Re: [Exim] Auth SMTP Relay

Top Page
Delete this message
Reply to this message
Author: Kirill Miazine
Date:  
To: Shawn P. Garbett
CC: exim-users
Subject: Re: [Exim] Auth SMTP Relay
Shawn P. Garbett wrote:
> I'm pulling my hair out trying to figure out the following. Can anyone tell me
> what I'm missing besides a brain and a clue?
>
> The configuration should allow relaying when authenticated.
>
> I can authenticate on the local domain.


Authenticate and replay or simply relay without authentication?

> I don't get the option of authenticating outside the local domain. Ugh.
>
> In the main section of config:
> host_accept_relay = 127.0.0.1 : ::::1
> host_auth_accept_relay = *
> trusted_users = mail
> smtp_verify = true
>
> Transport section of config:
> remote_smtp:
> driver = smtp
>
> Authentication section of config:
> plain:
>    driver = plaintext
>    public_name = PLAIN
>    server_condition = "${if
> crypteq{$2}{${extract{1}{:}{${lookup{$1}lsearch{/etc
> /exim/passwd}{$value}{*:*}}}}}{1}{0}}"
>    server_set_id = $1

>
> login:
>    driver = plaintext
>    public_name = LOGIN
>    server_prompts = "Username:: : Password::"
>    server_condition = "${if
> crypteq{$2}{${extract{1}{:}{${lookup{$1}lsearch{/etc
> /exim/passwd}{$value}{*:*}}}}}{1}{0}}"
>    server_set_id = $1

>
>
> Here's my test using exim on my off local domain box trying to come in.
>
> Furthur:/home/spg# exim -bh 207.191.32.184
>
> **** SMTP testing session as if from host 207.191.32.184
> **** Not for real!
>
> >>> host in host_lookup? yes (*)
> >>> looking up host name for 207.191.32.184
> >>> IP address lookup failed
> >>> host in host_reject? no (option unset)
> >>> host in host_reject_recipients? no (option unset)
> >>> host in auth_hosts? no (option unset)
> >>> host in sender_unqualified_hosts? no (option unset)
> >>> host in receiver_unqualified_hosts? no (option unset)
> >>> host in helo_verify? no (option unset)
> >>> host in helo_accept_junk_hosts? no (option unset)
> 220 67.32.38.161 ESMTP Exim 3.36 #1 Wed, 02 Apr 2003 21:03:44 -0600
> EHLO further.cc
> >>> further.cc in local_domains? no (end of list)
> 250-67.32.38.161 Hello further.cc [207.191.32.184]
> 250-SIZE
> 250-PIPELINING
> 250 HELP
> AUTH PLAIN
> 504 PLAIN mechanism not supported


No SMTP AUTH mechanism is announced to be supported in reply to EHLO. In
Exim 4 you'd set auth_advertise_hosts to something.

--
Kirill Miazine
mailto:km@krot.org
http://km.krot.org/