The mailing list for listmasters using Sympa

[Olivier Salaün - CRU <address@concealed>]

Hi David,

David Mayo a écrit :

I am looking at defining a sceneri so that all our users on campus can review lists but no-one off-campus can review them.

I'm interested in the following lines in this scenari:

  match ([remote_host],/[conf->host]$/)      smtp,md5,smime  -> do_it
  match([sender],/[conf->host]$/)            smtp,md5,smime    -> do_it

Can you please confirm:
- What is the value of conf->host ?
-- Is it the value of http_host in my robot.conf, in my case 'lists.bath.ac.uk'
-- Some other value?
  

The conf->host variable refers to the sympa.conf 'host' parameter or to the robot.conf 'host' parameter if your are within a Sympa virtual host.
The *.intranet scenario files we are provide are only sample ones ; you should probably customize them with hard-coded values instead of [conf->host] that correspond to your DNS.

Note that we know that the documentation of Sympa misses a list of available variables and their semantics. We plan to fill this gap soon...

If I have assumed correctly, then none of our hosts end in .lists.bath.ac.uk so this would never match.

- How is [remote_host] generated?
-- Is it supposed to be the DNS name of the HTTP client in a web page context?
  

That's right ; it is provided by the Apache server.

-- Is it set to the last mail relay that the email passes through in an email context? (I assume not)
  

The [remote_host] and [remote_addr] variable are not set when Sympa is accessed through its mail interface. Therefore you should add a rule to the scenario that checks the domain part of the sender's email address to have an equivalent autorization rule for commands processed through Sympa mail interface :

match([sender],/bath.ac.uk$/)        smtp    -> do_it

I have managed to get a working scenari by using the following instead:

  match([remote_addr],/^138.38./)       smtp,md5,smime    -> do_it
  match([sender],/.bath.ac.uk$/)        smtp,md5,smime    -> do_it

Which isn't a problem, but if the default intranet scenari doesn't work in our situation I wondered if I was doing something wrong.
  

No you've customized it the right way, as I mentionned above.