Re: [exim] :blackhole:

On Thu, Mar 10, 2005 at 12:44:21PM -0800, list1@??? wrote:
> Hello list!
>
> I've been testing an exim-courier-mysql setup that was created by
> someone else.
> What is the point of the router below, if all the viruses are being
> rejected during
> acl_smtp_mime and acl_smtp_data anyway?
> Also anything ditched with a router to ":blackhole:" would not get any
> proper notification.
> Would they?

This would be my handywork I take it? :P
(of course, with severa other great contributers :)

The reason vexim has this router, is before viruses and other malware
are *not* rejected in the acl's.

The acl's only add a "warn" header to the email if malware is found.
The acl's don't have the ability to do per-user filtering, so rejecting
mails in the acl's isn't a good idea if different recipients have
different requirements.

In the ditch_malware router (which *is* run once per-recipient) we
decide if mail should be accepted (if no header exists) or rejected (if
the header exists and the user requests such messages be rejected.

Furthermore, messages are backholed, not bounced, because these days
many such mails contain forged sender addresses. You don't want these
people to get bounces for mail they didn't send.