Hans Klose <[email protected]> (Mon May 16 15:25:06 2011): > Hi, > > i configured a new rule in the exim acl_smtp_data > section. I want that exim block mail with defined sentences in the body. (…) > deny message = STOP! > condition = ${if or { \ > {match {${lc:$message_body}}{.*this ist sentence > one.*}} \ > {match {${lc:$message_body}}{.*this ist sentence > two.*}} \ > {match {${lc:$message_body}}{.*this ist sentence > three.*}} \ > }{1}{0}} > Like this: > May 16 15:02:50 mailserver03 exim[26230]: [1\24] 2011-05-16 13:02:50 +0000 > 1QLxRg-0006p4-5A H=(PC) [xx.xx.xx.xx] F=<[email protected]> rejected after DATA: > May 16 15:02:50 mailserver03 exim[26230]: [2\24] Envelope-from: <[email protected]> > May 16 15:02:50 mailserver03 exim[26230]: [3\24] Envelope-to: <[email protected]> (…) > May 16 15:02:50 mailserver03 exim[26230]: [10\24] by mail.server.de with > esmtpa (Exim 4.76) > May 16 15:02:50 mailserver03 exim[26230]: [11\24] (envelope-from > <[email protected]>) > > What are the lines with [2\24] for? I there an error in the rule?
You're logging via syslog? These items [x\24] I've never seen, but -- the rest looks like the message, exim writes into the rejectlog if some message gets rejected by a data acl. (At this point of rejection exim already knows the headers (even the complete message) and logs these headers - in case you need some information when investigating the rejection). -- Heiko :: dresden : linux : SCHLITTERMANN.de GPG Key 48D0359B : 3061 CFBF 2D88 F034 E8D2 7E92 EE4E AC98 48D0 359B
signature.asc
Description: Digital signature
-- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
