On Sun, Nov 17, 2013 at 09:05:14AM +0100, Didier Wiroth wrote: > Hi, > I'm not familiar with mail daemons and I'm trying to setup opensmtpd. >
Hi, > Here is what I would like to do: > 1) the mail server should accept mails for the 3 following domains: > - kma.mydomain.net > - prv.mydomain.net > - mydomain.net > > Preferable, every external server should use a "secure" (tls or ssl) > connection before submitting mail to my server. > > 2) For now, all mails from the 3 domains are delivered to the local > account -> didier. > f.ex. every mail send to t...@kma.mydomain.net, t...@prv.mydomain.net or > x...@mydomain.net go to local alias user didier's mbox > > 3) as a road warrior I should be able to send mail via my server: > a) via a secure connection (tls or ssl) and > b) and after having authenticated (from /etc/passwd)! > > I have pasted my smtpd.conf below. > I think that I have done 1) and 2) correctly (but not 100% sure). > I don't know how to configure 3), because if I append a "auth" to > listen on egress inet4 tls pki mail.mydomain.net auth > Then every mail send from an external third party server to my 3 > domains are refused because the servers have to authenticate before > being able to submit the mail. > > I would really appreciate if you could help setting up 1-3 correctly? > Thanks a lot, > Didier > > my /etc/mail/smtpd.conf: > > pki mail.mydomain.net certificate "/etc/ssl/mail.mydomain.net.crt" > pki mail.mydomain.net key "/etc/ssl/private/mail.mydomain.net.key" > > listen on lo0 > listen on egress inet4 tls pki mail.mydomain.net > > table aliases db:/etc/mail/aliases.db > accept from any for domain { kma.mydomain.net, > prv.mydomain.net,mydomain.net } virtual { "@" => didier } deliver to mbox > accept for local alias <aliases> deliver to mbox > accept for any relay > Adding "auth" on the "listen on egress" line should get you the desired result -- Gilles Chehade https://www.poolp.org @poolpOrg