exim4:config
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| exim4:config [2016/11/24 11:47] – [Determine the user account which will be the owner of this mail setup] peter | exim4:config [2020/07/15 09:30] (current) – external edit 127.0.0.1 | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ====== Exim4 - Config ====== | ====== Exim4 - Config ====== | ||
| + | |||
| + | http:// | ||
| TODO | TODO | ||
| Line 39: | Line 41: | ||
| <WRAP info> | <WRAP info> | ||
| - | Ubuntu usually has the **mail** user having: | + | **NOTE**: |
| * a UID value of 8. | * a UID value of 8. | ||
| Line 138: | Line 140: | ||
| openssl ecparam -list_curves | openssl ecparam -list_curves | ||
| - | openssl rsa req -passin | + | openssl rsa req -passin |
| Line 176: | Line 178: | ||
| ==== configure ==== | ==== configure ==== | ||
| - | <code> | + | <file bash configure> |
| - | configure: | + | ###################################################################### |
| + | # Runtime configuration file for Exim # | ||
| + | ###################################################################### | ||
| - | ################################################## | + | # Include main settings. |
| - | # Runtime configuration file for Exim # | + | include / |
| - | ################################################## | + | |
| - | | + | # Include |
| - | | + | .include / |
| - | # Inklyudim settings Greylisting | + | ### ACL configuration for incoming mail. |
| - | .include / | + | begin acl |
| - | ### ACL configuration | + | # Start ACL - " |
| - | begin acl | + | .ifdef USE_GREYLIST |
| + | greylist_acl: | ||
| + | .include / | ||
| + | .endif | ||
| - | # Start ACL - "working" | + | # Verify the HELO. |
| - | .ifdef USE_GREYLIST | + | acl_check_helo: |
| + | accept hosts = +relay_from_hosts | ||
| + | drop condition = ${if match{$sender_helo_name}{MY_IP}{yes}{no} } | ||
| + | message | ||
| + | drop condition = ${if match{$sender_helo_name}{^[0-9]\.[0-9]\.[0-9]\.[0-9]}{yes}{no} } | ||
| + | message | ||
| + | accept | ||
| - | | ||
| - | | ||
| - | .endif | + | # These rules are triggered for each email. |
| + | acl_check_rcpt: | ||
| + | warn set acl_c_lp = $local_part@$domain | ||
| - | # Verifying | + | |
| - | | + | .include / |
| - | | + | |
| - | drop condition = ${if match {$sender_helo_name} {MY_IP} {yes} {no}} | + | |
| - | message = " | + | |
| - | drop condition = ${if match {$sender_helo_name} {^ [0-9] \. [0-9] \. [0-9] \. [0-9]} {yes} {no}} | + | |
| - | message = " | + | |
| - | | + | |
| - | # These rules are triggered for each letter | + | |
| - | acl_check_rcpt: | + | |
| - | warn set acl_c_lp = $local_part @ $ domain | + | # Acl_check_rcpt - black-lists, |
| + | .include / | ||
| - | # Acl_check_rcpt - checking the syntax is correct | ||
| - | | ||
| - | # Acl_check_rcpt - anti-spam - Host and others. | + | # Check the message body. |
| - | .include / | + | acl_check_content: |
| - | # Acl_check_rcpt - black-lists, | + | |
| - | | + | .include / |
| - | # Check the message body | ||
| - | acl_check_content: | ||
| - | # Inklyudim configuration message body check | + | # What do we do with the mail. |
| - | .include / | + | begin routers |
| - | # What do we do with the mail | + | |
| - | begin routers | + | .include / |
| - | # Inklyudim | + | |
| - | | + | |
| - | # Start transports - both deliver mail | ||
| - | begin transports | ||
| - | # Inklyudim transports | ||
| - | | ||
| - | # Configuration of repetition and rewriting | + | # Start transports - Delivers the mail. |
| - | .include / | + | begin transports |
| - | #begin rewrite | + | |
| + | .include / | ||
| - | # Authentication section when sending emails. | + | |
| - | begin authenticators | + | # Configuration of repetition and rewriting. |
| - | # Authenticate users. | + | .include / |
| - | | + | |
| - | </code> | + | |
| + | #begin rewrite | ||
| + | |||
| + | |||
| + | # Authentication section when sending emails. | ||
| + | begin authenticators | ||
| + | # Authenticate users. | ||
| + | .include / | ||
| + | </file> | ||
| Line 256: | Line 262: | ||
| < | < | ||
| - | | + | # Set the variables. |
| - | MY_IP = 123.123.123.123 | + | MY_IP = 123.123.123.123 |
| - | | + | INTERNAL_IP = 192.168.1.2 |
| - | # Settings Vexim | + | # Settings Vexim. |
| - | | + | USE_SPF = true |
| - | | + | USE_AV = true |
| - | | + | USE_SPAMD = true |
| - | | + | USE_GREYLIST = true |
| - | TLS = true | + | TLS = true |
| - | # Whitelisting | + | # Whitelisting. |
| - | | + | hostlist whitelist_hosts = net-iplsearch; |
| - | | + | addresslist whitelist_sender = wildlsearch; |
| - | # In IPv6 we do not work | + | # In IPv6 we do not work. |
| - | | + | disable_ipv6 = true |
| - | # User and group from which will run the entire bundle | + | # User and group from which will run the entire bundle. |
| - | | + | exim_user = exim |
| - | | + | exim_group = mail |
| - | # There were mailings settings, do not use - no setup | + | # There were mailings settings, do not use - no setup. |
