[exim] Re: Untainting data and Vacation configuration

Top Page
Delete this message
Reply to this message
Author: Jeremy Harris
Date:  
To: exim-users
Subject: [exim] Re: Untainting data and Vacation configuration
On 21/03/2024 07:23, Glenn Gregorec via Exim-users wrote:
> vacationUser:
>   driver = redirect
>   domains                     = ${lookup{${lc:${domain}}}lsearch,ret=key{/usr/local/etc/exim/vacation-domains}}
>   local_parts                 = ${lookup{${lc:${local_part}@${domain}}}lsearch,ret=key{/usr/local/etc/dovecot/users}}
>   file                        = /var/vmail/$domain_data/$local_part_data@$domain_data/.vacation.msg
>   debug_print                 = ROUTER - $router_name for $local_part@$domain - Local_part_data is $local_part_data - Domain_data is $domain_data


Here's your lookup for the "local_parts" option:
>  internal_search_find: file="/usr/local/etc/dovecot/users"
>    type=lsearch key="user@???" opts=NULL
>  cached data used for lookup of user@???
>    in /usr/local/etc/dovecot/users
>  lookup yielded: ENCRYPTED-PASSWORD::::::


The result was "ENCRYPTED-PASSWORD::::::".
a) this does not look anything like the key used for lookup
b) the "opts=NULL" is of concern, suggesting that the actual lookup
    is not the one you show as being the configuration

> user in "user@???"?
>  list element: user@???
> user in "user@???"? no (end of list)
> vacationUser router skipped: local_parts mismatch


You have obfuscated that, so we cannot decode in detail and be certain.
Thanks for making helping you harder.
It is extremely likely that the local_part of the envelope recipient for the
-bt test does not match the list you are giving to the "local_parts" option
of that router.

--
Cheers,
Jeremy


--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@???
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/