Re: [Exim] E-mail address SQL problem

Top Page
Delete this message
Reply to this message
Author: Adam H. Pendleton
Date:  
To: Sheldon Hearn
CC: exim-users
Subject: Re: [Exim] E-mail address SQL problem
Sheldon Hearn wrote:

>On (2003/11/20 13:44), Adam H. Pendleton wrote:
>
>
>
>># PgSQL system aliases
>>pgsql_sys_aliases:
>> driver = redirect
>> allow_fail
>> allow_defer
>> data = ${lookup pgsql{SELECT dest FROM email_aliases \
>>           WHERE alias='${local_part}' AND type='system'}}

>>
>>
>
>SQL injection time. :-)
>
>

Don't you mean :-(? :-)

>If the sender address is in a domain that Exim believes is local, Exim
>will (and should) perform whatever lookups necessary to determine
>whether it's a deliverable address in that local domain, assuming sender
>verification is enabled.
>
>

What drives exim's belief that a particular domain is local? This
particular e-mail is spam, and the from address is not from any domain
of mine.

>See the section "More about MySQL and PostgreSQL and Oracle" in the
>spec. You're looking for quote_pgsql. :-)
>
>

Thanks!

>This, incidentally, is one of the reasons you should give serious
>consideration to giving Exim read-only access to your database. :-)
>
>

Darn right!

ahp