Features - sandromello/themis-py GitHub Wiki

Features are useful to activate and desactivate behaviors of themis, this save resources for unnecessary features on your environment. The milter by default uses features from the file config.yaml, usualy located in /etc/themis/config.yaml. It's possible to load the features dinamically in redis, you could use the command line tool to achieve the desired behavior:

tmscli -a --features global

This command configure all the features to the redis, so every time the milter runs it will ignore the file config.yaml and use the redis configuration.

Features - description

  • learnFeature Predict the rate of sent messages (unstable)
  • featuresByServerPool Every behavior is separated in a different namespace, it will create a new namespace for every key created for rate limiting.
  • learnOnlyOnce Under development - N/A
  • messagesBySecFeature Monitor the global incoming connections of the milter
  • subjectReputationIncreaseMinutes Under development - N/A
  • global_ttl How long a metadata key will be present in redis server, time to expire of the keys in seconds.
  • subjectReputationHitValue Under development - N/A
  • ipReputationDecreaseValue Under development - N/A
  • spfStrictRejectFeature If this feature is turned on, the milter action will be executed if the result of spf check is 'softfail', 'fail', 'neutral', '' or 'none', otherwise it will be triggered only if 'fail' is found.
  • global_conditions The conditions to rate limit a object globally, by default the JailSpec of a policy is NULL, so it will use this value to rate limit objects
  • ipReputationHitValue Under development - N/A
  • messagesBySecStoreDays How long keep the statics of feature messagesBySecFeature
  • ipReputationIncreaseMinutes Under development - N/A
  • policiesByServerPoolFeature Disable or enable pool policies
  • rateReputationFeature Under development - N/A
  • subjectReputationDecreaseValue Under development - N/A
  • learnEscalationValue Under development - N/A
  • global_custom_block Instead of using the block of the policy, set a new custom block time
  • global_namespace The namespace used to store dinamic keys
  • feederFeaturesEnabled Control the activation of features: ipReputationFeature, subjectReputationFeature and countSentMessagesFeature
  • rateReputationIncreaseMinutes Under development - N/A
  • learnPredictSafeValue Under development - N/A
  • subjectReputationFeature Increase a counter for each time the subject is repeated for a given object
  • learnBlockMinutes Under development - N/A
  • ipReputationFeature Increase a counter for each different ip found in the given object
  • learnTimeFrameValue Under development - N/A
  • rateReputationDecreaseValue Under development - N/A
  • rateReputationBlockHitValue Under development - N/A