Re: [exim] trusted_users not working?

On 2013-03-19 at 18:21 -0700, Todd Lyons wrote:
> On Mon, Mar 18, 2013 at 11:39 PM, Agata <chogata@???> wrote:
> > 2) The line "trusted_users = www" was already in my configure file when I
> > noticed the problem. I tried to move this line up a bit, hoping it was the
> > issue of order. Didn't help.
> > 3) Yes, I DID remember to restar exim every time I made a change in
> > config...
>
> exim -bV
>
> Make sure that the file it says it is reading is the same one you are
> editing, or that it is being auto-generated from the template you are
> editing (I don't know how FreeBSD's configs work, but I'm hedging).

FreeBSD supplies a .default variant for CONFIG_FILE_PATH, which defaults
to /usr/local/etc/exim/configure. If that file doesn't already exist,
the .default will be copied into place, I think.

The .default is pretty much the configure file provided by Exim, with a
patch applied and some lines being subject to sed replacement at
software build time, so that any defaults are appropriate for Exim as
built. Eg, "user = exim" gets patched to "user = XX_EXIM_USER_XX" which
is then replaced by the sed.

Patching is pretty light.

As to the trusted_users issue: I'd check to see if the websites are
running in a Jail with a different install of Exim, else double-check
that the config file being edited matches the one from "exim -bV" as you
suggest, Todd.

HOWEVER: I would not use trusted_users, as that grants way too much
power, as then the "www" user can mess with trace data about where the
message was received from.

Instead, just set "untrusted_set_sender" and have done with it.

-Phil