jake_stone@??? wrote:
> I have used exim3 for quite awhile and got comfortable with the
> configure syntax
> however I am looking for a cross reference table that would make the
> transitions from 3x to 4x
> less of a headache.
> The main thing I am interested in is requiring no users can send mail
> without authentication, with outlook express users mainly, the only way
> anyone can send mail is to use "my server requires authentication"
> this currently works fine on the older exim versions, but trying to
> implement this with the ACL format seems to yeild a strange effect.
> Users must auth to send mail out unless they are sending to one of the
> local domains then they do not need
> to auth, example; joeblow@??? has a valid account, however I can go
> to the library and create a bogus
> account with joeblow@??? and send to anyone in the domain.com user
> list with no smtp auth.
> As you can see this is a spammers dream, I must be missing something,
Why is this a spammers dream? It does not allow unauthenticated hosts
to send mail to arbitrary addresses, only to local ones.
> because the current (outdated) exim server does not allow any outgoing mail
> without auth.
You seem to be mixing up incoming and outgoing relaying.
http://docs.exim.org/current/spec_html/ch40.html#SECTrelaycontrol
cu andreas
