Package: exim4-config Version: 4.89-2+deb9u3 Severity: wishlist Dear Maintainer,
in router/200-exim4-config_primary i would like to recommend expanding this list as follows: # Don't allow domains whose single MX (or A) record is a # "special-use IPv4 address", as listed in RFC 3330. ignore_target_hosts = <; 0::0/0 ; \ # Hosts on "this network"; RFC 1700 (page 4) states that these # are only allowed as source addresses 0.0.0.0/8 ; \ # Private networks, RFC 1918 10.0.0.0/8 ; 172.16.0.0/12 ; 192.168.0.0/16 ; \ # Carrier NAT, RFC6598 100.64.0.0/10 ; \ # Internet host loopback address, RFC 1700 (page 5) 127.0.0.0/8 ; \ # "Link local" block 169.254.0.0/16 ; \ # "TEST-NET-1" - should not appear on the public Internet 192.0.2.0/24 ; \ # "TEST-NET-2" - should not appear on the public Internet 198.51.100.0/24 ; \ # 6to4 relay anycast addresses, RFC 3068 192.88.99.0/24 ; \ # Network interconnect device benchmark testing, RFC 2544 198.18.0.0/15 ; \ # "TEST-NET-3" - should not appear on the public Internet 203.0.113.0/24 ; \ # Multicast addresses, RFC 3171 224.0.0.0/4 ; \ # Reserved for future use, RFC 1700 (page 4) 240.0.0.0/4 -- Package-specific info: Exim version 4.92 #5 built 02-Mar-2019 14:59:31 Copyright (c) University of Cambridge, 1995 - 2018 (c) The Exim Maintainers and contributors in ACKNOWLEDGMENTS file, 2007 - 2018 Berkeley DB: Berkeley DB 5.3.28: (September 9, 2013) Support for: crypteq iconv() IPv6 GnuTLS move_frozen_messages DANE DKIM DNSSEC Event OCSP PRDR SOCKS TCP_Fast_Open Lookups (built-in): lsearch wildlsearch nwildlsearch iplsearch cdb dbm dbmjz dbmnz dnsdb dsearch nis nis0 passwd Authenticators: cram_md5 plaintext Routers: accept dnslookup ipliteral manualroute queryprogram redirect Transports: appendfile/maildir/mailstore autoreply lmtp pipe smtp Fixed never_users: 0 Configure owner: 0:0 Size of off_t: 8 Configuration file search path is /etc/exim4/exim4.conf:/var/lib/exim4/config.autogenerated Configuration file is /var/lib/exim4/config.autogenerated -- System Information: Debian Release: 9.8 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 4.19.0-0.bpo.4-cloud-amd64 (SMP w/4 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: sysvinit (via /sbin/init) Versions of packages exim4-config depends on: ii adduser 3.115 ii debconf [debconf-2.0] 1.5.61 exim4-config recommends no packages. exim4-config suggests no packages. -- Configuration Files: /etc/exim4/passwd.client changed [not included] -- debconf information excluded