Home Forums OS X Server and Client Discussion Questions and Answers Exim: virtual domains nor TLS/SSL work

Viewing 3 posts - 1 through 3 (of 3 total)
  • Author
    Posts
  • #355278
    Anonymous
    Participant

    I recently installed Exim and actually got it working to a degree similar to that of Apple Mail Server SMTP, in that I can do basic mail relaying and SMTP authentication. However, the two things I really need to work, virtual domains and SSL, are not working. I followed the steps in the Setting up Exim 4.10 for OSX 10.2 Server for virtual domians, but it does not work. What i find odd is that we generate our virtual domain host names in /etc/mail (ie /etc/mail/afp548.com) but the code that goes in the exim configure file:
    [code:1:0d27df873b] virtual:
    driver = redirect
    domains = dsearch;/etc/mail/virtual
    data = ${lookup{$local_part}lsearch{/etc/mail/virtual/$domain}}
    no_more
    [/code:1:0d27df873b]
    seems to indicate it will look for the the virtual domain in /etc/mail/virtual (so i would assumei would make /etc/mail/virtual/afp548.com). If I don’t have the virtual folder, Exim in debug mode says that the directory cannot be found. If I add the virtual/ directory, with the afp548.com file, for example, in there, it still fails. The degugging code gives me the following:
    [code:1:0d27df873b]
    #….After some other stuff like authentication….
    SMTP>> 235 Authentication succeeded
    SMTP<< MAIL FROM:<[email protected]>
    SMTP>> 250 OK
    SMTP<< RCPT TO:<[email protected]>
    active address [email protected]
    local_part=admin domain=pacificswell.com
    using ACL "acl_check_rcpt"
    processing "accept"
    check hosts = :
    host in ":"? no (end of list)
    accept: condition test failed
    processing "deny"
    check local_parts = ^.*[@%!/|] : ^\\.
    admin in "^.*[@%!/|] : ^\."? no (end of list)
    deny: condition test failed
    processing "accept"
    check local_parts = postmaster
    admin in "postmaster"? no (end of list)
    accept: condition test failed
    processing "require"
    check verify = sender
    >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
    Verifying [email protected]
    >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
    Considering [email protected]
    active address [email protected]
    local_part=sales domain=pacificswell.com
    >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
    routing [email protected]
    ——–> dnslookup router <——–
    local_part=sales domain=pacificswell.com
    checking domains
    pacificswell.com in "pacificswell.com : webpsn.com : pacificswell.net : sandpiperdebs.org : pns1"? yes (matched "pacificswell.com")
    pacificswell.com in "! +local_domains"? no (matched "! +local_domains")
    cached lookup data = NULL
    dnslookup router skipped: domains mismatch
    ——–> virtual router <——–
    local_part=sales domain=pacificswell.com
    checking domains
    search_open: dsearch "/etc/mail/virtual"
    search_find: file="/etc/mail/virtual"
    key="pacificswell.com" partial=-1
    LRU list:
    4/etc/mail/virtual
    8/etc/relayers
    End
    internal_search_find: file="/etc/mail/virtual"
    type=dsearch key="pacificswell.com"
    file lookup required for pacificswell.com
    in /etc/mail/virtual
    lookup deferred: /etc/mail/virtual/pacificswell.com: stat failed
    pacificswell.com in "dsearch;/etc/mail/virtual"? lookup deferred for dsearch;/etc/mail/virtual
    domains check lookup or other defer
    ———– end verify ————
    require: condition test deferred
    LOG: MAIN REJECT
    H=sm39220.resnet.ucsb.edu (pacificswell.com) [128.111.39.220] sender verify defer for <[email protected]>: domains check lookup or other defer
    SMTP>> 451 Temporary local problem – please try later
    LOG: MAIN REJECT
    H=sm39220.resnet.ucsb.edu (pacificswell.com) [128.111.39.220] F=<[email protected]> temporarily rejected RCPT <[email protected]>: /etc/mail/virtual/pacificswell.com: stat failed
    SMTP<< QUIT
    SMTP>> 221 mail.pacificswell.com closing connection
    LOG: smtp_connection MAIN
    SMTP connection from sm39220.resnet.ucsb.edu (pacificswell.com) [128.111.39.220] closed by QUIT
    search_tidyup called
    child 6080 ended: status=0x0
    0 SMTP accept processes now running
    Listening…
    [/code:1:0d27df873b]

    What looks like it is doing here is verifying the SENDER, not the recipent in the virtual router section. Keep in mind “admin” is the recipent, “sales” is the sender. Any help on this matter would be greatly appreciated!

    Also, SSL. I’m getting the “SMTP Server is not accepting TLS/SSL connections on port 25” even though i complied Exim with TLS enabled following your directions exactly. There is nothing for tls in the configure file either… Any insight on this as well would be great.

    Thanks VERY much again in advance.

    #355282
    Anonymous
    Participant

    Ok, in /etc/mail/virtual, i have two files, pacificswell.com, and sandpiperdebs.org.
    Within the sandpiperdebs.org file, I have

    However, i feel this is insignifigant because even if i send a message to ANYONE else, even to an address outside of my server, it fails in the same way as shown in the code above. In my exim configure file, I only added to the Router section, as follows:
    [code:1:259d2e77ef]
    dnslookup:
    driver = dnslookup
    domains = ! +local_domains
    transport = remote_smtp
    ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8
    no_more

    # The remaining routers handle addresses in the local domain(s).

    virtual:
    driver = redirect
    domains = dsearch;/etc/mail/virtual
    data = ${lookup{$local_part}lsearch{/etc/mail/virtual/$domain}}
    no_more

    system_aliases:
    driver = redirect
    allow_fail
    allow_defer
    data = ${lookup{$local_part}lsearch{/etc/aliases}}
    # user = exim
    file_transport = address_file
    pipe_transport = address_pipe

    userforward:
    driver = redirect
    check_local_user
    file = $home/.forward
    no_verify
    no_expn
    check_ancestor
    # allow_filter
    file_transport = address_file
    pipe_transport = address_pipe
    reply_transport = address_reply

    # This router matches local user mailboxes.

    localuser:
    driver = accept
    check_local_user
    transport = local_delivery[/code:1:259d2e77ef]

    With that virtual section in there, all mail fails to be routed through the Exim SMTP server, but with it removed, it works fine (to non virtual domains). Please tell me if this helps and/or if you need more information. Thanks again.

    Btw- i will play with SSL/TLS later after i get this working.

    #355288
    Anonymous
    Participant

    1) Yes

    2) I’m not familiar with the wildcard lookups and where i would define them. Please let me know what i have to do for these lookups.

    But let me just reemphasize something while I have the chance. Whenever I enter that virtual tag, all out going mail thru the SMTP server is refused. As in the debugging code above, it seems to try to verify the senders domain in the virtual router. It is weird to me, but maybe that is the correct operation? Well, let me know and thanks for all of your help thus far.

Viewing 3 posts - 1 through 3 (of 3 total)
  • You must be logged in to reply to this topic.

Comments are closed