[exim] Re: Yet another taint problem.

2024-06-12 Thread Jeremy Harris via Exim-users
On 12/06/2024 11:33, Thew, Alan via Exim-users wrote: listserv_pipe: driver = pipe command = /X/bin/lsv_amin -t $local_part [ driver = accept condition = ${if match{$local_part}{-dmarc-}{yes}{no}} retry_use_local_part transport = listserv_pipe no_verify ] Read up on

[exim] Re: [exim-announce] Exim 4.98-RC0 released

2024-06-08 Thread Jeremy Harris via Exim-users
On 08/06/2024 09:25, Odhiambo Washington via Exim-users wrote: FreeBSD 14.1-RELEASE here. ... ./hintsdb.h:429:14: error: no member named 'len' in 'struct TDB_DATA' OK, TDB hasn't been tested recently (nobody has volunteered to run a buildfarm animal...). Nice to hear that someone is running

[exim] Re: [exim-announce] Exim 4.98-RC0 released

2024-06-07 Thread Jeremy Harris via Exim-users
On 07/06/2024 22:51, Frank Elsner via Exim-users wrote: dns.c: In function ‘dns_lookup’: dns.c:1143:9: error: ‘event_action’ undeclared (first use in this function); did you mean ‘queue_action’? 1143 | s = event_action; OK, that's a bug. You're building with DISABLE_EVENTS defined.

[exim] Re: [exim-announce] Exim 4.98-RC0 released

2024-06-07 Thread Jeremy Harris via Exim-users
On 07/06/2024 21:53, Frank Elsner via Exim-users wrote: My Fedora has libdb-5.3.28-61, according to "ldd exim" I'm pretty sure that this is Berkeley DB version 5 cc -O -D_FILE_OFFSET_BITS=64 -D_LARGEFILE_SOURCE -I/usr/include/libdb -o exim_dbmbuild exim_dbmbuild.o \ -lcrypt -lm -lgdbm

[exim] Re: [exim-announce] Exim 4.98-RC0 released

2024-06-07 Thread Jeremy Harris via Exim-users
On 07/06/2024 17:33, Frank Elsner via Exim-users wrote: Did it, same result. Btw, tar file unpacked into new directory, no old files in. What release of Exim did you last build with? db_env_create is called when compiled for Berkeley DB 4.1 or later. What version do you have? What is the full

[exim] Re: [exim-announce] Exim 4.98-RC0 released

2024-06-07 Thread Jeremy Harris via Exim-users
On 07/06/2024 16:52, Frank Elsner via Exim-users wrote: /usr/bin/ld: exim_dbmbuild.o: in function `main': exim_dbmbuild.c:(.text+0x386): undefined reference to `db_env_create' /usr/bin/ld: exim_dbmbuild.c:(.text+0x3da): undefined reference to `db_create' Best immediate guess: you need to do a

[exim] Re: Yet another taint problem.

2024-06-07 Thread Jeremy Harris via Exim-users
Show us your relevant transport, given that's the bit raising your problem. -- Cheers, Jeremy -- ## subscription configuration (requires account): ## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/ ## unsubscribe (doesn't require an account): ##

[exim] Re: Run expansion with a tainted variable

2024-05-18 Thread Jeremy Harris via Exim-users
On 18/05/2024 19:49, Dominic Preston via Exim-users wrote: So it's not possible to run arbitrary shell commands by tainting a variable with `rm -fr /` unless, in this instance, spfquery.mail-spf-perl performed the operation itself as a result of the argument? The docs say (in the

[exim] Re: Run expansion with a tainted variable

2024-05-18 Thread Jeremy Harris via Exim-users
On 17/05/2024 17:45, Dominic Preston via Exim-users wrote: I have a run expansion using a tainted variable: condition = ${run{/usr/bin/spfquery.mail-spf-perl \ --ip $sender_host_address \ --scope mfrom \ --identity $sender_address} \

[exim] Re: Log DKIM signing errors for outgoing messages

2024-05-18 Thread Jeremy Harris via Exim-users
On 17/05/2024 16:03, Ruben Jenster via Exim-users wrote: I like to ensure that outgoing messages are correctly signed with DKIM. But unfortunately I can not see any errors in the exim logfiles when signing is not successful. Does anyone know how to log DKIM signing errors for outgoing

[exim] Re: Recipient verification and user .forward files

2024-05-17 Thread Jeremy Harris via Exim-users
On 17/05/2024 20:15, Ian Z via Exim-users wrote: It doesn't look like the address_data way of getting the forwading address will work for full sieve / exim filters, does it? If - the redirect router that runs the filter has not disabled itself for verify (cf. the no_verify option) - the

[exim] Re: releases - betas - testing

2024-05-17 Thread Jeremy Harris via Exim-users
On 17/05/2024 19:53, Jim Pazarena via Exim-users wrote: Is there any ftp location where a pre-release or a testing version of exim is  available to fetch and try ? The sources are at git://git.exim.org/exim.git You get to build it yourself; but it's available all the time. During the run-up

