Re: [exim] "drop" verb and logging ..

Top Page
Delete this message
Reply to this message
Author: Philip Hazel
Date:  
To: Odhiambo G. Washington
CC: exim-users
Subject: Re: [exim] "drop" verb and logging ..
On Wed, 26 Jan 2005, Odhiambo G. Washington wrote:

> I am running Exim-4.43 here, but I am missing the point in one of
> my ACL rules.
>
> In acl_smtp_connect I have a rule that:
>
> drop dnslists = list1 : list2
>      message  = blah .. blah

>
> Now my thinking is that the message should not print on my mainlog!


Sadly, your thinking is off-course. There is no way to suppress the
logging of an access denial. Interesting that this is the second time
this week that I have typed that sentence. Why are people suddenly
wanting not to log denial incidents?

> Having looked at all the options of the log_selector, I seem not to
> find which one enabled/suppresses this kind of message. Which one is it?


I never thought that people want not to log denial incidents. "My host
tried to send a message to yours, but you blocked it." "There is no
record of that on my logs." Hmm.

What actually happens is documented:

If "log_message" is not present and there is no underlying error message
(for example, from the failure of address verification), but "message" is
present, the "message" text is used for logging rejections. However, if any
text for logging contains newlines, only the first line is logged. In the
absence of both "log_message" and "message", a default built-in message is
used for logging rejections.

-- 
Philip Hazel            University of Cambridge Computing Service,
ph10@???      Cambridge, England. Phone: +44 1223 334714.
Get the Exim 4 book:    http://www.uit.co.uk/exim-book