Exim force TLS for specific destination domain

Posted by helpmhost on Server Fault See other posts from Server Fault or by helpmhost
Published on 2010-04-15T22:24:19Z Indexed on 2010/04/15 22:33 UTC
Read the original article Hit count: 307

Filed under:

exim

|

tls

Hi,

I need to configure Exim to require TLS when sending emails to a specific domain.

I know that I can use

 hosts_require_tls = host

in the smtp transport. But it sounds like that requires that I set the host of the receiving mail server. I would instead like to specify the domain.

Also, if I use this, will all other hosts/domains work without TLS? Just want to confirm before I implement.

Thanks.

© Server Fault or respective owner

Related posts about exim

Having problems with high CPU usage and apparent memory leak of Exim

as seen on Server Fault - Search for 'Server Fault'
I'm having problems with my server and am hoping you can help. The culprit appears to be exim. The CPU usage is consistently high and the memory usage trends up and up and up for no apparent reason (this is not a heavily used server). To demonstrate the issue, I ran the following: root@server [/var/log]#… >>> More
Exim - send certain "local" user mail to smtp

as seen on Server Fault - Search for 'Server Fault'
I'm using Exim 3 and would like to know how to send some local addresses to the smtp server instead of Exim handling them as a localuser. They are local addresses in the sense that they have the same domain as listed in 'local_domains' in exim.conf. I tried using the "require_files" option on the… >>> More
Linux Exim set return-path header automaticly using from header

as seen on Server Fault - Search for 'Server Fault'
Hello, I use Exim on a Centos distribution and have some problems with the mail sending. In order to make all the email pass the spam filters the "Return-path" and "Sender" headers have to be attached to each email. What should I do in order to have "Return-path" and "Sender" headers added by… >>> More
Exim log and send all mail for a given domain through another server

as seen on Server Fault - Search for 'Server Fault'
I administer a handful of shared web hosting servers. Recently, Yahoo has been deprioritizing/greylising all email sent from these servers. I am getting the dereaded 421 4.7.0 [TS02] Messages from my.ip.address temporarily deferred message from Yahoo and their postmaster has been unresponsive. I… >>> More
Install Exim 4.7 on Centos system running Cpanel & Whm

as seen on Server Fault - Search for 'Server Fault'
Hello, I want to install DKIM on our server and as far as i found out that is only suported in exim 4.7 Is there a way to install it on our server and not mess up the cpanel configuration ? I tryed to do a /scripts/eximup but that only goes to 4.69 build 23 thanks. >>> More

Related posts about tls

OpenVPN Error : TLS Error: local/remote TLS keys are out of sync: [AF_INET]

as seen on Server Fault - Search for 'Server Fault'
Fist off thanks for reading this, I appreciate any and all suggestions. I am having some serious problems reconnecting to my OpenVPN client using Riseup.net's VPN. I have spent a few days banging my head against the wall in attempts to set this up on my iOS devices....but that is a whole other issue… >>> More
Using SSL on slapd

as seen on Server Fault - Search for 'Server Fault'
I am setting up slapd to use SSL on Fedora 14. I have the following in my /etc/openldap/slapd.d/cn=config.ldif: olcTLSCACertificateFile: /etc/pki/tls/certs/SSL_CA_Bundle.pem olcTLSCertificateFile: /etc/pki/tls/certs/mydomain.crt olcTLSCertificateKeyFile: /etc/pki/tls/private/mydomain.key olcTLSCipherSuite:… >>> More
OpenLDAP, howto allow both secure (TLS) and unsecure (normal) connections?

as seen on Server Fault - Search for 'Server Fault'
Installed OpenLDAP 2.4 on FreeBSD 8.1. It works for ordinary connections OR for TLS connections. I can change it by (un)commenting the following lines in slapd.conf. # Enable TLS #security ssf=128 # Disable TLS security ssf=0 Is there a way to allow the clients to connect using TLS OR no-TLS… >>> More
Can't access Postfix TLS/SSL

as seen on Server Fault - Search for 'Server Fault'
I have set up my Postfix, with TLS/SSL, correctly. Every test on the machine itself (with telnet) runs fine. However, when I want to access the server from somewhere else, it fails. So port 587 and the rest is blocked for some reason, but I don't really know where. >>> More
Directory listing through FTPS (TLS) is not working

as seen on Server Fault - Search for 'Server Fault'
We recently switched our server to require TLS for every connection. This is working flawlessly so far, but one of our clients is having problems. Some facts: Server uses Pure-FTPD Server has a passive port range configured Server has no firewall limitations regarding the FTP Client uses WS FTP Client… >>> More