Use callout verification for domains we are relaying to

[chef.git] / cookbooks / exim / templates / default / exim4.conf.erb

diff --git a/cookbooks/exim/templates/default/exim4.conf.erb b/cookbooks/exim/templates/default/exim4.conf.erb
index 6babb839a208c80fe1975e23c9f737ecae420f15..96f0cad77ad856b1b1bfa81f9edeb733121df627 100644 (file)
--- a/cookbooks/exim/templates/default/exim4.conf.erb
+++ b/cookbooks/exim/templates/default/exim4.conf.erb
@@ -506,7 +506,11 @@ acl_check_rcpt:
   # relay domains is to use a callout (add /callout), but please read the
   # documentation about callouts before doing this.
 
-  require verify = recipient
+  require verify   = recipient
+          !domains = +relay_to_domains
+
+  require verify   = recipient/callout
+          domains  = +relay_to_domains
 
 <% if node[:exim][:dns_blacklists] -%>
   # Deny any messages from hosts in certain blacklists.