Re: [exim] Exim drops mails

2008-02-07 Thread Peter Bowyer
On 06/02/2008, Peter Kirk [EMAIL PROTECTED] wrote:
 Hi all

 I have the strangest problem, all of a sudden my mail server started to
 drop mails with more than 100 recipients in the it, the error in the
 logs that I get is unexpected disconnection while reading SMTP command
 from

Are these mails inbound to your Exim server? The error message you
quoted part of suggests it's an inbound connection that's dropping
early, which isn't something your Exim is in control of.

Much more detail needed before any useful help can be given. Log
entries, configs, versions etc.

Peter
-- 
Peter Bowyer
Email: [EMAIL PROTECTED]

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Exim drops mails

2008-02-07 Thread Peter Kirk
Running on Freebsd 6.2, exim version 4.68-0

The below is all that is entered into the logs.  I get about 1 of
these a day but guessing most is spam anyways.  

2008-02-07 11:04:45 unexpected disconnection while reading SMTP command
from seldisa02.sonyericssonmail.com [192.16.134.98]

As for the config files can send them but will take some time editing
all sensitive data out, surely if it was from the config it would report
some more data than just dropping the email, and I did not config
changes this problem just started.



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Peter
Bowyer
Sent: 07 February 2008 10:59
To: exim users
Subject: Re: [exim] Exim drops mails

On 06/02/2008, Peter Kirk [EMAIL PROTECTED] wrote:
 Hi all

 I have the strangest problem, all of a sudden my mail server started
to
 drop mails with more than 100 recipients in the it, the error in the
 logs that I get is unexpected disconnection while reading SMTP
command
 from

Are these mails inbound to your Exim server? The error message you
quoted part of suggests it's an inbound connection that's dropping
early, which isn't something your Exim is in control of.

Much more detail needed before any useful help can be given. Log
entries, configs, versions etc.

Peter
-- 
Peter Bowyer
Email: [EMAIL PROTECTED]

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


[exim] 答复: Exim-users Digest, Vol 45, Issue 7

2008-02-07 Thread zq
 
Here is my problem in $home/.forward configuration,
2008-02-07 17:34:54 1JN39i-0007li-F6 == [EMAIL PROTECTED] R=userforward defer
(-1): internal problem in userforward router (recipient is
[EMAIL PROTECTED]): failure to transfer data from subprocess: status=0100
readerror='Success'

[EMAIL PROTECTED] ~]# cat /home/tzqian/.forward
[EMAIL PROTECTED], [EMAIL PROTECTED]

And I can send email to [EMAIL PROTECTED] by using [EMAIL PROTECTED]
email address.
I want to create a forward list to forward a email to [EMAIL PROTECTED]
Who can help me fix this problem.Thank you.



-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Exim drops mails

2008-02-07 Thread Peter Bowyer
(Please don't top-post)

On 07/02/2008, Peter Kirk [EMAIL PROTECTED] wrote:
 Running on Freebsd 6.2, exim version 4.68-0

 The below is all that is entered into the logs.  I get about 1 of
 these a day but guessing most is spam anyways.

 2008-02-07 11:04:45 unexpected disconnection while reading SMTP command
 from seldisa02.sonyericssonmail.com [192.16.134.98]

If these happen as a result of 'deny' actions in ACLs, then they're
normal - the spamware is hanging up on you because it didn't expect a
5xx response. You could test by slackening the ACLs a bit. If they're
happening on 1 wanted mails, then some extra logging might help -
see 
http://www.exim.org/exim-html-current/doc/html/spec_html/ch49.html#SECTlogselector

 As for the config files can send them but will take some time editing
 all sensitive data out, surely if it was from the config it would report
 some more data than just dropping the email, and I did not config
 changes this problem just started.

Your call - its easier to suggest fixes when one has the full picture.

Peter
-- 
Peter Bowyer
Email: [EMAIL PROTECTED]

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Exim drops mails

2008-02-07 Thread Peter Kirk

On 07/02/2008, Peter Kirk [EMAIL PROTECTED] wrote:
 Running on Freebsd 6.2, exim version 4.68-0

 The below is all that is entered into the logs.  I get about 1 of
 these a day but guessing most is spam anyways.

 2008-02-07 11:04:45 unexpected disconnection while reading SMTP
command
 from seldisa02.sonyericssonmail.com [192.16.134.98]

If these happen as a result of 'deny' actions in ACLs, then they're
normal - the spamware is hanging up on you because it didn't expect a
5xx response. You could test by slackening the ACLs a bit. If they're
happening on 1 wanted mails, then some extra logging might help -
see
http://www.exim.org/exim-html-current/doc/html/spec_html/ch49.html#SECTl
ogselector

 As for the config files can send them but will take some time editing
 all sensitive data out, surely if it was from the config it would
report
 some more data than just dropping the email, and I did not config
 changes this problem just started.

Your call - its easier to suggest fixes when one has the full picture.

Peter
-- 
Peter Bowyer
Email: [EMAIL PROTECTED]


-
So I added the log all command and when sending a mail with more than
100 recipeints I get the following in the logs

2008-02-07 12:44:25 [18647] H=(peterkilap) [x.x.x.x]:3564 I=[x.x.x.x]:25
incomplete transaction (connection lost) from [EMAIL PROTECTED] for
[EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
2008-02-07 12:44:25 [18647] unexpected disconnection while reading SMTP
command from (peterkilap) [x.x.x.x]:3564 I=[x.x.x.x]:25 (error:
Operation timed out)
-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Exim drops mails

2008-02-07 Thread Peter Bowyer
On 07/02/2008, Peter Kirk [EMAIL PROTECTED] wrote:

 2008-02-07 12:44:25 [18647] unexpected disconnection while reading SMTP
 command from (peterkilap) [x.x.x.x]:3564 I=[x.x.x.x]:25 (error:
 Operation timed out)

So the SMTP client at x.x.x.x hung up on the Exim server at x.x.x.x
unexpectedly. What is the client? What's it saying about all this?

Peter

-- 
Peter Bowyer
Email: [EMAIL PROTECTED]

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Exim drops mails

2008-02-07 Thread Peter Bowyer
On 07/02/2008, Peter Kirk [EMAIL PROTECTED] wrote:

 On 07/02/2008, Peter Kirk [EMAIL PROTECTED] wrote:

  2008-02-07 12:44:25 [18647] unexpected disconnection while reading
 SMTP
  command from (peterkilap) [x.x.x.x]:3564 I=[x.x.x.x]:25 (error:
  Operation timed out)

 So the SMTP client at x.x.x.x hung up on the Exim server at x.x.x.x
 unexpectedly. What is the client? What's it saying about all this?

 Peter

 

 Tested sending this mail with an attachment as our server does not scan
 for spam over a certain size and still the same thing, so not a config
 error by the looks of it.

