mirror of
https://github.com/myvesta/vesta
synced 2025-08-19 21:04:07 -07:00
exim auth requriement
This commit is contained in:
parent
7816834a32
commit
1b5332b558
1 changed files with 20 additions and 7 deletions
|
@ -63,18 +63,18 @@ acl_check_mail:
|
||||||
condition = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
|
condition = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
|
||||||
condition = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
|
condition = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
|
||||||
delay = 45s
|
delay = 45s
|
||||||
drop
|
# drop
|
||||||
condition = ${if match{$sender_helo_name}{\N^\[\N}{no}{yes}}
|
# condition = ${if match{$sender_helo_name}{\N^\[\N}{no}{yes}}
|
||||||
condition = ${if match{$sender_helo_name}{\N\.\N}{no}{yes}}
|
# condition = ${if match{$sender_helo_name}{\N\.\N}{no}{yes}}
|
||||||
message = Access denied - Invalid HELO name (See RFC2821 4.1.1.1)
|
# message = Access denied - Invalid HELO name (See RFC2821 4.1.1.1)
|
||||||
drop
|
drop
|
||||||
condition = ${if isip{$sender_helo_name}}
|
condition = ${if isip{$sender_helo_name}}
|
||||||
message = Access denied - Invalid HELO name (See RFC2821 4.1.3)
|
message = Access denied - Invalid HELO name (See RFC2821 4.1.3)
|
||||||
drop
|
drop
|
||||||
condition = ${if match{$sender_helo_name}{\N\.$\N}}
|
condition = ${if match{$sender_helo_name}{\N\.$\N}}
|
||||||
message = Access denied - Invalid HELO name (See RFC2821 4.1.1.1)
|
message = Access denied - Invalid HELO name (See RFC2821 4.1.1.1)
|
||||||
# drop message = "REJECTED - Bad HELO - Host impersonating [$sender_helo_name]"
|
drop message = "REJECTED - Bad HELO - Host impersonating [$sender_helo_name]"
|
||||||
# condition = ${if match{$sender_helo_name}{$primary_hostname}}
|
condition = ${if match{$sender_helo_name}{$primary_hostname}}
|
||||||
drop condition = ${if eq{[$interface_address]}{$sender_helo_name}}
|
drop condition = ${if eq{[$interface_address]}{$sender_helo_name}}
|
||||||
message = $interface_address is _my_ address
|
message = $interface_address is _my_ address
|
||||||
accept
|
accept
|
||||||
|
@ -82,22 +82,35 @@ acl_check_mail:
|
||||||
|
|
||||||
acl_check_rcpt:
|
acl_check_rcpt:
|
||||||
accept hosts = :
|
accept hosts = :
|
||||||
|
|
||||||
deny message = Restricted characters in address
|
deny message = Restricted characters in address
|
||||||
domains = +local_domains
|
domains = +local_domains
|
||||||
local_parts = ^[.] : ^.*[@%!/|]
|
local_parts = ^[.] : ^.*[@%!/|]
|
||||||
|
|
||||||
deny message = Restricted characters in address
|
deny message = Restricted characters in address
|
||||||
domains = !+local_domains
|
domains = !+local_domains
|
||||||
local_parts = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
|
local_parts = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
|
||||||
|
|
||||||
|
require verify = sender
|
||||||
|
|
||||||
accept hosts = +relay_from_hosts
|
accept hosts = +relay_from_hosts
|
||||||
control = submission
|
control = submission
|
||||||
|
|
||||||
accept local_parts = postmaster
|
accept local_parts = postmaster
|
||||||
domains = +local_domains
|
domains = +local_domains
|
||||||
require verify = sender
|
|
||||||
accept authenticated = *
|
accept authenticated = *
|
||||||
control = submission/domain=
|
control = submission/domain=
|
||||||
|
|
||||||
require message = relay not permitted
|
require message = relay not permitted
|
||||||
domains = +local_domains : +relay_to_domains
|
domains = +local_domains : +relay_to_domains
|
||||||
|
|
||||||
|
deny message = smtp auth requried
|
||||||
|
sender_domains = +local_domains
|
||||||
|
!authenticated = *
|
||||||
|
|
||||||
require verify = recipient
|
require verify = recipient
|
||||||
|
|
||||||
.ifdef CLAMD
|
.ifdef CLAMD
|
||||||
warn set acl_m0 = no
|
warn set acl_m0 = no
|
||||||
warn condition = ${if exists {/etc/exim/domains/$domain/antivirus}{yes}{no}}
|
warn condition = ${if exists {/etc/exim/domains/$domain/antivirus}{yes}{no}}
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue