[Exim] relaying problem

Top Page
Delete this message
Reply to this message
Author: Hub Dohmen
Date:  
To: exim-users
Subject: [Exim] relaying problem
This is a multi-part message in MIME format.
--
[ Picked text/plain from multipart/alternative ]
Hi!


I have a problem, running Exim 3.36.

Spammers are abusing my system by sending email thru Exim using one of the domains we host.

I thought to solve this problem by enabling AUTH. But that does not work: we can't receive email anymore, because other mailhosts have to AUTH 2.

So, I wonder, can you help me?

The localdomains are listed in: /usr/exim/domains.

This could be the solution:
When a msg arrives, Exim checks the sender to see if it's from one of the local domains. If it is, it asks to AUTH. (To block spammers who use local domains), if the msg is send to a local domain is it received without AUTH.

Is this possible? Or could it be done in v 4.10?

This is my current configure:



######################################################################
#                  Runtime configuration file for Exim               #
######################################################################


######################################################################
#                    MAIN CONFIGURATION SETTINGS                     #
######################################################################


#auth_hosts = *
#host_auth_accept_relay = *



rbl_domains = rbl.maps.vix.com


sender_address_relay = lsearch*;/usr/exim/domains
host_accept_relay = *

# sender_verify = true
# host_reject_recipients = 195.86.84.136
# sender_host_reject_relay = *
# sender_host_reject_relay = lsearch*;/usr/exim/accts/${domain}.block
# host_reject_recipients = lsearch*;/usr/exim/accts/${domain}.block


######################################################################
#                      TRANSPORTS CONFIGURATION                      #
######################################################################
remote_smtp:
  driver = smtp


local_delivery:
driver = appendfile
file = /var/spool/mail/${local_part}
delivery_date_add
envelope_to_add
return_path_add
group = mail
# mode = 0660

address_pipe:
driver = pipe
return_output


address_file:
driver = appendfile
delivery_date_add
envelope_to_add
return_path_add

address_directory:
  driver = appendfile
  delivery_date_add
  envelope_to_add
  return_path_add
  no_from_hack
  prefix = ""
  suffix = ""
# maildir_format
special_pipe_transport:
        driver = pipe
        user = mail
        group = mail



# This transport is used for handling autoreplies generated by the filtering
# option of the forwardfile director. It has a conventional name, since it
# is not actually mentioned elsewhere in this configuration file.

address_reply:
driver = autoreply





######################################################################
#                      DIRECTORS CONFIGURATION                       #
#             Specifies how local addresses are handled              #
######################################################################


block_filter:
    driver = forwardfile
    file = /usr/exim/block/$domain
    no_check_local_user
    no_verify
    filter


virtual_aliases:
    driver = aliasfile
    file = /usr/exim/accts/$domain
    search_type = lsearch*
    pipe_transport = special_pipe_transport
    include_domain = true
    optional = true
    group = mail
    user = mail


localuser:
    driver = localuser
    transport = local_delivery


system_aliases:
driver = aliasfile
file = /etc/aliases
search_type = lsearch
# user = exim


userforward:
driver = forwardfile
file = .forward
no_verify
check_ancestor
filter


# This director matches local user mailboxes.

localuser:
driver = localuser
transport = local_delivery





######################################################################
#                      ROUTERS CONFIGURATION                         #
#            Specifies how remote addresses are handled              #
######################################################################


lookuphost:
driver = lookuphost
transport = remote_smtp

literal:
driver = ipliteral
transport = remote_smtp





######################################################################
#                      RETRY CONFIGURATION                           #
######################################################################


*                      *           F,2h,15m; G,16h,2h,1.5; F,4d,8h





######################################################################
#                      REWRITE CONFIGURATION                         #
######################################################################


# There are no rewriting specifications in this default configuration file.




######################################################################
#                   AUTHENTICATION CONFIGURATION                     #
######################################################################



# auth_hosts = *
# host_auth_accept_relay = *
# #####

# OUTLOOK; werkt!
login:
driver = plaintext
public_name = LOGIN
server_prompts = "Username:: : Password::"
server_condition = "${if and {{!eq{$1}{}}{!eq{$2}{}} \
{crypteq{$2}{${extract{1}{:} \
{${lookup{$1}lsearch{/etc/shadow}{$value}{*:*}}}}}}}{1}{0}}"
server_set_id = $1

# NETSCAPE; werkt!
plain:
driver = plaintext
public_name = PLAIN
server_condition = "\
# $2 = Username | $3 = password
${if and {{!eq{$2}{}}{!eq{$3}{}} \
{crypteq{$3}{${extract{1}{:} \
{${lookup{$2}lsearch{/etc/shadow}{$value}{*:*}}}}}}}{1}{0}}"
server_set_id = $2

# EUDORA
cram:
driver = cram_md5
public_name = CRAM-MD5
server_secret = ${if eq{$1}{user}{pass}fail}
client_name = user
client_secret = pass



# End of Exim configuration file

--