~mdw / exim-config / blame
| Commit | Line | Data |
|---|---|---|
| 185b5456 MW |
1 | ### -*-m4-*- |
| 2 | ### | |
| 3 | ### Basic configuration settings for distorted.org.uk Exim configuration | |
| 4 | ### | |
| 5 | ### (c) 2012 Mark Wooding | |
| 6 | ### | |
| 7 | ||
| 8 | ###----- Licensing notice --------------------------------------------------- | |
| 9 | ### | |
| 10 | ### This program is free software; you can redistribute it and/or modify | |
| 11 | ### it under the terms of the GNU General Public License as published by | |
| 12 | ### the Free Software Foundation; either version 2 of the License, or | |
| 13 | ### (at your option) any later version. | |
| 14 | ### | |
| 15 | ### This program is distributed in the hope that it will be useful, | |
| 16 | ### but WITHOUT ANY WARRANTY; without even the implied warranty of | |
| 17 | ### MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
| 18 | ### GNU General Public License for more details. | |
| 19 | ### | |
| 20 | ### You should have received a copy of the GNU General Public License | |
| 21 | ### along with this program; if not, write to the Free Software Foundation, | |
| 22 | ### Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. | |
| 23 | ||
| 24 | ## Master domain name. | |
| 25 | DEFCONF(master_domain, distorted.org.uk) | |
| 26 | ||
| 27 | ## The smarthost for satellite hosts. | |
| 28 | DEFCONF(smarthost, mail.distorted.org.uk) | |
| 29 | ||
| 30 | ## The user who runs verification filters. | |
| 31 | DEFCONF(filter_user, Debian-exim) | |
| 32 | ||
| 33 | ## Where the spam filter is. | |
| 34 | DEFCONF(spamd_address, 172.29.199.179) | |
| 35 | DEFCONF(spamd_port, 783) | |
| 36 | ||
| 37 | ## Default spam limit for incoming mail (multiplied by ten). | |
| 38 | DEFCONF(spam_max, 50) | |
| 39 | ||
| 40 | ## Which interfaces to listen on. Exim checks for the literal string `::0' | |
| 41 | ## when setting things up: don't use `::', or we'll be tripped up by Linux's | |
| 42 | ## demented non-`IPV6_V6ONLY' behaviour. | |
| 43 | DEFCONF(interfaces, m4_ifelse(MODE, satellite, 127.0.0.1 ; ::1, | |
| 44 | 0.0.0.0 ; ::0)) | |
| 45 | ||
| 46 | ## Submission port number. (This is sometimes tweaked for testing.) | |
| 47 | DEFCONF(submission_port, 587) | |
| 48 | ||
| 49 | ## Locations of other configuration files. | |
| 50 | DEFCONF(sysconf_dir, /etc/mail) | |
| 51 | DEFCONF(userconf_dir, $home/.mail) | |
| 52 | DEFCONF(alias_file, /etc/aliases) | |
| 53 | DEFCONF(ca_dir, /etc/ca) | |
| 54 | ||
| 55 | ## User address suffix handling. | |
| 56 | DEFCONF(user_suffix_list, -* : +*) | |
| 57 | DEFCONF(user_extaddr_regexp, $acl_c_user([-+@]|\$)) | |
| 58 | DEFCONF(user_extaddr_fixup, ${sg {$local_part_suffix}{^[-+]}{}}) | |
| 59 | ||
| 60 | ## Other hosts allowed to relay mail through us. | |
| 61 | DEFCONF(relay_clients, +trusted) | |
| 62 | ||
| 63 | ## TLS-related settings. We're assuming GNUTLS here, rather than OpenSSL. | |
| 64 | ## For local connections we are very strict. For random clients, we try | |
| 65 | ## fairly hard to encourage any kind of crypto on the grounds that probably | |
| 66 | ## nobody can verify our certificate anyway. | |
| 67 | DEFCONF(good_ciphers, NONE<::>m4_dnl | |
| 68 | :+VERS-TLS1.2:+VERS-TLS1.1<::>m4_dnl | |
| 69 | :+DHE-RSA:+DHE-DSS<::>m4_dnl | |
| 70 | :+AES-256-CBC:+AES-128-CBC<::>m4_dnl | |
| 71 | :+SHA256<::>m4_dnl | |
| 72 | :+SIGN-RSA-SHA512:+SIGN-RSA-SHA384:+SIGN-RSA-SHA256:+SIGN-DSA-SHA256<::>m4_dnl | |
| 73 | :+CTYPE-X.509<::>m4_dnl | |
| 74 | :+COMP-NULL<::>m4_dnl | |
| 75 | ) | |
| 76 | DEFCONF(acceptable_ciphers, NORMAL<::>m4_dnl | |
| 77 | :-MD5<::>m4_dnl | |
| 78 | ) | |
| 79 | ||
| 80 | ###----- That's all, folks -------------------------------------------------- |