Re: [exim] Exim run external script

Startseite
Nachricht löschen
Nachricht beantworten
Autor: Jorge
Datum:  
To: exim-users, Jeremy Harris
Betreff: Re: [exim] Exim run external script
OK. Thanks.

And what's your opinion about to use sudo to enable exim to use iptables?

TIA.

Best regards.

Jorge Colaccini

----- Original Message -----
From: "Jeremy Harris" <jgh@???>
To: <exim-users@???>
Sent: Monday, May 16, 2016 6:41 PM
Subject: Re: [exim] Exim run external script


On 16/05/16 22:19, Jorge wrote:
> With your suggest I have found that the problems is due to my script use
> iptables linux command and it is not posible to use it from exim because I
> need root permissions.

[...]
> Can I solve it? Any suggestions


Not directly. It would be too close to being a security hole for an MTA
to provide that sort of facility.

You might want to do something like writing a database entry from exim,
and having a single-purpose daemon polling that DB and constructing
your firewall rules. The additional advantage there is that you can
restore the firewall state on a reboot, and implement policy to
timeout entries.
--
Jeremy


--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/