DANE: Fix 2 messages from queue case

[exim.git] / src / src / configure.default

diff --git a/src/src/configure.default b/src/src/configure.default
index 40cc333f6c68760733b21aad30704d58fedd25d0..946137fc9ff838c9eff24b01bc12c51e8e9ea675 100644 (file)
--- a/src/src/configure.default
+++ b/src/src/configure.default
@@ -169,7 +169,16 @@ acl_smtp_data =         acl_check_data
 # tls_privatekey = /etc/ssl/exim.pem
 
 # For OpenSSL, prefer EC- over RSA-authenticated ciphers
 # tls_privatekey = /etc/ssl/exim.pem
 
 # For OpenSSL, prefer EC- over RSA-authenticated ciphers

-# tls_require_ciphers = ECDSA:RSA:!COMPLEMENTOFDEFAULT
+.ifdef _HAVE_OPENSSL
+tls_require_ciphers = ECDSA:RSA:!COMPLEMENTOFDEFAULT
+.endif
+
+# Don't offer resumption to (most) MUAs, who we don't want to reuse
+# tickets.  Once the TLS extension for vended ticket numbers comes
+# though, re-examine since resumption on a single-use ticket is still a benefit.
+.ifdef _HAVE_TLS_RESUME
+tls_resumption_hosts = ${if inlist {$received_port}{587:465} {:}{*}}
+.endif

 
 # In order to support roaming users who wish to send email from anywhere,
 # you may want to make Exim listen on other ports as well as port 25, in
 
 # In order to support roaming users who wish to send email from anywhere,
 # you may want to make Exim listen on other ports as well as port 25, in


@@ -507,8 +516,8 @@ acl_check_rcpt:
   # examples of how you can get Exim to perform a DNS black list lookup at this
   # point. The first one denies, whereas the second just warns.
   #
   # examples of how you can get Exim to perform a DNS black list lookup at this
   # point. The first one denies, whereas the second just warns.
   #

-  # deny    message       = rejected because $sender_host_address is in a black list at $dnslist_domain\n$dnslist_text
-  #         dnslists      = black.list.example
+  # deny    dnslists      = black.list.example
+  #         message       = rejected because $sender_host_address is in a black list at $dnslist_domain\n$dnslist_text

   #
   # warn    dnslists      = black.list.example
   #         add_header    = X-Warning: $sender_host_address is in a black list at $dnslist_domain
   #
   # warn    dnslists      = black.list.example
   #         add_header    = X-Warning: $sender_host_address is in a black list at $dnslist_domain


@@ -578,9 +587,9 @@ acl_check_data:
   # Deny if the message contains an overlong line.  Per the standards
   # we should never receive one such via SMTP.
   #
   # Deny if the message contains an overlong line.  Per the standards
   # we should never receive one such via SMTP.
   #

-  deny    message    = maximum allowed line length is 998 octets, \
+  deny    condition  = ${if > {$max_received_linelength}{998}}
+          message    = maximum allowed line length is 998 octets, \

                        got $max_received_linelength
                        got $max_received_linelength

-          condition  = ${if > {$max_received_linelength}{998}}

 
   # Deny if the headers contain badly-formed addresses.
   #
 
   # Deny if the headers contain badly-formed addresses.
   #


@@ -801,15 +810,11 @@ begin transports
 
 
 # This transport is used for delivering messages over SMTP connections.
 
 
 # This transport is used for delivering messages over SMTP connections.

-# Refuse to send any message with over-long lines, which could have
-# been received other than via SMTP. The use of message_size_limit to
-# enforce this is a red herring.

 
 remote_smtp:
   driver = smtp
 
 remote_smtp:
   driver = smtp

-  message_size_limit = ${if > {$max_received_linelength}{998} {1}{0}}
-.ifdef _HAVE_PRDR
-  hosts_try_prdr = *
+.ifdef _HAVE_TLS_RESUME
+  tls_resumption_hosts = *

 .endif
 
 
 .endif
 
 


@@ -822,7 +827,6 @@ remote_smtp:
 
 smarthost_smtp:
   driver = smtp
 
 smarthost_smtp:
   driver = smtp

-  message_size_limit = ${if > {$max_received_linelength}{998} {1}{0}}

   multi_domain
   #
 .ifdef _HAVE_TLS
   multi_domain
   #
 .ifdef _HAVE_TLS


@@ -848,9 +852,9 @@ smarthost_smtp:
 .ifdef _HAVE_GNUTLS
   tls_require_ciphers = SECURE192:-VERS-SSL3.0:-VERS-TLS1.0:-VERS-TLS1.1
 .endif
 .ifdef _HAVE_GNUTLS
   tls_require_ciphers = SECURE192:-VERS-SSL3.0:-VERS-TLS1.0:-VERS-TLS1.1
 .endif

+.ifdef _HAVE_TLS_RESUME
+  tls_resumption_hosts = *

 .endif
 .endif

-.ifdef _HAVE_PRDR
-  hosts_try_prdr = *

 .endif
 
 
 .endif
 
 


@@ -863,7 +867,7 @@ smarthost_smtp:
 
 local_delivery:
   driver = appendfile
 
 local_delivery:
   driver = appendfile

-  file = /var/mail/$local_part_verified
+  file = /var/mail/$local_part_data

   delivery_date_add
   envelope_to_add
   return_path_add
   delivery_date_add
   envelope_to_add
   return_path_add