# Exim test configuration 1148

.include DIR/aux-var/tls_conf_prefix

primary_hostname = myhost.test.ex
log_selector = +received_recipients

# ----- Main settings -----

.ifdef SUB
tls_on_connect_ports = SUB
.endif

tls_advertise_hosts = *
tls_certificate = DIR/aux-fixed/cert1
tls_privatekey = DIR/aux-fixed/cert1

queue_only
queue_run_in_order

acl_smtp_atrn = check_atrn 
acl_smtp_rcpt = accept

# ----- ACL -----

begin acl

check_atrn:
  warn		set acl_m0 = clientdom.net
		logwrite = tls_in_cipher $tls_in_cipher
  defer		!atrn_domains = <, $acl_m0
		message = 453 You have no mail
  accept

# ----- auths ----

begin authenticators

plain:
  driver = plaintext
  public_name = PLAIN
  server_advertise_condition = ${if def:tls_in_cipher}
  server_condition = "\
    ${if and {{eq{$auth2}{userx}}{eq{$auth3}{secret}}}{yes}{no}}"
  server_set_id = $auth2

  client_send = ^userx^secret

# -------- routers ---

begin routers

to_customer:
  driver =	manualroute
  condition =	${if eq {$atrn_mode}{P}}
  route_data =	<;$atrn_host
  self =	send
  transport =	call_customer

to_provider:
  driver =	manualroute
  condition =	${if eq {$atrn_mode}{C}}
  route_data =	<;$domain
  self =	send
  transport =	call_provider

# -------- transports ---

begin transports

call_customer:
  driver =			smtp
  allow_localhost
  hosts_require_tls =		*
  tls_verify_certificates =	DIR/aux-fixed/cert1
  tls_verify_cert_hostnames =	:

call_provider:
  driver =              smtp
  port =                PORT_D2
  hosts_try_auth =	*
  tls_verify_certificates =
  command_timeout =     10m

# End