Re: [Exim] headers_check_syntax, headers_checks_fail, exim V…

Page principale
Supprimer ce message
Répondre à ce message
Auteur: Marc MERLIN
Date:  
À: Alan J. Flavell
CC: Exim users list
Sujet: Re: [Exim] headers_check_syntax, headers_checks_fail, exim V3
On Sun, Jun 16, 2002 at 08:25:59PM +0100, Alan J. Flavell wrote:
> As we learn from previous discussions here, headers_check_syntax is an
> all-or-nothing check, there aren't facilities for excusing some
> recipients &/or senders from the checks.


You need exim 4 for that:


localpartlist nohdrsyncheck = /etc/mail/acls/destwhitelist
localpartlist nohdrfromcallback = /etc/mail/acls/destwhitelist

(...)

acl_check_rcpt:
(...)
  warn     message     = X-WhitelistedRCPT-nohdrsyncheck: Yes
       local_parts     = +nohdrsyncheck


  warn     message     = X-WhitelistedRCPT-nohdrsyncheck: Yes
       local_parts     = postmaster


  warn     message     = X-WhitelistedRCPT-nohdrfromcallback: Yes
       local_parts     = +nohdrfromcallback


  warn     message     = X-WhitelistedRCPT-nohdrfromcallback: Yes
       local_parts     = postmaster
(...)


check_data:

  deny      !verify = header_syntax
         !condition = $header_X-WhitelistedRCPT-nohdrsyncheck:
      #message = Syntax error in the headers of your message. Failed to parse


  deny    hosts = !+localadds:!+host_disable_callback:*
          #sender_domains = !+envdomain_disable_callback:*
         !condition = $header_X-WhitelistedRCPT-nohdrfromcallback:
     !condition = ${lookup{${domain:$header_from:}}lsearch{HDR_DOMAIN_DISABLE_CALLBACK} {yes}{no}}
     !verify = header_sender/callout=90s/check_postmaster
      #message = Header sender couldn't be verified


I also recommend you install this patch to return a real error on header
checks:
http://marc.merlins.org/linux/exim/

Marc
--
"A mouse is a device used to point at the xterm you want to type in" - A.S.R.
Microsoft is to operating systems & security ....
                                      .... what McDonalds is to gourmet cooking
Home page: http://marc.merlins.org/   |   Finger marc_f@??? for PGP key