| - | | + | MAILMAN_HOME = / |
| - | | + | MAILMAN_WRAP = MAILMAN_HOME/ |
| - | | + | MAILMAN_USER = exim |
| - | | + | MAILMAN_GROUP = mail |
| - | # Enter the credentials to connect to the MySQL server. | + | # Enter the credentials to connect to the MySQL server. |
| - | # Word `hide`, first, means that when | + | # Word `hide`, first, means that when |
| - | # Check config command call | + | # Check config command call |
| - | # Exim -bV config_file these data will not be displayed. | + | # Exim -bV config_file these data will not be displayed. |
| - | # If without it - it will be shown ... Recording format: | + | # If without it - it will be shown ... Recording format: |
| - | # Host / dbname / user / password | + | # Host / dbname / user / password |
| - | hide mysql_servers = localhost :: (/ | + | hide mysql_servers = localhost:: |
| - | # Interfaces to listen | + | # Interfaces to listen. |
| - | | + | local_interfaces = MY_IP |
| - | # Host Name. Used EHLO. | + | # Host Name. Used EHLO. |
| - | # Listed on the other points, if they are not specified, the type qualify_domain and other .. | + | # Listed on the other points, if they are not specified, the type qualify_domain and other .. |
| - | # If there are not found anything (comment out the line), then used that returns the uname () function | + | # If there are not found anything (comment out the line), then used that returns the uname () function. |
| - | | + | primary_hostname = sharewiz.net |
| - | # Request for sampling Domain Information | + | # Request for sampling Domain Information. |
| - | | + | VIRTUAL_DOMAINS = SELECT DISTINCT domain FROM domains WHERE type = ' |
| - | | + | RELAY_DOMAINS = SELECT DISTINCT domain FROM domains WHERE type = ' |
| - | | + | ALIAS_DOMAINS = SELECT DISTINCT alias FROM domainalias WHERE alias = ' |
| - | # Make a list of local domains. | + | # Make a list of local domains. |
| - | # In this case, the domains are selected from the database MySQL. | + | # In this case, the domains are selected from the database MySQL. |
| - | | + | domainlist local_domains = @ : ${lookup mysql{VIRTUAL_DOMAINS}} : ${lookup mysql{ALIAS_DOMAINS}} |
| - | | + | domainlist relay_to_domains = ${lookup mysql{RELAY_DOMAINS}} |
| - | # List of trusted networks from which mail will go without a number of checks | + | # List of trusted networks from which mail will go without a number of checks. |
| - | | + | hostlist |
| - | # Enter the name acl`ov for checking mail. | + | # Enter the name acl for checking mail. |
| - | | + | acl_smtp_rcpt = acl_check_rcpt |
| - | | + | acl_smtp_data = acl_check_content |
| - | | + | acl_smtp_helo = acl_check_helo |
| - | # If the setting is said to check mail for viruses - connect | + | # If the setting is said to check mail for viruses - connect. |
| - | | + | .ifdef USE_AV |
| - | | + | av_scanner = clamd:/ |
| - | | + | .endif |
| - | # If the setting is said to check mail for spam - connect | ||
| - | | ||
| - | | ||
| - | | ||
| - | # If the setting is said to work with support | + | # If the setting is said to check mail for spam - connect. |
| - | | + | .ifdef |
| - | # SSL / TLS cert and key | + | spamd_address |
| - | tls_certificate | + | .endif |
| - | tls_privatekey = / | + | |
| - | # Advertise TLS to anyone | + | |
| - | tls_advertise_hosts = * | + | |
| - | tls_on_connect_ports = 465 | + | |
| - | | + | |
| - | # Domain name is added to the local senders (real | ||
| - | # Of users of the system) that mail is sent from the root, will be from | ||
| - | # Root @ domen_ukazannyy_zdes. | ||
| - | # Hostname of `primary_hostname`. | ||
| - | | ||
| - | # Host Name for the situation, return to the previous one - is the domain name to be added to the e-mail | + | # If the setting is said to work with support for SSL - connect. |
| - | # Of system users, well and in general for the post, which came on the address type `root` etc ... | + | .ifdef TLS |
| + | # SSL/TLS cert and key | ||
| + | | ||
| + | | ||
| + | # Advertise TLS to anyone | ||
| + | | ||
| + | | ||
| + | .endif | ||
| + | |||
| + | |||
| + | # Domain name is added to the local senders (real users of the system) that mail is sent from the root, will be from | ||
| + | # root@sharewiz.net. | ||
| + | qualify_domain = sharewiz.net | ||
| + | |||
| + | # Host Name for the situation, return to the previous one - is the domain name to be added to the e-mail | ||
| + | # Of system users, well and in general for the post, which came on the address type `root` etc ... | ||
| Eton # If the item is not specified then the value obtained from the preceding paragraph - `qualify_domain` | Eton # If the item is not specified then the value obtained from the preceding paragraph - `qualify_domain` | ||
| | | ||
| Line 474: | Line 481: | ||
| | | ||
| </ | </ | ||
| - | |||
| ==== 110.greylist.conf ==== | ==== 110.greylist.conf ==== | ||
exim4/config.1479988050.txt.gz · Last modified: 2020/07/15 09:30 (external edit)