt";
          rcode = 'nxdomain';
        },
        {
          name = "_dmarc.foo.yoni.za.net",
          type = "txt";
          rcode = 'nxdomain';
        },
        {
          name = "_dmarc.dnssec-failed.org",
          type = "txt";
          rcode = 'timeout';
        },
        {
          name = "_dmarc.example.com",
          type = "txt";
          rcode = 'nxdomain';
        },
        {
          name = "_dmarc.zero_pct.com",
          type = "txt";
          replies = ["v=DMARC1; p=reject; sp=quarantine; pct=0"];
        },
        {
          name = "example.com",
          type = "txt";
          replies = ["$Id: example.com 4415 2015-08-24 20:12:23Z davids $", "v=spf1 -all"];
        },
        {
          name = "example.com",
          type = "a";
          replies = ["93.184.216.34"];
        },
        {
          name = "testdkim1._domainkey.dnssec-failed.org",
          type = "txt";
          rcode = 'timeout';
        },
        {
          name = "total.barf",
          type = "txt";
          rcode = 'nxdomain';
        },
        {
          name = "_dmarc.foo.cacophony.za.org",
          type = "txt";
          rcode = 'nxdomain';
        },
        {
          name = "zzzzaaaa",
          type = "txt";
          rcode = 'nxdomain';
        },
        {
          name = "asdfsfewewrredfs",
          type = "txt";
          rcode = 'nxdomain';
        },
        {
          name = "95.142.99.88.asn.rspamd.com",
          type = "txt";
          replies = ["24940|88.99.0.0/16|DE|ripencc|"];
        },
        {
          name = "2.a.d.1.1.d.e.f.f.f.0.0.4.5.0.5.d.6.2.0.6.b.a.a.8.c.7.0.1.0.a.2.asn6.rspamd.com",
          type = "txt";
          replies = ["20857|2a01:7c8::/32|NL|ripencc|"];
        },
        {
          name = "2.a.d.1.1.d.e.f.f.f.0.0.4.5.0.5.d.6.2.0.6.b.a.a.8.c.7.0.1.0.a.2.rspamd.com",
          type = "txt";
          rcode = 'nxdomain';
        },
        {
          name = "2.a.d.1.1.d.e.f.f.f.0.0.4.5.0.5.d.6.2.0.6.b.a.a.8.c.7.0.1.0.a.2.rspamd.com",
          type = "a";
          rcode = 'nxdomain';
        },
        {
          name = "rspamd.com",
          type = "txt";
          replies = ["v=spf1 mx -all"];
        },
        {
          name = "rspamd.com",
          type = "mx";
          replies = ["10 mail.highsecure.ru"];
        },
        {
          name = "95.142.99.88.rspamd.com",
          type = "a";
          rcode = 'norec';
        },
        {
          name = "95.142.99.88.rspamd.com",
          type = "aaaa";
          rcode = 'norec';
        },
        {
          name = "2.0.0.127.rspamd.com",
          type = "a";
          replies = ["127.0.0.1"];
        },
        {
          name = "8.8.8.8.asn.rspamd.com",
          type = "txt";
          replies = ["15169|8.8.8.0/24|US|arin|"];
        },
        {
          name = "8.8.8.8.asn.rspamd.com",
          type = "a";
          rcode = 'nxdomain';
        },
        {
          name = "10.0.1.10.asn.rspamd.com",
          type = "txt";
          rcode = 'nxdomain';
        },
        {
          name = "10.0.1.10.asn.rspamd.com",
          type = "a";
          rcode = 'nxdomain';
        },
        {
          name = "10.0.1.11.asn.rspamd.com",
          type = "txt";
          rcode = 'nxdomain';
        },
        {
          name = "10.0.1.11.asn.rspamd.com",
          type = "a";
          rcode = 'nxdomain';
        },
        {
          name = "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.rspamd.com",
          type = "a";
          rcode = 'nxdomain';
        },
        {
          name = "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.rspamd.com",
          type = "a";
          rcode = 'nxdomain';
        },
        {
          name = "test.com",
          type = "txt";
          replies = [""];
        },
        {
          name = "other.com",
          type = "txt";
          rcode = 'norec';
        },
        {
          name = "bob",
          type = "txt";
          rcode = 'nxdomain';
        },
        {
          name = "mail.highsecure.ru",
