Re: [exim] Add a whitelist for senders to skip auth check

One way you could do it, is to allow unauthenticated email but only to
recipient owner@??? which would make your server kind of
"single-adress relay" which could be acceptable.
And also check for senders, to avoid spam, then a spammer must spoof the
sender adress AND also send to your approved recipient adress.

-----Ursprungligt meddelande-----
Från: Damon Hill via Exim-users <exim-users@???>
Skickat: den 8 maj 2020 14:13
Till: Exim Mailing List <exim-users@???>
Ämne: [exim] Add a whitelist for senders to skip auth check

Hello,

I need to whitelist domains from a list (with wildcards) in Exim's ACL
to avoid auth SMTP checking for domains hosted in this server.

My server, say SERVER A, hosts e-mail for coolstore.com domain, but the
web is hosted by SERVER B (which uses several servers for mailing). I
need to exclude from Exim SMTP auth checking in Server A:
smtp1.serverb.com, smtp2.serverb.com, mailer@??? and
*.serverb2.com.

The problems is that when the web application (hosted by ServerB) tries
to send an (unauthenticated) email from sells@??? to
owner@??? it fails with message: '550 smtp auth requried (in
reply to RCPT TO command)'

I've got the ACL:

    deny    message       = smtp auth requried
            sender_domains = +local_domains
            !authenticated = *

but i cannot make it exclude these domains from the checking.

I tried adding this to ACLs:

    accept  condition     =
${lookup{\$sender_address}nwildlsearch{/etc/exim/senders-whitelist.   
conf}{yes}}

where /etc/exim/senders-whitelist.conf contains:

    smtp1.serverb.com
    smtp2.serverb.com
    mailer@???
    *.serverb2.com

But it didn't work. What am I doing wrong?

Thank you in advance for your help!

--
Damon Hill
--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/