This is a discussion on tls_advertise_hosts = * does not fit for me ... within the alt.comp.mail.exim forums, part of the Mail Servers and Related category; Hi, I have the following configuration : 1) Linux Box with 2 routed networks : - 192.168.X.0/24 => Internal ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
Hi,
I have the following configuration : 1) Linux Box with 2 routed networks : - 192.168.X.0/24 => Internal network (my linux box has the 192.168.X.Y address) - A.B.C.D/32 => My ISP network 2) Exim 4.X running on that linux box on 0.0.0.0:25 3) TLS enabled TLS is working fine, however I would like to do the following : 1) When an incoming connection is from either 127.0.0.0/8 network or from 192.168.X.Y (e.g. incoming connexion from my linux box) I don't want to have any SSL crypto (standard SMTP) 2) When an incoming connection is from all other IP adresses tthen I DO want to have SSL I have turned around for hours, I could not find out how to set tls_advertise_host in such that way ! Thanx by advance Exim daemon list |
|
|||
|
I finnaly got it (I have some mess into my exim config file ...), for what I
want it s should be : hostlist non_ssl_hosts = 127.0.0.0/8 : 192.168;X.Y/32 tls_advertise_hosts = !+non_ssl_hosts And this work fine Thanx ... "Philippe Malka @crysalid-server.com>" <philippe.malka<NOSPAM> a écrit dans le message de news: 43282337$0$26459$626a14ce@news.free.fr... > Hi, > > I have the following configuration : > > 1) Linux Box with 2 routed networks : > - 192.168.X.0/24 => Internal network (my linux box has the > 192.168.X.Y address) > - A.B.C.D/32 => My ISP network > > 2) Exim 4.X running on that linux box on 0.0.0.0:25 > 3) TLS enabled > > TLS is working fine, however I would like to do the following : > 1) When an incoming connection is from either 127.0.0.0/8 network or > from 192.168.X.Y (e.g. incoming connexion from my linux box) I don't want > to have any SSL crypto (standard SMTP) > 2) When an incoming connection is from all other IP adresses tthen I DO > want to have SSL > > I have turned around for hours, I could not find out how to set > tls_advertise_host in such that way ! > > Thanx by advance > > > Exim daemon list > |
![]() |
| Thread Tools | |
| Display Modes | |
|
|