Re: [exim] spf lookup requires untained values / detaint a header

[Peter Wullinger via Exim-users]

On 08.03.22 12:35, Jeremy Harris via Exim-users wrote:

On 08/03/2022 11:18, Peter Wullinger via Exim-users wrote:

Is there a way to make this work besides a custom lookup, e.g. a

local daemon that just echos back the address once validating it is a properly

formatted IP address?

A file with the list of acceptable IP addresses (or CIDRs)
and an iplsearch with ret=key.

Thanks, that works perfectly and even comes with an option to only trust
the header for specific networks if needed:

${lookup \
{${address:$h_from:}} \
spf \
|{${lookup {$h_||X-Original-Remote-Addr:} iplsearch,ret=key 
{/etc/exim/hosts/all}}} \ } |
--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/