X-Git-Url: https://vcs.fsf.org/?p=exim.git;a=blobdiff_plain;f=src%2Fsrc%2Fconfigure.default;h=245cc3925100bc24d05dfc3a20795a9e5b72a52b;hp=555dec3eca43cf615927b7158d2c8c970dd4a3aa;hb=2f6c7b1aa0bf4a675d0ec95646b27f5c71bf06c2;hpb=c8f419afe4b673ce93b7db07eb3093d8a07afb5f diff --git a/src/src/configure.default b/src/src/configure.default index 555dec3ec..245cc3925 100644 --- a/src/src/configure.default +++ b/src/src/configure.default @@ -265,6 +265,11 @@ dns_dnssec_ok = 1 # Enable an efficiency feature. We advertise the feature; clients # may request to use it. For multi-recipient mails we then can # reject or accept per-user after the message is received. +# This supports recipient-dependent content filtering; without it +# you have to temp-reject any recipients after the first that have +# incompatible filtering, and do the filtering in the data ACL. +# Even with this enabled, you must support the old style for peers +# not flagging support for PRDR (visible via $prdr_requested). # .ifdef _HAVE_PRDR prdr_enable = true @@ -658,6 +663,9 @@ smarthost: transport = smarthost_smtp route_data = ROUTER_SMARTHOST ignore_target_hosts = <; 0.0.0.0 ; 127.0.0.0/8 ; ::1 +.ifdef _HAVE_DNSSEC + dnssec_request_domains = * +.endif no_more .else @@ -682,7 +690,9 @@ dnslookup: ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8 # if ipv6-enabled then instead use: # ignore_target_hosts = <; 0.0.0.0 ; 127.0.0.0/8 ; ::1 +.ifdef _HAVE_DNSSEC dnssec_request_domains = * +.endif no_more # This closes the ROUTER_SMARTHOST ifdef around the choice of routing for @@ -805,7 +815,6 @@ remote_smtp: driver = smtp message_size_limit = ${if > {$max_received_linelength}{998} {1}{0}} .ifdef _HAVE_DANE - dnssec_request_domains = * hosts_try_dane = * .endif .ifdef _HAVE_PRDR