 When I Used wireshark to see what was going on, the mail server after
 the 100th recipient was received said expected retransmission and then
 resets the connection.

The output of your wireshark session might be a useful thing to post,
rather than your translation of it.


 Any idea's im pretty much at a dead end and looks like a reboot on the
 weekend to see if I can fix it.

You don't seem to want to answer my requests for more information, so
no, sorry, no more ideas.
-- 
Peter Bowyer
Email: [EMAIL PROTECTED]

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Exim drops mails

2008-02-07 Thread Peter Kirk

On 07/02/2008, Peter Kirk [EMAIL PROTECTED] wrote:

 On 07/02/2008, Peter Kirk [EMAIL PROTECTED] wrote:

  2008-02-07 12:44:25 [18647] unexpected disconnection while reading
 SMTP
  command from (peterkilap) [x.x.x.x]:3564 I=[x.x.x.x]:25 (error:
  Operation timed out)

 So the SMTP client at x.x.x.x hung up on the Exim server at x.x.x.x
 unexpectedly. What is the client? What's it saying about all this?

 Peter

 

 Tested sending this mail with an attachment as our server does not
scan
 for spam over a certain size and still the same thing, so not a config
 error by the looks of it.

 When I Used wireshark to see what was going on, the mail server after
 the 100th recipient was received said expected retransmission and
then
 resets the connection.

The output of your wireshark session might be a useful thing to post,
rather than your translation of it.


 Any idea's im pretty much at a dead end and looks like a reboot on the
 weekend to see if I can fix it.

You don't seem to want to answer my requests for more information, so
no, sorry, no more ideas.
-- 
Peter Bowyer
Email: [EMAIL PROTECTED]

---


Below is the exim config,  I will try to redo the wireshark test


MESSAGE_SIZE_LIMIT = 7M

MESSAGE_SIZE_SPAM_MAX = 1M

# Greylising queries
GL_TEST =   SELECT CASE \
WHEN now() - block_expires  0 THEN 2 \
ELSE 1 \
END \
FROM relaytofrom \
WHERE relay_ip='${quote_pgsql:$sender_host_address}' \
AND from_domain='${quote_pgsql:$sender_address_domain}'

GL_ADD  =   INSERT INTO relaytofrom (relay_ip, from_domain) \
VALUES ( '${quote_pgsql:$sender_host_address}', \
'${quote_pgsql:$sender_address_domain}')

GL_UPDATE = SELECT * FROM $acl_m6('$sender_host_address', \
'$sender_address_domain')

USE_GLISTING = yes

hostlist = removed

hostlist reserve_hosts = removed
hostlist relay_from_hosts =  removed
domainlist relay_to_domains = removed
domainlist local_domains = removed

dns_again_means_nonexist = !+local_domains : !+relay_to_domains

smtp_accept_max = 0
smtp_load_reserve = 15
smtp_reserve_hosts = +reserve_hosts

smtp_accept_max_per_connection = 998
smtp_accept_queue_per_connection = 51

pipelining_advertise_hosts = :

primary_hostname = removed

acl_smtp_connect = acl_check_connect
acl_smtp_helo= acl_check_helo
acl_smtp_mail= acl_check_mail_from
acl_smtp_rcpt= acl_check_rcpt
acl_smtp_data= acl_check_data

av_scanner = clamd:/var/run/clamav/clamd
spamd_address = 127.0.0.1 783
hide pgsql_servers = (/tmp/.s.PGSQL.5432)/exim/exim/exim

exim_user = mailnull
exim_group = mail
never_users = root

system_filter = /usr/local/etc/exim/system.filter
system_filter_user = mailnull
system_filter_group = mail

host_lookup = !+relay_from_hosts

rfc1413_hosts = !+relay_from_hosts
rfc1413_query_timeout = 5s
ignore_bounce_errors_after = 2d
timeout_frozen_after = 7d

##
#   ACL CONFIGURATION#
# Specifies access control lists for incoming SMTP mail  #
##

begin acl

acl_check_connect:

  warn
set acl_m2  = $tod_epoch

  accept
hosts   = : +relay_from_hosts

  warn
!hosts  = ${if exists {/usr/local/etc/mail/whitelist-hosts} \
  {/usr/local/etc/mail/whitelist-hosts}}
dnslists= list.dsbl.org : \
  dnsbl.njabl.org : \
  bl.spamcop.net : \
  dsn.rfc-ignorant.org : \
  dnsbl.sorbs.net : \
  sbl-xbl.spamhaus.org : \
  l1.spews.dnsbl.sorbs.net
set acl_c1  = X-DNSbl-Warning: \
  $sender_host_address is listed in $dnslist_domain\
  ${if def:dnslist_text { ($dnslist_text)}}

  warn
condition   = ${if !def:acl_c1 {true}{false}}
!verify = reverse_host_lookup
set acl_m9  = Reverse DNS lookup failed for host
$sender_host_address
set acl_c1  = X-DNS-Warning: $acl_m9

  accept
set acl_m2  = ${if def:acl_c1 {${eval:20 + $acl_m2 -
$tod_epoch}}{0}}
delay   = ${if {$acl_m2}{0}{$acl_m2}{0}}s

acl_check_helo:

  warn
set acl_m2  = $tod_epoch

  accept
hosts   = : +relay_from_hosts

  warn
condition   = ${if isip {$sender_helo_name}{true}{false}}
set acl_c0  = Message was delivered by ratware
set acl_c1  = remote host used IP address in HELO/EHLO greeting

  warn
condition   = ${if match_domain{$sender_helo_name}\
 
{$primary_hostname:+local_domains:+relay_to_domains}\
   {true}{false}}
set acl_c0  = Message was delivered by ratware
set acl_c1  = remote host used our name in HELO/EHLO greeting.

  warn
condition   = 

Re: [exim] Exim drops mails

2008-02-07 Thread Peter Kirk

On 07/02/2008, Peter Kirk [EMAIL PROTECTED] wrote:

 2008-02-07 12:44:25 [18647] unexpected disconnection while reading
SMTP
 command from (peterkilap) [x.x.x.x]:3564 I=[x.x.x.x]:25 (error:
 Operation timed out)

So the SMTP client at x.x.x.x hung up on the Exim server at x.x.x.x
unexpectedly. What is the client? What's it saying about all this?

Peter



Tested sending this mail with an attachment as our server does not scan
for spam over a certain size and still the same thing, so not a config
error by the looks of it.

When I Used wireshark to see what was going on, the mail server after
the 100th recipient was received said expected retransmission and then
resets the connection.

