projects
/
mirror
/
dsa-puppet.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
eximconf: re-do "enable greylisting for users with default options"
[mirror/dsa-puppet.git]
/
modules
/
exim
/
templates
/
eximconf.erb
diff --git
a/modules/exim/templates/eximconf.erb
b/modules/exim/templates/eximconf.erb
index
bb7c756
..
d65b3c2
100644
(file)
--- a/
modules/exim/templates/eximconf.erb
+++ b/
modules/exim/templates/eximconf.erb
@@
-601,6
+601,13
@@
check_recipient:
message = Different profile, please retry
log_message = Only one profile at a time, please
message = Different profile, please retry
log_message = Only one profile at a time, please
+ # Set a flag to indicate whether the current recipient
+ # has explicitly requested greylisting
+ warn set acl_m_grey_recip = 0
+
+ warn local_parts = GREYLIST_LOCAL_PARTS
+ set acl_m_grey_recip = 1
+
# Defer after too many bad RCPT TO's. Legit MTAs will retry later.
# This is a rough pass at preventing address harvesting or other mail blasts.
# Defer after too many bad RCPT TO's. Legit MTAs will retry later.
# This is a rough pass at preventing address harvesting or other mail blasts.
@@
-782,10
+789,10
@@
check_recipient:
message = $sender_host_address is not yet authorized to deliver mail from <$sender_address> to <$local_part@$domain>.
log_message = greylisted.
condition = ${if or { \
message = $sender_host_address is not yet authorized to deliver mail from <$sender_address> to <$local_part@$domain>.
log_message = greylisted.
condition = ${if or { \
- {
match_local_part{$local_part}{GREYLIST_LOCAL_PARTS
}} \
- {
HAS_DEFAULT_OPTIONS
} \
+ {
eq{$acl_m_grey_recip}{1
}} \
+ {
bool_lax{HAS_DEFAULT_OPTIONS}
} \
} \
} \
- }
+
}
!senders = :
!hosts = : +debianhosts : WHITELIST : \
${if exists {/etc/greylistd/whitelist-hosts}\
!senders = :
!hosts = : +debianhosts : WHITELIST : \
${if exists {/etc/greylistd/whitelist-hosts}\
@@
-820,10
+827,10
@@
check_recipient:
!authenticated = *
domains = +handled_domains
condition = ${if or { \
!authenticated = *
domains = +handled_domains
condition = ${if or { \
- {
match_local_part{$local_part}{GREYLIST_LOCAL_PARTS
}} \
- {
HAS_DEFAULT_OPTIONS
} \
+ {
eq{$acl_m_grey_recip}{1
}} \
+ {
bool_lax{HAS_DEFAULT_OPTIONS}
} \
} \
} \
- }
+
}
set acl_m_pgr = request=smtpd_access_policy\n\
protocol_state=RCPT\n\
protocol_name=${uc:$received_protocol}\n\
set acl_m_pgr = request=smtpd_access_policy\n\
protocol_state=RCPT\n\
protocol_name=${uc:$received_protocol}\n\
@@
-849,10
+856,10
@@
check_recipient:
!authenticated = *
domains = +handled_domains
condition = ${if or { \
!authenticated = *
domains = +handled_domains
condition = ${if or { \
- {
match_local_part{$local_part}{GREYLIST_LOCAL_PARTS
}} \
- {
HAS_DEFAULT_OPTIONS
} \
+ {
eq{$acl_m_grey_recip}{1
}} \
+ {
bool_lax{HAS_DEFAULT_OPTIONS}
} \
} \
} \
- }
+
}
condition = ${if eq{${uc:${substr_0_7:$acl_m_pgr}}}{PREPEND}}
message = ${sg{$acl_m_pgr}{\N^\w+\s*\N}{}}
condition = ${if eq{${uc:${substr_0_7:$acl_m_pgr}}}{PREPEND}}
message = ${sg{$acl_m_pgr}{\N^\w+\s*\N}{}}