conf.d/main/01_exim4-config_listmacrosdefs

   1 ######################################################################
   2 #      Runtime configuration file for Exim 4 (Debian Packaging)      #
   3 ######################################################################
   4
   5 ######################################################################
   6 # /etc/exim4/exim4.conf.template is only used with the non-split
   7 #   configuration scheme.
   8 # /etc/exim4/conf.d/main/01_exim4-config_listmacrosdefs is only used
   9 #   with the split configuration scheme.
  10 # If you find this comment anywhere else, somebody copied it there.
  11 # Documentation about the Debian exim4 configuration scheme can be
  12 # found in /usr/share/doc/exim4-base/README.Debian.gz.
  13 ######################################################################
  14
  15 ######################################################################
  16 #                    MAIN CONFIGURATION SETTINGS                     #
  17 ######################################################################
  18
  19 # Just for reference and scripts.
  20 # On Debian systems, the main binary is installed as exim4 to avoid
  21 # conflicts with the exim 3 packages.
  22 exim_path = /usr/sbin/exim4
  23
  24 # Macro defining the main configuration directory.
  25 # We do not use absolute paths.
  26 .ifndef CONFDIR
  27 CONFDIR = /etc/exim4
  28 .endif
  29
  30 # debconf-driven macro definitions get inserted after this line
  31 UPEX4CmacrosUPEX4C = 1
  32
  33 # Create domain and host lists for relay control
  34 # '@' refers to 'the name of the local host'
  35
  36 # List of domains considered local for exim. Domains not listed here
  37 # need to be deliverable remotely.
  38 # hcoop-change: comment out, provided by domtool
  39 # domainlist local_domains = MAIN_LOCAL_DOMAINS
  40
  41 # List of recipient domains to relay _to_. Use this list if you're -
  42 # for example - fallback MX or mail gateway for domains.
  43 # hcoop-change: comment out, provided by domtool
  44 # domainlist relay_to_domains = MAIN_RELAY_TO_DOMAINS
  45
  46 # hcoop-change: List of domains that accept mail from local users.
  47 # Mail sent to other domains we manage will be transformed into a
  48 # local address by /etc/aliases.
  49 domainlist unix_domains = hcoop.net:deleuze.hcoop.net:outpost.hcoop.net:hopper.hcoop.net:navajos.hcoop.net:bog.hcoop.net:fritz.hcoop.net:mccarthy.hcoop.net:gibran.hcoop.net:marsh.hcoop.net:minsky.hcoop.net:shelob.hcoop.net:lovelace.hcoop.net:localhost
  50
  51 # List of sender networks (IP addresses) to _unconditionally_ relay
  52 # _for_. If you intend to be SMTP AUTH server, you do not need to enter
  53 # anything here.
  54 hostlist relay_from_hosts = MAIN_RELAY_NETS
  55
  56
  57 # Decide which domain to use to add to all unqualified addresses.
  58 # If MAIN_PRIMARY_HOSTNAME_AS_QUALIFY_DOMAIN is defined, the primary
  59 # hostname is used. If not, but MAIN_QUALIFY_DOMAIN is set, the value
  60 # of MAIN_QUALIFY_DOMAIN is used. If both macros are not defined,
  61 # the first line of /etc/mailname is used.
  62 .ifndef MAIN_PRIMARY_HOSTNAME_AS_QUALIFY_DOMAIN
  63 .ifndef MAIN_QUALIFY_DOMAIN
  64 qualify_domain = ETC_MAILNAME
  65 .else
  66 qualify_domain = MAIN_QUALIFY_DOMAIN
  67 .endif
  68 .endif
  69
  70 # listen on all all interfaces?
  71 .ifdef MAIN_LOCAL_INTERFACES
  72 local_interfaces = MAIN_LOCAL_INTERFACES
  73 .endif
  74
  75 .ifndef LOCAL_DELIVERY
  76 # The default transport, set in /etc/exim4/update-exim4.conf.conf,
  77 # defaulting to mail_spool. See CONFDIR/conf.d/transport/ for possibilities
  78 LOCAL_DELIVERY=mail_spool
  79 .endif
  80
  81 # The gecos field in /etc/passwd holds not only the name. see passwd(5).
  82 gecos_pattern = ^([^,:]*)
  83 gecos_name = $1
  84
  85 # define macros to be used in acl/30_exim4-config_check_rcpt to check
  86 # recipient local parts for strange characters.
  87
  88 # This macro definition really should be in
  89 # acl/30_exim4-config_check_rcpt but cannot be there due to
  90 # http://www.exim.org/bugzilla/show_bug.cgi?id=101 as of exim 4.62.
  91
  92 # These macros are documented in acl/30_exim4-config_check_rcpt,
  93 # can be changed here or overridden by a locally added configuration
  94 # file as described in README.Debian section "Using Exim Macros to control
  95 # the configuration".
  96
  97 .ifndef CHECK_RCPT_LOCAL_LOCALPARTS
  98 CHECK_RCPT_LOCAL_LOCALPARTS = ^[.] : ^.*[@%!/|`#&?]
  99 .endif
 100
 101 .ifndef CHECK_RCPT_REMOTE_LOCALPARTS
 102 CHECK_RCPT_REMOTE_LOCALPARTS = ^[./|] : ^.*[@%!`#&?] : ^.*/\\.\\./
 103 .endif
 104
 105 # always log tls_peerdn as we use TLS for outgoing connects by default
 106 .ifndef MAIN_LOG_SELECTOR
 107 MAIN_LOG_SELECTOR = +smtp_protocol_error +smtp_syntax_error +tls_certificate_verified +tls_peerdn
 108 .endif
 109
 110 # always log tls_peerdn as we use TLS for outgoing connects by default
 111 # hcoop-change: add +tls_ciper
 112 .ifndef MAIN_LOG_SELECTOR
 113 MAIN_LOG_SELECTOR = +tls_cipher +tls_peerdn
 114 .endif
 115
 116 # hcoop-change: use file_transport = address_file for /etc/aliases
 117 # delivery, as per old configuration
 118 SYSTEM_ALIASES_FILE_TRANSPORT = address_file
 119
 120 # hcoop-change: deliver mail to AFS
 121 MAILDIR_HOME_MAILDIR_LOCATION = /afs/hcoop.net/common/email
 122
 123 # hcoop-change: enable TLS
 124 MAIN_TLS_ENABLE = yes
 125
 126 # hcoop-change: enabled sender verification
 127 CHECK_RCPT_VERIFY_SENDER = true
 128 CHECK_RCPT_IP_DNSBLS = zen.spamhaus.org
 129 CHECK_RCPT_REVERSE_DNS = true
 130 CHECK_RCPT_SPF = true
 131
 132 # hcoop-change: use hcoop cert 2015-05-04 clinton
 133 MAIN_TLS_CERTKEY = /etc/hcoop-ssl/hcoop.pem
 134
 135 # hcoop-change: uncomment and set to mailman host if this server does not host mailman
 136 #HCOOP_MAILMAN_RELAY_HOST = minsky.hcoop.net
 137
 138 # hcoop-change: all mail for users < 1000 to logs, reject entirely from untrusted remote hosts
 139 FIRST_USER_ACCOUNT_UID = 1000
 140 HCOOP_SYSTEM_ACCOUNT_ALIAS = logs@hcoop.net
 141
 142 # hcoop-change: ignore smtp line length restrictions as it rejects valid mail
 143 IGNORE_SMTP_LINE_LENGTH_LIMIT = yes