Re: [exim] quick tip: smtp_reserve_interfaces

Top Page
Delete this message
Reply to this message
Author: Matt
Date:  
To: exim-users
Subject: Re: [exim] quick tip: smtp_reserve_interfaces
> It might be helpful to permit connections to your submission port even
> when you are overloaded and even when the client is not on your local
> network. However, Exim doesn't have an smtp_reserve_interfaces option. But
> you can get the desired effect because smtp_reserve_hosts is expanded:
>
>        smtp_reserve_hosts = ${if eq{$interface_port}{587} \
>                                {*} {+relay_from_hosts} }


How do you make it so port 587 ONLY works for authenticated clients,
and my popb4smtp clients?

I have tried this.

# to restrict port 587 to authenticated users only
# see also daemon_smtp_ports above
#accept  hosts = +auth_relay_hosts
#accept  hosts = +relay_hosts
#        condition = ${if eq {$interface_port}{587} {yes}{no}}
#        endpass
#        message = relay not permitted, authentication required on port 587
#        authenticated = *


domainlist local_domains = lsearch;/etc/virtual/domains
domainlist relay_domains = lsearch;/etc/virtual/domains : localhost
hostlist relay_hosts = net-lsearch;/etc/virtual/pophosts :
/etc/virtual/relay_ips : 127.0.0.1
hostlist auth_relay_hosts = *

Pophosts contains a list of IP's that have poped in last 15 minutes.
Relay_ips are just a list of IP's I own and trust. When I enable it
the pophosts are not allowed on port 587.

Matt