          type = "aaaa";
          rcode = 'norec';
        },
        {
          name = "mail.highsecure.ru",
          type = "a";
          replies = ["88.99.142.95"];
        },
        {
          name = "4.3.2.1.rspamd.com",
          type = "a";
          rcode = 'nxdomain';
        },
        {
          name = "4.3.2.1.asn.rspamd.com",
          type = "txt";
          rcode = 'nxdomain';
        },
        {
          name = "1.0.0.127.rspamd.com",
          type = "a";
          rcode = 'nxdomain';
        },
        {
          name = "114.47.228.46.rspamd.com",
          type = "a";
          rcode = 'nxdomain';
        },
        {
          name = "114.47.228.46.asn.rspamd.com",
          type = "txt";
          replies = ["34010|46.228.40.0/21|GB|ripencc|"];
        },
        {
          name = "10.0.1.10.rspamd.com",
          type = "a";
          rcode = 'nxdomain';
        },
        {
          name = "10.0.1.11.rspamd.com",
          type = "a";
          rcode = 'nxdomain';
        },
        {
          name = "other.org",
          type = "txt";
          rcode = 'norec';
        },
        {
          name = "8.8.8.8.rspamd.com",
          type = "a";
          rcode = 'nxdomain';
        },
        {
          name = "rspamd.tk",
          type = "txt";
          replies = ["bio=a263adeab8acdcdb8b89e127b67d696061fdfbee"];
        },
        {
          name = "fail1.org.org.za",
          type = "txt";
          replies = ["v=spf1 redirect=www.dnssec-failed.org"];
        },
        {
          name = "www.dnssec-failed.org",
          type = "txt";
          rcode = 'timeout';
        },
        {
          name = "www.dnssec-failed.org",
          type = "mx";
          rcode = 'timeout';
        },
        {
          name = "www.dnssec-failed.org",
          type = "a";
          rcode = 'timeout';
        },
        {
          name = "www.dnssec-failed.org",
          type = "aaaa";
          rcode = 'norec';
        },
        {
          name = "cacophony.za.org",
          type = "txt";
          replies = ["v=spf1 redirect=asdfsfewewrredfs"];
        },
        {
          name = "fail9.org.org.za",
          type = "txt";
          replies = ["v=spf1 ip4:8.8.8.8 mx:www.dnssec-failed.org -all"];
        },
        {
          name = "fail8.org.org.za",
          type = "txt";
          replies = ["v=spf1 ip4:8.8.8.8 a:www.dnssec-failed.org -all"];
        },
        {
          name = "1.2.3.4.fake.rbl";
          type = "a";
          replies = ["127.0.0.2"];
        },
        {
          name = "2.2.3.4.fake.rbl";
          type = "a";
          replies = ["127.0.0.10"];
        },
        {
          name = "3.2.3.4.fake.rbl";
          type = "a";
          replies = ["127.0.0.2", "127.0.0.3"];
        },
        {
          name = "4.2.3.4.fake.rbl";
          type = "a";
          replies = ["127.0.0.2"];
        },
        {
          name = "4.2.3.4.fake.wl";
          type = "a";
          replies = ["127.0.0.2"];
        },
        {
          name = "4.3.2.1.fake.rbl";
          type = "a";
          rcode = 'nxdomain';
        },
        {
          name = "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.fake.rbl";
          type = "a";
          replies = ["127.0.0.2"];
        },
        {
          name = "131.193.18.151.fake.rbl";
          type = "a";
          replies = ["127.0.0.3"];
        }
        ];
  }
}
logging = {
  type = "file",
  level = "debug"
  filename = "${TMPDIR}/rspamd.log"
}
metric = {
  name = "default",
  actions = {
    reject = 100500,
  }
  unknown_weight = 1
}
worker {
  type = normal
  bind_socket = ${LOCAL_ADDR}:${PORT_NORMAL}
  count = 1
  task_timeout = 60s;
}
worker {
        type = controller
        bind_socket = ${LOCAL_ADDR}:${PORT_CONTROLLER}
        count = 1
        secure_ip = ["127.0.0.1", "::1"];
        stats_path = "${TMPDIR}/stats.ucl"
}
modules {
    path = "${TESTDIR}/../../src/plugins/lua/"
}
lua = "${TESTDIR}/lua/test_coverage.lua";
lua = "${INSTALLROOT}/share/rspamd/rules/rspamd.lua"
${PLUGIN_CONFIG}