[EXIM] I'm confused with anti-spam and relaying options

Top Page
Delete this message
Reply to this message
Author: Andromeda
Date:  
To: exim-users
Subject: [EXIM] I'm confused with anti-spam and relaying options
Hi all,

I'm new, so please bear with me. I know that Exim is terribly flexible when
it comes to anti-spam and relaying measures. However I'm rather confused...
I use RBL already which does help a great deal, but I want to secure my
system completely, including disabling relaying.

Unfortunately I am the admin of a host that handles virtual domains, and
the users of those virtual domains are using this host to send email from
anywhere in the region, from various ISPs and other places.

This means I cannot use restrictions based on IPs or domains. I am
wondering whether anyone is willing to give me pointers on how to do the
below using rules.

My system has the local domains in a file called "domains", and the
recipients in files called "$domain-aliases" (e.g. one domain is
"sample.com" and its email recipients are in "sample.com-aliases"). The
format of the $domain-aliases file is "sample: joe@???" where sample
is the localpart of that specific domain.

Sender: The actual From: field
Recipient: Any of the local parts in To:/CC:/BCC:

Incoming:

1. Incoming mail is checked for standard RBL.
2. If the sender is not RBL'ed, check it against a local domain set (I've
seen some examples, but I'm not sure how to implement it) and kill it with
5xx error code.
3. If the sender is not local (using the "domains" and "$domain-aliases"
files), but the recipient is not of any of the local recipients either
(using the "domains" and "$domain-aliases" files), reject with a 5xx code.
4. If sender passes all tests, and recipients pass all tests, then deliver
locally.

Outgoing:

1. Check if the sender is a legit local user (using the "domains" and
"$domain-aliases" files). If so, send the email.
2. If the sender is not local, but the recipient is not of any of the local
recipients either, reject with a 500 code (I don't even want the system to
retry).

I believe the above would be easy to implement, but I have NO clue how...
I'd appreciate some help on how to do this. I guess I'll figure out more
customized checking on my own.

I appreciate your help in advance.

With Regards

Andromeda

==============================================================
= The Andromeda HTML Workshop - http://www.htmlworkshop.com/ =
=                Home of Search & Replace 98                 =
==============================================================



--
*** Exim information can be found at http://www.exim.org/ ***