On Tue, 2 Jan 2001, Marc Haber wrote:
> Will a domain_list specification allow to specify a regexp?
Yes.
> |Up to 32 `private' domain lists can be defined.
>
> Please make this a macro to increase at compile time.
Several people have objected. I specified 32 so that I could use a bit
mask to remember whether a particular list had been matched or not, for
efficient re-testing while routing an address.
Are people really going to use more than 32 of these? Or is this just a
knee-jerk "don't set hard limits" reaction? I thought half a dozen might
be what people actually used, so I was planning on implementing using a
simple linear list. If 32 is too small, then I will have to use a more
efficient way of storing them.
> But probably changing this into a small, control process
> running as root and doing work in non-setuid binaries that are only
> invoked with user privileges would be too big a change.
And it would introduce a bottleneck - the "small control process". One
of the reasons for Exim's efficiency is the fact that it does not push
everything through a single central process (also a single point of
failure).
> Please keep never_users, I feel comfortable to feel sure that even the
> most blatant misconfiguration doesn't cause exim to touch mail spool
> as root as long as root is in "there".
Several people have said this. I'm happy to leave it if people like it.
> local_domains_include_host_literals is a security message making sure
> that - for example - ORBS open relay warnings get though in any case.
> I once had my main smarthost in ORBS for two weeks before noticing
> because my exim rejected the warning sent to postmaster@[IP]. Forcing
> users to explicitly list the literal in local_domains (which will BTW
> be history in exim 4 ;), but I know what you want to say) makes using
> the same config file for multiple hosts harder.
Good point. Maybe there should be something like @ to mean "this host's
literals".
> Do you already have the ISBN for your exim book so I can place a
> pre-order asap?
I'm afraid not.
--
Philip Hazel University of Cambridge Computing Service,
ph10@??? Cambridge, England. Phone: +44 1223 334714.
