Integrate changes from 4.92

[hcoop/config/exim.git] / conf.d / main / 01_exim4-config_listmacrosdefs

######################################################################
#      Runtime configuration file for Exim 4 (Debian Packaging)      #
######################################################################

######################################################################
# /etc/exim4/exim4.conf.template is only used with the non-split
#   configuration scheme.
# /etc/exim4/conf.d/main/01_exim4-config_listmacrosdefs is only used
#   with the split configuration scheme.
# If you find this comment anywhere else, somebody copied it there.
# Documentation about the Debian exim4 configuration scheme can be
# found in /usr/share/doc/exim4-base/README.Debian.gz.
######################################################################

######################################################################
#                    MAIN CONFIGURATION SETTINGS                     #
######################################################################

# Just for reference and scripts. 
# On Debian systems, the main binary is installed as exim4 to avoid
# conflicts with the exim 3 packages.
exim_path = /usr/sbin/exim4

# Macro defining the main configuration directory.
# We do not use absolute paths.
.ifndef CONFDIR
CONFDIR = /etc/exim4
.endif

# debconf-driven macro definitions get inserted after this line
UPEX4CmacrosUPEX4C = 1

# Create domain and host lists for relay control
# '@' refers to 'the name of the local host'

# List of domains considered local for exim. Domains not listed here
# need to be deliverable remotely.
# hcoop-change: comment out, provided by domtool
# domainlist local_domains = MAIN_LOCAL_DOMAINS

# List of recipient domains to relay _to_. Use this list if you're -
# for example - fallback MX or mail gateway for domains.
# hcoop-change: comment out, provided by domtool
# domainlist relay_to_domains = MAIN_RELAY_TO_DOMAINS

# hcoop-change: List of domains that accept mail from local users.
# Mail sent to other domains we manage will be transformed into a
# local address by /etc/aliases.
domainlist unix_domains = hcoop.net:deleuze.hcoop.net:outpost.hcoop.net:hopper.hcoop.net:navajos.hcoop.net:bog.hcoop.net:fritz.hcoop.net:mccarthy.hcoop.net:gibran.hcoop.net:marsh.hcoop.net:minsky.hcoop.net:shelob.hcoop.net:lovelace.hcoop.net:localhost

# List of sender networks (IP addresses) to _unconditionally_ relay
# _for_. If you intend to be SMTP AUTH server, you do not need to enter
# anything here.
hostlist relay_from_hosts = MAIN_RELAY_NETS


# Decide which domain to use to add to all unqualified addresses.
# If MAIN_PRIMARY_HOSTNAME_AS_QUALIFY_DOMAIN is defined, the primary
# hostname is used. If not, but MAIN_QUALIFY_DOMAIN is set, the value
# of MAIN_QUALIFY_DOMAIN is used. If both macros are not defined,
# the first line of /etc/mailname is used.
.ifndef MAIN_PRIMARY_HOSTNAME_AS_QUALIFY_DOMAIN
.ifndef MAIN_QUALIFY_DOMAIN
qualify_domain = ETC_MAILNAME
.else
qualify_domain = MAIN_QUALIFY_DOMAIN
.endif
.endif

# listen on all all interfaces?
.ifdef MAIN_LOCAL_INTERFACES
local_interfaces = MAIN_LOCAL_INTERFACES
.endif

.ifndef LOCAL_DELIVERY
# The default transport, set in /etc/exim4/update-exim4.conf.conf,
# defaulting to mail_spool. See CONFDIR/conf.d/transport/ for possibilities
LOCAL_DELIVERY=mail_spool
.endif

# The gecos field in /etc/passwd holds not only the name. see passwd(5).
gecos_pattern = ^([^,:]*)
gecos_name = $1

# always log tls_peerdn as we use TLS for outgoing connects by default
# hcoop-change: add +tls_cipher
.ifndef MAIN_LOG_SELECTOR
MAIN_LOG_SELECTOR = +smtp_protocol_error +smtp_syntax_error +tls_certificate_verified +tls_peerdn +tls_cipher
.endif
# hcoop-change: use file_transport = address_file for /etc/aliases
# delivery, as per old configuration
SYSTEM_ALIASES_FILE_TRANSPORT = address_file

# hcoop-change: deliver mail to AFS
MAILDIR_HOME_MAILDIR_LOCATION = /afs/hcoop.net/common/email

# hcoop-change: enable TLS
MAIN_TLS_ENABLE = yes

# hcoop-change: enabled sender verification
CHECK_RCPT_VERIFY_SENDER = true
CHECK_RCPT_IP_DNSBLS = zen.spamhaus.org
CHECK_RCPT_REVERSE_DNS = true
CHECK_RCPT_SPF = true

# hcoop-change: use hcoop cert 2015-05-04 clinton
MAIN_TLS_CERTKEY = /etc/hcoop-ssl/hcoop.pem

# hcoop-change: uncomment and set to mailman host if this server does not host mailman
#HCOOP_MAILMAN_RELAY_HOST = minsky.hcoop.net

# hcoop-change: all mail for users < 1000 to logs, reject entirely from untrusted remote hosts
FIRST_USER_ACCOUNT_UID = 1000
HCOOP_SYSTEM_ACCOUNT_ALIAS = logs@hcoop.net

# hcoop-change: ignore smtp line length restrictions as it rejects valid mail
IGNORE_SMTP_LINE_LENGTH_LIMIT = yes