|
ru.unix
- RU.UNIX ----------------------------------------------------------------------
From : Andrey Mosienko 2:5020/400 23 Jun 2004 09:25:44
To : Andrew Kant
Subject : Re: Exim
--------------------------------------------------------------------------------
Andrew Kant wrote:
>
> Hello Alexander!
>
> Tuesday June 22 2004 17:53, Alexander Lunyov wrote to Andrew Kant:
>
> GM>>> P.S. Прошу на всякие маны не ссылаться.
> >> Hу извиняй, но мне кажется, каждый, кто хоть немного админ, не захочет
> >> отдавать первому встречному конфиги, в которых есть довольно секретная
> >> информация.
>
> AL> Да и не в секретности дело, я думаю.
> Hе знаю как тебе, а у меня там прописано с каких хостов можно без авторизации,
> с каких можно релеить, да мало ли что, может быть я сам не понимаю, что там
> есть какой-то хомут, и пока об этом никто не знает - мне как-то спокойней :)
Уморили просто :)
######################################################################
# Runtime configuration file for Exim #
######################################################################
daemon_smtp_port = 25
exim_user = mailnull
exim_group = mail
local_interfaces = 127.0.0.1 : 192.168.1.1
syslog_facility = mail
syslog_processname = exim
hide mysql_servers = "127.0.0.1/base/exim/XXXXXX"
log_file_path = /usr/local/exim/var/log/%s.log
return_size_limit = 6k
smtp_return_error_details = true
smtp_accept_max = 30
trusted_users = apache : daemon : mailnull : news : root : usenet : uucp
av_scanner = clamd:127.0.0.1 3310
tls_certificate = /usr/local/exim/ssl/server.pem
domainlist local_domains = lsearch;/usr/local/exim/etc/local-host-names
domainlist relay_to_domains = lsearch;/usr/local/exim/etc/relay-domains
domainlist uucp_domains = lsearch;/usr/local/exim/etc/uucp-domains
hostlist relay_from_hosts = 127.0.0.1 : localhost : 192.168.1.0/24
hostlist dont_verify_sender = 127.0.0.1 : localhost : 192.168.1.0/24
message_size_limit = 1000M
acl_smtp_rcpt = acl_check_rcpt
acl_smtp_data = acl_smtp_data_d
host_lookup = *
rfc1413_hosts = *
rfc1413_query_timeout = 30s
ignore_bounce_errors_after = 2d
timeout_frozen_after = 7d
tls_advertise_hosts = *
accept_8bitmime
smtp_banner = "Relay.Domain.Ru ESMTP $tod_full"
received_header_text = "Received: ${if def:sender_rcvhost {from
$sender_rcvhost\n }{${if
def:sender_ident {from $sender_ident }}${if def:sender_helo_name
{(helo=$sender_helo_name)\n
}}}}by $primary_hostname ${if def:received_protocol {with $received_protocol}}
${if def:authent
icated_id {auth=$authenticated_id}} ${if def:tls_cipher {($tls_cipher) }}\n
id $message_id$
{if def:received_for {\n for $received_for}}"
hostlist rbl_no_check_hosts = 127.0.0.1 : 192.168.1.0/24
begin acl
accept hosts = :
deny domains = +local_domains
local_parts = ^[.] : ^.*[@%!/|]
deny domains = !+local_domains
local_parts = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
accept local_parts = postmaster
domains = +local_domains
accept recipients = abuse@domain.ru
deny message = host $sender_host_address is listed in \
$dnslist_domain. Contact abuse@domain.ru to discuss our \
junk-mail control policies. $dnslist_text
dnslists = bl.spamcop.net : \
dynablock.wirehub.net : \
dnsbl.njabl.org : \
dul.maps.vix.com : \
dul.ru : \
rbl.maps.vix.com : \
sbl-xbl.spamhaus.org : \
combined.njabl.org : \
dialups.mail-abuse.org : \
blackholes.mail-abuse.org : \
relays.mail-abuse.org : \
relays.ordb.org : \
sbl.spamhaus.org : \
blackholes.easynet.nl : \
cbl.abuseat.org : \
list.dsbl.org : \
opm.blitzed.org : \
work.drbl.caravan.ru : \
work.drbl.sampo.ru : \
work.drbl.host.kz : \
work.drbl.atknet.ru : \
work.drbl.democracy.ru : \
work.drbl.inter.ru : \
work.drbl.novsu.ac.ru : \
work.drbl.bmik.ru : \
work.drbl.trecom.tomsk.ru : \
work.drbl.ttknn.net : \
work.drbl.mokr.ru : \
work.drbl.kaa.ru : \
work.drbl.gremlin.ru : \
work.drbl.senecainfo.us
hosts = ! +rbl_no_check_hosts : ! +relay_from_hosts
accept domains = +local_domains : +uucp_domains
endpass
verify = recipient
accept domains = +relay_to_domains
endpass
verify = recipient
accept hosts = 127.0.0.1 : localhost : +relay_from_hosts
accept authenticated = *
deny message = relay not permitted
acl_check_content:
deny message = This message contains a MIME error ($demime_reason)
demime = *
condition = ${if >{$demime_errorlevel}{2}{1}{0}}
# Reject typically wormish file extensions. There is almost no
# sense in sending such files by email.
deny message = This message contains an unwanted file extension
($found_extension)
demime = scr:vbs:bat:lnk:pif:exe
# Reject virus infested messages.
deny message = This message contains malware ($malware_name)
malware = *
# Reject messages containing "viagra" in all kinds of whitespace/case
combinations
# WARNING: this is an example !
deny message = This message matches a blacklisted regular expression
($regex_match_string)
regex = [Vv] *[Ii] *[Aa] *[Gg] *[Rr] *[Aa]
# Always add X-Spam-Score and X-Spam-Report headers, using SA system-wide
settings
# (user "nobody"), no matter if over threshold or not.
warn message = X-Spam-Score: $spam_score ($spam_bar)
spam = nobody:true
warn message = X-Spam-Report: $spam_report
spam = nobody:true
# Add X-Spam-Flag if spam is over system-wide threshold
warn message = X-Spam-Flag: YES
spam = nobody
# Reject spam messages with score over 10, using an extra condition.
deny message = This message scored $spam_score points. Congratulations!
