Commit | Line | Data |
---|---|---|
185b5456 MW |
1 | ### -*-m4-*- |
2 | ### | |
3 | ### Basic configuration settings for distorted.org.uk Exim configuration | |
4 | ### | |
5 | ### (c) 2012 Mark Wooding | |
6 | ### | |
7 | ||
8 | ###----- Licensing notice --------------------------------------------------- | |
9 | ### | |
10 | ### This program is free software; you can redistribute it and/or modify | |
11 | ### it under the terms of the GNU General Public License as published by | |
12 | ### the Free Software Foundation; either version 2 of the License, or | |
13 | ### (at your option) any later version. | |
14 | ### | |
15 | ### This program is distributed in the hope that it will be useful, | |
16 | ### but WITHOUT ANY WARRANTY; without even the implied warranty of | |
17 | ### MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
18 | ### GNU General Public License for more details. | |
19 | ### | |
20 | ### You should have received a copy of the GNU General Public License | |
21 | ### along with this program; if not, write to the Free Software Foundation, | |
22 | ### Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. | |
23 | ||
24 | ## Master domain name. | |
25 | DEFCONF(master_domain, distorted.org.uk) | |
26 | ||
27 | ## The smarthost for satellite hosts. | |
28 | DEFCONF(smarthost, mail.distorted.org.uk) | |
29 | ||
30 | ## The user who runs verification filters. | |
31 | DEFCONF(filter_user, Debian-exim) | |
32 | ||
33 | ## Where the spam filter is. | |
34 | DEFCONF(spamd_address, 172.29.199.179) | |
35 | DEFCONF(spamd_port, 783) | |
36 | ||
37 | ## Default spam limit for incoming mail (multiplied by ten). | |
38 | DEFCONF(spam_max, 50) | |
39 | ||
40 | ## Which interfaces to listen on. Exim checks for the literal string `::0' | |
41 | ## when setting things up: don't use `::', or we'll be tripped up by Linux's | |
42 | ## demented non-`IPV6_V6ONLY' behaviour. | |
43 | DEFCONF(interfaces, m4_ifelse(MODE, satellite, 127.0.0.1 ; ::1, | |
44 | 0.0.0.0 ; ::0)) | |
45 | ||
d411be33 MW |
46 | ## Main and submission port numbers. (This is sometimes tweaked for |
47 | ## testing.) | |
48 | DEFCONF(smtp_port, 25) | |
185b5456 MW |
49 | DEFCONF(submission_port, 587) |
50 | ||
51 | ## Locations of other configuration files. | |
52 | DEFCONF(sysconf_dir, /etc/mail) | |
53 | DEFCONF(userconf_dir, $home/.mail) | |
54 | DEFCONF(alias_file, /etc/aliases) | |
55 | DEFCONF(ca_dir, /etc/ca) | |
56 | ||
57 | ## User address suffix handling. | |
58 | DEFCONF(user_suffix_list, -* : +*) | |
59 | DEFCONF(user_extaddr_regexp, $acl_c_user([-+@]|\$)) | |
60 | DEFCONF(user_extaddr_fixup, ${sg {$local_part_suffix}{^[-+]}{}}) | |
61 | ||
62 | ## Other hosts allowed to relay mail through us. | |
63 | DEFCONF(relay_clients, +trusted) | |
64 | ||
65 | ## TLS-related settings. We're assuming GNUTLS here, rather than OpenSSL. | |
66 | ## For local connections we are very strict. For random clients, we try | |
67 | ## fairly hard to encourage any kind of crypto on the grounds that probably | |
68 | ## nobody can verify our certificate anyway. | |
69 | DEFCONF(good_ciphers, NONE<::>m4_dnl | |
b6d74252 | 70 | :+VERS-TLS1.2:+VERS-TLS1.1:+VERS-TLS1.0<::>m4_dnl |
185b5456 MW |
71 | :+DHE-RSA:+DHE-DSS<::>m4_dnl |
72 | :+AES-256-CBC:+AES-128-CBC<::>m4_dnl | |
b6d74252 | 73 | :+SHA256:+SHA384:+SHA512:+SHA1<::>m4_dnl |
185b5456 MW |
74 | :+SIGN-RSA-SHA512:+SIGN-RSA-SHA384:+SIGN-RSA-SHA256:+SIGN-DSA-SHA256<::>m4_dnl |
75 | :+CTYPE-X.509<::>m4_dnl | |
76 | :+COMP-NULL<::>m4_dnl | |
77 | ) | |
78 | DEFCONF(acceptable_ciphers, NORMAL<::>m4_dnl | |
79 | :-MD5<::>m4_dnl | |
80 | ) | |
81 | ||
82 | ###----- That's all, folks -------------------------------------------------- |