Re: [exim] require verify = sender

--On 22 October 2007 13:26:19 -0400 Jason Keltz <jas@???> wrote:

> Hi.
>
> I'm just wondering -- why does the line:
>
> require verify = sender
>
> .. exist in the default acl_smtp_rcpt
>
> Should this condition not exist in acl_smtp_mail??
>
> (ie. before you check the recipients, you check the sender???)

You can check the sender first, but it's cheaper to check the recipient.
It's impolite to make sender verification callouts if you already have
enough information to reject the email. Some people would prefer you
wouldn't do it at all, but to impose a load on a third parties mail server
when someone's trying to spam a non-existant mailbox is totally unnecessary.

Also, you can't reject the email after MAIL FROM, because the email may be
a query for postmaster, which you're required to accept. Now, you may not
wish to answer questions from people who don't accept bounce messages, but
it is in all our best interests to help each other configure our mail
servers properly.




> I'm trying to build a few accept/deny conditions in the acl_smtp_mail
> ACL ... once exim gets past there, and I accept the sender, but the
> default "require verify = sender" in smtp_rcpt would deny the message...
> everything seems to work if I remove "require verify = sender" from
> acl_smtp_rcpt, but I'm hesitant to remove it because it's not clear to
> me why it's there, and not in acl_smtp_mail in the first place?
>
> Thanks for any help..
>
> Jason.



--
Ian Eiloart
IT Services, University of Sussex
x3148