1#@!#!123s

��JFIF�� 1#@!#!123s
: / var / lib / exim4 /
Filename : config.autogenerated
back
#########
# WARNING WARNING WARNING
# WARNING WARNING WARNING
# WARNING WARNING WARNING
# WARNING WARNING WARNING
# WARNING WARNING WARNING
# This file was generated dynamically from
# non-split config (/etc/exim4/exim4.conf.localmacros
# and /etc/exim4/exim4.conf.template).
# The config files are supplemented with package installation/configuration
# settings managed by debconf. This data is stored in
# /etc/exim4/update-exim4.conf.conf
# Any changes you make here will be lost.
# See /usr/share/doc/exim4-base/README.Debian.gz and update-exim4.conf(8)
# for instructions of customization.
# WARNING WARNING WARNING
# WARNING WARNING WARNING
# WARNING WARNING WARNING
# WARNING WARNING WARNING
# WARNING WARNING WARNING
#########
SA_ENABLE = yes

SA_SPAMD_USER = debian-spamd
SA_ABUSE_ADDR = The System Administrator
.ifdef SA_ENABLE
    spamd_address = /var/run/spamd_socket
.endif

EXIM_PASSWD  = /etc/exim4/passwd
EXIM_DOMAINS = /etc/exim4/domains
EXIM_ALIASES = /etc/exim4/aliases
EXIM_DOMAINIPS = /etc/exim4/domainips

tls_advertise_hosts = *
tls_certificate = ${if exists{/etc/exim4/ssl/${tls_sni}.crt}{/etc/exim4/ssl/${tls_sni}.crt}{/etc/exim4/ssl/exim.crt}}
tls_privatekey = ${if exists{/etc/exim4/ssl/${tls_sni}.key}{/etc/exim4/ssl/${tls_sni}.key}{/etc/exim4/ssl/exim.key}}

daemon_smtp_ports = 25 : 465 : 587
tls_on_connect_ports = 465

DKIM_DOMAIN                     = ${lc:${domain:$h_from:}}
DKIM_FILE                       = /etc/exim4/dkim/${lc:${domain:$h_from:}}.private
DKIM_PRIVATE_KEY                = ${if exists{DKIM_FILE}{/etc/exim4/dkim/${lookup {$sender_address_domain.private} dsearch {/etc/exim4/dkim/}}}{0}}

keep_environment =

log_selector =  \
    +all_parents \
    +lost_incoming_connection \
    +received_sender \
    +received_recipients \
    +tls_cipher +tls_peerdn +tls_sni \
    +smtp_confirmation \
    +smtp_syntax_error \
    +smtp_protocol_error

trusted_groups = fastmail
trusted_users = fastmail

untrusted_set_sender = *

domainlist local_domains = lsearch;EXIM_DOMAINS

hostlist relay_from_hosts = 127.0.0.1
domainlist relay_to_domains = lsearch;EXIM_DOMAINS

exim_user = Debian-exim
exim_group = Debian-exim

never_users = root

host_lookup = *

rfc1413_hosts = *
rfc1413_query_timeout = 0s

ignore_bounce_errors_after = 2d
timeout_frozen_after = 7d

acl_not_smtp = acl_check_not_smtp
acl_smtp_rcpt = acl_check_rcpt
acl_smtp_dkim = acl_check_dkim
acl_smtp_data = acl_check_data

begin acl

    acl_check_not_smtp:
        accept

    acl_check_rcpt:
        accept
            hosts = :

        deny
            message = unauthenticated local mail prohibited
            !authenticated = *
            hosts = !+relay_from_hosts
            sender_domains = +local_domains

        deny
            message = restricted characters in address
            domains = +local_domains
            local_parts = ^[.] : ^.*[@%!/|]

        deny
            message = restricted characters in address
            domains = !+local_domains
            local_parts = ^[./|] : ^.*[@%!] : ^.*/\\.\\./

        accept
            local_parts = postmaster : abuse
            domains = +local_domains

        require
            message = can't verify sender
            verify = sender

        accept
            hosts = +relay_from_hosts
            control = submission/sender_retain

        accept
            authenticated = *
            control = submission/domain=

        require
            message = relay not permitted
            domains = +local_domains : +relay_to_domains

        require
            message = can't verify recipient
            verify = recipient

        accept

    acl_check_dkim:
        warn
            dkim_status = fail
            add_header = X-DKIM-FAIL: DKIM test failed: (address=$sender_address domain=$dkim_cur_signer), signature is bad.
            log_message = DKIM test failed: $dkim_verify_reason

        warn
            dkim_status = invalid
            add_header = :at_start:Authentication-Results: $primary_hostname;\n $dkim_cur_signer ($dkim_verify_status); $dkim_verify_reason
            log_message = DKIM test passed (address=$sender_address domain=$dkim_cur_signer), but signature is invalid.

        accept
            dkim_status = pass
            add_header = :at_start:Authentication-Results: $primary_hostname;\n dkim=$dkim_verify_status, header.i=@$dkim_cur_signer
            log_message = DKIM test passed (address=$sender_address domain=$dkim_cur_signer), good signature.

