Re: [exim] Force authenticated local mail to use DNS

Page principale
Supprimer ce message
Répondre à ce message
Auteur: mtrainer
Date:  
À: exim-users
Sujet: Re: [exim] Force authenticated local mail to use DNS


On 2016-02-08 04:01, mtrainer@??? wrote:

> On 2016-02-04 17:09, Ian Eiloart wrote:
>
>> On 4 Feb 2016, at 08:39, mtrainer@???: On 2016-02-03 18:51, Jasen Betts wrote: On 2016-02-03, mtrainer@??? <mtrainer@???> wrote: Hi, Emails from our authenticated senders try to deliver locally if the domain is in our ldap directory even if the DNS MX record for the domain points externally. Is it possible in exim to make authenticated emails use the DNS MX instead of just delivering internally if the domain is in our ldap directory. This of course can't break normal incoming emails. The contents of our routers.conf file is below. Some advice on how to solve this problem would be greatly appreciated. yes, you'll have to remove those domains from the "local_domains" list -- _(ツ)_
>
> Hi Jasen, Thanks for the reply. In an ideal world it would be as simple
> as that. The problem is that customers just change their mx and leave
> their existing mail / domains on our system. It is difficult to detect
> when customers change their mx especially when we have 70,000+ domains.
>
> Hi,
>
> In a domain list, you can include "@mx_any" without the quotes. It
> matches any domain that you are an MX for. See section 10.8 of the docs
> for details: there are several. Even if your host isn't the target of
> the MX record, you can list valid hosts in hosts_treat_as_local
>
> -- Ian Eiloart Postmaster, University of Sussex +44 (0) 1273 87-3148
>
> I don't think the @mx_any will work in our case as we have 4 mta's
> behind a load balanced VIP. This got me thinking further on how to solve
> this issue. We accept mail for domains with one of two specific MX
> records.
>
> Is there a way in an exim router to have a condition or domain list to
> include domains with MX being equal to one of these two specific MX's.
>
> Thanks, Murray


Thanks Ian, we will test your suggestion out.

Murray