[exim] Re: Recipient verification and user .forward files

2024-05-17 Thread Jeremy Harris via Exim-users
On 17/05/2024 19:22, Ian Z via Exim-users wrote: But what do you mean by "properly"? How does a router do verification "improperly"? A router depends on all the options set for it. Typically, a router will only depend on things that are already available at ACL time (for example, the

[exim] Re: Blowfish auth

2024-05-17 Thread Jeremy Harris via Exim-users
On 17/05/2024 17:31, Andreas Metzler via Exim-users wrote: I think you are mistaken or misunderstood me Yup - I didn't read the code hard enough. Thanks for the correction! So (for the OP) - if the libc crypt() support blowfish, then a "crypteq" comparison provides access from Exim. --

[exim] Re: MySQL connection with SSL

2024-05-17 Thread Jeremy Harris via Exim-users
On 17/05/2024 10:41, Gandalf Corvotempesta via Exim-users wrote: That's the standard workflow .. mysql tries to look for my.cnf in the /etc, then in /etc/mysql/my.cnf (and it finds there), then in other location (not found, as expected) But /etc/mysql/my.cnf exists and there are some includes

[exim] Re: Recipient verification and user .forward files

2024-05-16 Thread Jeremy Harris via Exim-users
On 16/05/2024 22:32, Ian Z via Exim-users wrote: But my question is about verification, and in particular about the situation where a RCPT stage ACL will have verify = recipient. The filter can't be evaluated at that stage. Verification consists of running the routing process; the same router

[exim] Re: Recipient verification and user .forward files

2024-05-16 Thread Jeremy Harris via Exim-users
On 16/05/2024 22:02, Ian Z via Exim-users wrote: But what about forwarding resulting from rules in user .forward files in either exim filter or sieve format? It will be a redirect router acessing those files or filters. -- Cheers, Jeremy -- ## subscription configuration (requires account):

[exim] Re: MySQL connection with SSL

2024-05-16 Thread Jeremy Harris via Exim-users
On 16/05/2024 21:28, Gandalf Corvotempesta via Exim-users wrote: # strace exim -be 2>&1 | grep my.cnf ${lookup mysql{SELECT password AS password}} access("/etc/my.cnf", R_OK) = -1 ENOENT (No such file or directory) access("/etc/mysql/my.cnf", R_OK) = 0 openat(AT_FDCWD,

[exim] Re: MySQL connection with SSL

2024-05-16 Thread Jeremy Harris via Exim-users
On 16/05/2024 21:12, Gandalf Corvotempesta wrote: Not read because that file is included from my.cnf and my.cnf is read. If my.cnf is beaing read, but does not contain the actual conn spec you want used, then there's something wrong with your "include" setup. That configuration can't get read

[exim] Re: Blowfish auth

2024-05-16 Thread Jeremy Harris via Exim-users
On 16/05/2024 18:03, Andreas Metzler via Exim-users wrote: On 2024-05-16 Slavko via Exim-users wrote: [...] Anyway, would be great, if exim can use system's crypto library, to support all system's password hash formats. crypteq should already do that. Unfortunately it does not. There is

[exim] Re: MySQL connection with SSL

2024-05-16 Thread Jeremy Harris via Exim-users
On 16/05/2024 15:41, Gandalf Corvotempesta via Exim-users wrote: hide mysql_servers = 10.23.105.2[exim]/mail/username/dsHg*Qw!eNt6n%nH # cat /etc/mysql/mariadb.conf.d/99-exim.cnf [exim] ssl-mode=REQUIRED Run a test using "exim -be" of a mysql expansion, under strace. Is that file

[exim] Re: MySQL connection with SSL

2024-05-16 Thread Jeremy Harris via Exim-users
On 16/05/2024 11:11, Gandalf Corvotempesta via Exim-users wrote: another question: a new mysql server i've created has SSL required for all connections. How can I setup exim to use an SSL connection to mysql server ? Use a Mysql option file giving the required connection specifications. See

[exim] Re: headers_add :at_start: in routers

2024-05-15 Thread Jeremy Harris via Exim-users
On 15/05/2024 19:32, Ian Z via Exim-users wrote: Would it work to specify add_header in an auxiliary ACL actuated through an expansion in the transport? Without checking, I'm quite dubious this would work (or continue to work in the face of future code-changes. Currently I'd call that

[exim] Re: headers_add :at_start: in routers

2024-05-14 Thread Jeremy Harris via Exim-users
On 14/05/2024 23:09, Ian Z via Exim-users wrote: Is there documentation for the "experimental ARC" code in exim? In the experimental-spec.txt file there is documentation for the facility. There isn't anything for the code, beyond the actual source. -- Cheers, Jeremy -- ## subscription

[exim] Re: headers_add :at_start: in routers

2024-05-14 Thread Jeremy Harris via Exim-users
On 14/05/2024 18:12, Ian Z via Exim-users wrote: Clearly this solution is only valid if the add_header action is "lazily evaluated" i.e. delayed until actual delivery. Not so. Look at the documentation on verifies and $address_data. -- Cheers, Jeremy -- ## subscription configuration

