====== reject_system_uids ======

Reject incoming mail to system users that have no entry in ''/etc/aliases''.

  - 300_exim4-config_real_local -> 590_exim4-config_real_local
  - 450_local_reject_system_uids
<code>
### router/450_local_reject_system_uids
#################################

# From bug #307768

# MSS: This router prevents local delivery to UIDs outside the normal
# user range (1000-29999 inclusive).  Ideally, if used in the debian
# package, this router would get those values from /etc/adduser.conf,
# but for my local config, manually testing the magic numbers is
# acceptable.
#
# All local_part_prefixes and _suffixes used at the site should be
# allowed optionally in this router, to ensure that they can't be
# userd to skirt this router's check

reject_system_uids:
   driver = redirect
   domains = +local_domains
   local_part_prefix = real-
   local_part_prefix_optional = true
   check_local_user
   condition = ${if or{{<{$local_user_uid}{1000}}{>{$local_user_uid}{29999}}}}
   allow_fail
   data = :fail: System account $local_part does not accept email
   no_more
</code>

----
see also [[bdo>307768]]