X-Git-Url: https://git.donarmstrong.com/?a=blobdiff_plain;f=modules%2Fexim%2Ftemplates%2Feximconf.erb;h=366a5cebde515be4665f47c3e1e6513b4f5e03ac;hb=b699a779f1408ee58a7339dc43c454ffa8ea3ae8;hp=5c9f8bb287dfd80af995eccea5cfa3535f996e78;hpb=a576c8137feaea3598c4f70ed7e01953027c386e;p=dsa-puppet.git diff --git a/modules/exim/templates/eximconf.erb b/modules/exim/templates/eximconf.erb index 5c9f8bb2..366a5ceb 100644 --- a/modules/exim/templates/eximconf.erb +++ b/modules/exim/templates/eximconf.erb @@ -123,7 +123,7 @@ localpartlist postmasterish = postmaster : abuse : hostmaster hostlist debianhosts = <; ; 127.0.0.1 ; ::1 ; /var/lib/misc/thishost/debianhosts ; 89.16.166.49 ; 82.195.75.76 ; 2001:41b8:202:deb:bab5:0:52c3:4b4c -hostlist reservedaddrs = <%= scope.lookupvar('site::nodeinfo')['reservedaddrs'] %> +hostlist reservedaddrs = 0.0.0.0/8 : 127.0.0.0/8 : 10.0.0.0/8 : 169.254.0.0/16 : 172.16.0.0/12 : 192.0.0.0/24 : 192.168.0.0/16 : 224.0.0.0/4 : 240.0.0.0/5 : 248.0.0.0/5 <%- if scope.lookupvar('site::nodeinfo')['mailrelay'] -%> # Domains we relay for; that is domains that aren't considered local but we @@ -837,6 +837,7 @@ check_recipient: ${lookup{$local_part}lsearch{/var/lib/misc/$primary_hostname/mail-callout}{$local_part}{}} !hosts = +debianhosts : WHITELIST !verify = sender/callout=90s,maxwait=300s + message = "Sender verification failed: $acl_verify_message" <%- end -%> <%- if scope.lookupvar('site::nodeinfo')['mailrelay'] -%> @@ -1071,21 +1072,17 @@ ipliteral: <%= out = "" if not scope.lookupvar('site::nodeinfo')['smarthost'].empty? -out = ' +out = " smarthost: - debug_print = "R: smarthost for $local_part@$domain" + debug_print = \"R: smarthost for $local_part@$domain\" driver = manualroute domains = !+handled_domains transport = remote_smtp_smarthost - route_list = * ' + scope.lookupvar('site::nodeinfo')['smarthost'] - if scope.lookupvar('site::nodeinfo')['smarthost'] == 'mailout.debian.org' - out += '/MX' - end - out += ' + route_list = * #{scope.lookupvar('site::nodeinfo')['smarthost']} host_find_failed = defer same_domain_copy_routing = yes no_more -' +" end out %>