mirror of
https://github.com/KumoCorp/kumomta.git
synced 2026-09-06 00:00:51 +00:00
Kevin Vu
c3ed6279d5
Add TLS encryption and username/password authentication support for the KumoProxy SOCKS5 server, with full Lua configuration capabilities. Proxy Server Changes: - Add kumo.start_proxy_listener() Lua function with TLS support - Add proxy_server_auth_rfc1929 event for Lua-based auth validation - Return AuthInfo from auth for ACL system integration - Support optional and required authentication modes - Maintain backwards-compatible legacy CLI mode (--listen, --timeout-seconds) Breaking Changes: - Cache renamed from rfc5321_rustls_config to rustls_client_config Refs: #451 Closes: 459
89 lines
2.1 KiB
Lua
89 lines
2.1 KiB
Lua
-- Policy file for testing mail delivery through a SOCKS5 proxy
|
|
local kumo = require 'kumo'
|
|
package.path = '../../assets/?.lua;' .. package.path
|
|
|
|
local TEST_DIR = os.getenv 'KUMOD_TEST_DIR'
|
|
local SINK_PORT = tonumber(os.getenv 'KUMOD_SMTP_SINK_PORT')
|
|
local PROXY_SERVER = os.getenv 'KUMO_PROXY_SERVER_ADDRESS'
|
|
local PROXY_USERNAME = os.getenv 'KUMO_PROXY_USERNAME'
|
|
local PROXY_PASSWORD = os.getenv 'KUMO_PROXY_PASSWORD'
|
|
|
|
kumo.on('init', function()
|
|
kumo.configure_accounting_db_path(TEST_DIR .. '/accounting.db')
|
|
|
|
kumo.start_esmtp_listener {
|
|
listen = '127.0.0.1:0',
|
|
relay_hosts = { '0.0.0.0/0' },
|
|
}
|
|
|
|
kumo.start_http_listener {
|
|
listen = '127.0.0.1:0',
|
|
}
|
|
|
|
kumo.configure_local_logs {
|
|
log_dir = TEST_DIR .. '/logs',
|
|
max_segment_duration = '1s',
|
|
}
|
|
|
|
kumo.define_spool {
|
|
name = 'data',
|
|
path = TEST_DIR .. '/data-spool',
|
|
}
|
|
|
|
kumo.define_spool {
|
|
name = 'meta',
|
|
path = TEST_DIR .. '/meta-spool',
|
|
}
|
|
end)
|
|
|
|
kumo.on('get_listener_domain', function(domain, listener, conn_meta)
|
|
return kumo.make_listener_domain {
|
|
relay_to = true,
|
|
}
|
|
end)
|
|
|
|
kumo.on('get_queue_config', function(domain, tenant, campaign, routing_domain)
|
|
return kumo.make_queue_config {
|
|
protocol = {
|
|
smtp = {
|
|
mx_list = { 'localhost:' .. SINK_PORT },
|
|
},
|
|
},
|
|
egress_pool = 'proxy_pool',
|
|
}
|
|
end)
|
|
|
|
kumo.on('get_egress_pool', function(pool_name)
|
|
return kumo.make_egress_pool {
|
|
name = pool_name,
|
|
entries = {
|
|
{ name = 'proxy_source' },
|
|
},
|
|
}
|
|
end)
|
|
|
|
kumo.on('get_egress_source', function(source_name)
|
|
local params = {
|
|
name = source_name,
|
|
socks5_proxy_server = PROXY_SERVER,
|
|
socks5_proxy_source_address = '127.0.0.1',
|
|
}
|
|
|
|
-- Add authentication if provided
|
|
if PROXY_USERNAME and PROXY_PASSWORD then
|
|
params.socks5_proxy_username = PROXY_USERNAME
|
|
params.socks5_proxy_password = {
|
|
key_data = PROXY_PASSWORD,
|
|
}
|
|
end
|
|
|
|
return kumo.make_egress_source(params)
|
|
end)
|
|
|
|
kumo.on('get_egress_path_config', function(domain, source_name, _site_name)
|
|
return kumo.make_egress_path {
|
|
enable_tls = 'Disabled',
|
|
prohibited_hosts = {},
|
|
}
|
|
end)
|