[ILUG] jcdigita eximconfig relay not permitted

[Pete McEvoy]

On Sun, Apr 01, 2007 at 01:35:09PM +0100, Conor Daly wrote:
> I'm running CentOS 4 with exim4 as MTA configured using
> http://www.jcdigita.com/eximconfig/ .  Problem is that it's rejecting
> attempts to relay to or for user at machine.dyndns.org .  If I connect on the
> external interface and use: 
> rcpt to: me at firewall.house.ie
> 
> my message goes through for any sender, including it I claim to be
> user at machine.dyndns.org .  However, if I try to use 
> 
> rcpt to: user at machine.dyndns.org
> 
> I get '550 relay not permitted'

What do you want exim to do with mail for this domain? If you just want
it delivered locally, add it to local_domains. If you want something
else done with it, such as forwarded to another machine, ensure the
domain is in another hostlist (relay_domains, for example) which gets a
pass in your acls, and has a corresponding router.
If you want to use this server to send mail appearing to be from those
domains from hosts other than 192.168.25.0/24, then you'll need to
look into setting up smtp auth, and make sure "accept authenticated = *"
appears in your acls (and, obviously, the 192.168.25.0/24 network is
allowed through the acls, though you could ignore this and just use
smtp auth from everywhere)

> I cannot send outbound at all.

The following router/transport combo would handle outgoing mail:

lookuphost:
  driver = dnslookup
  domains = ! +local_domains
  transport = remote_smtp

remote_smtp:
  driver = smtp 

This is of course dependant on the mail getting through the acls to be
processed by the routers, a brief look at the site you mentioned shows
acls which, whilst I'm sure work great, make for some heavy reading.
The thing to watch out for is that the appropriate domains and hosts are
declared in the appropriate lists at the start of the config, with
routers and transports available to deliver them. Exim is extremely
flexible and can be configured any number of ways, but the general 
principle is: The acls decide if a mail gets through to the routers 
which decide how the mail should be delivered and passed on the 
transports which then do the delivery..

One other thing worth mentioning, exim does recipient/sender
verification by running a mail through the routers, so if you want to
refuse mail to non existant users, ensure that you have a router that
checks local parts (such as the check_local_user option or a list like: 
local_parts = lsearch;/etc/virtual/users )
      
HTH

-- 
Pete