Re: [exim] option -MCd

2020-07-01 Thread Marc Haber via Exim-users
On Tue, 30 Jun 2020 20:17:55 +0100, Jeremy Harris via Exim-users
 wrote:
>On 30/06/2020 16:01, Marc Haber via Exim-users wrote:
>> Is this the possible cause of the issue showing up on at least three
>> Debian systems since we upgraded to exim 4.94?
>
>It does sound plausible that it is related.
>
>How was the message given exim - command-line or smtp?

SMTP. /usr/lib/sendmail is not affected, cron messages go through
fine.

>Was it first given to exim before, or after, the suspend/resume?

Probably between two suspends, my personal notebook gets
suspended/resumed multiple times a day.

>How long was the suspend?

Somewhere many hours and a few seconds.

>How long did you wait, in the hung-at-final-dot condition, before
>using pkill?

The SMTP client times out after a few minutes. I have had processes in
this state for more than two hours.

>An experiment of a short suspend, and waiting for longer than that,
>would be of interest - assuming the issue can be created on demand.

You mean like

- reboot
- suspend for like a minute
- deliver a message
- wait for two minutes

maybe?

>I'm not a regular user of suspend myself, and don't trust it to
>function well enough on this system.  If you can easily repro and
>are prepared to build & test variants, this would be useful.
>Even just disbling the CLOCK_MONOTONIC code would be a good step.

I think I can do that. It's definetely an exim issue, older versions
of exim work just fine.

Greetings
Marc
-- 
------ !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | 
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] option -MCd

2020-06-30 Thread Marc Haber via Exim-users
On Fri, 19 Jun 2020 10:04:09 +0100, Jeremy Harris via Exim-users
 wrote:
>Exim uses the system time as part of generating unique identifiers.
>To do that it waits, if needed, for the granularity of the time
>it is using for that purpose.  That should be something in the
>millisecond range.  To end up having to wait for six minutes
>suggests that your system time jumped backwards by that much.
>
>Exim is not designed to work in that environment. It assumes that
>time only goes forwards, and that it does move.  If you are
>deliberately changing the system time backwards I suggest that
>at the very least you need to stop Exim first and restart after.
>Even doing that could result in unintended behaviour for the
>doubly-covered apparent period.

Debian has a similiar issue in the latest exim version, bug #962847,
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=962847. There, the
issue is probably related to a Linux system sent to Suspend and waking
up later.

I see the issue on my own notebook as well when delivering a message
to the local exim via SMTP to localhost. exim has the message on the
queue, but the SMTP session is hung, after "." in the data phase.
pkill -9 exim and restarting exim will have the message sent by the
next queue runner, but the calling software receives a connection
abort and will eventually resend a second copy.

A contributor on the bug report says:
|I am pretty sure that the problem is caused by the commit 
6906c131d1d07d07831f8fbabae6290a3cba6ca3  
|(Use a monotonic clock, if available, for ID generation).  
 
|The change contains measuring of the difference between CLOCK_MONOTONIC and 
realtime once   
|at startup (exim_clock_init), but as far as I understand CLOCK_MONOTONIC   
 
|on Linux does not increase during suspend/hibernate (possibly wrognly [1]),
 
|so the difference grows then, unaccounted for. 
 
|   
 
|[1]: https://stackoverflow.com/a/3527632/1236045   
 

Is this the possible cause of the issue showing up on at least three
Debian systems since we upgraded to exim 4.94?

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | 
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] CVE-2019-10149: already vulnerable ?

2019-07-03 Thread Marc Haber via Exim-users
On Sun, 23 Jun 2019 20:02:33 +0100, Jeremy Harris via Exim-users
 wrote:
>  deny  local_parts = \N ^.*$ : ^.*\\x24 : ^.*\\0?44 \N
>message = no mate

This might be a really stupid question, but what exactly does that do?

^.*$ blocks local_parts containing a $
^.\\x24 does the same?
but I'm stymied about the \\0.44 notation, what's that?

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | 
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] short host name in local_domains

2019-07-03 Thread Marc Haber via Exim-users
On Fri, 7 Jun 2019 11:12:23 +0200, Heiko Schlittermann via Exim-users
 wrote:
>Marc Haber via Exim-users  (Do 06 Jun 2019 16:07:36 CEST):
>> in Debian, local_domains gets seeded with "@:localhost" plus whatever
>> the local administrator has entered to augment the list of
>> local_domains.
>
>Why "localhost"? This would accept messages via SMTP addressed to
>USER@localhost. I'm not sure, if this is intended.

The problem is application or scripts sending mail to "strange"
unqualified or only half-qualified addresses and expect them to work.
This is a horribly big can of worms.

>> Am I doing things wrong by adding the short host name to
>> local_domains? Why does @ only expand to the FQDN and not to FQDN and
>> the short host name? Why is there not q special expansion item
>> expanding to the short host name?
>
>Imagine your host ist named "dk". Where should user@dk go to? To Denmark
>(.dk has an A record) or to your local host.
>
>From my personal point of view, mail addressing should use FQDN always,
>or no domain at all (destined for the *local* host, not *localhost*).