[exim] Re: headers_add :at_start: in routers

2024-05-14 Thread Jeremy Harris via Exim-users
On 14/05/2024 09:25, Anton via Exim-users wrote: Since a mail can be forwarded several times before reaching its final  destination, it looks logical to put X-Forwarded header(s) at each hop [where  it was forwarded]. One might think so... but they don't actually say so. They do suggest ARC,

[exim] Re: After upgrade, no more DKIM signature

2024-05-13 Thread Jeremy Harris via Exim-users
On 13/05/2024 17:32, francois via Exim-users wrote: during a change of server, I have just made a double migration of version of debian and thus of version of exim. debian 11 => debian 12 Exim version 4.94.2 => Exim version 4.96 But since then, there's been no dkim signature, and gmail in

[exim] Re: headers_add :at_start: in routers

2024-05-13 Thread Jeremy Harris via Exim-users
On 13/05/2024 17:02, Anton via Exim-users wrote: Accordingly to the Googles' recent changes https://support.google.com/a/answer/81126?visit_id=638483404863497961-2571982079 https://support.google.com/a/answer/175365?hl=en_topic=1354753 messages forwarded to Gmail should contain X-Forwarded-For:

[exim] Re: Unable to deliver mail to localuser: local_delivery defer (-1) Frozen

2024-05-12 Thread Jeremy Harris via Exim-users
You should check with the packagers as to what their intent is. Running Exim non-suid is definitely more tricky; it traditionally needs privilege for some operations (including opening the SMTP socket for listen, and for delivery into user's mailboxes). There is a docs chapter that discusses

[exim] Re: Unable to deliver mail to localuser: local_delivery defer (-1) Frozen

2024-05-10 Thread Jeremy Harris via Exim-users
Something is nonstandard about your installation or system. Has it ever worked? What changed? Or is this a new setup? If so you might want to start from scratch. -- Cheers, Jeremy -- ## subscription configuration (requires account): ##

[exim] Re: Mailman 2 - Tainted Values

2024-05-08 Thread Jeremy Harris via Exim-users
On 08/05/2024 09:44, Andrew C Aitchison via Exim-users wrote: Rumour is that Exim 4.99 will be replaced Exim 5 Not in my opinion. Please do not assume that 4.99 will be the last of the 4. series. The next number after "99" is "100". -- Cheers, Jeremy -- ## subscription configuration

[exim] Re: Unable to deliver mail to localuser: local_delivery defer (-1) Frozen

2024-05-04 Thread Jeremy Harris via Exim-users
On 30/04/2024 22:40, Zacchaeus Scheffer via Exim-users wrote: 2024-04-30 14:11:13.110 [11791] 1s1rwf-00034B-0B [...] Try a manual delivery of the spooled message, with debug enabled :- # exim -d+all -M 1s1rwf-00034B-0B 2>&1 | tee debuglog and inspect the detailed debug output. Find the

[exim] Re: [postmas...@hazenmanagement.ca: Undeliverable: Cleandry]

2024-05-02 Thread Jeremy Harris via Exim-users
On 02/05/2024 11:30, Slavko via Exim-users wrote: Are you sure with bounces? AFAIK SPF doesn't care about From: header at all, and in case of empty envelope sender it uses EHLO name. You're right; I misremembered. "postmaster@". -- Cheers, Jeremy -- ## subscription configuration

[exim] Re: [postmas...@hazenmanagement.ca: Undeliverable: Cleandry]

2024-05-02 Thread Jeremy Harris via Exim-users
On 02/05/2024 10:19, Jeremy Harris via Exim-users wrote: On 02/05/2024 03:38, Thomas Krichel via Exim-users wrote:    I have been wondering if there an exim filter or configuration    snippet that could, say for a set email-to addressre...@repec.org,    first spam filter, if not spam, take

[exim] Re: [postmas...@hazenmanagement.ca: Undeliverable: Cleandry]

2024-05-02 Thread Jeremy Harris via Exim-users
On 02/05/2024 03:38, Thomas Krichel via Exim-users wrote: I have been wondering if there an exim filter or configuration snippet that could, say for a set email-to addressre...@repec.org, first spam filter, if not spam, take the from: field, make this the reply-to, replace the

[exim] Re: [postmas...@hazenmanagement.ca: Undeliverable: Cleandry]

2024-05-01 Thread Jeremy Harris via Exim-users
On 01/05/2024 22:42, The Doctor via Exim-users wrote: What is external forwarding? Sound like something scary. My *guess* is: You mailed person A. A has their mails configured, at the MX for A, to be forwarded to B. You don't have control over that configuration; it is entirely A's choice.

