[exim] exim identica group
Hi all, For those users of those twitter-like things, I just set up an Exim identica group. http://identi.ca/group/exim Thank you. -- RMA. -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
Re: [exim] Is DomainsKeys (DK not DKIM) disabled since v4.70-4.71?
On 12/09/11 6:53 PM, Pedro Mansilla pedro.mansi...@gmail.com wrote: Well 4.69 does have DomainKeys and DKIM both in Experimental. I saw some webpages of users that did granted to make it work with both. What I do not know now regarding latest source codes is if for domainkeys one can edit Makefile and add the usage and libs links for domainkeys. Like it was done in the exims wiki for v4.68. We need it because of our country internet laws. All sort of email comunication are mandatory to use DomainKeys, SPF, DKIM, SenderID. What country are you in which mandates by law DomainKeys and DKIM ? Can you give specific links where it says this? -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
Re: [exim] Is DomainsKeys (DK not DKIM) disabled since v4.70-4.71?
On 12/09/11 16:53, Pedro Mansilla wrote: We need it because of our country internet laws. All sort of email comunication are mandatory to use DomainKeys, SPF, DKIM, SenderID. DomainKeys was been deprecated in favour of DKIM around Aug 2007 (maybe 2005). If its use has been enshrined in legislation, I would suggest you start working with your local authorities to remove it, along with any other specific naming of any technology and replace it with more general terms. Such specific restrictions on technologies will only cause issues in the future when whatever the next big idea comes along. DomainKeys RFC - Historical (Deprecated) http://www.ietf.org/rfc/rfc4870.txt DKIM RFC - Standards Track http://www.ietf.org/rfc/rfc4871.txt -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
Re: [exim] Is DomainsKeys (DK not DKIM) disabled since v4.70-4.71?
On 12 Sep 2011, at 07:53, Pedro Mansilla wrote: Well 4.69 does have DomainKeys and DKIM both in Experimental. I saw some webpages of users that did granted to make it work with both. The distribution for 4.69 contains instructions on configuring DK and DKIM, in the doc/experimental-spec.txt file. Version 4.70 removed DK functionality. Both require external libraries, which may no longer be available. There are significant changes in the current DKIM code, including security updates. You may find that 4.69 is adequate for adding DK signatures, but then you'll probably want to push the mail through 4.76 to add the DKIM signatures. -- Ian Eiloart Postmaster, University of Sussex +44 (0) 1273 87-3148 -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
Re: [exim] Is DomainsKeys (DK not DKIM) disabled since v4.70-4.71?
-Original Message- From: exim-users-bounces+msk=cloudmark@exim.org [mailto:exim-users-bounces+msk=cloudmark@exim.org] On Behalf Of Pedro Mansilla Sent: Sunday, September 11, 2011 1:59 PM To: exim-users@exim.org Subject: Re: [exim] Is DomainsKeys (DK not DKIM) disabled since v4.70-4.71? Hi Phil, thanks for the answers. Ok, so lets say that I need both. What was the last version that supported both as Experimental. I mean the SRC. And what should I do or need to compile it and have both working and signing out messages. Is any other way to have DK, DKIM and SPF signing out messages. Something like DKIMProxy which I recently saw? DKIMproxy will sign or verify mail, but only with DKIM. It doesn't do DomainKeys. As others have said, DomainKeys is obsolete. In fact the only reason any of the big mailbox providers are still checking it is because there's only one big sending company still using it, and that's only because it takes a long time to change over a large infrastructure. All of them have said they will be dropping it as soon as possible. So, the requirement to sign with DomainKeys doesn't really provide any value. Legislation that says so probably needs to be changed. I realize that doesn't help you much, but that is why you're not likely to find much help retrofitting exim to meet this requirement. I think you also mentioned Sender-ID, which by most accounts is also largely dead. You don't sign with SPF, and so you don't need any software changes in exim to support it outbound. I believe it already has inbound support. -MSK -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
Re: [exim] Is DomainsKeys (DK not DKIM) disabled since v4.70-4.71?
