How to allow only one upstream server.

[jasggomes]

Hi, we have a dedicated server, and we need to allow only a set off IP's for our Anubis service.

How can i do this? I've read several docs, but so far no can do.
The initial setup wasn't done by me, but by the Leaseweb guys.

My first lines of exim.conf.
######################################################################
# SpamBlocker.exim.conf.2.0-release #
# Runtime configuration file for DirectAdmin/Exim 4.24 and above #
######### IMPORTANT ########## IMPORTANT ########## IMPORTANT ########
# WARNING! Be sure to back up your previous exim.conf file before #
# attempting to use this exim.conf file. #
# #
# Do may not use this exim.conf Exim configuration file unless you #
# make the required modifications to your Exim configuration #
# following the instructions in the README file included in this #
# distribution. #
# #
# This is version "2.0 of the SpamBlocker exim.conf file as #
# distributed by NoBaloney Internet Services for DirectAdmin based #
# servers. #
# #
# More information about NoBaloney.net may be found at: #
# http://www.nobaloney.net/ #
# #
# More information about DirectAdmin may be found at: #
# http://www.directadmin.com/ #
# #
# This Exim configuration file has been modified from the original #

=====

So I assume is v2 of the file.

Hope someone can help me.

Best regards.

JG

 

[nobaloney]

Do you want to only allow sending mail to one upstream mailserver? Or only allow receiving email from one upstream mailserver?

Jeff

 

[jasggomes]

Do you want to only allow sending mail to one upstream mailserver? Or only allow receiving email from one upstream mailserver?

Jeff

Hi Jeff, in this case only receiving from.

From one, or a list of IP's, as such this case is, AnubisNetworks has a set of IP's that we must allow to.

Thanks in advance.

 

[nobaloney]

You can:

Customize the DirectAdmin supplied exim.conf file, my latest exim.conf file, or create your own modified exim.conf file.

Easiest would be to use the acl_connect and the acl_check_helo acls in my latest file; but don't forget that to send mail you must also accept email from those authorized to relay through your server.

We can do this for you as custom work; if you're interested please contact me by email (I don't respond to PMs as quickly as I respond to email).

Jeff

 

[jasggomes]

Hi Jeff, thank you for your reply.

I couldn't yet execute your suggestions as I m over flooded with some other work, but I will and after port the feedback.

Meanwhile, if I could, I need to implement some openPGP on the mail server, do you have any suggestions for that? I will search the forum later on, but since I'm here I thought I could ask that.

Best regards

 

[nobaloney]

My understanding is that the MTA (the mail server, in our case exim) doesn't care about cntent, so it doesn't care about encryption of the body text.

Jeff