Re: [Exim] p0f integration

Página Principal
Apagar esta mensagem
Responder a esta mensagem
Autor: Jeremy Harris
Data:  
Para: exim-users @ exim. org
Assunto: Re: [Exim] p0f integration
Peter Bowyer wrote:
> I wonder how this could be used in Exim and/or Exiscan?


received_header_text = Received: \
         ${if def:sender_rcvhost    {from $sender_rcvhost\n\t} \
         {${if def:sender_ident     {from $sender_ident\n\t}} \
         ${if def:sender_helo_name  {(helo=$sender_helo_name)\n\t}}}} \
         by $primary_hostname \
         ${if def:acl_c6            {sender type \{$acl_c6\}\n\t}} \
         ${if def:received_protocol {with $received_protocol\n\t}} \
         ${if def:tls_cipher        {($tls_cipher)\n\t}} \
         (Exim $version_number)\n\t \
         id $message_id \
         ${if def:received_for      {\n\tfor $received_for}}




acl_id_sender:
   warn          set acl_c6 =    ${perl {connection_details}\
                                {$sender_host_address}{$sender_host_port} \
                         {$interface_address}{$interface_port}}
#               log_message =   sh/p,ih/p \
#                               $sender_host_address $sender_host_port \
#                               $interface_address $interface_port
   warn          log_message =   conn details: \{$acl_c6\}
   accept



acl_check_mail:
   accept        hosts =         +relay_from_hosts
   accept        condition =    ${if or {{def:sender_host_authenticated}\
                                    {eq {$interface_address}{ADDR_3MX}}}\
                                 {yes}{no}}
   accept        acl =           acl_id_sender



We try to avoid leaking information about our clients to the outside
world.

- Jeremy