exim_path = EXIM_PATH
keep_environment =
+add_environment = SSLKEYLOGFILE=DIR/spool/sslkeys
host_lookup_order = bydns
spool_directory = DIR/spool
log_file_path = DIR/spool/log/SERVER%slog
gecos_name = CALLER_NAME
chunking_advertise_hosts = *
tls_advertise_hosts = ${if eq {SRV}{tls} {*}}
-
+.ifdef _HAVE_REQTLS
+tls_advertise_requiretls = :
+.endif
+.ifdef _HAVE_PIPE_CONNECT
+pipelining_connect_advertise_hosts = :
+.endif
+.ifdef _HAVE_DMARC
+dmarc_tld_file =
+.endif
+.ifdef _OPT_MAIN_LIMITS_ADVERTISE_HOSTS
+limits_advertise_hosts = !*
+.endif
# ----- Main settings -----
trusted_users = CALLER
queue_only
smtp_receive_timeout = 2s
-log_selector = +received_recipients
-tls_certificate = ${if eq {SERVER}{server}{DIR/aux-fixed/cert1}fail}
-tls_privatekey = ${if eq {SERVER}{server}{DIR/aux-fixed/cert1}fail}
+.ifdef _HAVE_DKIM
+log_selector = +received_recipients +millisec +dkim_verbose
+.else
+log_selector = +received_recipients +millisec
+.endif
+
+.ifdef _OPT_MAIN_TLS_CERTIFICATE
+tls_certificate = DIR/aux-fixed/cert1
+.endif
ALLOW
warn message = X-acl-message-linecount: $message_linecount
accept
-
# ----- Routers -----
begin routers
to_server:
driver = accept
condition = ${if !eq {SERVER}{server}}
- transport = remote_smtp${if eq {OPT}{dkim} {_dkim}}
+ transport = remote_smtp${if eq {SRV}{dkim} {_dkim}}
errors_to = ""
fail_remote_domains:
delivery_date_add
envelope_to_add
file = DIR/test-mail/$local_part
+ create_file = DIR/test-mail
headers_add = "X-body-linecount: $body_linecount\n\
X-message-linecount: $message_linecount\n\
X-received-count: $received_count"
driver = smtp
hosts = 127.0.0.1
port = PORT_S
+ hosts_try_fastopen = :
+ tls_verify_certificates = DIR/aux-fixed/cert1
+ tls_verify_cert_hostnames =
allow_localhost
command_timeout = 2s
final_timeout = 2s
- headers_rewrite = *@* CALLER_NAME@$domain fs
remote_smtp_dkim:
driver = smtp
hosts = 127.0.0.1
port = PORT_S
+ hosts_try_fastopen = :
+ tls_verify_certificates = DIR/aux-fixed/cert1
+ tls_verify_cert_hostnames =
allow_localhost
command_timeout = 2s
final_timeout = 2s
- headers_rewrite = *@* CALLER_NAME@$domain fs
-.ifdef OPT
+.ifdef _HAVE_DKIM
+.ifdef SRV
dkim_domain = test.ex
dkim_selector = sel
dkim_private_key = DIR/aux-fixed/dkim/dkim.private
dkim_sign_headers = LIST
.endif
.endif
+.endif
# ----- Retry -----