Exim简介

#系统用户
#先处理操作系统的系统用户，比如mail，root等。
#Check_local_user指令让Exim去检测是否为系统用户，如果是，
#则将邮件交给名为local_transport的Transport投递
localuser:
    driver = accept
    check_local_user
    transport = local_delivery

#自动回复
#前置条件是：发件人不是形如-request@, owner-且收件人属性中定义了mailReplyText

gen_auto_reply:
    driver    = accept
    transport = auto_reply
    senders   = !^.*-request@.* : !^owner-.*@.* : \
                !^postmaster@.* : ! ^listmaster@.* : \
                !^mailer-daemon@.*
    condition = ${if eq {${extract {mailReplyText}{RCPT_USER_DATA} }} \
                  {} {no}{yes}}
    unseen

#本机邮件
#作者所在的单位采用了单域多机的模式，即用分散的机器存储同一个域名下的用户的邮件。
#前置条件是：收件人属性中定义的mailHost值与当前机器的名字相同
in_this_host:
    driver = accept
    transport = save_this_host_maildir
    condition  = ${if eq {TBOX} {${extract {mailHost} \ 
                   {RCPT_USER_DATA}}} {yes}{no}}

#同域，非本机邮件
#前置机件是：域名在local_domains列表中。Local_domains是一个域名列表，在配置文件前面定义的。
#
not_in_this_host_but_in_this_domain:
    driver = manualroute
    domains = +local_domains
    route_data =  ${extract {mailHost} {RCPT_USER_DATA}}
    transport = redirect_to_real_server

#邮件监控
#前置条件：发件人的域名在monitored_domains列表中。
#
save_a_copy_of_outgoing_mail:
    driver = accept
    domains = +monitored_domains
    transport = copy_outgoing
    unseen

#外域邮件
#前置条件：收件人的域名不在local_domains域名列表中
#
not_in_this_host_and_not_in_this_domain:
    driver = manualroute
    domains = !+local_domains
    transport = redirect_to_hq_mailserver
    route_data = mailhub.mycorp.com

#产生自动回复，但不影响原始邮件auto_reply:    driver  = autoreply    from    = $local_part@mycorp.com    to      = $sender_address    subject = "AR: $h_subject"    text    = ${extract {mailReplyText}{RCPT_USER_DATA}}#本机邮件#用appendfile Transport#采用maildir格式，支持空间配额，自动建立目录#save_this_host_maildir:    driver = appendfile    create_directory = true    mode = 0700    maildir_format = true    directory = /maildata/${extract {mailMessageStore} \                 {RCPT_USER_DATA}}/Maildir    quota = ${extract {mailQuotaSize}{RCPT_USER_DATA} \               {$value} {QUOTA_SIZE}}    quota_filecount = ${extract {mailQuotaCount}{RCPT_USER_DATA} \                        {$value} {QUOTA_FILE_COUNT}                       }    quota_warn_threshold = 75%#非本机邮件#用smtp Transport#目的地SMTP服务器的地址在前面Router中的route_data中指定redirect_to_real_server:    driver = smtp#非本域邮件#用smtp Transport#redirect_to_hq_mailserver:    driver = smtp#系统用户邮件#也用appendfile Transportlocal_delivery:    driver = appendfile    file = /var/mail/$local_part    delivery_date_add    envelope_to_add    return_path_add#邮件监控#根据发件人的地址进行归类#copy_outgoing:    driver = appendfile    create_directory    mode = 0700    maildir_format    directory = /var/mail/archive/${sender_address_local_part}/sent

################################################################################
# Recipients data
################################################################################
#定义了常量，在后面的lookup中引用
#LDAP_BASEDN是前面定义的另一个常量
RCPT_LOOKUP_URL  = LDAP_BASEDN??sub? \
                    (&(| \
                       (mail=$local_part@$domain) \
                       (mailAlternateAddress=$local_part@$domain) \
                       ) \
                      (accountStatus=active))
RCPT_USER_DATA   = ${lookup ldap{RCPT_LOOKUP_URL}}

ldap_login:
    driver           = plaintext
    public_name      = LOGIN
    server_prompts   = Username:: : Password::
    server_condition = ${if crypteq {$2} {AUTH_USER_PASS} {yes}{no}}
    server_set_id    = $1
    client_send      = : $1 : $2

ldap_cram_md5:
    driver           = cram_md5
    public_name      = CRAM-MD5
    server_secret    = ${AUTH_USER_PASS}
    server_set_id    = $1

acl_check_rcpt:

    accept  hosts         = :

    deny    local_parts   = ^.*[@%!/|] : ^\\.

    accept  local_parts   = postmaster
            domains       = +local_domains


    deny    message       = ERR_MSG_TOO_MANY_RECIPIENTS
            condition     = ${if > {$recipients_count} \
                             {SNDR_USER_RCPT_MAX} {yes}{no} }

    accept  domains       = +local_domains
            endpass
            message       = ERR_MSG_NO_SUCH_RECIPIENT
            verify        = recipient
            
    accept  domains       = !+local_domains
            endpass       
            message       = ERR_MSG_AUTHEN_NEEDED
            condition     = ${if !eq {$authenticated_id} {} {yes}{no}}
            message       = ERR_MSG_SNDR_NIDENT_AUTHID
            condition     = ${if eq {$sender_address_local_part}\
                             {$authenticated_id} {yes}{no}}
            message       = ERR_MSG_DOMAIN_NOT_ALLOWED
            condition     = ${if eq {yes} {${extract \
                             {sendToExternalSystem} {AUTH_USER_DATA}}} \
                             {yes}{no}}
            
    accept  hosts         = +relay_from_hosts

    deny    message       = relay not permitted


acl_check_data:
    deny    message       = ERR_MSG_MESG_SIZE_TOO_LARGE
            condition     = ${if >{$message_size}{SNDR_USER_SIZE_MAX} \
                              {yes}{no}}