Any idea's im pretty much at a dead end and looks like a reboot on the
weekend to see if I can fix it.
-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Exim drops mails

2008-02-07 Thread Marc Sherman
Peter Kirk wrote:
 2008-02-07 12:44:25 [18647] unexpected disconnection while reading 
 SMTP command from (peterkilap) [x.x.x.x]:3564 I=[x.x.x.x]:25 (error: 
 Operation timed out)

 hostlist = removed
 
 hostlist reserve_hosts = removed
 hostlist relay_from_hosts =  removed
 domainlist relay_to_domains = removed
 domainlist local_domains = removed

http://wiki.exim.org/DontObfuscate

- Marc

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] smarthost

2008-02-07 Thread Dave Evans
On Thu, Feb 07, 2008 at 03:14:48PM +, matt davies wrote:
 I've got a web site that sends forms using python
 
 Exim4 came with my Ubuntu install.

In general, if you're using update-exim4.conf and all that stuff, you might
find you're better off asking on the mailing lists specific to your
distribution.  The documentation that came with your package will point you in
the right direction.

That said:

 2008-02-07 14:59:44 1JN8E4-0001or-C3 = [EMAIL PROTECTED]  
 H=localhost ([193.63.150.187]) [127.0.0.1] P=esmtp S=1166  
 [EMAIL PROTECTED]

 What is strange is that I don't know what the machine with IP address  
 193.63.150.187 is.  It's in our domain, but it's not the host machine  
 or the relay server.

H=localhost ([193.63.150.187]) [127.0.0.1]
means that the connection came from 127.0.0.1 (and the name of that host is
localhost), and that the client on that connection then said HELO
[193.63.150.187]).  So 193.63.150.187 isn't the IP address, it's the HELO
name.

See
http://www.exim.org/exim-html-current/doc/html/spec_html/ch49.html#SECID251
for more.

-- 
Dave Evans
http://djce.org.uk/
http://djce.org.uk/pgpkey


signature.asc
Description: Digital signature
-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] Bug in Exim-Dovecot Auth SMTP

2008-02-07 Thread Chris Laif
On 2/5/08, Nigel Metheringham [EMAIL PROTECTED] wrote:

 This appears to be different from bug 646
http://bugs.exim.org/show_bug.cgi?id=646

 I've therefore opened a new bug for it...
http://bugs.exim.org/show_bug.cgi?id=667


AFAICS both bugs are different. I've attached my (trivial) patch
below. I've applied the fix to the production servers 4 days ago and
didn't experience any problems yet.

--- src/auths/dovecot.c.orig2007-08-30 16:31:06.0 +0200
+++ src/auths/dovecot.c 2008-02-02 11:24:57.0 +0100
@@ -369,7 +369,7 @@
}

 out:
-
+   close(fd);
/* Expand server_condition as an authorization check */
return (ret == OK)? auth_check_serv_cond(ablock) : ret;
 }


Chris

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Delay when connecting to send mail

2008-02-07 Thread Yves Goergen
On 05.02.2008 13:14 CE(S)T, Marc Haber wrote:
 On Tue, 05 Feb 2008 12:32:31 +0100, Yves Goergen
 Well, say that to all of the Windows or NAT users out there. ;)
 
 A lot of NAT devices can be configured that way.

I know what ident is, and still I cannot see any use in it. Also, it's 
not only me. We're running a webhosting service and our users are 
usually far less computer-savvy than I am. I don't know whether they 
would have experienced that delay, too. Probably depends on their DSL 
router. But I do what I can to avoid such useless delays.

-- 
Yves Goergen LonelyPixel [EMAIL PROTECTED]
Visit my web laboratory at http://beta.unclassified.de

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Problems testing (sieve) filter rules

2008-02-07 Thread Phil Pennock
On 2008-02-07 at 20:32 +0100, Benjamin Podszun wrote:
 On Thu, 7 Feb 2008, Phil Pennock wrote:
  On 2008-02-07 at 19:29 +0100, Benjamin Podszun wrote:
  (Running as root or trusted mail account)
 
  exim -bf testfilter  testmail
 
  You're missing -t to take recipients, etc, from the mail headers of
  testmail.
 
 $ exim -bf testfilter -t  testmail
 exim: incompatible command-line options or arguments

Oh, so it does.  Sorry about that.

So, the default sender/recipient are taken from the calling user, and
then the recipient is assumed to have the test-filter you specify.  Not
a problem.

Generally, Exim is careful to keep the SMTP envelope (or mock-up
thereof) separate from the message headers; if it did start extracting
routing values from a mail content without being explicitly requested to
do so, it would be doing something different from what it usually does
and causing even more confusion.  Probably.

  Okay, two things make me nervous here:
  1) Why is the recipient in this test the current user? I know that I can
  override/set that with -bfd/-bfl but I expected that exim takes these
  values from the testmail - to test the rules?
 
  Only if you tell it to.  Otherwise the recipients are specified on the
  command-line.
 
 Would love to tell it to use the sample mail somehow. But since I'm 
 testing filter rules with a sample message, what's the message for if it 
 isn't used for the addresses? Headers only by default? Anything at all?
 Sorry, I'm still lost here.

Because you can filter based upon properties of the message.  Take a
look at RFC 5228, which is the current specification for Sieve and which
contains a number of examples.

Eg, you can filter based on the size of the message, content of various
headers (eg, Subject:), etc.  You're not limited to just the envelope.

Eg, extracting from an old sieve file I have (used with Cyrus IMAP, not
with Exim):

8 cut here 8--
if envelope :is from [EMAIL PROTECTED] {
  if header :matches Subject [CVS commit: home/pdp *, CVS commit: 
home/pdp/*] {
fileinto INBOX.cvs.mine; stop;
  }
  fileinto INBOX.cvs.misc; stop;
}

if header :is Content-Type text/html {
  fileinto INBOX.html-only; stop;
}

# implicit keep here
8 cut here 8--

So the envelope check uses the values faked up, but the Subject: check
is using the content.

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Problems testing (sieve) filter rules

2008-02-07 Thread Benjamin Podszun

On Thu, 7 Feb 2008, Phil Pennock wrote:

 On 2008-02-07 at 19:29 +0100, Benjamin Podszun wrote:
 (Running as root or trusted mail account)

 exim -bf testfilter  testmail

 You're missing -t to take recipients, etc, from the mail headers of
 testmail.

$ exim -bf testfilter -t  testmail
exim: incompatible command-line options or arguments

 Okay, two things make me nervous here:
 1) Why is the recipient in this test the current user? I know that I can
 override/set that with -bfd/-bfl but I expected that exim takes these
 values from the testmail - to test the rules?

 Only if you tell it to.  Otherwise the recipients are specified on the
 command-line.

Would love to tell it to use the sample mail somehow. But since I'm 
testing filter rules with a sample message, what's the message for if it 
isn't used for the addresses? Headers only by default? Anything at all?
Sorry, I'm still lost here.

