Colin wrote:

On 27/10/2011 11:26, W B Hacker wrote:
Hi Graeme, thanks for the reply,
I am unsure that I follow it completely. In my understanding, the
require verify should only apply if the condition is met.


Not so. The ONLY condition that applies to that 'require' is the one
immediately following it on its OWN line...


That makes sense now, thank you both for the assistance.

How it should behave:
If recipient domain is in /etc/staticroutes then do a recipient callout
verification. If the verification fails with a permenant error, reject
message. If the verification fails with a temporary error, accept and
queue for retry.

No recipient verification callouts should occur if the recipient is not
in /etc/staticroutes (ie the condition is not matched).

This is not what happens because recipient verification callouts are
happening (and failing) on domains not in /etc/staticroutes.

Regards,
Colin


Re-write it this way (fix MUA line-wrap!):

=====

deny

## do a check for presence in static routes file

condition = ${if eq {1}{${lookup{$domain}lsearch \
{/etc/staticroutes}{1}{0}}}}

## .. carry-on if found, bail-out if not found

!condition = verify recipient/callout=30s,defer_ok,use_sender

## having arrived here IF found in the static routes file...
## attempt recipient verification by callout
## trigger the 'deny' entry verb if callout FAILS
## ( the '!condition' of success)

=====

Bill


Apparently Exim doesn't like that as all messages fail with this:

invalid "condition" value "verify
recipient/defer_ok/callout=30s,defer_ok,use_sender"

Thanks for the help so far I will do some proper testing on the ACLs out
of hours when I can and report back when I find one that does what I
want it to!

Regards,
Colin.


ACK - there is a right-side sin-tax error.

As Reads:

!condition = verify recipient/callout=30s,defer_ok,use_sender

Is Amended To Read:

!verify = recipient/callout=30s,defer_ok,use_sender


Have to admit that having always had PostgreSQL DB to export to <whatever>, I have never had to ASK Exim to do a 'remote' recipient test.

;-)

Bill







--
韓家標

--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Reply via email to