#!/usr/bin/perl
use strict;
use warnings;
use Sys::Syslog qw(:DEFAULT setlogsock);
use Geo::IP;

my $gi = Geo::IP->new(GEOIP_STANDARD);

# maps country code to reject (this is just example)
# add more country code you would like to reject
my @geo_map = (
    'US' ,
    'CA'
);

#
# Initalize and open syslog.
#
openlog('postfix/geoIP-reject','pid','mail');
#openlog('postfix/geoIP-reject','pid','local1');

#
# Autoflush standard output.
#
select STDOUT; $|++;

while (<>) {
    chomp;
    if (/^get\s(.+)$/i) {
        my $client_ip = $1;
        my $country_code = $gi->country_code_by_name($client_ip);

        if (defined $country_code)
        {
            if ( !(grep /$country_code/, @geo_map) )
            {
                print "200 REJECT you're from $country_code\n";
                syslog("info","Rejecting: %s", $country_code);
            } else {
                print "200 DUNNO\n";
            }
        } else {
            print "200 DUNNO\n";
        }
        next;
    }
    print "200 DUNNO\n";
}

#!/usr/bin/perl
use strict;
use warnings;
use Switch;
use Sys::Syslog qw(:DEFAULT setlogsock);
use Geo::IP;

my $DEBUG = 0;
my $SENDERS_LIST='/etc/postfix/postfix-geo-policy-senders.txt';
# Add countries
my @geo_map = (
    'US' ,
#    'RU' ,
);

my $gi = Geo::IP->new(GEOIP_STANDARD);
my %attributes;

#
# Initalize and open syslog.
#
openlog('postfix/geoIP-reject','pid','mail');
#openlog('postfix/postfix-geo-policy','pid','local2');

#
# Autoflush standard output.
#
select STDOUT; $|++;
while (<>) {
    chomp;
    my $line = $_;
    $line =~ s/[\r\n]*$//; # this line remove \r\n from end of line if native perl chomp fails
    if ( $line eq '' ) { &policy; next; }
    (my $attr_name, my $attr_value) = split ( "=", $line );
    $attributes{$attr_name} = $attr_value if $attr_value;
}

sub policy {
    my $result;

    # Add load senders list
    my @senders;
    open (IN, "<$SENDERS_LIST");
    while (<IN>) { push @senders, $_; }
    close IN;

    # policy rules
    if ( $attributes{'sender'} && $attributes{'client_address'} ) {
        if ( grep /$attributes{'sender'}/, @senders ) {
        my $country_code = $gi->country_code_by_name($attributes{'client_address'});
            if ( $country_code ) {
        if ( !(grep /$country_code/, @geo_map) ) {
                    $result = "REJECT you're from $country_code";
                syslog("info","REJECT! sender: $attributes{'sender'} IP: $attributes{'client_address'} country: $country_code");
        }
        else {
            syslog("info","OK! sender: $attributes{'sender'} IP: $attributes{'client_address'} country: $country_code");
        }
            }
        }
        else {
            syslog("info","OK! (sender is not in restriction list) addr: $attributes{'sender'} IP: $attributes{'client_address'}");
       }
    }

    # cleanup %attributes
    foreach my $attr_name ( keys %attributes ) {
    syslog("info","$attr_name=$attributes{$attr_name}") if $DEBUG;
    delete($attributes{$attr_name});
    }

    # output result
    if ( $result ) {
    print "action=$result\n\n";
    syslog("info","Rejecting message with $result");
    }
    else {
    syslog("info","OK!!") if $DEBUG;
    print "action=DUNNO\n\n";
    }

}