Eddynetweb: /* Solution */

2017-04-15T04:30:05Z

Solution

← Older revision		Revision as of 04:30, 15 April 2017
Line 85:		Line 85:
	This will technically place it at the bottom of the sent mail, but you can shift it up using other sections, such as the ".ifdef SPAMASSASSIN" section.		This will technically place it at the bottom of the sent mail, but you can shift it up using other sections, such as the ".ifdef SPAMASSASSIN" section.

	Make sure to restart exim4 for functionality!		Make sure to restart exim4 for functionality!

	~~Make sure to reset nginx~~!

Eddynetweb: Exim4 trickery.

2017-04-15T04:29:32Z

Exim4 trickery.

New page

Common things I deal with when setting up exim4.

== Force TLS on all SMTP connections ==

How should I force SMTP to use TLS exclusively?

=== Issue ===

----

Traditionally, we've allowed SMTP to communicate over a variety of different ports, including port 25 (insecure). In this instance, we want to make sure that all the connections are made using TLS.

=== Solution ===

----

Simply visit the below directory with your choice of text editor:

'''/etc/exim4/exim4.conf.template'''

Then simply look for the following block:

<source lang="text">
tls_advertise_hosts = *
tls_certificate = /path/to/ssl/certificate.crt
tls_privatekey = /path/to/ssl/certificate.key
</source>

...and add the following block. You'll find we've added a new line called "auth_advertise_hosts" in this instance:

<source lang="text">
tls_advertise_hosts = *
auth_advertise_hosts = ${if eq {$tls_cipher}{}{}{*}}
tls_certificate = /path/to/ssl/certificate.crt
tls_privatekey = /path/to/ssl/certificate.key
</source>

This will force connections when authenticating towards TLS.

Restart exim4 and done!

== Adding custom headers to outgoing mail ==

If you've ever wondered how to add custom headers...

=== Issue ===

----

I want to be able to provide more information from within the headers as what to do misc. (such as reporting abuse for spam, etc.)

=== Solution ===

----

Simply visit the below directory with your choice of text editor:

'''/etc/exim4/exim4.conf.template'''

Which you will search for the following instance:

<source lang="text">
dnslookup:
driver = dnslookup
domains = !+local_domains
transport = remote_smtp
no_more
</source>

...and add your custom header using "headers_add":

<source lang="text">
dnslookup:
driver = dnslookup
domains = !+local_domains
transport = remote_smtp
headers_add = "X-AntiAbuse: Suspected Abuse? Forward this email (including headers) to abuse@eddyn.net\n\
X-AntiAbuse: Primary Hostname - $primary_hostname\n\
X-AntiAbuse: Original Domain - $original_domain\n\
X-AntiAbuse: Originator/Caller UID/GID - [$originator_uid $originator_gid] / [$caller_uid $caller_gid]\n\
X-AntiAbuse: Sender Address Domain - $sender_address_domain\n"
no_more
</source>

This will technically place it at the bottom of the sent mail, but you can shift it up using other sections, such as the ".ifdef SPAMASSASSIN" section.

Make sure to restart exim4 for functionality!

Make sure to reset nginx!

Exim4 trickery - Revision history

Eddynetweb: /* Solution */

Eddynetweb: Exim4 trickery.