log_selector

deployment/deploy-yml.tmpl

@@ -32,6 +32,14 @@ spec:
             - name: smtp
               containerPort: 25
               protocol: TCP
+          readinessProbe:
+            tcpSocket:
+              port: 25
+            initialDelaySeconds: 5
+            periodSeconds: 10
+            timeoutSeconds: 5
+            successThreshold: 1
+            failureThreshold: 3
           volumeMounts:
             - name: exim-config
               mountPath: /etc/exim/db
@@ -66,6 +74,7 @@ metadata:
   name: exim-forwarder
 spec:
   type: LoadBalancer
+  externalTrafficPolicy: Local
   selector:
     app: exim-forwarder
   ports:

exim.conf

@@ -6,12 +6,8 @@ tls_advertise_hosts = *
 tls_certificate = /etc/exim/ssl/server.crt
 tls_privatekey = /etc/exim/ssl/server.key
 
-log_output = syslog
+log_file_path = syslog
-syslog_facility = mail
+log_selector  = -all +received +deliveries +reject
-syslog_tag = exim-forwarder
-syslog_host = 172.20.0.10
-syslog_port = 514
-
 
 # acl_smtp_connect = acl_connect
 acl_smtp_helo = acl_helo
@@ -32,11 +28,11 @@ acl_helo:
 
 acl_rcpt:
   # recipient verification
-  deny  message = User unknown
+  deny  message = Access denied (1)
       !verify = recipient
   
   # SPF check
-  deny  message = Access denied (1)
+  deny  message = Access denied (2)
         spf = fail
 
   # Greylisting
@@ -44,12 +40,12 @@ acl_rcpt:
         !seen = 72h / key=${sender_address}_${local_part}@${domain}
 
   # Rate limit
-  deny  message = Access denied (2)
+  deny  message = Access denied (3)
         ratelimit = 10 / 10m / strict
 
   accept condition = ${if match_domain{$domain}{+forward_domains}{yes}{no}}
 
-  deny  message = Access denied (x)
+  deny  message = Access denied (4)
 
 acl_data:
   warn  dkim_status = invalid