From: Adam D. Barratt <adam@adam-barratt.org.uk>
Date: Mon, 14 Oct 2019 21:19:42 +0000 (+0100)
Subject: eximconf: reject bounces to "neversender" addresses
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=e9b0dc298740c07aff9b54bb93d40c453a9c23b7;p=mirror%2Fdsa-puppet.git

eximconf: reject bounces to "neversender" addresses

If an address never originates mail then there is no reason for it to be
receiving NDRs

Signed-off-by: Adam D. Barratt <adam@adam-barratt.org.uk>
---

diff --git a/modules/exim/templates/eximconf.erb b/modules/exim/templates/eximconf.erb
index 0cd231b82..6b055f9f1 100644
--- a/modules/exim/templates/eximconf.erb
+++ b/modules/exim/templates/eximconf.erb
@@ -700,6 +700,12 @@ check_recipient:
           condition     = ${lookup{$sender_address_local_part}lsearch{${extract{directory}{VSENDERDOMAINDATA}{${value}/neversenders}}}{true}}
 	  message       = no mail should ever come from <$sender_address>
 
+  deny    domains       = +virtual_domains
+          senders       = :
+          condition     = ${if exists {${extract{directory}{VDOMAINDATA}{${value}/neversenders}}}}
+          condition     = ${lookup{$local_part}lsearch{${extract{directory}{VDOMAINDATA}{${value}/neversenders}}}{true}}
+          message       = <$local_part@$domain> does not send mail; rejecting bogus NDR
+
   warn    condition     = ${if eq{$acl_m_prf}{localonly}}
           set acl_m_lrc = ${if eq{$acl_m_lrc}{}{$local_part@$domain}{$acl_m_lrc, $local_part@$domain}}