Brian Candler wrote:
4. Set up my filter router with directory_transport pointing to a
dedicated router, which refuses to deliver if the directory contains
.. or is not underneath $home. That would allow me to remove
forbid_file and enable the 'save' operation, but still has the
problem of unforeseen holes as in (1)
I don't know about how to solve the rest of your security concerns, but
for at least the issue of constraining mail to being written below
$home, create_file is the option you're looking for:
http://exim.org/exim-html-4.50/doc/html/spec_26.html#IX1994
- Marc
--
## List details at http://www.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/