Exim missing lookup type dsearch

yapadu

Verified User
Joined
Jun 26, 2009
Messages
38
Later builds of Exim 4.93 added a new 'feature' that prevents you from directly using a domain name or local part in your configuration or scripts.

In order to prevent a type of 'script injection' you must clean your domain name & local part.

The suggested method is to use the dsearch lookup and verify a domain name against a list of files or directory names. This gives you a clean variable name that you can then use.

All that to say, the directadmin version does not contain dsearch.

Here is what exim -vB shows for mine in reference to local lookups:

Lookups (built-in): lsearch wildlsearch nwildlsearch iplsearch cdb dbm dbmjz dbmnz dnsdb

Here is what some other people (non directadmin I guess) have in theirs:

Lookups (built-in): lsearch wildlsearch nwildlsearch iplsearch cdb dbm dbmjz dbmnz dnsdb dsearch ldap ldapdn ldapm nis nis0 nisplus passwd sqlite

How can I compile in dsearch so I can clean my local part & domain part according to Exim's new required security systems?
 
Back
Top