On 2014-01-02, Marco Gaiarin <marcogaio@???> wrote: >
> I'm doing some exercise with exim (4.80-7, debian wheezy) enabling SSMTP
> (port 465) and authentication.
> Final objective is to open port 465 to all the net, protecting it with some
> stuff like fail2ban.
>
> With my first experiment, seems that exim reject lately the email (even
> without auth), simply does not route them (relay denied).
>
> There's some way to insert, very early, an ACL that simply reject email if
> unauthenticated, and only for port 465 (port 25 used only for internal
> traffic)?
why base it or port number?
debian exim out of the box is safe to put on the internet
put in you lan "internal traffic" IP addresses as trusted hosts and you
should be done.