Thanks for the answer though,
Ben

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


[exim] Exim failure to transfer data from subprocess

2008-02-07 Thread Phil Pennock
On 2008-02-07 at 17:42 +0800, zq wrote:
 Here is my problem in $home/.forward configuration,
 2008-02-07 17:34:54 1JN39i-0007li-F6 == [EMAIL PROTECTED] R=userforward defer
 (-1): internal problem in userforward router (recipient is
 [EMAIL PROTECTED]): failure to transfer data from subprocess: status=0100
 readerror='Success'

Something has broken badly, breaking Exim's ability to communicate with
itself.

Are there no other logs?  What about in paniclog?  What do you see
just before this in the mainlog?

What version of Exim?  What OS?  Are you using any remote filesystems
for the home directories?  What output do you get from using
exim -d -bt tzqian ?

-Phil

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] uk2.net sender verify

2008-02-07 Thread Phil (Medway Hosting)

- Original Message - 
From: Peter Bowyer [EMAIL PROTECTED]
To: exim users exim-users@exim.org
Sent: Thursday, February 07, 2008 6:27 PM
Subject: Re: [exim] uk2.net  sender verify



 uk2.net used to host the domain that my colleague was using in MAIL
 FROM - several registrar / hosting company moves ago. Recently, he
 logged in to his control panel at uk2.net, and did a tidy-up -
 including removing all the email aliases belonging to the
 long-ago-transferred-elsewhere domain.

123-reg are worse and to quote a phrase getting worser. They still have
domains in my control panel that were transferred away ALMOST A YEAR AGO
[1] - AND still remind me about domain renewals. It's either pathetic or
fraudulent - not sure which.

All the best

Phil

[1] in fact - 123-reg's support went downhill so much that I paid out to
become a registrar for Nominet (.uk's) myself.


_

Website Hosting from only £5.00 per month.
www.medwayhosting.com - +44 (0)1634 856965
_

Digital  Traditional Printing, and much more
www.medwayprint.com - +44 (0)1634 281199
_

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Problems testing (sieve) filter rules

2008-02-07 Thread Benjamin Podszun
On Thu, 7 Feb 2008, Phil Pennock wrote:
 On 2008-02-07 at 20:32 +0100, Benjamin Podszun wrote:
 On Thu, 7 Feb 2008, Phil Pennock wrote:
 On 2008-02-07 at 19:29 +0100, Benjamin Podszun wrote:
 Okay, two things make me nervous here:
 1) Why is the recipient in this test the current user? I know that I can
 override/set that with -bfd/-bfl but I expected that exim takes these
 values from the testmail - to test the rules?

 Only if you tell it to.  Otherwise the recipients are specified on the
 command-line.

 Would love to tell it to use the sample mail somehow. But since I'm
 testing filter rules with a sample message, what's the message for if it
 isn't used for the addresses? Headers only by default? Anything at all?
 Sorry, I'm still lost here.

 Because you can filter based upon properties of the message.  Take a
 look at RFC 5228, which is the current specification for Sieve and which
 contains a number of examples.

 Eg, you can filter based on the size of the message, content of various
 headers (eg, Subject:), etc.  You're not limited to just the envelope.

 Eg, extracting from an old sieve file I have (used with Cyrus IMAP, not
 with Exim):

 8 cut here 8--
 if envelope :is from [EMAIL PROTECTED] {
  if header :matches Subject [CVS commit: home/pdp *, CVS commit: 
 home/pdp/*] {
fileinto INBOX.cvs.mine; stop;
  }
  fileinto INBOX.cvs.misc; stop;
 }

 if header :is Content-Type text/html {
  fileinto INBOX.html-only; stop;
 }

 # implicit keep here
 8 cut here 8--

 So the envelope check uses the values faked up, but the Subject: check
 is using the content.

Okay, got that now. That basically means that I cannot easily test sieve 
rules based on the envelope address though, but I can do it manually 
somehow. Being naive about this stuff I imagined that I could take X 
sample messages from my inbox (which unfortunately differ in envelope to 
as well) and run them through the filter, checking if [EMAIL PROTECTED] ends up 
in another folder than [EMAIL PROTECTED] and it still works with putting 
list mails to [EMAIL PROTECTED] in a third folder. Some kind of fully 
automated test, asking exim What would happen if this message would 
come in right now without additional info.
I understand your point though and will provide the info per mail, 
manually.
Thanks for answering right away.

Ben

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Bug in Exim-Dovecot Auth SMTP

2008-02-07 Thread Nigel Metheringham

On 7 Feb 2008, at 16:34, Chris Laif wrote:
 AFAICS both bugs are different. I've attached my (trivial) patch
 below. I've applied the fix to the production servers 4 days ago and
 didn't experience any problems yet.

I committed a slightly more defensive patch to the CVS a couple of days
back (if it gets to this point then fd should be valid, but checking it
to see what its state is seemed like a good idea)

   http://vcs.exim.org/viewvc/exim/exim-src/src/auths/dovecot.c?r1=1.8r2=1.9

That should also fix the problem in the future.

 Nigel.

--
[ Nigel Metheringham   [EMAIL PROTECTED] ]
[ - Comments in this message are my own and not ITO opinion/policy - ]


-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


[exim] smarthost

2008-02-07 Thread matt davies
hello everyone

I'm brand new to exim so please bear with me

I've got a web site that sends forms using python

Exim4 came with my Ubuntu install.

All I want to do is relay all mail from the web site on the local  
machine to our mail server that has been configured to accept mail  
from this machine and pass it on.

Ive been reading through the documents but I must be doing something  
wrong.

 From the original .conf.template file the only changes I've made were  
the following


domainlist local_domains = ourdomainname.co.uk


smarthost:
   debug_print = R: smarthost for [EMAIL PROTECTED]
   driver = manualroute
   domains = ! +local_domains
   transport = remote_smtp_smarthost
   route_list =  * ip address of mail relay server
   host_find_failed = defer
   same_domain_copy_routing = yes
   no_more

.endif


The error messages I'm getting when trying to send to [EMAIL PROTECTED] 
  are like this.

2008-02-07 14:59:44 1JN8E4-0001or-C3 = [EMAIL PROTECTED]  
H=localhost ([193.63.150.187]) [127.0.0.1] P=esmtp S=1166  
[EMAIL PROTECTED]
2008-02-07 14:59:44 1JN8E4-0001or-C3 ** [EMAIL PROTECTED]:  
Unrouteable address
2008-02-07 14:59:44 1JN8E4-0001ot-GH =  R=1JN8E4-0001or-C3 U=Debian- 
exim P=local S=1975
2008-02-07 14:59:44 1JN8E4-0001ot-GH ** [EMAIL PROTECTED]:  
Unrouteable address
2008-02-07 14:59:44 1JN8E4-0001ot-GH Frozen (delivery error message)
2008-02-07 14:59:44 1JN8E4-0001or-C3 Completed

What is strange is that I don't know what the machine with IP address  
193.63.150.187 is.  It's in our domain, but it's not the host machine  
or the relay server.

