Re: Re[4]: [gentoo-user] OT - Exim question

[Michael Sullivan <michael@espersunited.com>]

On Thu, 2008-03-13 at 22:29 +0200, Sergey Kobzar wrote:
> Hi Michael,
> 
> Thursday, March 13, 2008, 10:15:33 PM, you wrote:
> 
> > It didn't work:
> 
> > Mar 13 15:13:31 baby exim[26470]: 2008-03-13 15:13:31 unqualified
> > recipient rejected: <amy> H=([192.168.0.2]) [192.168.1.100] (failed to
> > find host name from IP address)
> > baby bind # grep 192.168.1.100 /etc/exim/exim.conf
> > hostlist   relay_from_hosts = 127.0.0.1 : 192.168.1.2 : 192.168.1.3 :
> > 192.168.1.4 : 192.168.0.2 192.168.1.100
> 
> > Is there any other option?
> 
> 1. Show your config.
> 2. Tell Exim to not do resolving for hosts from 192.168.0/24 and
>    192.168.1/24 networks (host_lookup option).
> 
> 
> -- 
> Sergey
> 

Here's the config.  I think I have my sed command correct to remove the
commented lines from the listing:

baby ~ # cat /etc/exim/exim.conf | sed /#/d
domainlist local_domains = @ : espersunited.com :
baby.espersunited.com : localhost : localdomain :
camille.espersunited.com : catherine.espersunited.com : camille :
catherine
domainlist relay_to_domains =
hostlist   relay_from_hosts = 127.0.0.1 : 192.168.1.2 : 192.168.1.3 :
192.168.1.4 : 192.168.0.2 192.168.1.100
acl_smtp_rcpt = acl_check_rcpt
acl_smtp_data = acl_check_data
acl_smtp_mime = acl_check_mime
av_scanner = clamd:/tmp/clamd
spamd_address = 127.0.0.1 783
qualify_domain = espersunited.com
never_users = root
host_lookup = *
rfc1413_hosts = *
rfc1413_query_timeout = 5s
sender_unqualified_hosts = baby.espersunited.com :
camille.espersunited.com : catherine.espersunited.com :
localhost.localdomain
recipient_unqualified_hosts = baby.espersunited.com :
camille.espersunited.com : catherine.espersunited.com :
localhost.localdomain
ignore_bounce_errors_after = 2d
timeout_frozen_after = 7d
begin acl
acl_check_rcpt:
  accept  hosts = :
  deny    message       = Restricted characters in address
         domains       = +local_domains
          local_parts   = ^[.] : ^.*[@%!/|]


  deny    message       = Restricted characters in address
          domains       = !+local_domains
          local_parts   = ^[./|] : ^.*[@%!] : ^.*/\\.\\./


  accept  local_parts   = postmaster
          domains       = +local_domains


  require verify        = sender




  accept  hosts         = +relay_from_hosts
          control       = submission


  accept  authenticated = *
          control       = submission


  require message = relay not permitted
          domains = +local_domains : +relay_to_domains


  require verify = recipient




  accept




acl_check_data:


  



warn    message    = X-SpamScore: $spam_score ($spam_bar)
        spam       = nobody:true
warn    message    = X-SpamReport: $spam_report
        spam       = nobody:true
warn    message    = X-Spam-Flag: ${if \
                     >{$spam_score_int}{58}{Almost Certainly}\
                     {${if >{$spam_score_int}{55}{Probably}\
                     {${if >{$spam_score_int}{50}{Possibly}{Doubtful}\
                     }}}}}
        spam       = nobody
warn message = Subject: [*SPAM*] $h_Subject ${if \
                     >{$spam_score_int}{58}{Almost Certainly}\
		     {${if >{$spam_score_int}{55}{Probably}\
		     {${if >{$spam_score_int}{50}{Possibly}{Doubtful}\
		     }}}}}
	spam       = nobody

deny    message    = Rejected: spam score $spam_score
        spam       = nobody:true
        condition  = ${if >{$spam_score_int}{60}{1}{0}}

accept

acl_check_mime:
   warn decode = default

   deny message = Blacklisted file extension detected
   condition = ${if match \
       {${lc:$mime_filename}} \
       {\N(\.exe|\.pif|\.bat|\.scr|\.lnk|\.com|.vbs)$\N} \
       {1}{0}}

   accept
acl_check_content:
   deny  message = Serious MIME defect detected ($demime_reason)
   demime = *
   condition = ${if >{$demime_errorlevel}{2}{1}{0}}

   deny  message = This message contains malware ($malware_name)
   malware = *

   warn  message = X-Spam-Score: $spam_score ($spam_bar)
   spam = nobody:true
   warn  message = X-Spam-Report: $spam_report
   spam = nobody:true

   warn message = Subject: [*SPAM*] $h_Subject
   spam = nobody

   deny  message = This message scored $spam_score points.
Congratulations!
   spam = nobody:true
   condition = ${if >{$spam_score_int}{50}{1}{0}}

   accept



begin routers





dnslookup:
  driver = dnslookup
  domains = ! +local_domains
  transport = remote_smtp
  ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8
  no_more





system_aliases:
  driver = redirect
  allow_fail
  allow_defer
  data = ${lookup{$local_part}lsearch{/etc/mail/aliases}}
  file_transport = address_file
  pipe_transport = address_pipe







userforward:
  driver = redirect
  check_local_user
  file = $home/.forward
  no_verify
  no_expn
  check_ancestor
  file_transport = address_file
  pipe_transport = address_pipe
  reply_transport = address_reply




localuser:
  driver = accept
  check_local_user
  transport = local_delivery
  cannot_route_message = Unknown user





begin transports



remote_smtp:
  driver = smtp



local_delivery:
  driver = appendfile
  directory = /home/$local_part/.maildir
  maildir_format
  delivery_date_add
  envelope_to_add
  return_path_add



address_pipe:
  driver = pipe
  return_output



address_file:
  driver = appendfile
  delivery_date_add
  envelope_to_add
  return_path_add



address_reply:
  driver = autoreply




begin retry



*                      *           F,2h,15m; G,16h,1h,1.5; F,4d,6h





begin rewrite





begin authenticators










I'm not quite sure how to word the host_lookup option.  I'm not sure how
to tell it not to do host lookups for my network and subnetwork, but
still do lookups for everyone else...

-- 
gentoo-user@lists.gentoo.org mailing list