Fix CVE-2016-1531
[exim.git] / test / confs / 3500
1 # Exim test configuration 3500
2
3 exim_path = EXIM_PATH
4 keep_environment =
5 host_lookup_order = bydns
6 primary_hostname = myhost.test.ex
7 spool_directory = DIR/spool
8 log_file_path = DIR/spool/log/%slog
9 gecos_pattern = ""
10 gecos_name = CALLER_NAME
11 tls_advertise_hosts =
12
13 # ----- Main settings -----
14
15 domainlist local_domains = test.ex : *.test.ex
16
17 hostlist auth_hosts = 10.0.0.1 : 10.0.0.5
18 hostlist relay_hosts = 10.0.0.4
19 hostlist auth_relay_hosts = 10.0.0.3 : 10.0.0.4
20
21 acl_smtp_etrn = check_etrn
22 acl_smtp_expn = check_expn
23 acl_smtp_rcpt = check_recipient
24 acl_smtp_vrfy = check_vrfy
25 auth_advertise_hosts = +auth_hosts : !+relay_hosts : +auth_relay_hosts : \
26 10.0.0.5
27 smtp_accept_max_nonmail = 20
28 system_filter = DIR/aux-fixed/TESTNUM.filter
29 trusted_users = CALLER
30
31
32 # ----- ACL -----
33
34 begin acl
35
36 check_recipient:
37 warn hosts = 10.0.0.5
38 message = authentication-failed: $authentication_failed
39 accept hosts = 10.0.0.5
40 accept hosts = :
41 deny hosts = +auth_hosts
42 message = authentication required
43 !authenticated = *
44 accept domains = +local_domains
45 accept hosts = +relay_hosts
46 accept hosts = +auth_relay_hosts
47 endpass
48 message = authentication required
49 authenticated = *
50 deny message = relay not permitted
51
52 check_etrn:
53 deny hosts = +auth_hosts
54 message = authentication required
55 !authenticated = *
56 require hosts = 10.0.0.0/24
57 warn log_message = accepted ETRN $smtp_command_argument
58 accept
59
60 check_expn:
61 deny hosts = +auth_hosts
62 message = authentication required
63 !authenticated = *
64 accept hosts = 10.0.0.0/24
65
66 check_vrfy:
67 deny hosts = +auth_hosts
68 message = authentication required
69 !authenticated = *
70 accept
71
72
73 # ----- Authentication -----
74
75 begin authenticators
76
77 cram_md5:
78 driver = cram_md5
79 public_name = CRAM-MD5
80 server_debug_print = +++CRAM-MD5 \$auth1="$auth1" \$auth2=\"$auth2" \$auth3="$auth3"
81 server_secret = "${if eq{$auth1}{tim}{tanstaaftanstaaf}\
82 {${if eq{$auth1}{userx}{secret}fail}}}"
83 server_set_id = $auth1
84 server_condition = ${if !eq {$sender_host_address}{10.0.0.5}}
85
86
87
88 # ----- Routers -----
89
90 begin routers
91
92 fail_remote_domains:
93 driver = redirect
94 domains = ! +local_domains
95 data = :fail: unrouteable mail domain "$domain"
96
97 localuser:
98 driver = accept
99 local_parts = userx
100 transport = appendfile
101
102
103 # ----- Transports -----
104
105 begin transports
106
107 appendfile:
108 driver = appendfile
109 delivery_date_add
110 envelope_to_add
111 file = DIR/test-mail/$local_part
112 return_path_add
113 user = CALLER
114
115
116 # End