Line 954: |
Line 954: |
| Change the configuration of the system from the default, so that it no longer requires encryption/authentication before allowing relaying of mail. | | Change the configuration of the system from the default, so that it no longer requires encryption/authentication before allowing relaying of mail. |
| | | |
− | Disable smtp authentication as shown in [[Bugzilla: 6522]] | + | * For most case, you really want to allow few specific clients on your LAN or trusted networks, this is done by setting a coma separated list of ip this way (replace IP1, IP2, IP3 by valid ips). |
| + | config set qpsmtpd UnauthenticatedRelayClients IP1,IP2,IP3 |
| + | signal-event email-update |
| + | |
| + | * In some case you would have a whole dedicated network with appliances needing to send email without auth, this is done this way |
| + | db networks setprop {$network} RelayRequiresAuth disabled |
| + | signal-event email-update |
| + | |
| + | * In case you needs are not fulfilled because you need to accommodate a list of remote IP or a sub network of a larger trusted network, you can create a custom template. Here for reference the accepted formats: |
| + | mkdir -p /etc/e-smith/templates-custom/var/service/qpsmtpd/config/relayclients |
| + | # a subnetwork by only using a prefix of full ip |
| + | echo "10.10.0.">> /etc/e-smith/templates-custom/var/service/qpsmtpd/config/relayclients/80custom |
| + | # an external ip |
| + | echo "99.10.1.23" >> /etc/e-smith/templates-custom/var/service/qpsmtpd/config/relayclients/80custom |
| + | # an external network you control |
| + | echo "164.163.12.1/30" >> /etc/e-smith/templates-custom/var/service/qpsmtpd/config/relayclients/80custom |
| + | signal-event email-update |
| + | |
| + | * Disable smtp authentication on all local interfaces as shown in [[Bugzilla: 6522]] |
| | | |
| config setprop qpsmtpd RelayRequiresAuth disabled | | config setprop qpsmtpd RelayRequiresAuth disabled |