Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have smtp auth set up on my exim4 Dqueeze server so that only auth'ed clients can use it as a mail relay.

I believe this is working, e.g. thunderbird (w/out password) reports that I am "not yet authorised to send mail for X from Y".

I also have greylistd installed, which I also see to be working.

But I've noticed that when an unauthorised connection is made the error is temporarily rejected RCPT <email@eg.com>: greylisted

Should greylisting be taking effect here? Surely it should just be saying "go away, you're not authorised" rather than filling up a greylist queue?

share|improve this question

1 Answer 1

up vote 1 down vote accepted

There is no point in greylisting un-authorized connections. It just makes diagnostics difficult. You should just reject them up front.

I believe that the problem is in how the greylisting is setup in your Exim access control lists. You must have inserted the greylisting rules in the ACLs so that they are checked before the rule that denies relaying by un-authorized users. You should re-arrange the rules so that the logic makes sense.

It is not possible to give definite answer without seeing your configuration.

share|improve this answer
    
Thanks for taking the time to answer. I posted this a long while back and I've learnt a lot more about exim since. I think it was a config thing in that I'd said relay mail for * (thinking of the case of authenticated clients), which was wrong. My nonauth ACL rule was stopping delivery, but greylistd's condition domains = +local_domains : +relay_to_domains was being met for all domains because of the config. So actually it wasn't the order of the ACL clauses, because greylistd is pretty clever, but nevertheless your answer helped me understand. Thanks. –  artfulrobot Jul 5 '12 at 20:55

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.