Patryk R. wrote:
Hello,

I'm sorry if this is a newbie question. I'm trying to enforce TLS for all outgoing messages, my first attempt was to add to acl_check_rcpt:
   deny    message       = TLS is required
           domains       = +local_domains
           condition     = ${if eq{$tls_cipher}{}{yes}{no}}

However this filtered out all incoming messages as well. My second attempt was to modify the dnslookup router, because all outgoing messages go through it. Here's how it looks like now:


You should use "sender_domains = +local_domains" because what you want is limiting usage of your domains for outgoing mails

Also you can even refine the rule a little bit more by adding
either (if you use IP to determine relaying authorization)
hosts = +relay_from hosts
either (if you use authentication to determine relaying authorization)
authenticated = *

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Reply via email to