spf dynamic module
[exim.git] / test / confs / 4520
1 # Exim test configuration 4520
2
3 SERVER=
4
5 .include DIR/aux-var/tls_conf_prefix
6
7 primary_hostname = myhost.test.ex
8
9 # ----- Main settings -----
10
11 acl_smtp_rcpt = accept encrypted = *
12 acl_smtp_dkim = check_dkim
13 acl_smtp_data = check_data
14
15 log_selector = +dkim_verbose
16 dkim_verify_hashes = sha256 : sha512 : sha1
17 .ifdef MSIZE
18 dkim_verify_min_keysizes = MSIZE
19 .endif
20
21 queue_only
22 queue_run_in_order
23
24
25 begin acl
26
27 check_dkim:
28 .ifdef BAD
29   warn  logwrite =      ${lookup dnsdb{defer_never,txt=_adsp._domainkey.$dkim_cur_signer}{$value}{unknown}}
30 .endif
31 .ifdef OPTION
32   warn  condition =     ${if eq {$dkim_algo}{rsa-sha1}}
33         condition =     ${if eq {$dkim_verify_status}{pass}}
34         logwrite =      NOTE: forcing dkim verify fail (was pass)
35         set dkim_verify_status = fail
36         set dkim_verify_reason = hash too weak
37 .endif
38   warn
39         logwrite = signer: $dkim_cur_signer bits: $dkim_key_length
40 .ifndef STRICT
41   accept
42 .endif
43
44 check_data:
45   accept logwrite = ${authresults {$primary_hostname}}
46
47 # End