=head1	ACL

=head2	auth

# Descriptions: FML::Credential checks address comparison
#      History: always enabled
#        Value: YES_OR_NO
#     Examples: yes
use_address_compare_function = yes


# Descriptions: case insensitive comparison of user part of mail address.
#      History: none
#        Value: SELECT (
#			user_part_case_sensitive 
#			user_part_case_insensitive
#		)	
#     Examples: user_part_case_insensitive
address_compare_function_type = user_part_case_insensitive

# Descriptions: domain matching level in comparing mail addresses
#      History: ML_MEMBER_CHECK
#        Value: NUM
#     Examples: 3
address_compare_function_domain_matching_level	=	3


=head2 restrictinos

# Descriptions: restrictions for post
#      History: fml 4.0's PERMIT_POST_FROM + REJECT_ADDR
#        Value: MIX (
#			permit_anyone
#			permit_member_maps
#			check_article_thread
#			check_pgp_signature
#			permit_forward_to_moderator
#			reject_system_special_accounts
#			reject_spammer_maps
#			reject
#			isolate_system_special_accounts
#			isolate_spammer_maps
#			isolate
#			ignore_invalid_request
#			ignore
#		)
#     Examples:
article_post_restrictions	=	isolate_system_special_accounts
					permit_member_maps
					isolate

# Descriptions: restrictions for command mail
#      History: fml 4.0's PERMIT_COMMAND_FROM + REJECT_ADDR
#        Value: MIX (
#			permit_anyone
#			permit_member_maps
#			permit_anonymous_command
#			permit_user_command
#			check_pgp_signature
#			reject_system_special_accounts
#			reject_spammer_maps
#			reject
#			isolate_system_special_accounts
#			isolate_spammer_maps
#			isolate
#			ignore_invalid_request
#			ignore
#		)
#     Examples:
command_mail_restrictions	=	isolate_system_special_accounts
					permit_anonymous_command
					permit_user_command
					isolate


# Descriptions: restrictions for admin command mail
#      History: fml 4.0's ?
#        Value: MIX (
#			permit_anyone
#			permit_admin_member_maps
#			check_admin_member_password
#			check_pgp_signature
#			reject_system_special_accounts
#			reject_spammer_maps
#			reject
#			isolate_system_special_accounts
#			isolate_spammer_maps
#			isolate
#		)
#     Examples:
#		1. if auth by members-admin only
#			permit_admin_member_maps reject
#		2. password auth (members-admin + password)
#			check_admin_member_password reject
#
admin_command_mail_restrictions	=	reject_system_special_accounts
					check_admin_member_password
					reject


=head2 who can post

# Descriptions: member list == primary address list who can post.
#               fml (CUI,GUI,command mail) modifies this map.
#               XXX some map e.g. uni.group is read only
#      History: fml 4.0's $MEMBER_LIST
#        Value: MAP
#     Examples: /var/spool/ml/elena/members
primary_member_map	=	file:$ml_home_dir/members


# Descriptions: all maps used to check member list.
#      History: fml 4.0's $MEMBER_LIST + @MEMBER_LIST
#         Type:
#        Value: MAP_LIST
#     Examples:
member_maps		=	$primary_member_map
				$admin_member_maps



=head2 recipients


# Descriptions: primary recipients list.
#               fml (CUI,GUI,command mail) modifies this map.
#               XXX some map e.g. uni.group is read only
#      History: fml 4.0's $ACTIVE_LIST
#        Value: MAP
#     Examples: /var/spool/ml/elena/recipients
primary_recipient_map	=	 file:$ml_home_dir/recipients


# Descriptions: all maps used as recipient list.
#               actives is added for backward compability.
#      History: fml 4.0's $ACTIVE_LIST + @ACTIVE_LIST
#        Value: MAP_LIST
#     Examples: file:$ml_home_dir/recipients
#		unix.group:fml
recipient_maps		=	$primary_recipient_map
				file:$ml_home_dir/actives


=head2 digest


# Descriptions: dummy
#      History: none
#        Value: MAP
#     Examples:
primary_digest_member_map	=	$primary_member_map


# Descriptions: dummy
#      History: none
#        Value: MAP_LIST
#     Examples:
digest_member_maps		=	$primary_member_maps


# Descriptions: primary list of digest recipients.
#               fml (CUI,GUI,command mail) modifies this map.
#      History: In fml 4.0, options of $ACTIVE_LIST.
#        Value: MAP
#     Examples: /var/spool/ml/elena/recipients-digest
primary_digest_recipient_map	=	 file:$ml_home_dir/recipients-digest


