On 6/17/2015 10:21 AM, Jon Gerdes wrote:
> On Wed, 2015-06-17 at 09:13 -0500, Danielle M. wrote:
>> On 6/12/2015 10:33 AM, Danielle M. wrote:
>>> Jon,
>>>
>>> I don't know what changed, but now it works! One final thing is
>>> hanging up when I try to send via SMTP:
>>>
>>> 2015-06-12 10:28:01 SMTP connection from [::1]:36914 (TCP/IP
>>> connection count = 1)
>>> 2015-06-12 10:28:01 H=[::1]:36914 rejected connection in "connect" ACL
>>>
>>> I have this in my connect ACL:
>>>
>>> warn condition = ${if eq{$interface_port}{587}}
>>> set acl_c_mail_submission_port = 1
>>> domains = !+local_domains
>>> accept domains = !+local_domains
>>>
>>> Thank you,
>>> Dani
>>>
> Dani
>
> At connect time you only have the incoming IP address and port to
> consider but at RCPT time you do have the destination address to look at
> (your acls may have slightly different names):
>
> acl_check_connect:
> # Accept mail from MSP and tag it as such
> accept condition = ${if eq{$interface_port}{587}}
> set acl_c_MSP = 1
>
>
>
> acl_check_rcpt:
> # Relay mail going outbound that is arriving on our MSP
> accept condition = ${if eq{acl_c_MSP{1}}
> domains = !+local_domains
>
>
> etc etc
>
>
> This should get you started. I've changed the warn to accept to
> simplify things.
>
> Cheers
> Jon
>
>
> Blueloop Ltd
>
> Jon Gerdes | Senior Consultant
>
> Blueloop House
> Ilchester Road
> Yeovil
> Somerset BA21 3AA
>
> Tel: 2100
> Web: www.blueloop.net
>
>
>
> Registered Address : Blueloop House, Ilchester Road, YEOVIL, BA21 3AA Registered England & Wales - 3981322
>
> CONFIDENTIAL INFORMATION
> This e-mail and any files attached with it are confidential and for the sole use of the intended recipient(s). If you are not the intended recipient(s) you are prohibited from using, copying or distributing this or any information contained in it and should immediately notify the sender and delete the message from your system.
>
> Internet communications are not secure and Blueloop Limited is not responsible for unauthorised use by third parties nor for alteration or corruption in transmission. Furthermore, while Blueloop Limited have taken reasonable precautions to minimise the risk of software viruses, it cannot accept liability for any damage which you may suffer as a result of such viruses, and we therefore recommend you carry out your own virus checks on receipt of any e-mail.
Jon,
I got this to work, but for some reason it is STILL relaying e-mails
sent on ports other than 587 (25, 26). It's as if the router is ignoring
my condition = {if acl_c_MSP{1}}...
Regards,
Dani