On Mon, Sep 12, 2011 at 1:53 AM, Pedro Mansilla pedro.mansi...@gmail.com wrote: Well 4.69 does have DomainKeys and DKIM both in Experimental. I saw some webpages of users that did granted to make it work with both. What I do not know now regarding latest source codes is if for domainkeys one can edit Makefile and add the usage and libs links for domainkeys. Like it was done in the exims wiki for v4.68. We need it because of our country internet laws. All sort of email comunication are mandatory to use DomainKeys, SPF, DKIM, SenderID. DKIM is based almost entirely on DomainKeys (DKIM = DomainKeys Identified Mail), basically merging it with a couple of other standards. It uses the same mechanism, a public encryption key stored in a DNS record, to authenticate the sender. (The message header is slightly different.) So if you have a regulatory or contractual requirement to use DomainKeys, using DKIM may satisfy that requirement. (Though IANAL, of course.) -- Kevin Shaum -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
Re: [exim] Is DomainsKeys (DK not DKIM) disabled since v4.70-4.71?
Hi to all. Thanks for giving your opinions about this. What I actually need is to know how to get both active. Regardless of the version I need to have both DK DKIM to sign out all emails. If anyone can give me ideas or a procedure I would be absolutly thanked. I hope you guys can help me out. Regards, El 12/09/11 18:43, Kevin Shaum ke...@kevinshaum.com escribió: On Mon, Sep 12, 2011 at 1:53 AM, Pedro Mansilla pedro.mansi...@gmail.com wrote: Well 4.69 does have DomainKeys and DKIM both in Experimental. I saw some webpages of users that did granted to make it work with both. What I do not know now regarding latest source codes is if for domainkeys one can edit Makefile and add the usage and libs links for domainkeys. Like it was done in the exims wiki for v4.68. We need it because of our country internet laws. All sort of email comunication are mandatory to use DomainKeys, SPF, DKIM, SenderID. DKIM is based almost entirely on DomainKeys (DKIM = DomainKeys Identified Mail), basically merging it with a couple of other standards. It uses the same mechanism, a public encryption key stored in a DNS record, to authenticate the sender. (The message header is slightly different.) So if you have a regulatory or contractual requirement to use DomainKeys, using DKIM may satisfy that requirement. (Though IANAL, of course.) -- Kevin Shaum -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
Re: [exim] Is DomainsKeys (DK not DKIM) disabled since v4.70-4.71?
On 13/09/11 12:17 PM, Pedro Mansilla pedro.mansi...@gmail.com wrote: Hi to all. Thanks for giving your opinions about this. What I actually need is to know how to get both active. Regardless of the version I need to have both DK DKIM to sign out all emails. If anyone can give me ideas or a procedure I would be absolutly thanked. I hope you guys can help me out. I presume that you have not looked up google yet as this found easily. http://blog.wpkg.org/2009/03/28/setting-up-dkimproxy-with-exim-for-dkim-and -domainkeys-signing/ Its 2 + years old and by default exim will NOT sign DKIM and DK at the same time. DK is old and not supported by exim (or nearly anyone) these days -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
Re: [exim] Cannot send mail to gmail.com after reconfigure Exim 4.76?
On Sat, Sep 3, 2011 at 7:45 AM, Face falaz...@gmail.com wrote:
Hello all,
I had someone send spam using my SMTP, therefore i had to change my
configure to stop this. Now I cannot send to gmail.com and i keep
getting this
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
falaz...@gmail.com
SMTP error from remote mail server after end of data:
host gmail-smtp-in.l.google.com [74.125.91.27]:
550-5.7.1 [173.214.173.77 1] Our system has detected an
unusual rate of
550-5.7.1 unsolicited mail originating from your IP address. To protect our
550-5.7.1 users from spam, mail sent from your IP address has been blocked.