If anyone can help me out I'd be really grateful, it seems like such a  
simple thing to do, I feel embarrassed for asking :-(

V

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] prepending to the localuser - what would be the exim way?

2008-02-07 Thread Phil Pennock
On 2008-02-07 at 11:40 -0800, Ray Chudzinski wrote:
 In a nutshell, I need to:
 
 - recognize an incoming message is one of the 'special' messages (most easily 
 done by examining the source host. all of these will come from one MTA)
 - verify that the localuser is all numeric
 - rewrite the localhost portion by pre-pending a string
 - forward the re-written message to a specific remote host for delivery
 
 My question is were should I perform each piece of the logic. 
 
 e.g. 
 1) matching the format in a router (and reccomendations on the router)
 2) verification of the localuser in the router
 3) pre-pending the string via a re-write (really not sure of this step)
 4) deliverly using the remote_smtp transport

Do 1,2,3 in a redirect router; follow that router with a manualroute
router.  The first router should use address_data = ... to cause
$address_data to be set and the second router should use condition =
... to check $address_data.

There are other ways, but you're then either tying together stuff from
the ACLs with variables to Routers in a different part of the config, or
you're relying upon the router ordering and how careful you are to use
no_more when needed (eg, redirect_router on the first to point to a
router after the last one that can normally ever be invoked, instead of
using $address_data).

Eg, if you have hostlist the_weirdo =  defining the IP address of
the source host which does this, then:

mangle_special_foo:
  driver = redirect
  local_parts = ^\\d+\$
  condition = ${if and{\
{match_ip{$sender_host_address}{+the_weirdo}}\
{your_other_verification_goes_here}}}
  data = [EMAIL PROTECTED]
  address_data = is_foo
  redirect_router = send_foo

send_foo:
  driver = manualroute
  transport = remote_smtp
  condition = ${if eq{$address_data}{is_foo}}
  route_data = specific.remote.host.tld

Note that this means that if the local-part doesn't verify, then it will
be tried by later routers.  I suspect that if the local number is
invalid, then instead of having it in the condition then instead you
want to fail the address.  In which case, you can use allow_fail on
the redirect and then use an explicit fail on the data expansion.
Especially if the PREFIX is the result of that lookup.  Eg,

  allow_fail
  data = ${lookup{$local_part}cdb{/some/file.cdb} \
[EMAIL PROTECTED]
{:fail: Unrecognised magic foo}}

Note that I don't ${quote_local_part:...} because it's verified to be a
number; otherwise, you might want to do so.

Checking the source host is easier in an ACL, so you might do that
instead of the match_ip stuff, and then check an $acl_m_whatever
variable; the only real downside is that some of your relevant logic is
then separated from the rest.

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] uk2.net sender verify

2008-02-07 Thread Peter Bowyer
On 30/01/2008, Ian Eiloart [EMAIL PROTECTED] wrote:


 --On 29 January 2008 14:57:38 + Peter Bowyer [EMAIL PROTECTED] wrote:

  Anyone here know anything about uk2.net and their sender verfy
  implementation? It's clearly Exim...

 Well, when I telnet to one of the MX servers for uk2.net, and start an SMTP
 session, I don't see any callouts coming back to my MX servers. Is it the
 uk2.net domain that your associate is sending mail to?

Me neither - hence my puzzlement. The answer, though is, as usual,
more c*ck-up than conspiracy

uk2.net used to host the domain that my colleague was using in MAIL
FROM - several registrar / hosting company moves ago. Recently, he
logged in to his control panel at uk2.net, and did a tidy-up -
including removing all the email aliases belonging to the
long-ago-transferred-elsewhere domain.

It seems that uk2's MXs are in a habit of doing sender verification
for domains they think they own - perhaps not such a bad thing - and
the removal of the aliases caused this verification to fail. A
temporary solution was to put the aliases back... a more permanent one
will hopefully follow from a support ticket we've raised with them -
they will forget that they used to host the domain.

Back to your regular programming

Peter

-- 
Peter Bowyer
Email: [EMAIL PROTECTED]

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] smarthost

2008-02-07 Thread Phil Pennock
On 2008-02-07 at 15:14 +, matt davies wrote:
 domainlist local_domains = ourdomainname.co.uk

That says the domainlist named 'local_domains' should contain one
domain, 'ourdomainname.co.uk'.


 smarthost:
debug_print = R: smarthost for [EMAIL PROTECTED]
driver = manualroute
domains = ! +local_domains
transport = remote_smtp_smarthost
route_list =  * ip address of mail relay server
host_find_failed = defer
same_domain_copy_routing = yes
no_more

The domains line there restricts this router to only run if the domain
is *not* in the local_domains domainlist; however, your example shows
that the address causing problems is for that domain.

If you're not handling ourdomainname.co.uk locally, it probably
shouldn't be in local_domains; if some addresses are handled locally
and some aren't, then you need to instead remove the domains restriction
from the smarthost router.

-Phil

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


[exim] Problems testing (sieve) filter rules

2008-02-07 Thread Benjamin Podszun
Hi there.

I'm currently trying to set up sieve filtering for me and my users, 
therefor I'm playing around with sieve scripts/examples and need to test 
them, obviously.
Unfortunately exim -bf myfilterfile  sometestmessage doesn't work as I 
would expect it to:

(Running as root or trusted mail account)

exim -bf testfilter  testmail
Return-path copied from sender
Sender  = [EMAIL PROTECTED]
Recipient   = [EMAIL PROTECTED]
Testing Sieve filter file testfilter

No implicit keep

With debug infos:

exim -d-all+filter -bf testfilter  testmail
Exim version 4.68 uid=0 gid=0 pid=15518 D=200
Berkeley DB: Berkeley DB 4.5.20: (September 20, 2006)
Support for: crypteq iconv() IPv6 PAM Perl TCPwrappers OpenSSL 
Content_Scanning Old_Demime Experimental_SPF
Lookups: lsearch wildlsearch nwildlsearch iplsearch cdb dbm dbmnz dsearch 
mysql passwd sqlite
Authenticators: cram_md5 plaintext spa
Routers: accept dnslookup ipliteral manualroute queryprogram redirect
Transports: appendfile/maildir/mailstore autoreply pipe smtp
Fixed never_users: 0
Size of off_t: 8
configuration file is /etc/exim/exim.conf
log selectors = 55ff 006bb869
trusted user
admin user
Return-path copied from sender
Sender  = [EMAIL PROTECTED]
Recipient   = [EMAIL PROTECTED]
Testing Sieve filter file testfilter

fileinto `INBOX.ben'
No implicit keep
 Exim pid=15518 terminating with rc=0 

Okay, two things make me nervous here:
1) Why is the recipient in this test the current user? I know that I can 
override/set that with -bfd/-bfl but I expected that exim takes these 
values from the testmail - to test the rules?
2) Even worse, because I don't understand the use of this testing command 
at all, currently: Why is the sender address not taken from the testmail?