[exim] Re: Question about Exim macro language

2024-05-01 Thread Jeremy Harris via Exim-users
On 01/05/2024 17:52, halbtaxabo-jnq--- via Exim-users wrote: DKIM_DOMAIN = ${lookup{$domain:$h_from:}lsearch{/etc/exim4/dkim/domainslist}} This doesn't work. Without knowing where you have used this macro, no: we can't tell you what you've done wrong. The canonical documentation for Exim is

[exim] Re: TLS SNI possibly breaking "verify = certificate"

2024-04-29 Thread Jeremy Harris via Exim-users
On 29/04/2024 07:36, Slavko via Exim-users wrote: please, can you explain me why the $ are escaped? So that they are not taken as expansion-markers on that line, in turn so that they are available for the line right after. You could play with "exim -d" and see what happens in detail if you

[exim] Re: TLS SNI possibly breaking "verify = certificate"

2024-04-28 Thread Jeremy Harris via Exim-users
On 28/04/2024 22:32, Mark Hills via Exim-users wrote: "verify = certificate" no longer passes after some system upgrade. Some? What, precisely? My systems running OpenSMTPD submit mail to an Exim smarthost. Authentication used "verify = certificate", then checks for known certificate

[exim] Re: SRS example in spec

2024-04-28 Thread Jeremy Harris via Exim-users
On 28/04/2024 06:05, Andreas Metzler via Exim-users wrote: The router fails all bounces where inbound_srs{} fails, not only the ones that "look SRS'd". It assumes that you really are SRS'ing all outbounds, therefore any bounce not SRS (in addition to those with bad SRS) is de-facto not valid.

[exim] Re: Equivalent of Envelope-to as variables in pipe transport

2024-04-24 Thread Jeremy Harris via Exim-users
On 24/04/2024 12:13, Odhiambo Washington via Exim-users wrote: On Wed, Apr 24, 2024 at 1:57 PM Jeremy Harris via Exim-users < exim-users@lists.exim.org> wrote: On 24/04/2024 11:39, Odhiambo Washington via Exim-users wrote: LMTP error after RCPT TO: domain.name/johndoe/Maildir

[exim] Re: Equivalent of Envelope-to as variables in pipe transport

2024-04-24 Thread Jeremy Harris via Exim-users
On 24/04/2024 11:39, Odhiambo Washington via Exim-users wrote: LMTP error after RCPT TO: First decide what recipient should have been used for the LMTP, then work backwards to have the router that calls that transport produce it. I'd expect to see something looking rather more like

[exim] Re: Equivalent of Envelope-to as variables in pipe transport

2024-04-23 Thread Jeremy Harris via Exim-users
On 23/04/2024 18:09, Andreas Metzler via Exim-users wrote: On 2024-04-23 Mark Hills via Exim-users wrote: How do I access the equivalent of "Envelope-to" header in transport variables? I'm trying to call dovecot-lda in a manner that enables its "envelope" rule. Iirc think the easiest way

[exim] Re: A little help understanding Exim logging of SSL verification

2024-04-18 Thread Jeremy Harris via Exim-users
On 18/04/2024 13:06, Sebastian Arcus via Exim-users wrote: So [217.175.192.143] is the MX Exim contacted for the sender verification, and  [45.86.117.1] is the IP the initial incoming connection came from? Yes. -- Cheers, Jeremy -- ## subscription configuration (requires account): ##

[exim] Re: A little help understanding Exim logging of SSL verification

2024-04-18 Thread Jeremy Harris via Exim-users
On 18/04/2024 11:18, Sebastian Arcus via Exim-users wrote: I was recently digging around the Exim logs searching for a particular connection attempt. I stumbled over the line below which I can't quite make sense of: 2024-04-14 10:38:27 [217.175.192.143] SSL verify error (during S-verify for

[exim] Re: vacation filter option once file expected to be a directory?

2024-04-12 Thread Jeremy Harris via Exim-users
On 11/04/2024 18:54, Raphael Haas via Exim-users wrote: Any hints and explanations would be highly welcome. Can you get a run of the delivery of such a vacation-message-triggering original with debug enabled? The wrappers for the DB access functions have debug tracing, and the "open" should

[exim] Re: missing message-id flow

2024-04-09 Thread Jeremy Harris via Exim-users
On 09/04/2024 20:08, Ian Z via Exim-users wrote: At what point in the "life of the message" is the check for a message-id header made, and at what point is one generated if missing? While Exim is receiving the message off the wire (or stdin), after getting all the headers and before starting

[exim] Re: SIGSEGV in panic log

2024-04-07 Thread Jeremy Harris via Exim-users
On 07/04/2024 14:18, Lena--- via Exim-users wrote: (when the segfault happens) gdb -c /.../exim.core /usr/local/sbin/exim "bt" is the command to give to the gdb prompt for a stacktrace. Gdb might offer to install all sorts of debug support packages for you before it gives a command-prompt;

[exim] Re: SIGSEGV in panic log

2024-04-07 Thread Jeremy Harris via Exim-users
On 07/04/2024 04:32, Jim Pazarena via Exim-users wrote: 4.97.1 on FreeBSD 14.0p5 It is unclear to me how to find a newer version such as a testing version? Is there a 4.97.2 forthcoming any time soon ?  even a beta ? I can't speak to FreeBSD release schedules, but - can you set up for a core

[exim] Fwd: Re: Exim 4.97-RC1 released

2024-04-04 Thread Jeremy Harris via Exim-users
On 04/04/2024 01:46, Daniel Golle wrote: I've noticed that the %Y format warning issue discussed here has not really been resolved and I was wondering what is the recommended way to go about it. Disabling all format security warnings doesn't really seem to be the best idea, You could - ignore

