Author: P Carroll Date: To: Exim Mailing List Subject: Re: [exim] verify = recipient, using virtual domains,
rejects all local recipients
A comparison of the output with "-d -bt" and "-d -bv" seems to point to
the issue.
Everything is essentially the same until the first alias redirect router
is encountered. At the point where the "guts" of the alias redirect
router appears, namely the statement "data = <string to expand>", the
-bt execution expands the string as expected, whereas -bv does
absolutely nothing with it. More precisely:
With -bt, the line:
rda_interpret <the string to expand>
is followed by 15 lines detailing the expansion, ending with:
lookup yielded: <the desired result>
followed by
expanded: <the desired result>
With -bv, the line:
rda_interpret <the string to expand>
is immediately followed on the next line with
expanded: <nothing, zilch, nil, nada>
followed a few lines later by "router declined"
The remaining aliases routers all behave in exactly the same way. No
string expansions. Given that these string expansions are the essence of
the alias lookup process, I don't see how verification can work. Unless
I am missing a magic option that forces verify to actually perform the
requested search. (at least once)
On 10/28/2014 11:29 AM, Phillip Carroll wrote: > On 10/28/2014 10:12 AM, Chris Siebenmann wrote:
>> Although this may be peripheral, exim -bh should absolutely test ACLs
>> in normal use. If it doesn't for you, something may be up with your
>> specific ACLs; for example if they're conditional on the server port
>> or IP connected to you may need to set that with -oMi <IP>.<PORT>.
>
> That doesn't appear to be the issue. (I posted my ACL and routers a
> bit earlier) However, I don't think I was using -bv with the address
> before.
>
> Short story: In verify mode, all alias routers are declined.
> Laundered -bh result:
>
> # exim -v -bh 134.170.185.46 -bv good-user@mydomain
> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
> routing good-user@mydomain
> mydomain in "@ : localhost : localhost.localdomain:
> lsearch;/etc/virtual/domains"? yes (matched "@")
> mydomain in "! +local_domains"? no (matched "! +local_domains")
> calling virtual_aliases_nostar router
> virtual_aliases_nostar router declined for good-user@mydomain
> calling virtual_aliases router
> virtual_aliases router declined for ...<address>
> calling system_aliases router
> system_aliases router declined for ...<address>
> no more routers
> <address> failed to verify: Unknown user good-user
>
>
