[exim-dev] [Bug 1012] New: sender_domains sometimes does not…

トップ ページ
このメッセージを削除
このメッセージに返信
著者: Axel Rau
日付:  
To: exim-dev
題目: [exim-dev] [Bug 1012] New: sender_domains sometimes does not test domain of sender's address
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://bugs.exim.org/show_bug.cgi?id=1012
           Summary: sender_domains sometimes does not test domain of
                    sender's address
           Product: Exim
           Version: 4.73
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: bug
          Priority: high
         Component: ACLs
        AssignedTo: nigel@???
        ReportedBy: axel.rau@???
                CC: exim-dev@???



In the following acl_smtp_mail, sender_domains usually works as expected:
--
 deny message           = "We don't like spoofed sender addresses"
        log_message     = $sender_host_name [$sender_host_address] attempts to  
spoof local sender
        sender_domains  = +local_domains
        hosts           = !+own_outgoing_relay_hosts
        delay           = 3m


  accept
--
The definition of +local_domains is:
--
domainlist local_domains      = \
        ${lookup pgsql {SELECT name FROM localdomain \
        WHERE name ='${lc:$domain}' }}
--
I traced an example where the ACL condition "sender_domains"  
does not test the domain part of the sender address but the domain  
part/fqdn of the sending relay (client), "localhost" in the following  
example (look at the WHERE clause of the SELECT):
--------------------------
72219 HELO verification failed but host is in helo_try_verify_hosts
72219 SMTP>> 250 mx4.lrau.net Hello localhost [222.252.137.104]
72219 SMTP<< MAIL FROM: <axel.rau.news@???>
72219 spool directory space = 581621868K inodes = 122205500  
check_space = 102400K inodes = 0 msg_size = 0
72219 using ACL "acl_check_mail"
72219 processing "warn"
72219 check logwrite = DM: $sender_address_domain
72219                = DM: chaos1.de
72219 LOG: MAIN
72219   DM: chaos1.de
72219 warn: condition test succeeded
72219 processing "deny"
72219 check sender_domains = +local_domains
72219 search_open: pgsql "NULL"
72219 search_find: file="NULL"
72219   key="SELECT name FROM localdomain WHERE name ='localhost' "  
partial=-1 affix=NULL starflags=0
72219 LRU list:
72219 internal_search_find: file="NULL"
72219   type=pgsql key="SELECT name FROM localdomain WHERE name  
='localhost' "
72219 database lookup required for SELECT name FROM localdomain WHERE  
name ='localhost'
72219 PostgreSQL query: SELECT name FROM localdomain WHERE name  
='localhost'
72219 PGSQL new connection: host=xyz port= database=operations user=abc
72219 PGSQL: no data found
72219 lookup failed
72219 chaos1.de in ""? no (end of list)
72219 chaos1.de in "+local_domains"? no (end of list)
72219 deny: condition test failed
72219 processing "accept"
72219 accept: condition test succeeded
72219 SMTP>> 250 OK
72219 SMTP<< RCPT TO: <axel.rau.news@???>
--------------------------


Axel


--
Configure bugmail: http://bugs.exim.org/userprefs.cgi?tab=email