Bug#291832: exim4-config: !verify=reverse_host_lookup logs but does not warn on defer

Marc Sherman Marc Sherman <msherman@projectile.ca>, 291832@bugs.debian.org
Sun, 23 Jan 2005 10:17:43 -0500


Package: exim4-config
Version: 4.34-10
Severity: wishlist

The stock exim4-config includes a (commented out) block that does
reverse DNS verification in the ACLs using !verify=reverse_host_lookup.
In the case of a defer (ie: a DNS timeout), this logs but does not
actually include the warning header in the message.

Replacing the ACL block with the following will include a header in the
case of a defer as well as a failure.  I've found that DNS timeouts are
much more frequently due to spammers setting up intentionally broken
authoritative DNS servers than they are due to my own DNS server being 
temporarily busted, so getting the header in a message in case of a
defer is useful.

  # MSS: If sender_host_address is defined, it's a remote call.  If
  # sender_host_name is not defined, then reverse lookup failed.  Use
  # this
  # instead of !verify = reverse_host_lookup to catch deferrals as well
  # as
  # outright failures.
  #
  warn message = X-Host-Lookup-Failed: Reverse DNS lookup failed for $sender_hos
t_address ($if eq{$host_lookup_failed}{1}{failed}{deferred}})
       condition = ${if and{{def:sender_host_address}{!def:sender_host_name}}\
                        {yes}{no}}


-- Package-specific info:
Exim version 4.34 #1 built 05-Jan-2005 11:07:49
Copyright (c) University of Cambridge 2004
Berkeley DB: Sleepycat Software: Berkeley DB 3.2.9: (May 26, 2004)
Support for: iconv() IPv6 PAM Perl GnuTLS
Lookups: lsearch wildlsearch nwildlsearch iplsearch cdb dbm dbmnz dnsdb dsearch ldap ldapdn ldapm mysql nis nis0 passwd pgsql
Authenticators: cram_md5 plaintext spa
Routers: accept dnslookup ipliteral iplookup manualroute queryprogram redirect
Transports: appendfile/maildir/mailstore/mbx autoreply lmtp pipe smtp
Fixed never_users: 0
Contains exiscan-acl patch revision 21 (c) Tom Kistner [http://duncanthrax.net/exiscan/]
Configuration file is /var/lib/exim4/config.autogenerated

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (900, 'testing'), (300, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.8-2-k7
Locale: LANG=en_CA, LC_CTYPE=en_CA (charmap=ISO-8859-1)

Versions of packages exim4-config depends on:
ii  adduser                     3.59         Add and remove users and groups
ii  debconf [debconf-2.0]       1.4.30.11    Debian configuration management sy
ii  passwd                      1:4.0.3-30.7 Change and administer password and

-- debconf information:
  exim4/dc_noalias_regenerate: false
* exim4/dc_smarthost: mail.magma.ca
* exim4/dc_relay_domains:
* exim4/dc_relay_nets:
* exim4/mailname: projectile.ca
* exim4/dc_local_interfaces:
* exim4/dc_minimaldns: false
  exim4/exim3_upgrade: true
* exim4/dc_other_hostnames: lab403.com:groundworksdesign.ca:redthreaddesign.ca
* exim4/dc_eximconfig_configtype: internet site; mail is sent and received directly using SMTP
  exim4/no_config: true
* exim4/hide_mailname: false
* exim4/dc_postmaster: msherman
* exim4/dc_readhost: projectile.ca
* exim4/use_split_config: false
  exim4/exim4-config-title: