Today I have spent a little bit of time on trying to provide an
exim4.conf for the Debian hosts, which currently still feature exim v3.
I started by grabbing a couple of /etc/exim/exim.conf from a number of
Debian hosts. And only after a ls -l I was surprised, although the
comment on the top of the file says
# It is installed as part of the debian.org package -- don't edit this file
all the seven exim.confs were slightly different. I tried to guess which
one was the newest revision and chose merkel's configuration as starting
point.
convert4r4 produced a good starting point. It only completely fails to
convert ${lookup{alice:uid}lsearch{
I was quite surprised that LDAP is not accessed directly and even more
that
receiver_verify
was not set. I wonder whether this was done intentionally against dictionary
attacks or whether the default was accepted.