On Tue, Nov 05, 2002 at 09:42:14AM +0100, Vinai Kopp wrote: > On Mon, Nov 04, 2002 at 05:53:19PM -0500, ZZ wrote: > > On Mon, Nov 04, 2002 at 10:15:29PM +0100, Hendrik Sattler wrote: > > > ZZ wrote: > > > > Maybe I've figured this out, today I found sslwrap which can ssl-ify my > > > > smtp connection if I can get that password authentication stuff to work. > > > > The info in /usr/share/docs/exim/ does talk about it, but not much. > > > > > > Hm, obiously mail is forwarded to news:linux.debian.user but not the other > > > way round. There is a package exim-tls that has a n exim compiled with > > > openssl support. > > > > > > > Damn, I had used apt-cache to try to find just such a thing! Does > > exim-tls use the old exim.conf? I installed tls, I expected it to run > > eximconfig and maybe ask some questions about the ssl part. However it > > just installed the files and restarted exim(-tls). /etc/exim/exim.conf > > is the same file I edited originally, but now exim-tls will not > > authenticate. > > > > Does exim-tls use port 465 for the ssmtp connections? I port scanned my > > box and nothing is running on that port, so at this point neither ssl > > nor authentication is currently working. > > > > I have been trying to get exim-tls set up the way I want now for a > couple of weeks. If you use smtps I figure it uses port 465. But I > want to set it up to use the TLS command, so when clients connect to > port 25 from an unauthorized host, they can issue a TLS command to > start an encrypted session. exim-tls is running on port 25 here. > But I still am stuck getting the authorization working. The perfect > solution would be to use sasl (maybe with pam?), since I use cyrus as > an imapd. But for a start pam_unix would work. Cyrus isn't from the > .deb, I set it up before cyrus 2.x was packaged. I have exim-tls working just fine right here, but perhaps not in the way you want. I send mail using mutt on my workstation, which goes through my local exim, which uses TLS to send mail to my mail server. Non-encrypted relaying is off, but I can send mail from anywhere through my mail server. -rob
Attachment:
pgpiNa0D4y2J5.pgp
Description: PGP signature