HSL

From Halon Security

Jump to: navigation, search

Halon Scripting Language is the core component in the mail security (SPG/VSP-series) for configuration of mail and access control flows. The language can be split into four different components: core, Mail Recipient, Mail Content, Mail Transport and IP Policy. The core consists of function that are shared between all the others, and can be executed in any context. You can think of Mail Recipient, Mail Content, Mail Transport, etc as language extensions since they both add a few predefined variables and function that can be used in each one of the implementations.

Contents

Learning Halon Scripting Language

In order to master the HSL you need to know the core component of the language. This includes the syntax, control structures, data types and core functions. This reference guide assumes you have some basic knowledge on computer programming.

Core Component

IP Policy Extension

The IP Policy variables and functions are only available when creating a IP Policy Flow. It operates on IP packets, and have thus only functions like Block() and Allow(). In order to produce meaningful scripts/flows, network functions from the core component can be used, such as in_network(), dns() or globalview(). The scripts are processed by ippolicyd.

Mail Extensions

The Authentication and Recipient flows are very much alike (and both part of the process mailpolicyd) but are processed in two different steps (EHLO/AUTH vs. MAIL FROM/RCPT TO). The Mail Content Flow is issued when the entire e-mail is received (DATA), and processed by the mailscanner process. The Mail Transport Flow is issued when the outgoing SMTP transport fails to deliver a message; as a last resort. It's processed in the outgoing queue transport process; queueprocessord.

Mail Authentication Flow

Mail Recipient Flow

Mail Content Extension

Mail Transport Extension

Personal tools