550-5.7.1 Please visit
http://www.google.com/mail/help/bulk_mail.html to review
550 5.7.1 our Bulk Email Senders Guidelines. s9si64275qcy.51
-- This is a copy of the message, including all the headers. --
Return-path: ad...@aldimna.com
Received: from [10.0.1.9]
by smtp.aldimna.com with esmtp (Exim 4.76)
(envelope-from ad...@aldimna.com)
id 1QzRQp-0003RX-QE
for falaz...@gmail.com; Fri, 02 Sep 2011 13:57:07 +0300
Message-ID: 4e60b683.8030...@aldimna.com
Date: Fri, 02 Sep 2011 13:57:07 +0300
From: admin ad...@aldimna.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:5.0) Gecko/20110628
Thunderbird/5.0
MIME-Version: 1.0
To: Face falaz...@gmail.com
Subject: Re: ss
References:
cakpwb8kt7eazaa7urovshxktpuygrxlx0z0zv1nu_afc2jq...@mail.gmail.com
cakpwb8l_fcch9tdestffciekip_sgwmkfxhgpl6frkwtap-...@mail.gmail.com
cakpwb8+ways71svzznubponassxpakc7ganibyjmvqjfrwh...@mail.gmail.com
In-Reply-To:
cakpwb8+ways71svzznubponassxpakc7ganibyjmvqjfrwh...@mail.gmail.com
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
I also checked spamhaus.org and it seem my ip address is not listed.
Any help would be much appreciated.
here is a link to my configuration:
http://goq8.info/Test/exim.conf.html
$exim -bt -d falaz...@gmail.com
Exim version 4.76 uid=0 gid=0 pid=11474 D=fbb95cfd
Berkeley DB: Berkeley DB 5.2.28: (June 10, 2011)
Support for: crypteq iconv() PAM OpenSSL move_frozen_messages
Content_Scanning DKIM
Lookups (built-in): lsearch wildlsearch nwildlsearch iplsearch dbm
dbmnz mysql sqlite
Authenticators: cram_md5 dovecot plaintext spa
Routers: accept dnslookup ipliteral manualroute queryprogram redirect
Transports: appendfile/maildir autoreply pipe smtp
Fixed never_users: 0
Size of off_t: 4
Compiler: GCC [4.6.1 20110819 (prerelease)]
Library version: OpenSSL: Compile: OpenSSL 1.0.0d 8 Feb 2011
Runtime: OpenSSL 1.0.0d 8 Feb 2011
Library version: PCRE: Compile: 8.13
Runtime: 8.13 2011-08-16
Total 8 lookups
Library version: MySQL: Compile: 5.5.15 [Source distribution]
Runtime: 5.5.15
Library version: SQLite: Compile: 3.7.7.1
Runtime: 3.7.7.1
WHITELIST_D_MACROS unset
TRUSTED_CONFIG_LIST unset
changed uid/gid: forcing real = effective
uid=0 gid=0 pid=11474
auxiliary group list: none
seeking password data for user root: cache not available
getpwnam() succeeded uid=0 gid=0
configuration file is /etc/mail.d/exim.d/exim.conf
log selectors = 0ffc 00612001
trusted user
admin user
seeking password data for user mail: cache not available
getpwnam() succeeded uid=8 gid=12
user name root extracted from gecos field root
originator: uid=0 gid=0 login=root name=root
sender address = root@empty
Address testing: uid=0 gid=79 euid=0 egid=79
Testing falaz...@gmail.com
Considering falaz...@gmail.com
routing falaz...@gmail.com
hubbed_hosts router
local_part=falazemi domain=gmail.com
checking domains
expansion of ${if
exists{/etc/mail.d/exim.d/hubbed_hosts}{partial-lsearch;/etc/mail.d/exim.d/hubbed_hosts}fail}
forced failure: assume not in this list
hubbed_hosts router skipped: domains mismatch
dnslookup_relay_to_domains router
local_part=falazemi domain=gmail.com
checking domains
search_open: mysql NULL
search_find: file=NULL
key=SELECT domain FROM user WHERE domain='gmail.com' UNION SELECT
domain FROM alias WHERE domain='gmail.com' UNION SELECT domain FROM
catchall WHERE domain='gmail.com' partial=-1 affix=NULL starflags=0
LRU list:
internal_search_find: file=NULL
type=mysql key=SELECT domain FROM user WHERE domain='gmail.com'
UNION SELECT domain FROM alias WHERE domain='gmail.com' UNION SELECT
domain FROM catchall WHERE domain='gmail.com'
database lookup required for SELECT domain FROM user WHERE
domain='gmail.com' UNION SELECT domain FROM alias WHERE
domain='gmail.com' UNION SELECT domain FROM catchall WHERE
domain='gmail.com'
MySQL query: SELECT domain FROM user WHERE domain='gmail.com' UNION
SELECT domain FROM alias