The mail is a real sample, taken from my maildir inbox. I guess there's 
not much wrong with it since exim does use it somehow (Return-path copied 
from sender).

I'm pretty sure I'm doing something very stupid here, but right now I'm 
clueless. Can anyone lend me a hand or point me in the right direction?

Thanks,
Ben

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


[exim] smarthost

2008-02-07 Thread matt davies
I've created a new message here for more details, should I have  
replied to Dave's message instead?

Anyway, I've tried running

sudo dpkg-reconfigure exim4-config

and entered manually all the details, exim has restarted but I'm still  
getting exactly the same error message.

I'm going to check with our networks team to see if they have allowed  
the connection I think, best to double check.




On Thu, Feb 07, 2008 at 03:14:48PM +, matt davies wrote:
 I've got a web site that sends forms using python

 Exim4 came with my Ubuntu install.

In general, if you're using update-exim4.conf and all that stuff,  
you might
find you're better off asking on the mailing lists specific to your
distribution.  The documentation that came with your package will  
point you in
the right direction.

That said:

 2008-02-07 14:59:44 1JN8E4-0001or-C3 = [EMAIL PROTECTED]
 H=localhost ([193.63.150.187]) [127.0.0.1] P=esmtp S=1166
 [EMAIL PROTECTED]

 What is strange is that I don't know what the machine with IP address
 193.63.150.187 is.  It's in our domain, but it's not the host machine
 or the relay server.

H=localhost ([193.63.150.187]) [127.0.0.1]
means that the connection came from 127.0.0.1 (and the name of that  
host is
localhost), and that the client on that connection then said HELO
[193.63.150.187]).  So 193.63.150.187 isn't the IP address, it's the  
HELO
name.

See
http://www.exim.org/exim-html-current/doc/html/spec_html/ch49.html#SECID251
for more.

-- 
Dave Evans
http://djce.org.uk/
http://djce.org.uk/pgpkey
-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] smarthost

2008-02-07 Thread Marc Haber
On Thu, 7 Feb 2008 15:25:31 +, Dave Evans
[EMAIL PROTECTED] wrote:
On Thu, Feb 07, 2008 at 03:14:48PM +, matt davies wrote:
 I've got a web site that sends forms using python
 
 Exim4 came with my Ubuntu install.

In general, if you're using update-exim4.conf and all that stuff, you might
find you're better off asking on the mailing lists specific to your
distribution.  The documentation that came with your package will point you in
the right direction.

Unfortunately, Ubuntu does not remove the references to the Debian
support lists after taking Debian's work and republishing it
rebranded.

Greetings
Marc

-- 
-- !! No courtesy copies, please !! -
Marc Haber |Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom  | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG Rightful Heir | Fon: *49 621 72739834

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


[exim] DKIM

2008-02-07 Thread Matt
Is anyone using DKIM to sign there messages yet?  Does it help for
reaching yahoo.com email accounts?  If so how did you setup exim to
sign messages?

Matt

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Problems testing (sieve) filter rules

2008-02-07 Thread Phil Pennock
On 2008-02-07 at 21:04 +0100, Benjamin Podszun wrote:
 Okay, got that now. That basically means that I cannot easily test sieve 
 rules based on the envelope address though, but I can do it manually 
 somehow. Being naive about this stuff I imagined that I could take X 
 sample messages from my inbox (which unfortunately differ in envelope to 
 as well) and run them through the filter, checking if [EMAIL PROTECTED] ends 
 up 
 in another folder than [EMAIL PROTECTED] and it still works with putting 
 list mails to [EMAIL PROTECTED] in a third folder. Some kind of fully 
 automated test, asking exim What would happen if this message would 
 come in right now without additional info.

Which address is the recipient?  The one in the To: header?  What if you
received it because you were CC'd?  What if there are Resent-* headers?

If you had envelope_to_add and return_path_add on the relevant
delivery router when the mail was received, then I'd use formail(1) from
the procmail suite to process the mail folder, extracting each mail in
turn and passing it to an external command (formail -s) and then have
the relevant command be a short script which extracts the Envelope_to:
header, splits on the '@', extracts Return-Path:, and then invokes
Exim for testing.

-Phil

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


[exim] prepending to the localuser - what would be the exim way?

2008-02-07 Thread Ray Chudzinski
Greetings All,
  I am in the process of creating a new route for handling specially formatted 
internal mail messages and would like understanding how to set up the exim 
config. I have read through the docs but I am just not getting the whole 
philosophy.

In a nutshell, I need to:

- recognize an incoming message is one of the 'special' messages (most easily 
done by examining the source host. all of these will come from one MTA)
- verify that the localuser is all numeric
- rewrite the localhost portion by pre-pending a string
- forward the re-written message to a specific remote host for delivery

My question is were should I perform each piece of the logic. 

e.g. 
1) matching the format in a router (and reccomendations on the router)
2) verification of the localuser in the router
3) pre-pending the string via a re-write (really not sure of this step)
4) deliverly using the remote_smtp transport

I am running exim4 with the follow build

 /usr/sbin/exim -bV
Exim version 4.66 #1 built 08-Feb-2007 05:43:46
Copyright (c) University of Cambridge 2006
Berkeley DB: Berkeley DB 4.5.20: (December  4, 2006)
Support for: crypteq iconv() IPv6 PAM Perl Expand_dlfunc TCPwrappers OpenSSL 
Content_Scanning Old_Demime
Lookups: lsearch wildlsearch nwildlsearch iplsearch cdb dbm dbmnz dnsdb dsearch 
ldap ldapdn ldapm mysql nis nis0 nisplus passwd pgsql sqlite
Authenticators: cram_md5 cyrus_sasl dovecot plaintext spa
Routers: accept dnslookup ipliteral manualroute queryprogram redirect
Transports: appendfile/maildir/mailstore/mbx autoreply lmtp pipe smtp

much thanks in advance,
ray


--
Raymond P Chudzinski
[EMAIL PROTECTED]

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] core dump in host.c

2008-02-07 Thread Hans Morten Kind
 exim -bh 213.198.89.166
 
 If you could confirm you can it would be useful.

Segmentation fault (core dumped) on SunOS 5.10

It might be a local resolver problem as
I can only make this happen on one of our servers.

I should probably not tell which and do some upgrading ...

hmk


-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] smarthost

2008-02-07 Thread Dave Evans
On Thu, Feb 07, 2008 at 03:42:03PM +, matt davies wrote:
 I've created a new message here for more details, should I have  
 replied to Dave's message instead?

