Changes

Jump to navigation Jump to search
1,255 bytes added ,  02:54, 5 April 2022
Line 954: Line 954:  
Change the configuration of the system from the default, so that it no longer requires encryption/authentication before allowing relaying of mail.
 
Change the configuration of the system from the default, so that it no longer requires encryption/authentication before allowing relaying of mail.
   −
Disable smtp authentication as shown in [[Bugzilla: 6522]]
+
* For most case, you really want to allow few specific clients on your LAN or trusted networks, this is done by setting a coma separated list of ip this way (replace IP1, IP2, IP3 by valid ips).
 +
config set qpsmtpd UnauthenticatedRelayClients IP1,IP2,IP3
 +
signal-event email-update
 +
 
 +
* In some case you would have a whole dedicated network with appliances needing to send email without auth, this is done this way
 +
db networks setprop {$network} RelayRequiresAuth disabled
 +
signal-event email-update
 +
 
 +
* In case you needs are not fulfilled because you need to accommodate a list of remote IP or a sub network of a larger trusted network, you can create a custom template. Here for reference the accepted formats:
 +
mkdir -p /etc/e-smith/templates-custom/var/service/qpsmtpd/config/relayclients
 +
# a subnetwork by only using a prefix of full ip
 +
echo "10.10.0.">>  /etc/e-smith/templates-custom/var/service/qpsmtpd/config/relayclients/80custom
 +
# an external ip
 +
echo "99.10.1.23" >> /etc/e-smith/templates-custom/var/service/qpsmtpd/config/relayclients/80custom
 +
# an external network you control
 +
echo "164.163.12.1/30" >> /etc/e-smith/templates-custom/var/service/qpsmtpd/config/relayclients/80custom
 +
signal-event email-update
 +
 
 +
* Disable smtp authentication on all local interfaces as shown in [[Bugzilla: 6522]]
    
  config setprop qpsmtpd RelayRequiresAuth disabled
 
  config setprop qpsmtpd RelayRequiresAuth disabled
Super Admin, Wiki & Docs Team, Bureaucrats, Interface administrators, Administrators
3,263

edits

Navigation menu