Re: [Exim] Domain-wide ACL's or Filtering Exim 4

Top Page
Delete this message
Reply to this message
Author: Philip Hazel
Date:  
To: Matthew Byng-Maddick
CC: exim-users
Subject: Re: [Exim] Domain-wide ACL's or Filtering Exim 4
On Sun, 11 Aug 2002, Matthew Byng-Maddick wrote:

> On Sun, Aug 11, 2002 at 01:48:14PM -0700, Jason Edwards wrote:
> > I'm considering converting to Exim 4, and one of the
> > things that I would find terribly useful is if the
> > ACLs could be customized per domain.
>
> Yes, all the ACL delegations are expansion items, as specified in S37.5
> http://www.exim.org/exim-html-4.00/doc/html/spec_37.html#IX1641


To give an example of exactly what you want:

# In the main section of the config

acl_smtp_rcpt = check_rcpt

# In the ACL section

check_rcpt:
  accept    acl = ${lookup{$domain}cdb{/some/cdb/file}{$value}{default_rcpt_acl}}


default_rcpt_acl:
....


The lookup could either return the name of an in-line ACL, or it could
actually return the complete text of an ACL. The latter would be less
efficient as it would have to be parsed each time, but this is probably
pretty marginal.

--
Philip Hazel            University of Cambridge Computing Service,
ph10@???      Cambridge, England. Phone: +44 1223 334714.