On mailing lists, use reply if, and only if, it's a continuation of the same
topic.  So replying in this case would have been better :-)

 Anyway, I've tried running
 
 sudo dpkg-reconfigure exim4-config
 
 and entered manually all the details, exim has restarted but I'm still  
 getting exactly the same error message.

I really think you'd be better off reading your package documentation (e.g.
/usr/share/doc/exim4-base/README.Debian.gz) and finding the support group
better suited to your distribution (namely
http://lists.alioth.debian.org/mailman/listinfo/pkg-exim4-users).

Good luck,

-- 
Dave Evans
http://djce.org.uk/
http://djce.org.uk/pgpkey


signature.asc
Description: Digital signature
-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

[exim] core dump in host.c

2008-02-07 Thread Hans Morten Kind
Ok, it is not a recent version of exim - but it has been
running for several years and does nice work, but it is 4.34

So it suddenly started dumping cores, looking into them they
are all spams from 213.198.89.166 which resolves from
166.89.198.213.in-addr.arpa to PTR ., makes our exim
abort with core dump.

Does anybody else see this, could it be a possible exploit?
exim luckily runs with the initial uid, not as root, when
the disaster occurs.

hmk


-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] core dump in host.c

2008-02-07 Thread Burnie
Hans Morten Kind [EMAIL PROTECTED] fell from the moon and expressed:

  exim -bh 213.198.89.166
  
  If you could confirm you can it would be useful.
 
 Segmentation fault (core dumped) on SunOS 5.10
 
 It might be a local resolver problem as
 I can only make this happen on one of our servers.

This could perhaps be related to bugzilla 619?
  http://bugs.exim.org/show_bug.cgi?id=619
  On Solaris 10 x86 we're seeing NULL pointers in h_name on return
  from gethostbyaddr which is causing coredumps around host.c:1505

Try the patch to see if it fixes the problem.

-- 
Bernt  'Burnie'  Pettersen  ///  DoD#2345 
E-mail:[EMAIL PROTECTED] ///  URL:http://burnie.sh/
 -  If today is the first day of the rest of your life,
 what the hell was yesterday?   -

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


[exim] 答复: Exim failure to transfer d ata from subprocess

2008-02-07 Thread zq
 
Here is the paniclog
2008-02-07 17:34:54 1JN39i-0007li-F6 unable to set gid=503 or uid=503
(euid=502): userforward router (recipient is [EMAIL PROTECTED])
2008-02-07 17:34:54 1JN39i-0007li-F6 internal problem in userforward router
(recipient is [EMAIL PROTECTED]): failure to transfer data from subprocess:
status=0100 readerror='Success'

And the os is Rathat Linux server77 2.6.18-1.2747.el5 

[EMAIL PROTECTED] log]# exim -d -bt tzqian
Exim version 4.67 uid=0 gid=0 pid=32578 D=fbb95cfd Berkeley DB: Sleepycat
Software: Berkeley DB 4.3.29: (September 12, 2006) Support for: crypteq
iconv() Perl OpenSSL
Lookups: lsearch wildlsearch nwildlsearch iplsearch dbm dbmnz
Authenticators: plaintext
Routers: accept dnslookup ipliteral manualroute queryprogram redirect
Transports: appendfile/maildir/mailstore/mbx autoreply pipe smtp Fixed
never_users: 0 Size of off_t: 8 changed uid/gid: forcing real = effective
  uid=0 gid=0 pid=32578
  auxiliary group list: none
seeking password data for user root: cache not available
getpwnam() succeeded uid=0 gid=0
configuration file is /usr/exim/configure log selectors = 0ffc 00212001
trusted user admin user
originator: uid=0 gid=0 login=root name=root sender address =
[EMAIL PROTECTED]:qaq.com Address testing: uid=0 gid=502 euid=0 egid=502

Testing [EMAIL PROTECTED]:qaq.com

Considering [EMAIL PROTECTED]:qaq.com

routing [EMAIL PROTECTED]:qaq.com
 democheck router 
local_part=tzqian domain=xxx.com:qaq.com checking condition
Starting Perl interpreter
democheck router skipped: condition failure
 lookuphost router 
local_part=tzqian domain=xxx.com:qaq.com checking domains
search_open: lsearch /etc/localdomains
search_find: file=/etc/localdomains
  key=xxx.com:qaq.com partial=-1 affix=NULL starflags=0 LRU list:
  :/etc/localdomains
  End
internal_search_find: file=/etc/localdomains
  type=lsearch key=xxx.com:qaq.com
file lookup required for xxx.com:qaq.com
  in /etc/localdomains
lookup failed
xxx.com:qaq.com in lsearch;/etc/localdomains? no (end of list)
xxx.com:qaq.com in ! +local_domains? yes (end of list) checking
condition
calling lookuphost router
lookuphost router called for [EMAIL PROTECTED]:qaq.com
  domain = xxx.com:qaq.com
DNS name syntax check failed: xxx.com:qaq.com (MX) lookuphost router
declined for [EMAIL PROTECTED]:qaq.com
 literal router 
local_part=tzqian domain=xxx.com:qaq.com checking domains cached no
match for +local_domains cached lookup data = NULL xxx.com:qaq.com in !
+local_domains? yes (end of list) checking condition
calling literal router
literal router called for [EMAIL PROTECTED]:qaq.com: domain =
xxx.com:qaq.com literal router declined for [EMAIL PROTECTED]:qaq.com
 fail_remote_domains router 
local_part=tzqian domain=xxx.com:qaq.com checking domains cached no
match for +local_domains cached lookup data = NULL xxx.com:qaq.com in !
+local_domains? yes (end of list) calling fail_remote_domains router
rda_interpret (string): :fail: unrouteable mail domain $domain
expanded: :fail: unrouteable mail domain xxx.com:qaq.com
file is not a filter file
parse_forward_list: :fail: unrouteable mail domain xxx.com:qaq.com
extract item: :fail: unrouteable mail domain xxx.com:qaq.com
fail_remote_domains router forced address failure [EMAIL PROTECTED]:qaq.com
is undeliverable: unrouteable mail domain xxx.com:qaq.com
search_tidyup called
 Exim pid=32578 terminating with rc=2 
[EMAIL PROTECTED] log]#

I notice i had made a mistake in configuration file as primary_hostname =
xxx.com:qaq.com,and I corrected this line to primary_hostname =
xxx.com.And do the test as follows,

