Re: [exim] Blocking names in e-mailaddresses

Pàgina inicial
Delete this message
Reply to this message
Autor: Jens Strohschnitter
Data:  
A: exim-users
Assumpte: Re: [exim] Blocking names in e-mailaddresses
> >> >>> > What should be entered to the /path_to_blacklists/h_from ?
> >> >>> > This should contain a list of names like doctor. For example the mailaddress
> >> >>> >
> >> >>> > "Doctor" blabla@???
> >> >>>
> >> >>> This complete string is not an email address, only the part
> >> >>> "blabla@???" is one. Are you sure, you want to check any part of
> >> >>> header "from:", not only the email address?
> >> >>>
> >> >>> If yes, then don't extract the email address from header, and let
> >> >>> nwildlsearch compare file content against the whole header string:
> >> >>>
> >> >>> set acl_m1 = ${lookup {$h_From:} \
> >> >>>              nwildlsearch{/path_to_blacklists/h_from} }

> >> >>>
> >> >>> > should be blocked. But only if "" contains doctor.
> >> >>> > What do I have to add to the blacklist ?
> >> >>>
> >> >>> doctor : text you want to be reported along with the deny
> >> >>
> >> >> I need the config for 4.20 and 4.30. With 4.20 the command nwildsearch
> >> >> is not supported:
> >> >>
> >> >> unknown lookuptype: "nwildsearch"
> >> >>
> >> >> What should I use for 4.20 ? lsearch only, blocks any incomming mail :-(
> >> >
> >> > Sorry Jens, I entered the EXIM-path with 4.34. I just took a look to the
> >> > main EXIM ftp-server and found EXIM 4.5 - dated Feb 18 2005 - as the
> >> > last version you could get from the server.
> >
> > is there no chance to get it work with 4.20 ? We have running
> > round about 120 linux-servers with exim 4.20. An upgrade is
> > very difficult ;-)
>
> For sure, there is a way! You have to study the documentation supplied
> with your EXIM variant and adapt the ACL to use the lookup type which is
> supported by your EXIM version.
>

Hi

okay. I have upgraded my 4.20 on a testmachine to 4.60. So nwildlsearch
works. But a message via other users than the blocked ones that contained
in my blacklist were also blocked. Any mail I sent to the host, from different
users were blocked.

My exim.conf-entry looks like:
acl_smtp_data = acl_check_data
.
.
.
acl_check_data:

deny    message = $acl_m1 "${address:$h_From:}"
        set acl_m1 = ${lookup {${address:$h_From:}} nwildlsearch{/tmp/blacklist}}
        condition = ${if eq {$acl_m1} {} {no} {yes} }



The log reports:
2006-03-29 17:21:37 1FOcUL-0000tn-KP H=XXXXX (XXXXXX) [1.1.1.1] F=<sender@???> rejected after DATA

The blacklist looks like:
support : Blocked mails from support

So I wanted that a mail from "support" <1234@???> is blocked, also mails like
"support" <5876895678965@???> and so on should be blocked. Any others should
be delivered correctly. What did I wrong ?

--
Regards,

     Jens Strohschnitter


-------------------------------------
*!!!LINUX LINUX LINUX LINUX LINUX!!!*

* http://www.jens-strohschnitter.de *
-------------------------------------
Set the controls for 
         the heart of the sun
-------------------------------------