[exim] Re: Untainting data and Vacation configuration

2024-03-21 Thread Jeremy Harris via Exim-users
On 21/03/2024 17:59, Glenn Gregorec via Exim-users wrote:  lookup yielded: {BLF-CRYPT}$2a$05$xqWtKL1l.e3B98ISN0xbyOSROOIcMgAn6hIBZ7J9tHp/Wu28jvJfy:: So the "local_users" option setting is telling Exim to try to match the local_part of the recipient to a local-part list which looks like

[exim] Re: Select a router per recipient on incoming messages

2024-03-21 Thread Jeremy Harris via Exim-users
On 21/03/2024 14:33, Marco van Tol via Exim-users wrote: I have tried to find a routers config that will do this: - try to deliver an address over smtp - if the returned error is permanent, try the next router I looked at the options for the smtp transport, the generic routing options and

[exim] Re: Untainting data and Vacation configuration

2024-03-21 Thread Jeremy Harris via Exim-users
On 21/03/2024 07:23, Glenn Gregorec via Exim-users wrote: vacationUser:   driver = redirect   domains = ${lookup{${lc:${domain}}}lsearch,ret=key{/usr/local/etc/exim/vacation-domains}}   local_parts =

[exim] Re: Select a router per recipient on incoming messages

2024-03-20 Thread Jeremy Harris via Exim-users
On 20/03/2024 13:36, Marco van Tol via Exim-users wrote: Is there an easy way to decide per recipient which router will be used, based on the results of a callout/verify? That's not the simplest way of doing what you want. Or is there a different way to establish the same result? Just

[exim] Re: SSL Certificates

2024-03-20 Thread Jeremy Harris via Exim-users
On 20/03/2024 22:09, Jerry Stuckle via Exim-users wrote: However, it does handle emails differently depending on if you're using POP3 or IMAP.  The former places emails for a user in /var/mail while the latter places emails in the user's home directory.  And there are other differences in how 

[exim] Re: seen condition

2024-03-18 Thread Jeremy Harris via Exim-users
On 17/03/2024 10:53, Hardy via Exim-users wrote: II do not find a hint to SEEN in the local/EDITME nor in https://www.exim.org/exim-html-current/doc/html/spec_html/ch-building_and_installing_exim.html No configuration needed for the compile; only current source. -- Cheers, Jeremy -- ##

[exim] Re: Strange messages related to TLS

2024-03-14 Thread Jeremy Harris via Exim-users
On 14/03/2024 11:03, mhbeyle--- via Exim-users wrote: Is there any documented change in the exim or gnutls versions that causes this  change in the logs? I can't speak for GnuTLS, but it is not unlikely that its behaviour changed between those versions. For Exim, we do not bother documenting

[exim] Re: Strange messages related to TLS

2024-03-13 Thread Jeremy Harris via Exim-users
On 13/03/2024 19:23, mhbeyle--- via Exim-users wrote: I have several servers configured with exim4 That name is the Debian binary for Exim. Nobody else calls it that. Version 3 of Exim went obsolete TWENTY YEARS ago. - Sending to gmail: H=gmail-smtp-in.l.google.com [142.250.27.26] TLS

[exim] Re: Message ID in envelopes with multiple recipients

2024-03-10 Thread Jeremy Harris via Exim-users
On 10/03/2024 11:29, Slavko via Exim-users wrote: from log one can see that from_domain & dkim_domain has value before rewrite (received message has rewritten values). That matches my code-diving. You can't use (transport) header manipulation results in the transport's dkim-control options

[exim] Re: restricted characters in address

2024-03-10 Thread Jeremy Harris via Exim-users
On 10/03/2024 08:51, Cyborg via Exim-users wrote: @Jeremy: Was that aimed at me? There is no "@" in my name. Why aren't the extended restrictions for the "$run{}" attack the new defaults? Because nobody thinks it useful enough? (I suspect it was one of the attacks that led to the

[exim] Re: Message ID in envelopes with multiple recipients

2024-03-09 Thread Jeremy Harris via Exim-users
On 09/03/2024 09:08, Slavko via Exim-users wrote: Dňa 9. marca 2024 7:15:17 UTC používateľ Andreas Metzler via Exim-users napísal: The DKIM section of "DKIM, SPF, SRS and DMARC" starts with | Exim’s DKIM implementation allows for | | 1. Signing outgoing messages: This function is

[exim] Re: Message ID in envelopes with multiple recipients

2024-03-08 Thread Jeremy Harris via Exim-users
On 08/03/2024 19:55, mhbeyle--- via Exim-users wrote: when using transport_filter,  Does the rest of the message remain unchanged?,  Does the DKIM-Signature remain valid even if the message ID has changed? DKIM signing is done after a transport filter. -- Cheers, Jeremy -- ## subscription

[exim] Re: Message ID in envelopes with multiple recipients

2024-03-08 Thread Jeremy Harris via Exim-users
Tell your user they should use a proper mailing-list manager, and follow best practices for bulk mail. -- Cheers, Jeremy -- ## subscription configuration (requires account): ## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/ ## unsubscribe (doesn't require an

