>(I already do sender verification of 
> incoming mail, but that
> doesn't catch fakes of real addresses), which then in turn stay in the 
> queue for ages until
> they generate a bounce or bounce immediatly on a 550.

Try this (with caution) in your RCPT-ACL:
      require verify        = sender/callout=1m,random
This may ease your business. But first read the manual and make sure you
catch Exims callout mechanism. Watch out for undesired side effects!

> What I would like to achieve is that every mail _from_ [EMAIL PROTECTED], 
> which passes through
> exim, will be accepted - but every mail _to_ [EMAIL PROTECTED] should be 
> dropped/denied, no
> matter if it is an incoming mail or a bounce of an outgoing mail.

Superfluous rfc violation. Please see below.

> Something like
> 
>   deny    message       = Go away
>           domains       = +relay_to_domains
>           local_parts   = valert
> 
> but this catches both from: and to: local parts. Is there any option to 
> make it true

Try this (not tested):

deny   message       = Go away
       domains       = +relay_to_domains
       recipients    = [EMAIL PROTECTED]

> only for to: addresses in a way that it works with bounces too? As far as 
> it seems,
> exim does not check the ACLs for bounces at all, is that true?

Exim can check for the null sender by setting the senders 
condition to ":" .

Example (not tested):

deny   message       = Go away
       senders       = :
       domains       = +relay_to_domains
       recipients    = [EMAIL PROTECTED]

        
Remember: Such a setup can implicate a registration on a rfc-ignorant
blacklist or something else. This is superfluous, unless the management
want it so ;-). 
I think, in your case it would be better to route the corresponding
bounces simply to /dev/null instead of rejecting them.

------ Example (not tested, only from mind!) -------

#
# Place something like this in your router section.
# Determine the right position in your config file
# (may be near at the top of your router section). 
#
route_valert_to_devnull:  
   condition =  ${if and { {eq [EMAIL PROTECTED]@abit.de}}\
                           {eq {$sender_address}{}}\
                         }\
                 }
   driver = accept
   domains = abit.de
   transport = devnull

#
# If inexistent, define a devnull transport in your transport section.
#
devnull:
   driver = appendfile
   file = /dev/null



AGAIN: I didn't test the recommended settings. Act with caution if you 
       define null routes. You can lost mail!

- oliver


-- 
## List details at http://www.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/

Reply via email to