On 12/11/2012 09:49 PM, Mike Ridgers wrote:
> 1. Does adding the 'warn control = dkim_disable_verify' under the 'acl_check_rcpt:' line negate the need to have 'control = dkim_disable_verify' stated separately against each 'accept' in the ACL below it as below ?
Yes. They won't have any bad effect, but you could lose them.
> 2. From the config below can anyone see if I'm still vulnerable to this very serious vulnerability - I have many critical servers running Exim & am very concerned that they are vulnerable.
>
> --------------------------------
> acl_check_rcpt:
> warn control = dkim_disable_verify
You're fine.
--
Jeremy
