X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fexim%2Ftemplates%2Feximconf.erb;h=d7648fc010876bba251d48da5a1fa39b96121000;hb=3dcdc1b0fac9a479c63721060d9a1c56a8f1f717;hp=bea1faaab2990ce6160fcaaf0c1b980350e07cbf;hpb=d0c098685b92334a611a0c596a35f538b95ead47;p=mirror%2Fdsa-puppet.git diff --git a/modules/exim/templates/eximconf.erb b/modules/exim/templates/eximconf.erb index bea1faaab..d7648fc01 100644 --- a/modules/exim/templates/eximconf.erb +++ b/modules/exim/templates/eximconf.erb @@ -76,7 +76,7 @@ # MAIN CONFIGURATION SETTINGS # ###################################################################### -<%- if scope.lookupvar('deprecated::nodeinfo').has_key?('heavy_exim') and scope.lookupvar('deprecated::nodeinfo')['heavy_exim'] -%> +<%- if @heavy -%> perl_startup = do '/etc/exim4/exim_surbl.pl' <%- end -%> @@ -87,7 +87,7 @@ acl_smtp_helo = check_helo acl_smtp_rcpt = ${if ={$interface_port}{587} {check_submission}{check_recipient}} acl_smtp_data = check_message -<%- if scope.lookupvar('deprecated::nodeinfo').has_key?('heavy_exim') and scope.lookupvar('deprecated::nodeinfo')['heavy_exim'] -%> +<%- if @heavy -%> acl_smtp_mime = acl_check_mime <%- end -%> acl_smtp_predata = acl_check_predata @@ -174,7 +174,7 @@ timeout_frozen_after=14d message_size_limit = 100M message_logs = false smtp_accept_max_per_host = ${if match_ip {$sender_host_address}{+debianhosts}{0}{7}} -<%- if scope.lookupvar('deprecated::nodeinfo').has_key?('heavy_exim') and scope.lookupvar('deprecated::nodeinfo')['heavy_exim'] -%> +<%- if @heavy -%> smtp_accept_max = 300 smtp_accept_queue = 200 smtp_accept_queue_per_connection = 50 @@ -193,7 +193,7 @@ check_spool_space = 20M delay_warning = -<%- if scope.lookupvar('deprecated::nodeinfo').has_key?('heavy_exim') and scope.lookupvar('deprecated::nodeinfo')['heavy_exim'] -%> +<%- if @heavy -%> message_body_visible = 5000 queue_run_max = 50 deliver_queue_load_max = 50 @@ -229,7 +229,7 @@ if not scope.lookupvar('deprecated::nodeinfo')['mail_port'].to_s.empty? end if @is_mailrelay - ports << scope.lookupvar('deprecated::nodeinfo')['smarthost_port'] + ports << @smarthost_port end out += ports.uniq.sort.join(" : ") @@ -409,7 +409,7 @@ check_helo: accept verify = certificate <%- end -%> -<%- if scope.lookupvar('deprecated::nodeinfo')['smarthost'].empty? -%> +<%- unless @use_smarthost -%> # These are in HELO acl so that they are only run once. They increment a counter, # so we don't want it to increment per rcpt to. @@ -817,7 +817,7 @@ check_recipient: accept local_parts = +postmasterish domains = +virtual_domains : +bsmtp_domains -<%- if scope.lookupvar('deprecated::nodeinfo')['smarthost'].empty? -%> +<%- unless @use_smarthost -%> deny message = host $sender_host_address is listed in $dnslist_domain; see $dnslist_text dnslists = ${if match_domain{$domain}{+virtual_domains}\ {${if exists {${extract{directory}{VDOMAINDATA}{${value}/rbllist}}}\ @@ -837,7 +837,7 @@ check_recipient: domains = +handled_domains !hosts = +debianhosts : WHITELIST -<%- if scope.lookupvar('deprecated::nodeinfo')['smarthost'].empty? -%> +<%- unless @use_smarthost -%> deny domains = +handled_domains local_parts = ${if match_domain{$domain}{+virtual_domains}\ {${if exists {${extract{directory}{VDOMAINDATA}{${value}/callout_users}}}\ @@ -865,7 +865,7 @@ check_recipient: deny message = relay not permitted -<%- if scope.lookupvar('deprecated::nodeinfo').has_key?('heavy_exim') and scope.lookupvar('deprecated::nodeinfo')['heavy_exim'] -%> +<%- if @heavy -%> acl_check_mime: accept verify = certificate @@ -980,7 +980,7 @@ check_message: message = X-malware detected: $malware_name <%- end -%> -<%- if scope.lookupvar('deprecated::nodeinfo').has_key?('heavy_exim') and scope.lookupvar('deprecated::nodeinfo')['heavy_exim'] -%> +<%- if @heavy -%> discard condition = ${if <{$message_size}{256000}} condition = ${if eq {$acl_m_prf}{blackhole}} set acl_m_srb = ${perl{surblspamcheck}} @@ -1083,23 +1083,17 @@ ipliteral: transport = remote_smtp ignore_target_hosts = +reservedaddrs -<%= -out = "" -if not scope.lookupvar('deprecated::nodeinfo')['smarthost'].empty? -out = " +<%- if @use_smarthost -%> smarthost: - debug_print = \"R: smarthost for $local_part@$domain\" + debug_print = "R: smarthost for $local_part@$domain" driver = manualroute domains = !+handled_domains transport = remote_smtp_smarthost - route_list = * #{scope.lookupvar('deprecated::nodeinfo')['smarthost']} + route_list = * <%= @smarthost %> host_find_failed = defer same_domain_copy_routing = yes no_more -" -end -out -%> +<%- end -%> # This router routes to remote hosts over SMTP using a DNS lookup. # Ignore reserved network responses, including localhost. @@ -1577,24 +1571,17 @@ remote_smtp: tls_certificate = /etc/exim4/ssl/thishost.crt tls_privatekey = /etc/exim4/ssl/thishost.key -<%= -out = "" -if not scope.lookupvar('deprecated::nodeinfo')['smarthost'].empty? -out = ' +<%- if @use_smarthost -%> remote_smtp_smarthost: debug_print = "T: remote_smtp_smarthost for $local_part@$domain" driver = smtp delay_after_cutoff = false - port = ' - out += scope.lookupvar('deprecated::nodeinfo')['smarthost_port'].to_s + "\n" - out += ' tls_tempfail_tryclear = false - hosts_require_tls = ' + scope.lookupvar('deprecated::nodeinfo')['smarthost'] + ' + port = <%= @smarthost_port %> + tls_tempfail_tryclear = false + hosts_require_tls = <%= @smarthost %> tls_certificate = /etc/exim4/ssl/thishost.crt tls_privatekey = /etc/exim4/ssl/thishost.key -' -end -out -%> +<%- end -%> # Send the message to procmail procmail_pipe: driver = pipe