Re: [exim] How to verify and authenticate only for outgoing …

Top Page
Delete this message
Reply to this message
Author: Theo de Morée
Date:  
To: exim-users
Subject: Re: [exim] How to verify and authenticate only for outgoing mail
Do you have the condition entry in the require block? In that case you
should put it in an accept or deny block. Something like:
acl_check_rcpt:
  accept  hosts         = :
  require verify        = sender
  accept  domains       = +local_domains
  accept !domains       = +local_domains
          authenticated = *
         !condition     = ${if eq{$sender_address_data}{$authenticated_id} 
{no} {yes} }
  drop    message       = Please authenticate first


This allows incoming mail directed at one of my local domains, and for
outgoing mail it only allows it when the user is authenticated and the mail
address belongs to him, otherwise it will be dropped. This seems to work
properly for me now.

Theo


>From: "Lekshmi A. R" <lekshmiar@???>
>To: "Giuliano Gavazzi" <dev+lists@???>,"Exim Mailing List"
><exim-users@???>, <dot@???>
>Subject: Re: [exim] How to verify and authenticate only for outgoing mail
>Date: Mon, 22 May 2006 11:51:18 +0530
>
>I also wanted to configure exim so that even authorised senders should not
>be able to fake their mail ids.
>
>In AUTHENTICATION CONFIGURATION, I gave the following entries.
>
>login:
>         driver = plaintext
>         public_name = LOGIN
>         server_prompts = "Username:: : Password::"
>         server_condition = "${if pwcheck{$1:$2}{1}{0}}"

>
>and in ACL CONFIGURATION, the following entries.
>
>require verify    = sender
>           condition = ${if eq{$sender_address_data}{$authenticated_id} 
>{yes} {no} }

>
>Evem then I am able to send mails from fake addresses. How to check this.
>
>Lekshmi A. R.
>Computer Programmer
>DCG, DIT
>Canara Bank
>Naveen Complex
>#14, M. G. Road
>Bangalore - 560 001
>Ph: (080) 2558 4040 - 286