????
| Current Path : /var/lib/exim4/ |
| Current File : /var/lib/exim4/config.autogenerated |
#########
# WARNING WARNING WARNING
# WARNING WARNING WARNING
# WARNING WARNING WARNING
# WARNING WARNING WARNING
# WARNING WARNING WARNING
# This file was generated dynamically from
# non-split config (/etc/exim4/exim4.conf.localmacros
# and /etc/exim4/exim4.conf.template).
# The config files are supplemented with package installation/configuration
# settings managed by debconf. This data is stored in
# /etc/exim4/update-exim4.conf.conf
# Any changes you make here will be lost.
# See /usr/share/doc/exim4-base/README.Debian.gz and update-exim4.conf(8)
# for instructions of customization.
# WARNING WARNING WARNING
# WARNING WARNING WARNING
# WARNING WARNING WARNING
# WARNING WARNING WARNING
# WARNING WARNING WARNING
#########
SA_SPAMD_USER = debian-spamd
SA_ABUSE_ADDR = The System Administrator
.ifdef SA_ENABLE
spamd_address = /var/run/spamd_socket
.endif
EXIM_PASSWD = /etc/exim4/passwd
EXIM_DOMAINS = /etc/exim4/domains
EXIM_ALIASES = /etc/exim4/aliases
EXIM_DOMAINIPS = /etc/exim4/domainips
tls_advertise_hosts = *
tls_certificate = ${if exists{/etc/exim4/ssl/${tls_sni}.crt}{/etc/exim4/ssl/${tls_sni}.crt}{/etc/exim4/ssl/exim.crt}}
tls_privatekey = ${if exists{/etc/exim4/ssl/${tls_sni}.key}{/etc/exim4/ssl/${tls_sni}.key}{/etc/exim4/ssl/exim.key}}
daemon_smtp_ports = 25 : 465 : 587
tls_on_connect_ports = 465
DKIM_DOMAIN = ${lc:${domain:$h_from:}}
DKIM_FILE = /etc/exim4/dkim/${lc:${domain:$h_from:}}.private
DKIM_PRIVATE_KEY = ${if exists{DKIM_FILE}{DKIM_FILE}{0}}
keep_environment =
log_selector = \
+all_parents \
+lost_incoming_connection \
+received_sender \
+received_recipients \
+tls_cipher +tls_peerdn +tls_sni \
+smtp_confirmation \
+smtp_syntax_error \
+smtp_protocol_error
trusted_groups = fastmail
trusted_users = fastmail
untrusted_set_sender = *
domainlist local_domains = lsearch;EXIM_DOMAINS
hostlist relay_from_hosts = 127.0.0.1
domainlist relay_to_domains = lsearch;EXIM_DOMAINS
exim_user = Debian-exim
exim_group = Debian-exim
never_users = root
host_lookup = *
rfc1413_hosts = *
rfc1413_query_timeout = 0s
ignore_bounce_errors_after = 2d
timeout_frozen_after = 7d
acl_not_smtp = acl_check_not_smtp
acl_smtp_rcpt = acl_check_rcpt
acl_smtp_dkim = acl_check_dkim
acl_smtp_data = acl_check_data
begin acl
acl_check_not_smtp:
accept
acl_check_rcpt:
accept
hosts = :
deny
message = unauthenticated local mail prohibited
!authenticated = *
hosts = !+relay_from_hosts
sender_domains = +local_domains
deny
message = restricted characters in address
domains = +local_domains
local_parts = ^[.] : ^.*[@%!/|]
deny
message = restricted characters in address
domains = !+local_domains
local_parts = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
accept
local_parts = postmaster : abuse
domains = +local_domains
require
message = can't verify sender
verify = sender
accept
hosts = +relay_from_hosts
control = submission/sender_retain
accept
authenticated = *
control = submission/domain=
require
message = relay not permitted
domains = +local_domains : +relay_to_domains
require
message = can't verify recipient
verify = recipient
accept
acl_check_dkim:
warn
dkim_status = fail
add_header = X-DKIM-FAIL: DKIM test failed: (address=$sender_address domain=$dkim_cur_signer), signature is bad.
log_message = DKIM test failed: $dkim_verify_reason
warn
dkim_status = invalid
add_header = :at_start:Authentication-Results: $primary_hostname;\n $dkim_cur_signer ($dkim_verify_status); $dkim_verify_reason
log_message = DKIM test passed (address=$sender_address domain=$dkim_cur_signer), but signature is invalid.
accept
dkim_status = pass
add_header = :at_start:Authentication-Results: $primary_hostname;\n dkim=$dkim_verify_status, header.i=@$dkim_cur_signer
log_message = DKIM test passed (address=$sender_address domain=$dkim_cur_signer), good signature.