[EMAIL PROTECTED] log]# exim -d -bt tzqian
Exim version 4.67 uid=0 gid=0 pid=32684 D=fbb95cfd
Berkeley DB: Sleepycat Software: Berkeley DB 4.3.29: (September 12, 2006)
Support for: crypteq iconv() Perl OpenSSL
Lookups: lsearch wildlsearch nwildlsearch iplsearch dbm dbmnz
Authenticators: plaintext
Routers: accept dnslookup ipliteral manualroute queryprogram redirect
Transports: appendfile/maildir/mailstore/mbx autoreply pipe smtp
Fixed never_users: 0
Size of off_t: 8
changed uid/gid: forcing real = effective
  uid=0 gid=0 pid=32684
  auxiliary group list: none
seeking password data for user root: cache not available
getpwnam() succeeded uid=0 gid=0
configuration file is /usr/exim/configure
log selectors = 0ffc 00212001
trusted user
admin user
originator: uid=0 gid=0 login=root name=root
sender address = [EMAIL PROTECTED]
Address testing: uid=0 gid=502 euid=0 egid=502

Testing [EMAIL PROTECTED]

Considering [EMAIL PROTECTED]

routing [EMAIL PROTECTED]
 democheck router 
local_part=tzqian domain=xxx.com
checking condition
Starting Perl interpreter
democheck router skipped: condition failure
 lookuphost router 
local_part=tzqian domain=xxx.com
checking domains
search_open: lsearch /etc/localdomains
search_find: 

Re: [exim] 答复: Exim failure to transfer da ta from subprocess

2008-02-07 Thread Phil Pennock
On 2008-02-08 at 10:10 +0800, zq wrote:
 Here is the paniclog
 2008-02-07 17:34:54 1JN39i-0007li-F6 unable to set gid=503 or uid=503
 (euid=502): userforward router (recipient is [EMAIL PROTECTED])
 2008-02-07 17:34:54 1JN39i-0007li-F6 internal problem in userforward router
 (recipient is [EMAIL PROTECTED]): failure to transfer data from subprocess:
 status=0100 readerror='Success'

Look closely at the times there.

Note that 0007li means that this was pid 29866.  And 1JN39i is 1202376894
which is 2008-02-07T09:34:54 (so your timezone adds 6 hours); this was
17 hours before I'm writing the reply.

I think that you're seeing an old error message from when things were
misconfigured.

Also, this is for a userforward router, which isn't even tried in the
debug traces you posted.  So it's from a different configuration, or for
an address handled differently to the samples which you posted.

 And the $home/.forward problem is the same as before, it looks like a
 permition problem according to the paniclog shows 2008-02-07 17:34:54
 1JN39i-0007li-F6 unable to set gid=503 or uid=503 (euid=502): userforward
 router (recipient is [EMAIL PROTECTED]), I'm not sure how to fix it,and I
 have another question about the mainlog , where can I find the archive of
 error code?

The error codes should be the result of strerror(3); 'Success' means
that there wasn't actually an error, which means that something has gone
badly wrong.  I suspect that the child process just died, not writing
expected data, so the parent got EOF and then failed.  (No SIGPIPE
because Exim ignores SIGPIPE).

So the error details would be in why the _child_ Exim failed to write
the data to the pipe and for that, you need debug logs of an actual
failure.

The unable to set gid=503 or uid=503 (euid=502) means that Exim was
running as user 502 but tried to set itself to run as user 503.

Is the Exim binary setuid root?

Have you recently changed the userid of Exim and not also rebuilt Exim?
By default, Exim hard-codes the userid into the binary and you'll need
to rebuild.  If you want to be able to use one binary on multiple
systems with different values, take a look at src/EDITME and the
EXIM_USER=ref:exim syntax, _instead_ of EXIM_USER=exim.

Are you using NFS for the home directories, or using Kerberos in some
way?

-Phil

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


[exim] 答复: 答复: Exim failure to tra nsfer data from subprocess

2008-02-07 Thread zq
The problem fixed after I rebuild exim.Now I know that I must rebuild exim
after I add a new user. I have received the forward email now.

Here is the mainlog
2008-02-08 11:10:47 1JNJdW-Pf-VH = [EMAIL PROTECTED] H=ug-out-1314.
google.com [66.249.92.173] P=esmtp S=1873
[EMAIL PROTECTED]
2008-02-08 11:10:47 1JNJdW-Pf-VH = tzqian [EMAIL PROTECTED]
R=localuser T=local_delivery
2008-02-08 11:10:49 1JNJdW-Pf-VH = [EMAIL PROTECTED]
[EMAIL PROTECTED] R=dnslookup T=remote_smtp H=gmail-smtp-in.l.google.com
[209.85.199.114]
2008-02-08 11:10:49 1JNJdW-Pf-VH Completed

Thank you very much.

Regards,
Gelenbertang

-邮件原件-
发件人: Phil Pennock [mailto:[EMAIL PROTECTED] 
发送时间: 2008年2月8日 10:51
收件人: zq
抄送: exim-users@exim.org
主题: Re: [exim] 答复: Exim failure to transfer data from subprocess

On 2008-02-08 at 10:10 +0800, zq wrote:
 Here is the paniclog
 2008-02-07 17:34:54 1JN39i-0007li-F6 unable to set gid=503 or uid=503
 (euid=502): userforward router (recipient is [EMAIL PROTECTED])
 2008-02-07 17:34:54 1JN39i-0007li-F6 internal problem in userforward 
 router (recipient is [EMAIL PROTECTED]): failure to transfer data from
subprocess:
 status=0100 readerror='Success'

Look closely at the times there.

Note that 0007li means that this was pid 29866.  And 1JN39i is 1202376894
which is 2008-02-07T09:34:54 (so your timezone adds 6 hours); this was
17 hours before I'm writing the reply.

I think that you're seeing an old error message from when things were
misconfigured.

Also, this is for a userforward router, which isn't even tried in the
debug traces you posted.  So it's from a different configuration, or for an
address handled differently to the samples which you posted.

 And the $home/.forward problem is the same as before, it looks like 
 a permition problem according to the paniclog shows 2008-02-07 
 17:34:54
 1JN39i-0007li-F6 unable to set gid=503 or uid=503 (euid=502): 
 userforward router (recipient is [EMAIL PROTECTED]), I'm not sure 
 how to fix it,and I have another question about the mainlog , where 
 can I find the archive of error code?

The error codes should be the result of strerror(3); 'Success' means that
there wasn't actually an error, which means that something has gone badly
wrong.  I suspect that the child process just died, not writing expected
data, so the parent got EOF and then failed.  (No SIGPIPE because Exim
ignores SIGPIPE).

So the error details would be in why the _child_ Exim failed to write the
data to the pipe and for that, you need debug logs of an actual failure.

The unable to set gid=503 or uid=503 (euid=502) means that Exim was
running as user 502 but tried to set itself to run as user 503.

Is the Exim binary setuid root?

Have you recently changed the userid of Exim and not also rebuilt Exim?
By default, Exim hard-codes the userid into the binary and you'll need to
rebuild.  If you want to be able to use one binary on multiple systems with
different values, take a look at src/EDITME and the EXIM_USER=ref:exim
syntax, _instead_ of EXIM_USER=exim.

Are you using NFS for the home directories, or using Kerberos in some way?

-Phil


-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/