Re: [exim] Exim run external script

Góra strony
Delete this message
Reply to this message
Autor: Jeremy Harris
Data:  
Dla: exim-users
Temat: Re: [exim] Exim run external script
On 16/05/16 22:19, Jorge wrote:
> With your suggest I have found that the problems is due to my script use
> iptables linux command and it is not posible to use it from exim because I
> need root permissions.

[...]
> Can I solve it? Any suggestions


Not directly. It would be too close to being a security hole for an MTA
to provide that sort of facility.

You might want to do something like writing a database entry from exim,
and having a single-purpose daemon polling that DB and constructing
your firewall rules. The additional advantage there is that you can
restore the firewall state on a reboot, and implement policy to
timeout entries.
--
Jeremy