.code
${quote_<lookup-type>:<string>}
.endd
-For example, the safest way to write the NIS+ query is
+For example, the way to write the NIS+ query is
.code
[name="${quote_nisplus:$local_part}"]
.endd
+.cindex "tainted data" "in lookups"
+.new
+&*All*& tainted data used in a query-style lookup must be quoted
+using a mechanism appropriate for the lookup type.
+.wen
See chapter &<<CHAPexpand>>& for full coverage of string expansions. The quote
operator can be used for all lookup types, but has no effect for single-key
lookups, since no quoting is ever needed in their key strings.
The text in a &%message%& modifier is literal; any quotes are taken as
literals, but because the string is expanded, backslash escapes are processed
-anyway. If the message contains newlines, this gives rise to a multi-line SMTP
+anyway.
+If the message contains newlines, this gives rise to a multi-line SMTP
response.
+A long message line will also be split into multi-line SMTP responses,
+on word boundaries if possible.
.vindex "&$acl_verify_message$&"
While the text is being expanded, the &$acl_verify_message$& variable
.vitem &*control&~=&~fakedefer/*&<&'message'&>
.cindex "fake defer"
.cindex "defer, fake"
+.cindex fakedefer
This control works in exactly the same way as &%fakereject%& (described below)
except that it causes an SMTP 450 response after the message data instead of a
550 response. You must take care when using &%fakedefer%& because it causes the
.vitem &*control&~=&~fakereject/*&<&'message'&>
.cindex "fake rejection"
.cindex "rejection, fake"
+.cindex fakereject
This control is permitted only for the MAIL, RCPT, and DATA ACLs, in other
words, only when an SMTP message is being received. If Exim accepts the
message, instead the final 250 response, a 550 rejection message is sent.
There is no harm in attempting to remove the same header twice nor in removing
a non-existent header. Further header specifiers for removal may be accumulated
during the DATA and MIME ACLs, after which matching headers are removed
-if present. In the case of non-SMTP messages, remove speifiers are
+if present. In the case of non-SMTP messages, remove specifiers are
accumulated during the non-SMTP ACLs, and are acted on after
all the ACLs have run. If a message is rejected after DATA or by the non-SMTP
ACL, there really is no effect because there is no logging of what headers
.next
Limiting the concurrency of specific transports (when &%max_parallel%& is set
in a transport)
+.next
+Recording EHLO-time facilities advertised by hosts
.endlist