# Exim test configuration 5721

.include DIR/aux-var/tls_conf_prefix

primary_hostname = myhost.test.ex

# ----- Main settings -----

acl_smtp_connect = check_conn
acl_smtp_quit =    accept logwrite = ACL quit
acl_smtp_notquit = accept logwrite = ACL notquit

tls_advertise_hosts = *
tls_certificate = DIR/aux-fixed/cert1

host_reject_connection = ${acl {hrc}}
smtp_banner = ${if != {$received_port}{PORT_D4} {my banner}fail}
event_action = ${acl {tls_fail}}

log_selector = +pid

# ------ ACL ------

begin acl

hrc:
  warn		logwrite = eval host_reject_connection
  accept	condition = ${if eq {$received_port}{PORT_D}}
		# no mesage= hence host_reject_connection should be empty
  deny		condition = ${if eq {$received_port}{PORT_D2}}
		message = *
                # PORT_D2 gets a host_reject_connection

check_conn:
  warn		logwrite =	ACL conn
  deny		condition =	${if eq {$received_port}{PORT_D3}}
		log_message =	we dislike you
		# PORT_D3 gets a conn ACL fail
  accept

tls_fail:
  warn		logwrite =  EV $event_name
  accept	condition = ${if eq {tls:fail:connect}{$event_name}}
		logwrite =  EVDATA: $event_data
  accept


# End