[exim] Weird domain matching

Hi,

I was testing around with exim4 -d -bh, sending an e-mail from some
@physik.uni-wuerzburg.de address to myself. I coincidentally saw the
following debugging output:

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
> Verifying <...>@physik.uni-wuerzburg.de
> address match: subject=<...>@physik.uni-wuerzburg.de pattern=*@+local_domains
> search_open: mysql "NULL"
> cached open
> search_find: file="NULL"
> key="SELECT DISTINCT full_domain FROM mail_alias WHERE full_domain='peter-thomassen.de'" partial=-1 affix=NULL starflags=0
> LRU list:
> :/etc/exim4/tap
> :/etc/aliases
> End
> internal_search_find: file="NULL"
> type=mysql key="SELECT DISTINCT full_domain FROM mail_alias WHERE full_domain='peter-thomassen.de'"
> cached data used for lookup of SELECT DISTINCT full_domain FROM mail_alias WHERE full_domain='peter-thomassen.de'
> lookup yielded: peter-thomassen.de
> physik.uni-wuerzburg.de in "@:localhost:localhost.a4a.de:a4a.de:mail.a4a.de:mysql;SELECT DISTINCT full_domain FROM mail_alias WHERE full_domain='peter-thomassen.de'"? yes (matched "mysql;SELECT DISTINCT full_domain FROM mail_alias WHERE full_domain='peter-thomassen.de'")
> physik.uni-wuerzburg.de in "+local_domains"? yes (matched "+local_domains")
> <...>physik.uni-wuerzburg.de in "*@+local_domains"? yes (matched "*@+local_domains")

I inserted the <...>.

When verifying the sender <...>@physik.uni-wuerzburg.de, I think this
domain should be injected in the SQL statement, not peter-thomassen.de
(which was the recipients' domain).

The local_domains list is defined as follows:
> MAIN_LOCAL_DOMAINS = @:localhost:localhost.a4a.de:a4a.de:mail.a4a.de:mysql;SELECT DISTINCT full_domain FROM mail_alias WHERE full_domain='${quote_mysql:$domain}'

What's wrong?

Best,
Peter