I have the following router
xams_forward:
driver = redirect
allow_filter
check_ancestor
user = mail
directory_transport = address_file
no_expn
data = ${lookup mysql{SELECT f.Filter FROM pm_exim_filters f,
pm_domains d, pm_sites s, pm_users u \
WHERE s.ID = d.SiteID AND d.Name = '$domain' AND u.Name =
'$local_part' AND u.ID = f.UserID \
AND u.SiteID = s.ID AND s.SiteState != 'locked_bounce' AND
u.AccountState != 'locked_bounce' \
AND f.Active='true'}{${value}}}
file_transport = address_file
pipe_transport = address_pipe
reply_transport = address_reply
retry_use_local_part
no_verify
router_home_directory = /var/mail/${lookup mysql {SELECT s.Name FROM
pm_domains d, pm_sites s \
WHERE s.ID = d.SiteID AND d.Name = '$domain'}{${value}}}/$local_part
transport_home_directory = /var/mail/${lookup mysql {SELECT s.Name
FROM pm_domains d, pm_sites s \
WHERE s.ID = d.SiteID AND d.Name = '$domain'}{${value}}}/$local_part
And a transport
address_file:
driver = appendfile
check_string =
delivery_date_add
envelope_to_add
group = mail
message_prefix =
message_suffix =
quota = "${lookup mysql{SELECT u.Quota FROM pm_domains d, pm_sites s,
pm_users u WHERE s.ID = d.SiteID AND u.SiteID = s.ID AND u.$
quota_size_regex = S=(\d+):
return_path_add
user = mail
headers_add = "X-Server-powered: by XAMS -
www.xams.org"
create_file = belowhome
And yet a user can use (for instance) save /tmp/something
What am I missing?
