Re: [exim] exim4 smtp authentication

Top Page
Delete this message
Reply to this message
Author: Odhiambo G. Washington
Date:  
To: exim-users
Subject: Re: [exim] exim4 smtp authentication
* On 29/09/05 09:48 +0200, Klaus Boehm wrote:
> Hi,
>
> i have a question about smtp authentication.
> Is it possible to check a part of the user about ip address
> an the other part of the user about smtp authentication at the same time?
> If someone has the right ip its ok and if someone has the right login and
> password its ok.


Yes, it is very possible, but please elaborate on the aspects of the IP
address side.
Generally, smtp authentication is applied to connections from
"untrusted" IP addresses - those that are outside your relay_from_hosts
hostlist definition.
I am wondering why you also want to restrict the authentication to
specific IP addresses. Once you explain that, we will put aside our
crystal balls and give you the answers.

For me, I believe a rule like this is enough: the skks

accept authenticated = * 
       condition     = ${if eq{$authenticated_id}{$sender_address}{yes}{no}}


If a user has given out their password to their spammer friends, then
that's a whole new ball game.



        cheers
       - wash 
+----------------------------------+-----------------------------------------+
Odhiambo Washington                    . WANANCHI ONLINE LTD (Nairobi, KE)  |
wash () WANANCHI ! com            . 1ere Etage, Loita Hse, Loita St.,  |
GSM: (+254) 722 743 223            . # 10286, 00100 NAIROBI             |
GSM: (+254) 733 744 121            . (+254) 020 313 985 - 9             |
+---------------------------------+------------------------------------------+
"Oh My God! They killed init! You Bastards!"  
                         --from a /. post