spam = nobody:true
condition = ${if >{$spam_score_int}{100}{1}{0}}
# finally accept all the rest
accept
acl_smtp_data_d:
deny message = Message rejected: virus found.
malware = *
deny message = $found_extension files are not accepted here
demime = com:vbs:bat:pif:scr:exe
accept
begin routers
dnslookup:
driver = dnslookup
domains = ! +local_domains : ! +uucp_domains
transport = remote_smtp
ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8
no_more
uucphost:
transport = uucp_dom
driver = manualroute
domains = +uucp_domains
route_data = ${lookup{$domain}lsearch{/usr/local/exim/etc/uucp-domains}}
no_more
system_aliases:
driver = redirect
allow_fail
allow_defer
data = ${lookup{$local_part}lsearch{/usr/local/exim/etc/aliases}}
file_transport = address_file
pipe_transport = address_pipe
local_user:
driver = accept
domains = +local_domains
local_parts = ${lookup mysql{SELECT username FROM auth_user WHERE username =
'${quote_mysql
transport = local_maildir_delivery
begin transports
uucp_dom:
driver = pipe
user = mailnull
group = mail
command = /usr/bin/uux - -r ${host}!rmail (${local_part}@${domain})
return_fail_output = true
headers_add = "X-UUCP: to ${host}!rmail on $tod_full"
remote_smtp:
driver = smtp
interface = 192.168.1.1
helo_data = relay.domain.ru
user = mailnull
group = mail
transport_filter = /usr/local/exim/filters/count-mail.pl \
smtp $message_id $sender_address $local_part ${domain} $message_size
\
$received_protocol $tls_cipher $sender_host_address \
${local_part}@${domain} $authenticated_id $header_from \
$header_to $sender_host_name localhost $received_protocol \
$original_local_part $original_domain
local_maildir_delivery:
driver = appendfile
maildir_format = true
create_directory = true
headers_add = "X-Sender: $sender_address by $primary_hostname\n\
X-Actual-Recipient: ${original_local_part}@${original_domain} \
by $primary_hostname"
directory = ${lookup mysql{SELECT concat('/usr/local/courier-imap/var/mail/',
domain, \
'/${quote_mysql:$local_part}') FROM auth_user WHERE status = '1' \
AND username = '${quote_mysql:$local_part}'}{$value}fail}
delivery_date_add
envelope_to_add
return_path_add
user = courier
group = mail
mode = 0660
directory_mode = 0770
transport_filter = /usr/local/exim/filters/count-mail.pl \
courier $message_id $sender_address $local_part ${domain}
$message_size \
$received_protocol $tls_cipher $sender_host_address \
${local_part}@${domain} $authenticated_id $header_from \
$header_to $sender_host_name localhost $received_protocol \
$original_local_part $original_domain
address_pipe:
driver = pipe
return_output
# This transport is used for handling deliveries directly to files that are
# generated by aliasing or forwarding.
address_file:
driver = appendfile
delivery_date_add
envelope_to_add
return_path_add
# This transport is used for handling autoreplies generated by the filtering
# option of the userforward router.
address_reply:
driver = autoreply
begin retry
* * F,2h,15m; G,16h,1h,1.5; F,4d,6h
begin authenticators
plain:
driver = plaintext
public_name = PLAIN
server_condition = ${lookup mysql{SELECT username FROM auth_user \
WHERE concat(username,'@',domain) = '${sg {$2}{'}{}}' \
AND password = ENCRYPT('${quote_mysql:$3}', password) \
AND status = 1;}{yes}{no}}
server_set_id = $2
login:
driver = plaintext
public_name = LOGIN
server_condition = ${lookup mysql{SELECT username FROM auth_user \
WHERE concat(username,'@',domain) = '${sg {$1}{'}{}}' \
AND password = ENCRYPT('${quote_mysql:$2}', password) \
AND status = 1;}{yes}{no}}
server_prompts = "Username:: : Password::"
server_set_id = $1
--
Best regards Andrey Feofilactovich.
--- ifmail v.2.15dev5.3
* Origin: TUES (2:5020/400)
Вернуться к списку тем, сортированных по: возрастание даты уменьшение даты тема автор
| Тема: |
Автор: |
Дата: |
|
Exim |
Andrew Kant |
22 Jun 2004 20:07:39 |
 Re: Exim |
Andrey Mosienko |
23 Jun 2004 09:25:44 |
 Exim |
Andrew Kant |
23 Jun 2004 12:41:24 |
 Re: Exim |
Boris Samorodov |
23 Jun 2004 23:23:03 |
 Re: Exim |
Andrey Mosienko |
24 Jun 2004 10:44:12 |
|
Re: Exim |
Boris Samorodov |
24 Jun 2004 18:34:16 |
|
Exim |
Alexander Lunyov |
23 Jun 2004 16:47:36 |
|
Exim |
Andrew Kant |
24 Jun 2004 13:53:33 |
|
|
