exim auth requriement

This commit is contained in:
Serghey Rodin 2012-12-17 22:57:17 +02:00
commit 1b5332b558

View file

@ -63,18 +63,18 @@ acl_check_mail:
condition = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}} condition = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
condition = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}} condition = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
delay = 45s delay = 45s
drop # drop
condition = ${if match{$sender_helo_name}{\N^\[\N}{no}{yes}} # condition = ${if match{$sender_helo_name}{\N^\[\N}{no}{yes}}
condition = ${if match{$sender_helo_name}{\N\.\N}{no}{yes}} # condition = ${if match{$sender_helo_name}{\N\.\N}{no}{yes}}
message = Access denied - Invalid HELO name (See RFC2821 4.1.1.1) # message = Access denied - Invalid HELO name (See RFC2821 4.1.1.1)
drop drop
condition = ${if isip{$sender_helo_name}} condition = ${if isip{$sender_helo_name}}
message = Access denied - Invalid HELO name (See RFC2821 4.1.3) message = Access denied - Invalid HELO name (See RFC2821 4.1.3)
drop drop
condition = ${if match{$sender_helo_name}{\N\.$\N}} condition = ${if match{$sender_helo_name}{\N\.$\N}}
message = Access denied - Invalid HELO name (See RFC2821 4.1.1.1) message = Access denied - Invalid HELO name (See RFC2821 4.1.1.1)
# drop message = "REJECTED - Bad HELO - Host impersonating [$sender_helo_name]" drop message = "REJECTED - Bad HELO - Host impersonating [$sender_helo_name]"
# condition = ${if match{$sender_helo_name}{$primary_hostname}} condition = ${if match{$sender_helo_name}{$primary_hostname}}
drop condition = ${if eq{[$interface_address]}{$sender_helo_name}} drop condition = ${if eq{[$interface_address]}{$sender_helo_name}}
message = $interface_address is _my_ address message = $interface_address is _my_ address
accept accept
@ -82,22 +82,35 @@ acl_check_mail:
acl_check_rcpt: acl_check_rcpt:
accept hosts = : accept hosts = :
deny message = Restricted characters in address deny message = Restricted characters in address
domains = +local_domains domains = +local_domains
local_parts = ^[.] : ^.*[@%!/|] local_parts = ^[.] : ^.*[@%!/|]
deny message = Restricted characters in address deny message = Restricted characters in address
domains = !+local_domains domains = !+local_domains
local_parts = ^[./|] : ^.*[@%!] : ^.*/\\.\\./ local_parts = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
require verify = sender
accept hosts = +relay_from_hosts accept hosts = +relay_from_hosts
control = submission control = submission
accept local_parts = postmaster accept local_parts = postmaster
domains = +local_domains domains = +local_domains
require verify = sender
accept authenticated = * accept authenticated = *
control = submission/domain= control = submission/domain=
require message = relay not permitted require message = relay not permitted
domains = +local_domains : +relay_to_domains domains = +local_domains : +relay_to_domains
deny message = smtp auth requried
sender_domains = +local_domains
!authenticated = *
require verify = recipient require verify = recipient
.ifdef CLAMD .ifdef CLAMD
warn set acl_m0 = no warn set acl_m0 = no
warn condition = ${if exists {/etc/exim/domains/$domain/antivirus}{yes}{no}} warn condition = ${if exists {/etc/exim/domains/$domain/antivirus}{yes}{no}}