[exim] Re: Send mail via fallback interface

2024-03-07 Thread Jeremy Harris via Exim-users
Trying to evade policy restrictions set by external sites is probably a losing game, and liable to annoy them. Perhaps, if your problem is a mix of bulk and not-bulk usage (and it's the bulk ones resulting in these blocks) you could pre-emptively use separate outbound IPs for the two classes? I

[exim] Re: redirect router that calls a script that generates a .forward

2024-03-04 Thread Jeremy Harris via Exim-users
On 04/03/2024 14:09, Fabien LUCE via Exim-users wrote: Maybe in a more self explanatory way, each time the router is reached, it launches the script that returns the .forward file to it. A redirect router, using a "data" option, which has as its value a "${run ...}" expansion, that calls the

[exim] Re: Cannot get Exim to verify DANE for remote smtp

2024-03-04 Thread Jeremy Harris via Exim-users
On 02/03/2024 12:07, Dominic Preston via Exim-users wrote: I've confirmed I can get a DNSSEC validated record for do.havedane.net via dig, so why does Exim suggest otherwise? Have you tried using Exim's debug facilities? -- Cheers, Jeremy -- ## subscription configuration (requires

[exim] Re: debugging et al

2024-02-27 Thread Jeremy Harris via Exim-users
On 2/27/24 12:36, graeme vetterlein via Exim-users wrote: Bit of a side note, but I tried many different ways (for about a day) to turn on debugging , never really got anything useful.  I'm using Debian (bullseye) Perhaps you should ask on a Deb-specific forum. + in /etc/default/exim  (set

[exim] Re: Sasl and Exim

2024-02-25 Thread Jeremy Harris via Exim-users
On 25/02/2024 19:20, The Doctor via Exim-users wrote: begin authenticators PLAIN: Strictly per the documentation this is a syntax error; a macro definition lacking an '='. It'll work with the current sourcecode. Don't expect that to be always true in the future. -- Cheers, Jeremy -- ##

[exim] Re: Weird bounces

2024-02-24 Thread Jeremy Harris via Exim-users
On 24/02/2024 15:53, The Doctor via Exim-users wrote: Do you need the confog file and if so, how to get rid of comments? My rates for consultancy engagments are... probably more than you want to pay. You've been doing this for long enough to know where the docs are. -- Cheers, Jeremy --

[exim] DKIM verification

2024-02-24 Thread Jeremy Harris via Exim-users
On 24/02/2024 15:02, Laura Williamson via Exim-users wrote: Config question I want to enable DKIM check for some local users/domains but not all, not really sure how to do this If you can identify the messages in ACL *before* the data time - eg. in RCPT ACL - then the mast simple way is an

[exim] Re: tracing SMTP conversations

2024-02-24 Thread Jeremy Harris via Exim-users
On 24/02/2024 02:12, graeme vetterlein via Exim-users wrote: 550 From header must end with @mydomain.com Oh, I forgot to say: Look into "submission mode" and getting plain account names qualified. -- Cheers, Jeremy -- ## subscription configuration (requires account): ##

[exim] Re: tracing SMTP conversations

2024-02-24 Thread Jeremy Harris via Exim-users
On 24/02/2024 02:12, graeme vetterlein via Exim-users wrote: The phrase "From header" is suitably vague, do they mean the "MAIL FROM"   envelope header or the From header in the mail body headers ? I'd guess the latter. I usually phrase it as "From: hders" to try to make the point,

[exim] Re: Weird bounces

2024-02-24 Thread Jeremy Harris via Exim-users
On 23/02/2024 20:38, The Doctor via Exim-users wrote: /var/log/exim/mainlog:2024-02-23 12:29:53.262 [2255] 1rdbF2-0Zs-3yMA ** info@domain F= P= R=dnslookup T=remote_smtp H=inbound.server [inbound.server.ip]:25 I=[outbound.server]:52978 X=TLS1.3:TLS_AES_256_GCM_SHA384:256 CV=no DN="":

[exim] Re: SIGSEGV in panic log

2024-02-22 Thread Jeremy Harris via Exim-users
On 22/02/2024 23:11, Andrew C Aitchison via Exim-users wrote: On Thu, 22 Feb 2024, Jim Pazarena via Exim-users wrote: I really assumed that the response would have been "run a memtest on your chassis". On 22/02/2024 15:11, Jim Pazarena via Exim-users wrote: is there anything on exim that

[exim] Re: SIGSEGV in panic log

2024-02-22 Thread Jeremy Harris via Exim-users
On 22/02/2024 15:11, Jim Pazarena via Exim-users wrote: is there anything on exim that could -possibly- be triggering this ? SSL ?  (this is on FreeBSD 14.0) Since you didn't say what version and patch level, that's a bit hard to answer. -- Cheers, Jeremy -- ## subscription configuration

[exim] Re: Not staying enabled over reboot

2024-02-16 Thread Jeremy Harris via Exim-users
On 16/02/2024 20:30, Johnnie W Adams via Exim-users wrote: EPEL's exim 4.96|7 is not staying enabled through a reboot on my RHEL 7 servers. Has anyone else seen this? Have you found a way to cope with it? It's very strange. I'm a big fan of systemd and not used to it acting up.

