RE: [Exim] Acl question

Páxina inicial
Borrar esta mensaxe
Responder a esta mensaxe
Autor: Timothy Arnold
Data:  
Para: 'Nico Erfurth', Timothy Arnold
CC: 'Exim-Users (E-mail)'
Asunto: RE: [Exim] Acl question
Here is what you requested:

domainlist local_domains = @ : lists.ngfl.gov.uk
hostlist relay_from_hosts = 127.0.0.1 : 193.63.51.0/24

I basically need to accept mail from internal people (193.63.51.64/26) but
reject any mail coming from outside.

Regards,
Tim.


-----Original Message-----
From: Nico Erfurth [mailto:masta@perlgolf.de]
Sent: 23 January 2003 12:09
To: Timothy Arnold
Cc: 'Exim-Users (E-mail)'
Subject: Re: [Exim] Acl question


Timothy Arnold wrote:
> Here is the Acl - it is bog standard except for hosts allow.
>
> acl_check_rcpt:
>
> # Accept if the source is local SMTP (i.e. not over TCP/IP). We do this

by
> # testing for an empty sending host field.
>
> accept hosts = 127.0.0.1 : 193.63.51.46


This is BS and will prevent you from receiving mail via commandline. You
really should leave this option to accept hosts = :
See below....

> # Accept mail to postmaster in any local domain, regardless of the

source,
> # and without verifying the sender.
>
>   accept  local_parts   = postmaster
>           domains       = +local_domains


Please show the domainlist local_domains.

> # Accept if the message comes from one of the hosts for which we are an
> # outgoing relay. Recipient verification is omitted here, because in

many
> # cases the clients are dumb MUAs that don't cope well with SMTP error
> # responses. If you are actually relaying out from MTAs, you should
> probably
> # add recipient verification here.
>
>   accept  hosts         = +relay_from_hosts


Your primary mx should go into hostlist relay_from_hosts, how does it
look now?

Try if this helps, you also can try to run exim -d -bh 1.1.1.1 to see
why it allows an external IP to relay through the server (do you REALLY
mean it relays?)

Nico


**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.
This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.
www.mimesweeper.com
**********************************************************************