hi
i´m using exim 4.34 with ldap. my problem is with the smtpauth. i want the everybody(not localhost)
who use the smtp has to authentificate . but with my configuration if somebody use my smtp and
send an email to a user which exist on the server he don´t have to authentificate.
thx
kai
-----------------
qualify_domain = host.domain.net
host_lookup = *
never_users = root
trusted_users = Debian-exim:www-data
gecos_pattern = ^([^,:]*)
gecos_name = $1
smtp_accept_queue_per_connection = 100
domainlist local_domains = @ : @[] : localhost : ${lookup ldapm {user=LDAPUSER pass=LDAPPASS \
ldap://LDAPSERVER/dc=domain,dc=net?domain?sub?
(&(domain=$domain)(status=enable))}{$value}}
domainlist relay_to_domains = @ : @[] : localhost : ${lookup ldapm {user=LDAPUSER pass=LDAPPASS
\
ldap://LDAPSERVER/dc=domain,dc=net?domain?sub?
(&(domain=$domain)(status=enable))}{$value}}
hostlist relay_from_hosts = 127.0.0.1
hostlist auth_relay_hosts = *
freeze_tell = postmaster
ignore_bounce_errors_after = 2d
acl_smtp_rcpt = acl_check_rcpt
received_header_text = "Received: \
${if def:sender_rcvhost {from ${sender_rcvhost}\n\t}\
{${if def:sender_ident {from ${sender_ident} }}\
${if def:sender_helo_name {(helo=${sender_helo_name})\n\t}}}}\
by ${primary_hostname} \
${if def:received_protocol {with ${received_protocol}}} \
(Exim ${version_number} #${compile_number} (Debian))\n\t\
id ${message_id}\
${if def:received_for {\n\tfor <$received_for>}}"
######################################################################
# ROUTERS CONFIGURATION #
# Specifies how remote addresses are handled #
######################################################################
acl_check_rcpt:
accept hosts = :
deny local_parts = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
accept local_parts = postmaster: root
domains = +local_domains
require verify = sender
accept domains = +local_domains
endpass
message = unknown user
verify = recipient
accept domains = +relay_to_domains
endpass
message = unrouteable address
verify = recipient
accept hosts = +relay_from_hosts
accept authenticated = *
deny message = relay not permitted