[exim] Re: locking et al.

2024-02-10 Thread Jeremy Harris via Exim-users
On 10/02/2024 16:24, graeme vetterlein via Exim-users wrote: mail_spool:   debug_print = "T: appendfile for $local_part@$domain"   driver = appendfile   file = /var/mail/$local_part_data   delivery_date_add   envelope_to_add   return_path_add   group = mail   mode = 0660  

[exim] Re: Fwd: Can I tell exim to accept messages and queue them rather than send them on?

2024-02-10 Thread Jeremy Harris via Exim-users
On 10/02/2024 05:58, Andreas Metzler via Exim-users wrote: I'm going to be replacing our mail nodes over the next few weeks and I've been sequencing events in the move. It would be very handy if it were possible to tell one of my nodes to keep accepting mail but to stop trying to deliver

[exim] Re: ARC: How to verify OUTBOUND arc signing for locally generated messages

2024-02-09 Thread Jeremy Harris via Exim-users
On 2/9/24 16:15, Larry Rosenman via Exim-users wrote: On 02/09/2024 9:51 am, Jeremy Harris via Exim-users wrote: On 2/9/24 15:24, Larry Rosenman via Exim-users wrote: I still get the no A-R header message.  THe header DOES show, however. Those two items don't seem to match up! The only way

[exim] Re: ARC: How to verify OUTBOUND arc signing for locally generated messages

2024-02-09 Thread Jeremy Harris via Exim-users
On 2/9/24 15:24, Larry Rosenman via Exim-users wrote: I still get the no A-R header message.  THe header DOES show, however. Those two items don't seem to match up! -- Cheers, Jeremy -- ## subscription configuration (requires account): ##

[exim] Re: ARC: How to verify OUTBOUND arc signing for locally generated messages

2024-02-09 Thread Jeremy Harris via Exim-users
On 2/9/24 14:09, Bill Cole via Exim-users wrote: Should I add an Authentication-Results header for mail coming in via 587? NO. Or am I misusing/abusing ARC? That. ARC is for forwarding systems. Probably per the real intent of ARC, yes. But it's technically possible to regard what an

[exim] Re: can we thread mails in exim

2024-02-09 Thread Jeremy Harris via Exim-users
On 2/8/24 08:14, Sachin Bhardwaj via Exim-users wrote: I want to try email threading in exim, can you please suggest how it can be done or is there any documentation where I can read about that. his is not the MTA's job; it is an MUA function. Typically it reles on appropriate additions to a

[exim] Re: Exim - 4.97.1 - SIGSEGV - continued

2024-02-06 Thread Jeremy Harris via Exim-users
On 2/6/24 08:55, Mateusz Krawczyk via Exim-users wrote: 10:50:46 275444 flushing headers buffer 10:50:46 275444 writing data block fd=8 size=8189 timeout=300 10:50:46 275444 tls_write(0xfcf658, 8189) 10:50:46 275444 SSL_write(0x119ac20, 0xfcf658, 8189) 10:50:46 275444 outbytes=8189 error=0

[exim] Re: locking et al.

2024-02-05 Thread Jeremy Harris via Exim-users
On 2/5/24 15:01, graeme vetterlein via Exim-users wrote: But it occurs to me I'm rather "living on the edge" here I have multiple cronjobs an I guess with a single edit I could end up with multiple writers. So I guess I need to ensure maildrop and exim4 share a single view of locking .

[exim] Re: Dynamic local_domains

2024-01-29 Thread Jeremy Harris via Exim-users
On 1/29/24 03:41, Jerry Stuckle via Exim-users wrote: I tried running exim with -bd -d+all.  I started it good then ran it with the option -d+all -bP +local_domains that bit is pointless and redirected stderr to files for both. And sent it a mail? -- Cheers, Jeremy -- ##

[exim] Re: Dynamic local_domains

2024-01-28 Thread Jeremy Harris via Exim-users
On 1/28/24 05:22, Jerry Stuckle via Exim-users wrote: Is this too early for Exim to connect to the database? Yes. Options are evaluated when needed; this one will probobly only be needed when an inbound mail arrives. -- Cheers, Jeremy -- ## subscription configuration (requires account):

[exim] Re: Replacing wildlsearch with query-style lookups?

