On Fri, 28 Feb 2003, Jamie Nudds wrote:
> Hi
>
> I got help with this a few months back, it will allow certain domains
> through even though they fail the sender verify
This one will waste ressources
> deny !verify = sender/callout,defer_ok
> !domains = allow.com : domain-allow.com
it's better to do
deny !domains = allow.com : domain-allow.com
!verify = sender/callout,defer_ok
because exim uses short-circuit-evaluation, so with this one the callout
will only be started for domains NOT listed in the first statement.
Nico