[Exim] Bad Authentication ACL, used for relay - 4.20

Top Page
Delete this message
Reply to this message
Author: Chris Huff
Date:  
To: exim-users
Subject: [Exim] Bad Authentication ACL, used for relay - 4.20
today i doscovered im being used as a relay for about 12 hours. This is the first time this has happened. I looked on the list for an answer and could not find one. Can someone please take a looka t my file and let me know whats wrong?

heres the pertinant info:
##################################3

#####################################################
# exim 4 config for main email gate at kazootek.com #
#####################################################

acl_smtp_rcpt = check_recipient
acl_smtp_data = check_message

# local domains are defined here as all domains we accept mail for (checked as they arrive (before aliases file)
domainlist local_domains = dbm;/usr/local/exim4/vdomains.dbm

# relay domains are defined as domains whos email will end up somewhere else, not on this server
domainlist relay_domains = dbm;/usr/local/exim4/relaydomains.dbm

hostlist relay_hosts = DMZ1:DMZ2:OFFICE:COLO:CR:JOESOHO
hostlist auth_relay_hosts = *

auth_advertise_hosts = *
host_lookup = *

begin acl

check_recipient:
  accept  hosts = :
  deny    senders = UWinSportsPlus@??? : \
      xxx@??? : \
      xxx@??? : \
      etc...
  deny    hosts = 218.70.140.229 : 211.158.79.9 : 218.70.141.13 : 218.70.138.234 : 211.158.80.125
###################################################################################################
#   try to verify sender domain part AND local part
#  accept  verify = sender/callout=5s
#         messages = exim cannot call back your email address. Very likely the email is spam and is refused.
###################################################################################################
  accept  domains = +local_domains
  accept  domains = +relay_domains
  accept  hosts = +relay_hosts
  accept  hosts = +auth_relay_hosts
          endpass
          message = authentication required
          authenticated = *
  deny    message = relay not permitted


check_message:
  accept  authenticated = *
  deny    message = your message contains a $found_extension file which this email server does not accept.
          demime = ade:adp:bas:bat:chm:cmd:com:cpl:crt:eml: \
                        exe:hlp:hta:inf:ins:isp:jse?:lnk:mdb: \
                        mde:msc:msi:msp:mst:pcd:pif:reg:scr:sct: \
                        shs:url:vbs:vbe:wsf:wsh:wsc:zip
  accept


######################################################################
#                   AUTHENTICATION CONFIGURATION                     #
######################################################################


begin authenticators

auth_login:
driver = plaintext
public_name = LOGIN
server_condition = "${if eq {${lookup{$1}lsearch{/usr/local/exim4/exim.passwd}{$value}}} {$2} {yes} {no}}"
server_set_id = $1
server_prompts = "Username:: : Password::"

#####################################33

Im currently trying to fix it myself but this is my server at work and I have to get it running well very soon.


--CH