logs archiveIRC Archive / Freenode / #exim / 2015 / August / 1 / 1
uwjesq
Hello. When I need to add acl rules and I am using split configs do I always leave the original configs untouched and add my own?
xrchz
Does control=fakereject in acl_check_data allow variables like $spam_score to be used in the router?
I tried a router with a condition ${if def:spam_score} but it seems never to fire (even when I know the spam condition fired in the acl, from checking spamassassin's logs)
am I doing something that would be expected to work here, or is it wrong to think the $spam_xxx variables will be available for router conditions?
uwjesq
xrchz: I would help if I could.
xrchz
uwjesq: but you don't know?
uwjesq
xrchz: I have no idea.
xrchz
I tried using an acl variable instead
waiting for some spam to arrive to see if it works :)
henk
xrchz: GTUBE?
uwjesq: "split config" is a concept special to debian(-based) configs, i.e. not an exim feature per se. Since I use that config scheme too, I can answer though: Its not always possible to leave the provided config files untouched. But whenever possible, you should.
uwjesq
henk: You have a good memory to remember I have asked this. And thanks a lot. Doing things the right way means a lot to me.
henk: Imho it is madness not to split up this huge config.
henk
uwjesq: ah, its only been 7 hours ago and there has not been much traffic, so its only scrolled halfway up my terminal & nothing to do with a good memory (;
         

uwjesq
henk: People might disagree. But then people are still driving cars and drink alcohol and smoke and buy pants for 5 dolars.
henk
uwjesq: ack, IMHO every software should support splitted configs! And I consider it a great service to the user that debian provides a mechanism to do that for exim, among other softwares. Not everyone sees it that way though & I never really understood why.
hrhr, yeah, well, people are stupid d-: and that is not to say that Im not: Im about to smoke a cigarette now and I drank alcohol yesterday (;
uwjesq
henk: I wish there was a package manager for config files.
henk: There are some solutions but they are cumbersome to use.
henk: They can't distinguish between settings that are usefull for everyone and settings that I want to keep to myself.
henk: We are living in the backwards days.
henk: There has to be enough man power on the planet to fix things, no?
henk
uwjesq: The closest one can get to that is probably tools like puppet. Is that the kind of thing you mean?
One of the problems is that there are far too many different ways of configuring different software. Too many config file formats, too many different parsers with different possibilities, etc.
just consider openldap with its possibility to store the config in the ldap tree, or centreon saving its config in an sql database &
uwjesq
henk: ansible is pretty usefull, but for another set of problems. Think of it like apt-get. apt-config install exim-spamassassinn
henk: The same problem is of that there are too many of them is with software packages. And it is solved sort of by offering most of them through a package manager.
henk
puppet, ansible, cfengine, cdist, chef, & they are all in the same league more or less.
uwjesq
henk: cfengine sounds specific and cool.
henk: Well. I use them. But for exim for example I could use a great repository of recipes that are as easy to install as apt-get or pip install. Batteries included.
henk: I am pretty sure there is nothing like that.
henk: But I think if I realy want it, I can do it.
henk
uwjesq: Yeah, there probably isnt, but just as with "puppetforge" (which is a repository for puppet modules), there would have to be a standard way of doing things, so the recipes fit into all (or at least most) setups without causing any problems and so on & In the end, checking for that and testing and so on would probably not be much less work than just finding the concept for a solution (as on
wiki.exim.org e.g.) and weaving it into ones setup &
uwjesq
henk: Indeed. That is more realistic.
henk: What I have said is more like an utopic science fiction.
henk
uwjesq: oh ok, yes, for an utopia that is a very nice idea (: Id love it!
uwjesq
apt-get install exim-spamhaus-acl
henk
Well, in a given system like the debian config-scheme, something like that might even work & But not universally &
uwjesq
henk: I like this a lot.
henk: If I ever decide to do this I will ask a lot of people to send me interesting parts of their configs with comments.
henk
uwjesq: hehe, think of me when you do, I might have something (:
uwjesq
henk: I probably won't ever. But do you want to connect via github?
henk
uwjesq: hm, I dont think I even have an account there (;
uwjesq
henk: lol. It is the only social network I am in.
henk: You can't write text messages or talk to people. You tell your story with your commits.
henk
github is a social network? I didnt even know that (:
uwjesq
henk: Not in the traditional sense.
henk
ah ok 'g' Im only on xing and linkedin, but mainly for work reasons &
ok, I do have a twitter account too, but only tweeted once and am generally annoyed by it &
         

uwjesq
henk: There is diaspora. A free and open social network that is not hungry for your data.
henk: If you post config snippets on github or diaspora, you would have at least me to look at.
henk: As an audience I mean.
henk
uwjesq: oh, right, I did try that too once, but for some reason did not stay on it & damn, I have to keep my list of notes regarding software and services up to date to remember such things /-: