From: Adam D. Barratt <adam@adam-barratt.org.uk>
Date: Thu, 26 Sep 2019 17:07:17 +0000 (+0100)
Subject: eximconf: make NDRs contain only headers, not bodies
X-Git-Url: https://git.adam-barratt.org.uk/?p=mirror%2Fdsa-puppet.git;a=commitdiff_plain;h=175ef8fcbac0bb16b5e97e9c335ad0fd9f5635bc

eximconf: make NDRs contain only headers, not bodies

This helps avoid us being used as a potential part of redirected
"bounce spam".

Signed-off-by: Adam D. Barratt <adam@adam-barratt.org.uk>
---

diff --git a/modules/exim/templates/eximconf.erb b/modules/exim/templates/eximconf.erb
index 9768f25fa..5d0f03abf 100644
--- a/modules/exim/templates/eximconf.erb
+++ b/modules/exim/templates/eximconf.erb
@@ -176,6 +176,13 @@ local_from_check = false
 gecos_pattern = ^([^,:]*)
 gecos_name = $1
 
+# Do *not* include the body of the original message in a bounce
+# The combinaton of bounce_return_message and bounce_return_body
+# allows us to return only the headers within a bounce
+
+bounce_return_message = true
+bounce_return_body    = false
+
 # This tells Exim to immediately discard error messages (ie double bounces).
 ignore_bounce_errors_after = 0s
 auto_thaw = 1d