Bug#296132: exim4-config: suggest sender verification in default config

[Jay Berkenbilt]

Package: exim4-config
Version: 4.44-2
Severity: wishlist

I recently switched from sendmail to exim4 and have been quite happy
with the results.  There is, however, one important feature that is
present in the sendmail default config and not in the Debian exim4
default config: sender domain verification.  On my fairly small site,
we get hit with about one mesasge with an invalid sender domain every
15 seconds.

Adding this to the default config is trivial.  Just add this line in
the main section:

acl_smtp_mail = acl_check_mail

And this stanza:

acl_check_mail:
  accept verify = sender

in the ACL section.  If this is not always enabled, I'd suggest at
least making it an option that comes up during debconf or possibly
just enabling it in any configuration that accepts incoming email from
the Internet.

-- Package-specific info:
Exim version 4.44 #1 built 27-Jan-2005 13:55:35
Copyright (c) University of Cambridge 2004
Berkeley DB: Sleepycat Software: Berkeley DB 4.2.52: (December  3, 2003)
Support for: iconv() IPv6 GnuTLS
Lookups: lsearch wildlsearch nwildlsearch iplsearch cdb dbm dbmnz dsearch nis nis0 passwd
Authenticators: cram_md5 plaintext
Routers: accept dnslookup ipliteral manualroute queryprogram redirect
Transports: appendfile/maildir/mailstore autoreply lmtp pipe smtp
Fixed never_users: 0
Configuration file is /var/lib/exim4/config.autogenerated

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.10-1-k7
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages exim4-config depends on:
ii  adduser                     3.59         Add and remove users and groups
ii  debconf [debconf-2.0]       1.4.45       Debian configuration management sy
ii  passwd                      1:4.0.3-30.9 change and administer password and

-- debconf information excluded

-- 
Jay Berkenbilt <ejb@ql.org>