Re: [exim] spf lookup requires untained values / detaint a h…

On 08.03.22 12:35, Jeremy Harris via Exim-users wrote:
> On 08/03/2022 11:18, Peter Wullinger via Exim-users wrote:
>> Is there a way to make this work besides a custom lookup, e.g. a
>> local daemon that just echos back the address once validating it is a
>> properly
>> formatted IP address?
>
> A file with the list of acceptable IP addresses (or CIDRs)
> and an iplsearch with ret=key.

Thanks, that works perfectly and even comes with an option to only trust
the header for specific networks if needed:

${lookup \
{${address:$h_from:}} \
spf \
|{${lookup {$h_||X-Original-Remote-Addr:} iplsearch,ret=key {/etc/exim/hosts/all}}} \ } |