From f59b522f292def10d39f5bb6e4fbe770add1b5c4 Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Sat, 18 Nov 2023 11:48:36 +0000 Subject: [PATCH 1/1] Use callout verification for domains we are relaying to --- cookbooks/exim/templates/default/exim4.conf.erb | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/cookbooks/exim/templates/default/exim4.conf.erb b/cookbooks/exim/templates/default/exim4.conf.erb index 6babb839a..96f0cad77 100644 --- a/cookbooks/exim/templates/default/exim4.conf.erb +++ b/cookbooks/exim/templates/default/exim4.conf.erb @@ -506,7 +506,11 @@ acl_check_rcpt: # relay domains is to use a callout (add /callout), but please read the # documentation about callouts before doing this. - require verify = recipient + require verify = recipient + !domains = +relay_to_domains + + require verify = recipient/callout + domains = +relay_to_domains <% if node[:exim][:dns_blacklists] -%> # Deny any messages from hosts in certain blacklists. -- 2.39.5