accept
acl_check_data:
.ifdef SA_ENABLE
deny
message = spam message detected by Spamassassin with Spam_score: $spam_score
!authenticated = *
hosts = !127.0.0.1/24 : !+relay_from_hosts
condition = ${if < {$message_size}{1024K}}
condition = ${extract{7}{:}{${lookup{$recipients}lsearch{EXIM_PASSWD}}}}
spam = SA_SPAMD_USER
logwrite = This message was detected as SPAM. More information in syslog.
warn
!authenticated = *
hosts = !127.0.0.1/24 : !+relay_from_hosts
condition = ${if < {$message_size}{1024K}}
spam = SA_SPAMD_USER
add_header = X-Spam-Flag: YES
logwrite = This message was detected as SPAM. More information in syslog.
warn
!authenticated = *
hosts = !127.0.0.1/24 : !+relay_from_hosts
condition = ${if < {$message_size}{1024K}}
spam = SA_SPAMD_USER:true
add_header = X-Spam-score: $spam_score\n\
X-Spam-score-int: $spam_score_int\n\
X-Spam-bar: $spam_bar\n\
X-Spam-report: $spam_report
logwrite = From $sender_address to $recipients X-Spam_score: $spam_score.
.endif
accept
begin routers
dnslookup:
driver = dnslookup
domains = ! +local_domains
transport = remote_smtp
ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8
no_more
disabled_domains:
driver = dnslookup
condition = ${extract{3}{:}{${lookup{$domain}lsearch{EXIM_DOMAINS}}}}
transport = remote_smtp
ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8
no_more
disabled_users:
driver = redirect
condition = ${extract{5}{:}{${lookup{$local_part@$domain}lsearch{EXIM_PASSWD}}}}
allow_fail = yes
data = :fail: User disabled
no_more
aliases:
driver = redirect
condition = ${if exists{EXIM_ALIASES} {yes} {no} }
data = ${extract{1}{:}{${lookup{$local_part@$domain}lsearch{EXIM_ALIASES}}}}
redirect_router = dnslookup
pipe_transport = address_pipe
local_spam:
no_verify
driver = accept
transport = local_spamdir
condition = ${if and{ {def:h_X-Spam-Flag:}{eq {$h_X-Spam-Flag:}{YES}} } {yes} {no} }
condition = ${lookup {$local_part@$domain} lsearch {EXIM_PASSWD} {yes} {no} }
local_users:
driver = accept
transport = local_maildir
condition = ${lookup {$local_part@$domain} lsearch {EXIM_PASSWD} {yes} {no} }
catchall_for_domains:
driver = redirect
headers_add = X-redirected: yes
data = ${extract{2}{:}{${lookup{$domain}lsearch{EXIM_DOMAINS}}}}
redirect_router = dnslookup
unknown_users:
driver = redirect
allow_fail = yes
data = :fail: Unknown user
no_more
begin transports
remote_smtp:
driver = smtp
dkim_domain = DKIM_DOMAIN
dkim_selector = dkim
dkim_private_key = DKIM_PRIVATE_KEY
interface = <;${lookup{$sender_address_domain}lsearch{EXIM_DOMAINIPS}}
local_maildir:
driver = appendfile
maildir_format = true
maildir_use_size_file = true
create_directory = true
directory_mode = 700
directory = ${extract{4}{:}{${lookup{$local_part@$domain}lsearch{EXIM_PASSWD}}}}/.maildir
delivery_date_add
envelope_to_add
return_path_add
mode = 0660
quota = ${extract{3}{:}{${lookup{$local_part@$domain}lsearch{EXIM_PASSWD}}}}M
quota_warn_threshold = 75%
use_lockfile = no
no_mode_fail_narrower
user = ${extract{1}{:}{${lookup{$local_part@$domain}lsearch{EXIM_PASSWD}}}}
group = ${extract{2}{:}{${lookup{$local_part@$domain}lsearch{EXIM_PASSWD}}}}
local_spamdir:
driver = appendfile
maildir_format = true
maildir_use_size_file = true
create_directory = true
directory_mode = 700
directory = ${extract{4}{:}{${lookup{$local_part@$domain}lsearch{EXIM_PASSWD}}}}/.maildir/.Junk
delivery_date_add
envelope_to_add
return_path_add
mode = 0660
quota = ${extract{3}{:}{${lookup{$local_part@$domain}lsearch{EXIM_PASSWD}}}}M
quota_warn_threshold = 75%
use_lockfile = no
no_mode_fail_narrower
user = ${extract{1}{:}{${lookup{$local_part@$domain}lsearch{EXIM_PASSWD}}}}
group = ${extract{2}{:}{${lookup{$local_part@$domain}lsearch{EXIM_PASSWD}}}}
address_pipe:
driver = pipe
ignore_status
return_output
use_shell
begin retry
* * F,2h,15m; G,16h,1h,1.5; F,4d,6h
begin rewrite
begin authenticators
dovecot_login:
driver = dovecot
public_name = LOGIN
server_socket = /var/run/dovecot/auth-client
server_set_id = $auth1
dovecot_plain:
driver = dovecot
public_name = PLAIN
server_socket = /var/run/dovecot/auth-client
server_set_id = $auth1