I am building a Debian Exim server for outbound email only and I am trying to use SMTP over SSL so they can use it from anywhere. I think I have it running OK using TLS but I am getting relay not permitted Any hints as to what I might need? Sorry it''s vague but I am still learning and DETERMINED to do things the Debian way ;-)
Simon Faulkner wrote:> I am building a Debian Exim server for outbound email only and I am > trying to use SMTP over SSL so they can use it from anywhere. > > I think I have it running OK using TLS but I am getting relay not permitted > > > Any hints as to what I might need? > > Sorry it''s vague but I am still learning and DETERMINED to do things the > Debian way ;-) >Do you have an authenticator set-up so that users can "login" to the server? -- For a holy stint, a moth of the cloth gave up his woolens for lint. Eduardo M KALINOWSKI eduardo at kalinowski.com.br http://move.to/hpkb
> Do you have an authenticator set-up so that users can "login" to the server? > > >Thanks Eduardo, I ''think'' so! It''s as standard Debian as I can make it I uncommented: plain_saslauthd_server: driver = plaintext public_name = PLAIN server_condition = ${if saslauthd{{$auth2}{$auth3}}{1}{0}} server_set_id = $auth2 server_prompts = : .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}} .endif
You should also have #Advertise Auth auth_advertise_hosts = * In /etc/exim4/exim4.conf.localmacros if you''re using a non-split config or in something like /etc/exim4/conf.d/main/000_localmacros if using a split config. By the way, if you don''t want to advertise the capability to all hosts, then change that * to a suitable host pattern. Regards Neil Simon Faulkner wrote:>> Do you have an authenticator set-up so that users can "login" to the server? >> >> >> > Thanks Eduardo, > > > I ''think'' so! > > It''s as standard Debian as I can make it > > I uncommented: > > plain_saslauthd_server: > driver = plaintext > public_name = PLAIN > server_condition = ${if saslauthd{{$auth2}{$auth3}}{1}{0}} > server_set_id = $auth2 > server_prompts = : > .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS > server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}} > .endif > > > > _______________________________________________ > Pkg-exim4-users mailing list > Pkg-exim4-users at lists.alioth.debian.org > http://lists.alioth.debian.org/mailman/listinfo/pkg-exim4-users > > ------------------------------------------------------------------------------------ > Scanned for viruses, spam and offensive content by CensorNet MailSafe > > Try CensorNet free for 14 days. Provide Internet access on your terms. > Visit www.censornet.com for more information. > >-- Neil Briscoe CensorNet Ltd - professional & affordable Web & E-mail filtering neil.briscoe at censornet.com web: www.censornet.com tel: 0845 230 9592 / fax: 0845 230 9591 / main office: 0845 230 9590 snail: The Old Post Office, Bristol Rd, Hambrook, Bristol BS16 1RY. UK. MSN: nbriscoeuk at hotmail.co.uk CensorNet Ltd is a registered company in England & Wales No. 05518629 VAT registration number 901-2048-78 Any views expressed in this email communication are those of the individual sender, except where the sender specifically states them to be the views of a member of CensorNet Ltd. CensorNet Ltd does not represent, warrant or guarantee that the integrity of this communication has been maintained nor that the communication is free of errors or interference. ------------------------------------------------------------------------------------ Scanned for viruses, spam and offensive content by CensorNet MailSafe Try CensorNet free for 14 days. Provide Internet access on your terms. Visit www.censornet.com for more information.
Neil S. Briscoe wrote:> You should also have > > #Advertise Auth > auth_advertise_hosts = * > > In /etc/exim4/exim4.conf.localmacros if you''re using a non-split > config or in something like /etc/exim4/conf.d/main/000_localmacros if > using a split config.OK , that didn''t fix it but I have learned how to get some more debug info: 2895 processing "accept" 2895 check authenticated = * 2895 accept: condition test failed So, it doesn''t think we are authenticated...
Neil S. Briscoe wrote:> You should also have > > #Advertise Auth > auth_advertise_hosts = * > > In /etc/exim4/exim4.conf.localmacros if you''re using a non-split > config or in something like /etc/exim4/conf.d/main/000_localmacros if > using a split config. >Ah, this is an Outlook problem - it''s working fine with Thunderbird... googling...
> Ah, this is an Outlook problem - it''s working fine with Thunderbird... >Mmmm, Outlook needs a LOGIN driver not a PLAIN driver - I think It sends OK now but doesn''t actually test the password! ie. It works irrespective of the username/password set in the client - :-(
Is there a simple way to generate the exim4 config from the Debian Exim package rather than running dpkg-reconfigure exim4-config and accepting all the defaults. ? Simon
The command - after editing any of the files is invoke-rc.d exim4 restart Which will, in case of any syntax errors, refuse to install the borked files. So I rarely use the command you use, I edit the update-exim4.conf.conf file by hand and run aforementioned. Regards Neil Simon Faulkner wrote:> Is there a simple way to generate the exim4 config from the Debian Exim > package rather than running > > dpkg-reconfigure exim4-config and accepting all the defaults. > > ? > Simon > > _______________________________________________ > Pkg-exim4-users mailing list > Pkg-exim4-users at lists.alioth.debian.org > http://lists.alioth.debian.org/mailman/listinfo/pkg-exim4-users > > ------------------------------------------------------------------------------------ > Scanned for viruses, spam and offensive content by CensorNet MailSafe > > Try CensorNet free for 14 days. Provide Internet access on your terms. > Visit www.censornet.com for more information. > >-- Neil Briscoe CensorNet Ltd - professional & affordable Web & E-mail filtering neil.briscoe at censornet.com web: www.censornet.com tel: 0845 230 9592 / fax: 0845 230 9591 / main office: 0845 230 9590 snail: The Old Post Office, Bristol Rd, Hambrook, Bristol BS16 1RY. UK. MSN: nbriscoeuk at hotmail.co.uk CensorNet Ltd is a registered company in England & Wales No. 05518629 VAT registration number 901-2048-78 Any views expressed in this email communication are those of the individual sender, except where the sender specifically states them to be the views of a member of CensorNet Ltd. CensorNet Ltd does not represent, warrant or guarantee that the integrity of this communication has been maintained nor that the communication is free of errors or interference. ------------------------------------------------------------------------------------ Scanned for viruses, spam and offensive content by CensorNet MailSafe Try CensorNet free for 14 days. Provide Internet access on your terms. Visit www.censornet.com for more information.
Simon Faulkner <simon at titanic.co.uk> wrote:> Is there a simple way to generate the exim4 config from the Debian Exim > package rather than running> dpkg-reconfigure exim4-config and accepting all the defaults.DEBIAN_FRONTEND=noninteractive dpkg-reconfigure exim4-config does the same thing without requiring any typing. I am not sure what you are trying to accomplish though. dpkg-reconfigure does not reset the configuration to "factory defaults" and the actual configuratiion file /var/lib/exim4/config.autogenerated is generaed automatically by update-exim4.conf when starting the daemon. Did you accidentally delete /etc/exim4/update-exim4.conf.conf? cu andreas -- `What a good friend you are to him, Dr. Maturin. His other friends are so grateful to you.'' `I sew his ears on from time to time, sure''