Knowledgebase

Exim is a powerful, open-source mail transfer agent that allows you to send, receive, and route emails. It is widely used for handling email on Linux and Unix systems due to its flexibility, scalability, and security features. In this guide, we will walk you through the installation and configuration of Exim on your AnonVM server, ensuring secure and efficient email delivery.

Table of Contents

1. Prerequisites
2. What is Exim?
3. Installing Exim on AnonVM
4. Configuring Exim for Sending and Receiving Emails
5. Securing Exim with SSL/TLS Encryption
6. Testing Exim Configuration
7. Troubleshooting Exim Installation
8. Advanced Exim Configuration Tips
9. Configuring Spam Protection

1. Prerequisites

Before you begin, ensure your AnonVM server meets the following requirements:

• Operating System: A supported Linux distribution (e.g., Ubuntu 20.04 or CentOS 8).
• Root Access: You will need sudo or root privileges for installing and configuring software.
• Domain Name: A fully qualified domain name (FQDN), such as mail.yourdomain.com.
• DNS Records: Set up MX, SPF, and DKIM records for your domain.

2. What is Exim?

Exim is an open-source mail transfer agent (MTA) used for routing and delivering email messages. It is known for its flexibility and extensive configuration options, allowing administrators to control the flow of email through various routing mechanisms.

Key features of Exim:

• Highly Configurable: Exim allows detailed customization for routing, relaying, and filtering emails.
• Security: Supports authentication, encryption (SSL/TLS), and spam filtering.
• Performance: Handles large volumes of mail efficiently.

3. Installing Exim on AnonVM

Step 1: Update Your System

Make sure your server is up-to-date by running the following command:

Step 2: Install Exim

To install Exim on your server, use the following command:

This command installs the necessary Exim packages, including the MTA and configuration tools.

Step 3: Configure Exim

During the installation process, Exim will prompt you for several configuration settings. You can choose internet site for a simple email server setup. This option will configure Exim to send and receive email directly via SMTP.

1. Select ‘internet site’ when prompted.
2. Enter your FQDN (Fully Qualified Domain Name), for example, mail.yourdomain.com.
3. Set the mail name to your domain name (e.g., yourdomain.com).

Exim will generate a default configuration based on these settings.

4. Configuring Exim for Sending and Receiving Emails

Step 1: Modify the Exim Configuration File

Exim's configuration is stored in the /etc/exim4/exim4.conf.template file (or /etc/exim4/exim4.conf depending on your installation). You may need to customize the configuration for your specific needs.

1. Open the configuration file:

    

   sudo nano /etc/exim4/exim4.conf.template

2. Configure the basic settings, including the domain, hostname, and SMTP settings. If you have an external SMTP relay, add its details under the smarthost section.

Step 2: Configure SMTP Authentication

To secure your email relay and avoid unauthorized sending, configure SMTP authentication.

1. Open the Exim configuration file and locate the following section:

    

   # authenticators:

2. Uncomment or add the following lines to configure authentication (assuming you're using SMTP AUTH with credentials):

    

   plain: driver = plaintext public_name = PLAIN client_send = ^[0-9A-Za-z._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}$ server_condition = ${if match{$auth2}{^(.+):(.+)$}{yes}{no}} server_set_id = $1 server_pass = $2

3. Configure the SMTP relay host (if you have one) in the smarthost section. For example:

    

   smtp_smarthost = smtp.your-relay.com

Step 3: Configure MX and SPF Records

Make sure that your DNS is configured to support Exim’s mail delivery:

• MX Record: Ensure your DNS has an MX record pointing to mail.yourdomain.com.

• SPF Record: Add a Sender Policy Framework (SPF) record to prevent your email from being flagged as spam. A simple SPF record might look like:

  css

   

  v=spf1 mx ~all

5. Securing Exim with SSL/TLS Encryption

Exim supports SSL/TLS encryption to secure email communication. To enable SSL/TLS:

Step 1: Install SSL Certificates

If you're using Let’s Encrypt for free SSL certificates, follow these steps to install the SSL certificate:

The certificates will be saved in the following directory:

Step 2: Update Exim to Use SSL

Configure Exim to use SSL for both SMTP and IMAP/POP3 connections. Add the following to your Exim configuration file:

Step 3: Restart Exim

Restart Exim to apply the changes:

6. Testing Exim Configuration

Once Exim is installed and configured, it’s important to test your setup:

1. Check the Exim status:

    

   sudo systemctl status exim4

   Ensure that Exim is running without errors.

2. Send a test email:

   You can use the mail command to send a test email to verify that your server can send emails.

    

   echo "Test email body" | mail -s "Test email" [email protected]

   Check the recipient’s inbox to confirm successful delivery.

3. Check Exim logs:

   Exim logs its actions in the /var/log/exim4/mainlog file. You can check these logs to debug any issues.

    

   sudo tail -f /var/log/exim4/mainlog

7. Troubleshooting Exim Installation

• Exim Not Starting: Check the Exim logs in /var/log/exim4/mainlog for detailed error messages.
• Email Delivery Failures: Check DNS settings, MX records, and Exim logs for issues related to routing or relaying.
• SSL/TLS Issues: Ensure that SSL certificates are correctly installed and configured in Exim.

8. Advanced Exim Configuration Tips

• Routing Mail Based on Domain: You can set up multiple routing rules in Exim to route mail based on the domain, IP, or other criteria.
• Rate Limiting: Implement rate limiting for outgoing email to prevent abuse.
• Greylisting: Configure greylisting to reduce the volume of spam by delaying email acceptance for unknown senders.

9. Configuring Spam Protection

Exim supports various spam protection techniques, including SpamAssassin, RBL (Realtime Blackhole List), and Greylisting. You can install and configure these tools to protect your server from spam:

• Install SpamAssassin:

   

  sudo apt install spamassassin

• Configure Exim to Use SpamAssassin: Update your Exim configuration to use SpamAssassin for filtering incoming mail.

• Enable RBL: Use blacklists to block known spam sources by adding the following to your Exim configuration:

   

  rbl_domains = zen.spamhaus.org

Conclusion

By following this guide, you should have Exim set up and configured on your AnonVM server, with secure SSL/TLS encryption, proper email routing, and spam protection. Exim’s flexibility and extensive feature set allow for easy scaling and customization of your mail server as your email requirements grow.