Re: [exim] how do I block mail to local domains except SMTP …

Page principale
Supprimer ce message
Répondre à ce message
Auteur: Dave Lugo
Date:  
À: exim-users
Sujet: Re: [exim] how do I block mail to local domains except SMTP auth or trusted source?
On Tue, 7 Oct 2008, Exim List wrote:
> >
> As noted above, it's not a firewall configuration issue. Obviously I
> can open port 25, and I can open port 25 only to a trusted host. But I
> need to FURTHER allow port 25 for SMTP AUTH clients.
>


This is overly simplistic, but I can't do
more because I don't know what your config
looks like, and I've customized my config
so much that I can't cut-n-paste and hope
that it will drop correctly into yours.

Add this hostlist near the top:

hostlist my_mx_provider = 1.2.3.4 : 1.2.3.5

Add something like this in the rcpt acl:

  accept  hosts   = +my_mx_provider
          domains = +local_domains : +relay_to_domains



AFTER the ACL stanza that allows inbound from auth'd
clients, do a default deny at the end of that acl.

(I think the default at the end of the rcpt acl is,
in the stock config file, accept. You need to
change)

The exim config file, on a stock install, is very
well commented, and the spec.txt file has a lot
of examples. Have you been reading them at all?


-- 
--------------------------------------------------------
Dave Lugo   dlugo@???    LC Unit #260   TINLC
Have you hugged your firewall today?   No spam, thanks.
--------------------------------------------------------
Are you the police?  . . . .  No ma'am, we're sysadmins.