DMARC: add ARC info to history records
[exim.git] / test / confs / 5892
1 # Exim test configuration 5892
2
3 SERVER =
4 OPTION =
5
6 .include DIR/aux-var/tls_conf_prefix
7
8 primary_hostname = myhost.test.ex
9
10 # ----- Main settings -----
11
12 domainlist local_domains = test.ex : *.test.ex
13
14 acl_smtp_helo = check_helo
15 acl_smtp_rcpt = check_recipient
16 log_selector = +received_recipients +tls_resumption +tls_peerdn
17
18 .ifdef _OPT_OPENSSL_NO_TLSV1_3_X
19 openssl_options = +no_sslv2 +no_sslv3 +single_dh_use OPTION
20 .else
21 openssl_options = +no_sslv2 +no_sslv3 +single_dh_use
22 .endif
23 tls_advertise_hosts = *
24
25 # Set certificate only if server
26
27 CDIR=DIR/aux-fixed/exim-ca/example.com
28
29 tls_certificate = CDIR/server1.example.com/server1.example.com.chain.pem
30 tls_privatekey =  CDIR/server1.example.com/server1.example.com.unlocked.key
31
32 tls_resumption_hosts = 127.0.0.1
33 remote_max_parallel = 1
34
35
36 # ------ ACL ------
37
38 begin acl
39
40 check_helo:
41   accept  condition =   ${if def:tls_in_cipher}
42           logwrite =    tls_in_resumption\t${listextract {$tls_in_resumption} {_RESUME_DECODE}}
43           logwrite =    our cert subject\t${certextract {subject}{$tls_in_ourcert}}
44           logwrite =    peer cert subject\t${certextract {subject}{$tls_in_peercert}}
45           logwrite =    peer cert verified\t${tls_in_certificate_verified}
46           logwrite =    peer dn\t${tls_in_peerdn}
47           logwrite =    cipher\t${tls_in_cipher}
48           logwrite =    bits\t${tls_in_bits}
49   accept
50
51 check_recipient:
52   accept  domains =     +local_domains
53   deny    message =     relay not permitted
54
55 log_resumption:
56   accept condition =    ${if def:tls_out_cipher}
57          condition =    ${if eq {$event_name}{tcp:close}}
58          logwrite =     tls_out_resumption ${listextract {$tls_out_resumption} {_RESUME_DECODE}}
59           logwrite =    our cert subject\t${certextract {subject}{$tls_out_ourcert}}
60           logwrite =    peer cert subject\t${certextract {subject}{$tls_out_peercert}}
61           logwrite =    peer cert verified\t${tls_out_certificate_verified}
62           logwrite =    peer dn\t${tls_out_peerdn}
63           logwrite =    cipher\t${tls_out_cipher}
64           logwrite =    bits\t${tls_out_bits}
65
66
67 # ----- Routers -----
68
69 begin routers
70
71 client:
72   driver =      accept
73   condition =   ${if eq {SERVER}{server}{no}{yes}}
74   transport =   send_to_server${if eq{$local_part}{hostnotresume}{2}{1}}
75
76 server:
77   driver = redirect
78   data = :blackhole:
79
80 # ----- Transports -----
81
82 begin transports
83
84 send_to_server1:
85   driver =                      smtp
86   allow_localhost
87   hosts =                       127.0.0.1
88   port =                        PORT_D
89   helo_data =                   helo.data.changed
90 .ifdef HELO_MSG
91   host_name_extract =           HELO_MSG
92 .endif
93 .ifdef VALUE
94   tls_resumption_hosts =        *
95 .else
96   tls_resumption_hosts =        :
97 .endif
98   tls_verify_certificates =     CDIR/CA/CA.pem
99   tls_verify_cert_hostnames =   ${if match {$local_part}{^noverify} {*}{:}}
100   tls_try_verify_hosts =        *
101   event_action =                ${acl {log_resumption}}
102
103 send_to_server2:
104   driver = smtp
105   allow_localhost
106   hosts = HOSTIPV4
107   port = PORT_D
108   hosts_try_fastopen =  :
109   tls_verify_certificates =     CDIR/CA/CA.pem
110   tls_verify_cert_hostnames =   :
111   event_action =                ${acl {log_resumption}}
112
113
114 # ----- Retry -----
115
116
117 begin retry
118
119 * * F,5d,10s
120
121
122 # End