        accept

    acl_check_data:
        .ifdef SA_ENABLE
        deny
            message = spam message detected by Spamassassin with Spam_score: $spam_score
            !authenticated = *
            hosts = !127.0.0.1/24 : !+relay_from_hosts
            condition = ${if < {$message_size}{1024K}}
            condition = ${extract{7}{:}{${lookup{$recipients}lsearch{EXIM_PASSWD}}}}
            spam = SA_SPAMD_USER
            logwrite = This message was detected as SPAM. More information in syslog.

        warn
            !authenticated = *
            hosts = !127.0.0.1/24 : !+relay_from_hosts
            condition = ${if < {$message_size}{1024K}}
            spam = SA_SPAMD_USER
            add_header = X-Spam-Flag: YES
            logwrite = This message was detected as SPAM. More information in syslog.

        warn
            !authenticated = *
            hosts = !127.0.0.1/24 : !+relay_from_hosts
            condition = ${if < {$message_size}{1024K}}
            spam = SA_SPAMD_USER:true
            add_header = X-Spam-score: $spam_score\n\
                X-Spam-score-int: $spam_score_int\n\
                X-Spam-bar: $spam_bar\n\
                X-Spam-report: $spam_report
            logwrite = From $sender_address to $recipients X-Spam_score: $spam_score.

        .endif

    accept

begin routers

    dnslookup:
        driver = dnslookup
        domains = ! +local_domains
        transport = remote_smtp
        ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8
        no_more

    disabled_domains:
        driver = dnslookup
        condition = ${extract{3}{:}{${lookup{$domain}lsearch{EXIM_DOMAINS}}}}
        transport = remote_smtp
        ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8
        no_more

    disabled_users:
        driver = redirect
        condition = ${extract{5}{:}{${lookup{$local_part@$domain}lsearch{EXIM_PASSWD}}}}
        allow_fail = yes
        data = :fail: User disabled
        no_more

    aliases:
        driver = redirect
        condition = ${if exists{EXIM_ALIASES} {yes} {no} }
        data = ${extract{1}{:}{${lookup{$local_part@$domain}lsearch{EXIM_ALIASES}}}}
        redirect_router = dnslookup
        pipe_transport = address_pipe

    local_spam:
        no_verify
        driver = accept
        transport = local_spamdir
        condition = ${if and{ {def:h_X-Spam-Flag:}{eq {$h_X-Spam-Flag:}{YES}} } {yes} {no} }
        condition = ${lookup {$local_part@$domain} lsearch {EXIM_PASSWD} {yes} {no} }

    local_users:
        driver = accept
        transport = local_maildir
        condition = ${lookup {$local_part@$domain} lsearch {EXIM_PASSWD} {yes} {no} }

    catchall_for_domains:
        driver = redirect
        headers_add = X-redirected: yes
        data = ${extract{2}{:}{${lookup{$domain}lsearch{EXIM_DOMAINS}}}}
        redirect_router = dnslookup

    unknown_users:
        driver = redirect
        allow_fail = yes
        data = :fail: Unknown user
        no_more

begin transports

    remote_smtp:
        driver = smtp
        dkim_domain           = DKIM_DOMAIN
        dkim_selector         = dkim
        dkim_private_key      = DKIM_PRIVATE_KEY
        interface = <;${lookup{$sender_address_domain}lsearch{EXIM_DOMAINIPS}}

    local_maildir:
        driver = appendfile
        maildir_format = true
        maildir_use_size_file = true
        create_directory = true
        directory_mode = 700
        directory = ${extract{4}{:}{${lookup{$local_part@$domain}lsearch{EXIM_PASSWD}}}}/.maildir
        delivery_date_add
        envelope_to_add
        return_path_add
        mode = 0660
        quota = ${extract{3}{:}{${lookup{$local_part@$domain}lsearch{EXIM_PASSWD}}}}M
        quota_warn_threshold = 75%
        use_lockfile = no
        no_mode_fail_narrower
        user = ${extract{1}{:}{${lookup{$local_part@$domain}lsearch{EXIM_PASSWD}}}}
        group = ${extract{2}{:}{${lookup{$local_part@$domain}lsearch{EXIM_PASSWD}}}}

    local_spamdir:
        driver = appendfile
        maildir_format = true
        maildir_use_size_file = true
        create_directory = true
        directory_mode = 700
        directory = ${extract{4}{:}{${lookup{$local_part@$domain}lsearch{EXIM_PASSWD}}}}/.maildir/.Junk
        delivery_date_add
        envelope_to_add
        return_path_add
        mode = 0660
        quota = ${extract{3}{:}{${lookup{$local_part@$domain}lsearch{EXIM_PASSWD}}}}M
        quota_warn_threshold = 75%
        use_lockfile = no
        no_mode_fail_narrower
        user = ${extract{1}{:}{${lookup{$local_part@$domain}lsearch{EXIM_PASSWD}}}}
        group = ${extract{2}{:}{${lookup{$local_part@$domain}lsearch{EXIM_PASSWD}}}}

    address_pipe:
        driver = pipe
        ignore_status
        return_output
        use_shell

begin retry

*   *   F,2h,15m; G,16h,1h,1.5; F,4d,6h

begin rewrite

begin authenticators

    dovecot_login:
        driver = dovecot
        public_name = LOGIN
        server_socket = /var/run/dovecot/auth-client
        server_set_id = $auth1

    dovecot_plain:
        driver = dovecot
        public_name = PLAIN
        server_socket = /var/run/dovecot/auth-client
        server_set_id = $auth1