[Pkg-exim4-users] Catchall for system users

[Andreas Metzler]

On 2005-10-07 Ross Boylan <ross at biostat.ucsf.edu> wrote:
> I'd like all mail to system users to go to root, which is then forwarded
> to me.  The inspiration was the discovery that some system accounts were
> getting actual mail, and I hadn't noticed.  /etc/alias does not list all
> system users, though a fair number are in there and set to root.

> 307768 has discussion of this, but the example there fails addresses and
> involves resequencing some of the default files.  On the other hand, I
> do want to capture even the real-* addresses.

Hello,
Imho real-* should either be dealt with identically as in other
szenarios (i.e. real-* _forces_ /local/ delivery with LOCAL_DELIVERY)
or be rejected. Redirecting it to a possible non-local address seems
to be wrong.

I think changing the real-* router to ignore system-users might be
better. This way the new router could go _after_ the system aliases
router, which I think to be a must. - The new router must not override
/etc/aliases. Actually I think it should be one of the very last
routers, right before local_user.

> So how does this router look?

> 250_rb_catch_system (before the real-* router):

> catch_system_uids:
>    driver = redirect
>    domains = +local_domains
>    user = ! root
>    local_part_prefix = real-
>    local_part_prefix_optional = true
>    check_local_user
>    condition = ${if or{{<{$local_user_uid}{1000}}
>                        {>{$local_user_uid}{29999}}}}
>    data = root

29999 seems to be wrong, system-users live in 0-999 and 60000-64999
(/usr/share/doc/base-passwd/README). And I am already feeling queasy
about ignoring such a broad range, I am sure there are lots of
(misconfigured) systtems around that are using 60000-63000 for normal
accounts.
                cu andreas

-- 
"See, I told you they'd listen to Reason," [SPOILER] Svfurlr fnlf,
fuhggvat qbja gur juveyvat tha.
Neal Stephenson in "Snow Crash"