Disable identd (rfc1413) lookups by default
[exim.git] / test / confs / 2131
1 # Exim test configuration 2131
2 # SNI
3
4 SERVER =
5
6 exim_path = EXIM_PATH
7 host_lookup_order = bydns
8 primary_hostname = myhost.test.ex
9 spool_directory = DIR/spool
10 log_file_path = DIR/spool/log/SERVER%slog
11 gecos_pattern = ""
12 gecos_name = CALLER_NAME
13
14
15 # ----- Main settings -----
16
17 domainlist local_domains = test.ex : *.test.ex
18
19 acl_smtp_rcpt = acl_log_sni
20 log_selector = +tls_peerdn +tls_sni +received_recipients
21 remote_max_parallel = 1
22
23 tls_advertise_hosts = *
24
25 # Set certificate only if server
26
27 tls_certificate = ${if eq {SERVER}{server} \
28         {DIR/aux-fixed/${if eq {$tls_in_sni}{bill} \
29             {exim-ca/example.com/server1.example.com/server1.example.com.pem} \
30             {cert1} \
31                         }\
32         }fail}
33
34 tls_privatekey = ${if eq {SERVER}{server} \
35         {DIR/aux-fixed/${if eq {$tls_in_sni}{bill} \
36             {exim-ca/example.com/server1.example.com/server1.example.com.unlocked.key} \
37             {cert1} \
38                         }\
39         }fail}
40
41
42 # ------ ACL ------
43
44 begin acl
45
46 acl_log_sni:
47   accept
48          logwrite = SNI <$tls_in_sni>
49
50 # ----- Routers -----
51
52 begin routers
53
54 client:
55   driver = accept
56   condition = ${if !eq {SERVER}{server}}
57   transport = send_to_server${if eq{$local_part}{abcd}{2}{1}}
58
59 server:
60   driver = redirect
61   data = :blackhole:
62
63
64 # ----- Transports -----
65
66 begin transports
67
68 send_to_server1:
69   driver = smtp
70   allow_localhost
71   hosts = HOSTIPV4
72   port = PORT_D
73   tls_sni = fred
74   hosts_require_tls = *
75   tls_try_verify_hosts = :
76
77 send_to_server2:
78   driver = smtp
79   allow_localhost
80   hosts = HOSTIPV4
81   port = PORT_D
82   tls_sni = bill
83   hosts_require_tls = *
84   tls_try_verify_hosts = :
85
86
87 # ----- Retry -----
88
89
90 begin retry
91
92 * * F,5d,10s
93
94
95 # End