Re: [exim] DCC ACL patch

Etusivu
Poista viesti
Vastaa
Lähettäjä: Wolfgang Breyha
Päiväys:  
Vastaanottaja: Physicman
Kopio: exim-users
Aihe: Re: [exim] DCC ACL patch
Physicman wrote, on 16.01.2008 13:40:
> Wow! Great job!
> You've done what I've always been too lazy to do, thanks! :)


;-) It's a pleasure that it's usefull for others, too:)

> I'm not too sure how you actually use it as I had some trouble
> replacing the local_scan by an ACL.


I use DCC for both counting and greylisting. dccifd (-Gon) returns the
greylisting results.

The DATA ACL starts with
   warn    dcc         = *
           set acl_m6  = yes


acl_m6 is combined with several triggers like RBL entries or exim checks later
to do selective greylisting. eg:

   defer   condition   = $acl_m6
           hosts       = ! +system_hosts
           !verify     = reverse_host_lookup


That's why i defined dcc_result first and never implemented it finally;-)

> Therefore, I rewrote a bit your patch (basically removed everything
> related to rebuilding the recipients list and I also added return
> values for dcc_result which weren't set apparently), so that I can now
> have an ACL like this:


Wasn't that part commented already? But yes, my patch is very close to my
needs here currently.

One "special feature" i didn't mention in the readme is the
dcc_direct_header_add = yes

If you use spamd within DATA ACL and call dcc before, you can set this to add 
the X-DCC-Header "in deep" to the spool file. In this way spamd already sees 
the header (what's not the case if add_header was used) and simple matching 
rules can be used instead of the full SpamAssassin DCC module. eg:
header __XXDCC_HIGH_BODY       X-DCC-xx-Metrics =~ /^.*Body=\d{6,}\s+Fuz.*$/
header __XXDCC_HIGH_FUZ1       X-DCC-xx-Metrics =~ /^.*Fuz1=\d{6,}\s+Fuz.*$/
header __XXDCC_HIGH_FUZ2       X-DCC-xx-Metrics =~ /^.*Fuz2=\d{6,}$/


This also prevents double counts etc....

>   warn    dcc           = *
>           add_header    = $dcc_header

>
>   deny    message       = Rejected by DCC
>           condition     = ${if eq{$dcc_result}{R}{1}{0}}

>
> I haven't tested it for long yet but so far it seems to be working fine.
>
> Attached is a patch for your patched exim ;)
> A full diff against a vanilla 4.69 can be found at


Fine! I'll try to get the patch and documentation reworked again on weekend
and send it to Tom Kistner for CVS inclusion. The main reason why I released
the patch mostly "as is" was that I wanted to wait for feedback first.

Greetings,
Wolfgang
--
Wolfgang Breyha <wbreyha@???> | http://www.blafasel.at/
Vienna University Computer Center | Austria