Bug#376459: exim4-config: issues with ACL documentation
Ross Boylan
RossBoylan at stanfordalumni.org
Mon Jul 3 05:18:55 UTC 2006
Package: exim4-config
Version: 4.62-2
Severity: minor
The recent cleanup of the documentation seems to have left some loose ends.
1. acl/20_exim4-config_whitelist_local_deny includes
# Whitelisting can also be configured by including negative items in the
# black list. See /usr/share/doc/exim4-config/default_acl for details.
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
The indicatedfile doesn't exist; I think it was merged into
README.Debian, though I don't see stuff in there that bears directly
on this issue there now.
2. README.Debian section 2.1.2 (on ACLs) says
The access list file also contains quite a few configuration options
that are too restrictive to be active by default on a real-life site.
It is unclear, at least to me, what file the "access list file" refers
to. My guess is it means either all the acl files or the check_rcpt
one.
3. It might be helpful for README.Debian to mention the possibility of
customizing the ACLs via, e.g., CHECK_RCPT_LOCAL_ACL_FILE. And/or
something about this could go in the exim4-config_files man page,
though that's tricky since the user makes up the file name and
location.
4. There is an oddity in the exim4-config_files man page when viewed
with tkman. man in terminal looks OK. In case there is something on
the page that is inspiring this weird behavior, I'm reporting it.
Here's what I see when I expand the subitem under "description"
--------------------------------------------------
/etc/exim4/local_host_blacklist
is an optional file containing a list of IP addresses, networks and
host names whose messages will be denied with the error message
"locally blacklisted". This is a full exim 4 host list, and all avail-
able features can be used. This includes negative items, and so it is
possible to exclude addresses from being blacklisted. For convenience,
as an additional method to whitelist addresses from being blocked, an
explicit whitelist is read in from /etc/exim4/local_host_whitelist.
Entries in the whitelist override corresponding blacklist entries.
In the blacklist, the trick is to read a line break as "or" if it fol-
lows a positive item, and as "and" if it follows a negative item.
For example, a /etc/exim4/local_host_blacklist
192.168.10.0/24
!172.16.10.128/26
172.16.10.0/24
10.0.0.0/8
Exim just evaluates left to right (or up-down in the file listing con-
text), so you don't get the same kind of operator binding as in a pro-
gramming language.
XXXXXX
will be accepted despite the address is also listed in
/etc/exim4/local_host_blacklist, overriding a blacklisting.
/etc/exim4/local_sender_blacklist
is an optional files containing a list of envelope senders whose mes-
---------------------------------------------------------
The section with XXX has missing material on local_host_whitelist.
If I hit enter (which tells tkman to expand and move on) the missing
text reappears.
I may be misunderstanding tkman, or it may be strictly a tkman bug.
But if there's a way to prevent it from the man page itself, that
would be a plus.
-- Package-specific info:
Exim version 4.62 #1 built 02-May-2006 11:54:25
Copyright (c) University of Cambridge 2006
Berkeley DB: Sleepycat Software: Berkeley DB 4.3.29: (September 6, 2005)
Support for: crypteq iconv() IPv6 PAM Perl GnuTLS move_frozen_messages Content_Scanning Old_Demime
Lookups: lsearch wildlsearch nwildlsearch iplsearch cdb dbm dbmnz dnsdb dsearch ldap ldapdn ldapm mysql nis nis0 passwd pgsql
Authenticators: cram_md5 cyrus_sasl plaintext spa
Routers: accept dnslookup ipliteral iplookup manualroute queryprogram redirect
Transports: appendfile/maildir/mailstore/mbx autoreply lmtp pipe smtp
Fixed never_users: 0
Size of off_t: 8
Configuration file is /var/lib/exim4/config.autogenerated
-- System Information:
Debian Release: testing/unstable
APT prefers testing
APT policy: (990, 'testing'), (990, 'stable'), (50, 'unstable')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.4.27advncdfs
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)
Versions of packages exim4-config depends on:
ii adduser 3.87 Add and remove users and groups
ii debconf [debconf-2.0] 1.5.2 Debian configuration management sy
exim4-config recommends no packages.
-- debconf information excluded
More information about the Pkg-exim4-maintainers
mailing list