Re: Howto not reject mail to Postmaster etc. in Exim4

[Philipp Weis <pweis@pweis.com>]

On 08 Oct 2003, Kjetil Kjernsmo <kjetil@kjernsmo.net> wrote:
> However, it is my damned duty to read or at least manually inspect the 
> stuff sent to postmaster, abuse, security, etc. So, I should never 
> reject anything sent there, and therefore, it is no point scanning it 
> either; that would only waste resources. 

This is certainly true for postmaster, but I think it would be
RFC-compliant to reject viruses and spam on abuse or security.

> I'm wondering, how do I set up Exim 4 to let through mail to postmaster, 
> etc., uninspected?
> 
> I thought these lines from 
>   accept local_parts = postmaster:abuse:security
>          domains = +local_domains
> from the standard Debian RCTP ACL config was supposed to do that, but it 
> doesn't...

Well, it does. The recipients are accepted here, but the mail is rejected
in the DATA ACL later on. To accept all mail to postmaster regardless of
their content, you have to set a variable in the RCPT ACL, because
local_part is not available in the DATA ACL.

RCPT:
accept local_parts = postmaster
       domains = +local_domains
       set acl_m0 = postmaster

DATA:
accept condition = ${if eq{$acl_m0}{postmaster} {1}{0}}

Now all mail to postmaster passes your filters. Messages with multiple
recipients and postmaster among them pass as well, but that should not be
a problem. See exiscan-acl-examples.txt.gz section 6 for further details
on multiple recipients.

Greetings,

Philipp

--
=====================================================================
Philipp Weis                                   email: pweis@pweis.com
Freiburg, Germany                              web: http://pweis.com/
=====================================================================
GnuPG public key available from pweis.com or keyservers (ID 41D95A4A)
=====================================================================