[exim] Re: Exim Zero Day?

Top Page
Delete this message
Reply to this message
Author: Jeremy Harris
Date:  
To: exim-users
Subject: [exim] Re: Exim Zero Day?
On 02/10/2023 10:20, Slavko via Exim-users wrote:
> AFAIK EXTERNAL requires TLS auth before,


No; only if your config enforces that.
The example in the docs does, but that's not the only way to use External.

> thus will not come from random untrusted hosts...


Being able to talk TLS is everywhere. Don't trust peers only on that basis
(especially as a server).
--
Cheers,
Jeremy


--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@???
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/