Author: Tim Jackson Date: To: exim-users Subject: Re: [Exim] @hi, having problem with reject non authetification
connections
On Sun, 1 Jun 2003 14:02:41 +0300 (EEST) Miroslav wrote:
> need set restrict to only authentificated session.
Do you mean you want only authenticated users to be able to relay mail
through your server?
> this is part of my conf file:
<snip AUTH ACL>
That's not enough. We need all relevant parts but in particular your RCPT
ACL and your authenticator config. Your AUTH ACL is just checking if the
client has encrypted the connection or is using AUTH LOGIN, which isn't
the same as actually authenticating the user. Incidentally, why are you
checking for TLS but then allowing AUTH LOGIN (which is plaintext)
through? Allowing anything over TLS but allowing only CRAM-MD5 if not
encrypted would make more sense. And your failure message doesn't seem to
match with what you're actually doing.
