Thanks to all who have helped. I have been correctly signing the envelope sender for seven days. Now I would like to start rejecting messages with bad or missing BATV signatures.
I've seen a little discussion on the list and in the archives, but not enough of a full recipe for me to implement the rejections as I wish. I believe I need two separate ACL statements. First, at RCPT time I want to allow empty senders to unsigned addresses, as to not deny callouts. But I do want to deny old or invalid signatures. Actually if I could reject bad BATV signed addresses from any sender, not just empty, that would be even better. Second, at DATA time I then want to deny any message from a null sender that does not have a BATV signed recipient. Thanks again, Chris -- ## List details at http://www.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://www.exim.org/eximwiki/
