-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 6/14/13 4:26 AM, Jasen Betts wrote:
> On 2013-06-13, David Grant <[email protected]> wrote:
>> Hi,
>> 
>> I was testing the following in acl_check_data:
>> 
>> accept hosts = +relay_from_hosts accept authenticated = * warn
>> set acl_m_from_address = ${lc:${address:$h_From:}} ... deny
>> condition = ${if match{$acl_m_from_address}{@eff.org}{yes}{no}}
>> 
>> This worked to prevent spam where the sender spoofed an eff.org
>> address only in DATA, but created a problem when users signed up
>> for mailing lists on remote servers. Their own messages to the
>> list would be dropped when emailed back to them (or any other
>> eff.org subscribers) because mailman was effectively spoofing our
>> domain.
> 
> perhapd exempt list traffic from that deny?
> 
> deny condition = ${if
> match{$acl_m_from_address}{@eff.org}{yes}{no}} condition = ${if !eq
> {$h_Precedence:}{list}}

This worked with an additional check for "Precedence: bulk" since we
also don't want drop our own newsletter, which is mailed from a
third-party service.

Thanks,
Starchy
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJR2xk6AAoJEIGQbiNcXHND1wgH/RRFIcnp1rHuB2mjkBSDnRvO
3T7eVeDDec28d5UbofpNKFgeI5aBqbOpu8jDP+G2H71gS/mSdc4G0uLBI8WLRwEq
FUw2bMm3SWmGQBEIzzOjD1sUjaoM8F5DxSqfrkSGnQvkUge+l9b+bgyrZRhUcl9r
WOb3J6nHlUY7nEAm9tKQrNwA1o9qPFliX7A67Ywp5F2XArVaCxsMg3QxUNnyQVQf
s3vnAWVCXC5RqZfSx5oo2lJ4/S0ykEEE8wUlEgRtmsQ2HQo+NuRyydC+mBvpxs9W
jiEyt4fLDwnTJkcgFhEMyPTTpU32rlrP3FmzZccrbaJSQbBPK/1p7QrP586CVy0=
=v7dJ
-----END PGP SIGNATURE-----

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Reply via email to