Bug#400790: exim4-config: Reject mail to system users from non-local sources

[Marc Haber]

On Wed, Nov 29, 2006 at 08:10:42AM +0000, Dominic Hargreaves wrote:
> On Wed, Nov 29, 2006 at 08:33:18AM +0100, Marc Haber wrote:
> > We are somewhat reluctant to "fix" this as this
> > means deviating "far" from what an experienced Unix admin might expect.
> 
> Even as a configurable option defaulting to off? I wasn't suggesting
> that this should be the default behaviour; clearly some sites will be
> relying on the existing remote deliverability of those addresses.

Again, I currently plan to re-think this issue post-etch. Most
probably there will be a whitelist mechanism. My current idea is
having a new file /etc/low-uid-aliases which would be honored for all
low-uid accounts (uid smaller than a configurable x, defaulting to
500). If an uid is smaller than x, and the account is not listed in
/etc/low-uid-aliases, incoming mail would be 550'ed. Accounts with uid
> x would be handled normally, no change at all. If
/etc/low-uid-aliases does not exist, behavior is unchanged to what we
have today.

What do you think about that?

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835