2024-01-25 Thread Jeremy Harris via Exim-users
On 1/25/24 07:36, Niels Kobschätzki via Exim-users wrote: I want to move my file lookups to database lookups (mariadb). [...] I have a problem with (n)wildlsearch. Because I just don't know how I could replace them. For example a sender-lookup for: ^.*@(.*\.)?domain\.tld$ In postgres one wa

[exim] Re: Exim - 4.97.1 - SIGSEGV

2024-01-24 Thread Jeremy Harris via Exim-users
On 1/24/24 12:07, Mateusz Krawczyk via Exim-users wrote: OS: CloudLinux 7 One of our user attempted to send a message using MS Outlook 2007 (Microsoft Office Outlook 12.0) to a large number of recipients (~700). However, some kind of unintended loop occurred, resulting in the delivery of the

[exim] Re: Bugreport: 4.97.1 : bad internal_store_malloc request

2024-01-20 Thread Jeremy Harris via Exim-users
On 1/20/24 23:39, Cyborg via Exim-users wrote: 2024-01-21 00:36:09 1rRKsd-0006BkG-0P8F bad internal_store_malloc request (2147483632 bytes) from function_store_get 66 As you can clearly see, it wants to allocate 2 GB, for a 5-20 MB Email. Open a bug against pcre2. -- Cheers, Jeremy

[exim] Re: How can I force redelivery of saved message?

2024-01-15 Thread Jeremy Harris via Exim-users
On 1/15/24 22:41, Ken via Exim-users wrote: The file begins: fromlong-messy-str...@us-west-2.amazonses.com Thu Jan 1 00:00:01 1970 followed by message headers and the message body, ending with three consecutive newlines. Exim with a "-t" option will swallow that file on stdin, taking the

[exim] Re: How can I force redelivery of saved message?

2024-01-14 Thread Jeremy Harris via Exim-users
On 1/14/24 22:18, Slavko via Exim-users wrote: That would be great, once it will be included in main, for real quarantine, where releasing message can be (near to) daily task. To be fair, I only leant in that direction so that additionally delivering as a notification to the admon/reviewer

[exim] Re: How can I force redelivery of saved message?

2024-01-14 Thread Jeremy Harris via Exim-users
On 1/14/24 20:01, Slavko via Exim-users wrote: If it will happen more often, one can store them bsmtp form directly (but i never tried)... IIRC, the message has then extra Received: header, but i it is no problem here... Longterm, I'd think something like using the experimental queuefile

[exim] Re: How can I force redelivery of saved message?

2024-01-14 Thread Jeremy Harris via Exim-users
On 1/14/24 18:30, Ken via Exim-users wrote: Once in a while a legitimate sender manages to send an important message that really, really looks like spam, so it gets saved (for a little while) in /var/spool/sa-exim/SApermreject/new. I can adjust the filters so that sender's messages will pass

[exim] Re: quote_pgsql and ${sg.... in the same acl condition?

2024-01-13 Thread Jeremy Harris via Exim-users
On 1/13/24 19:46, Larry Rosenman via Exim-users wrote: What am I missing here? You have three lookups; we need to know which. My money's on the one with the "sg" just from the complexity that adds... a) run it with debug. We want to see the expansions getting done bit-by-bit. b) look into

[exim] Re: exim 4.97.1 exiqgrep - line mismatch => broke munin

2024-01-12 Thread Jeremy Harris via Exim-users
On 1/12/24 08:14, Cyborg via Exim-users wrote: [~]# mailq  9h  2.2K 1rO3sE-005JbF-1D-H <> *** frozen *** xxx...@.de They need to pick up commit 1d19531abc45 at the very least: Date: Sun Nov 19 11:31:45 2023 + Support old-format message_id spoolfiles for mailq / -bp.

[exim] Re: excess dkim header?

2024-01-05 Thread Jeremy Harris via Exim-users
On 1/5/24 21:02, Randy Bush via Exim-users wrote: should psg.com have recognized that it was already properly DKIMmed and not added the second? AFAICS RFC 6376 places no restriction on a second signature, even if it is done by the same organisation. The section on verification mentions

[exim] Re: another transport filter question

2024-01-04 Thread Jeremy Harris via Exim-users
On 1/4/24 05:35, itz--- via Exim-users wrote: Consider a case like this: some_transport: transport_filter = /usr/local/bin/frobnicate_thing ${thing} What happens when ${thing} expands to the empty string? Is it passed as an empty argument to the program, does the program just not get

[exim] Re: setgroups

2024-01-03 Thread Jeremy Harris via Exim-users
On 1/2/24 16:52, list2--- via Exim-users wrote: 4.95 and newer versions are compiling just fine and running smoothly, but there is no delivery taking place mostly because of permission on mail folder issue. Main log show arrival but panic log is another thing. "2024-01-02 03:36:46

[exim] Re: detainting a sender address in a router/transport

2023-12-30 Thread Jeremy Harris via Exim-users
On 12/30/23 12:50, Jürgen Edner via Exim-users wrote: 13668 juer...@domain.de in "*@+local_domains : lsearch*@;/var/mail2print/senderaddresses"? yes (matched "*@+local_domains") Oh, so you're not actually using a lookup. Could you? -- Cheers, Jeremy -- ## subscription configuration

[exim] Re: detainting a sender address in a router/transport

2023-12-29 Thread Jeremy Harris via Exim-users
On 12/29/23 10:18, Jürgen Edner via Exim-users wrote: print_route:   driver = manualroute   local_part_prefix = print/   route_list = domain.de   senders= *@+local_domains : lsearch*@;/var/mail2print/senderaddresses   transport  = print_transport print_transport: driver = pipe

  1   2   3   >