Changes

From SME Server
Jump to navigationJump to search
847 bytes added ,  02:49, 5 April 2022
Line 922: Line 922:  
This is logged is in /var/log/messages.
 
This is logged is in /var/log/messages.
   −
===RelayClients settings===
+
===How do I setup relay Clients without authentication for trusted clients ?===
   −
Templates in:
+
* For most case, you really want to allow few specific clients on your LAN or trusted networks, this is done by setting a coma separated list of ip this way (replace IP1, IP2, IP3 by valid ips).
  /etc/e-smith/templates/var/service/qpsmtpd/config/relayclients
+
  config set qpsmtpd UnauthenticatedRelayClients IP1,IP2,IP3
 +
signal-event email-update
   −
10localhost:
+
* In some case you would have a whole dedicated network with appliances needing to send email without auth, this is done this way
For localhost
+
db networks setprop {$network} RelayRequiresAuth disabled
 +
signal-event email-update
   −
60myAppliances:
+
* If you want to disable auth for all your local networks
Individual members of a local network using config entry UnauthenticatedRelayClients" and single, comma separated IPs - subnets are not permitted:
+
  db configuration setprop qpsmtpd RelayRequiresAuth disabled
  qpsmtpd UnauthenticatedRelayClients | Individual list of comma separated IP addresses
+
signal-event email-update
   −
80relayFromLocalNetwork:
+
* In case you needs are not fulfilled because you need to accommodate a list of remote IP or a sub network of a larger trusted network, you can create a custom template. Here for reference the accepted formats:
For whole network from the network DB local network list:
+
  mkdir -p /etc/e-smith/templates-custom/var/service/qpsmtpd/config/relayclients
  db configuration setprop qpsmtpd RelayRequiresAuth | enabled/disabled
+
# a subnetwork by only using a prefix of full ip
  db network setprop {$network} RelayRequiresAuth | enabled/disabled
+
echo "10.10.0.">>  /etc/e-smith/templates-custom/var/service/qpsmtpd/config/relayclients/80custom
 +
# an external ip
 +
echo "99.10.1.23" >> /etc/e-smith/templates-custom/var/service/qpsmtpd/config/relayclients/80custom
 +
  # an external network you control
 +
echo "164.163.12.1/30" >> /etc/e-smith/templates-custom/var/service/qpsmtpd/config/relayclients/80custom
 +
signal-event email-update
    
===How do I enable smtp authentication for users on the internal network===
 
===How do I enable smtp authentication for users on the internal network===
Super Admin, Wiki & Docs Team, Bureaucrats, Interface administrators, Administrators
3,258

edits

Navigation menu