# Descriptions: all maps of digest recipients.
#      History: In fml 4.0, options of $ACTIVE_LIST.
#        Value: MAP_LIST
#     Examples: file:$ml_home_dir/recipients-digest
#		unix.group:fml
digest_recipient_maps		=	$primary_digest_recipient_map


=head2 remote administrators

# Descriptions: list of remote administrators who has priviledge 
#               of admin command mail.
#               fml (CUI,GUI,command mail) modifies this map.
#               XXX some map e.g. uni.group is read only
#      History: fml 4.0's $ADMIN_MEMBER_LIST
#        Value: MAP
#     Examples: /var/spool/ml/elena/members-admin
primary_admin_member_map	=	file:$ml_home_dir/members-admin


# Descriptions: all remote administrator lists
#      History: fml 4.0's $ADMIN_MEMBER_LIST + @ADMIN_MEMBER_LIST
#        Value: MAP_LIST
#     Examples:
admin_member_maps		=	$primary_admin_member_map


# Descriptions: dummy
#      History: none
#        Value: MAP
#     Examples: /var/spool/ml/elena/recipients-admin
primary_admin_recipient_map	=	file:$ml_home_dir/recipients-admin


# Descriptions: dummy
#      History: none
#        Value: MAP_LIST
#     Examples: /var/spool/ml/elena/recipients-admin
admin_recipient_maps		=	$primary_admin_recipient_map


# Descriptions: primary password file to authenticate remote administrator 
#               in password auth (detault).
#               fml (CUI,GUI,command mail) modifies this map.
#      History: 4.0's $PASSWD_FILE
#        Value: MAP
#     Examples: /var/spool/ml/elena/etc/passwd
primary_admin_member_password_map = file:$etc_dir/passwd-admin


# Descriptions: all password files.
#               For backward compatibility, etc/passwd is included.
#      History: none
#        Value: MAP_LIST
#     Examples:
admin_member_password_maps	=	$primary_admin_member_password_map
					file:$etc_dir/passwd


=head2 moderator

# Descriptions: primary list of moderators.
#               fml (CUI,GUI,command mail) modifies this map.
#               XXX some map e.g. uni.group is read only
#      History: fml 4.0's $MODERATOR_MEMBER_LIST
#        Value: MAP
#     Examples: /var/spool/ml/elena/members-moderator
primary_moderator_member_map	=	file:$ml_home_dir/members-moderator


# Descriptions: all list of moderator lists.
#      History: $MODERATOR_MEMBER_LIST
#        Value: MAP_LIST
#     Examples: 
moderator_member_maps		=	$primary_moderator_member_map


# Descriptions: dummy
#      History: none
#        Value: MAP
#     Examples: /var/spool/ml/elena/recipients-moderator
primary_moderator_recipient_map	=	file:$ml_home_dir/recipients-moderator


# Descriptions: dummy
#      History: none
#        Value: MAP_LIST
#     Examples: /var/spool/ml/elena/recipients-moderator
moderator_recipient_maps	=	$primary_moderator_recipient_map


=head2 account based ACL

# Descriptions: list of system accounts.
#               Such an account cannot identify the individual.
#               Moreover, it may be a robot program et.al.
#               It may cause mail loop.
#               Hence it is safe to reject such a sender.
#      History: fml 4.0's $REJECT_ADDR
#        Value: REGEXP_LIST
#     Examples: see below
system_special_accounts		=	root
				postmaster
				MAILER-DAEMON
				msgs
				nobody
				news
				majordomo
				listserv
				listproc
				\S+\-help
				\S+\-subscribe
				\S+\-unsubscribe


=head2 reject specific addresses


# Descriptions: list of spammers or addresses to reject.
#      History: $REJECT_ADDR_LIST
#        Value: MAP
#     Examples: pcre:/var/spool/ml/elena/spammer.pcre
primary_spammer_map	=


# Descriptions: list of spammers or addresses to reject.
#      History: $REJECT_ADDR_LIST
#        Value: MAP_LIST
#     Examples: pcre:/var/spool/ml/elena/spammer.pcre
spammer_maps		=	$primary_spammer_map


=head2 LIST ADDRESSES


# Descriptions: addresses fml uses: e.g. elena, elena-ctl
#               libexec/error ignores these addresses.
#      History: none
#        Value: RFC822_ADDRESS_LIST
#     Examples: (elena-ctl@fml.org elena-ctl@fml.org ...)
list_addresses	=	$maintainer
			$article_post_address
			$command_mail_address

# Descriptions:
#      History:
#        Value: RFC822_ADDRESS
#     Examples:
article_post_address	=	$address_for_post


# Descriptions:
#      History:
#        Value: RFC822_ADDRESS
#     Examples:
command_mail_address	=	$address_for_command