In theory, yes. Then comes broken software.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | 
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] short host name in local_domains

2019-06-06 Thread Marc Haber via Exim-users
On Thu, 06 Jun 2019 18:21:41 +0200, Marc Haber via Exim-users
 wrote:
>That would be legal syntax as in
>
>|local_domains = 
>@:localhost:${extract{1}{.}{$primary_hostname}}:other.domain.example
>
>?

Indeed, and it even makes its way through Debian's magic scripts,
making

|dc_other_hostnames='${extract{1}{.}{$primary_hostname}}'

valid and working in /etc/exim4/update-exim4.conf.conf

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | 
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] short host name in local_domains

2019-06-06 Thread Marc Haber via Exim-users
On Thu, 6 Jun 2019 16:05:14 +0100, Jeremy Harris via Exim-users
 wrote:
>On 06/06/2019 15:07, Marc Haber via Exim-users wrote:
>> Am I doing things wrong by adding the short host name to
>> local_domains?
>
>If it works, it's hard to call it wrong.

It's a matter of personal style, I know, and I would like to know of
any situations where this might be a stupid idea.

>> Why does @ only expand to the FQDN and not to FQDN and
>> the short host name?
>
>Someone would be bound to complain, and ask for a way
>of making it only one or the other.
>
>> Why is there not q special expansion item
>> expanding to the short host name?
>
>Nobody's asked for one?
>People regard the FQDN as being more "real" for the host name?
>
>I'm guessing, only.

Obviously ;-)

>If you're wanting this for ease of deployment across many systems,
>use something like ${extract{1}{.}{$primary_hostname}}

That would be legal syntax as in

|local_domains = 
@:localhost:${extract{1}{.}{$primary_hostname}}:other.domain.example

?

Greetings
Marc

:
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | 
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


[exim] short host name in local_domains

2019-06-06 Thread Marc Haber via Exim-users
Hi,

in Debian, local_domains gets seeded with "@:localhost" plus whatever
the local administrator has entered to augment the list of
local_domains.

I am usually entering the short hostname of the host in that list, so
that my local_domains usually ends up being like "@:localhost:myhost",
knowing that @ gets expanded to myhost.domain.example by virtue of
primary_hostname. This allows stupid local apps to send mail to
localuser@myhost instead of localuser@myhost.domain.example to have
localuser aliased away in the /etc/aliases file. Without myhost in
local_domains, Mail to localuser@myhost would not be considered local
and probably sent away to a smarthost without the virtue of having the
local alias file consulted.

Am I doing things wrong by adding the short host name to
local_domains? Why does @ only expand to the FQDN and not to FQDN and
the short host name? Why is there not q special expansion item
expanding to the short host name?

Greetings
Marc, having been a bit out of touch with e-mail servers for the last
years
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | 
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Poll: Exim Users Meeting in Germany?

2017-11-05 Thread Marc Haber
On Fri, 13 Oct 2017 11:03:31 +0200, Kirill Miazine via Exim-users
 wrote:
>I did suggest Heidelberg and could combine Exim meetup with visiting
>some friends nearby.

I live near Heidelberg and would support Heidelberg as a venue for the
exim meeting ;-)

And yes, I would of course attend.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] comments in host lists?

2017-02-22 Thread Marc Haber
On Wed, 22 Feb 2017 15:12:29 -0500, Chris Siebenmann
 wrote:
>If you don't have comments of this form, it's possible that you have a
>genuinely malformed IP address and so on.

That was indeed the case, thanks for making me look again.

>Running a fake Exim SMTP session
>may reveal more information, such as the specific malformed address:
>
>   exim -bh 

Unfortunately, even -d+all doesn't give more specific information. I
ended up deleting arbitrary parts of the file and retrying before I
found the offending line.

Thanks for your valuable input, that was a real help.


Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


[exim] comments in host lists?

2017-02-22 Thread Marc Haber
Hi,

I have in an ACL:

|  deny
|message = sender IP address $sender_host_address is locally blacklisted 
here. If you think this is wrong, get in touch with postmaster
|!acl = acl_local_deny_exceptions
|hosts = CONFDIR/local_host_blacklist

Can I somehow have comments in the local_host_blacklist? When I use #,
my exim debug output contains:

|20:51:25 18505 host in "/etc/exim4/local_host_blacklist"? no (malformed IPv4 
address or address mask)

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Mailman Admins - How much do you pay Yahoo to accept mail to subscribers?

2017-01-01 Thread Marc Haber
On Fri, 30 Dec 2016 13:26:31 -0500, John C Klensin 
wrote:
>--On Friday, December 30, 2016 19:08 +0300 Odhiambo Washington
> wrote:
>
>> Here is my situation on a server where I run a Mailing List
>> using Mailman+Exim4.
>>...
>>  and still Yahoo is not playing well. It's unacceptable
>> that some times mail to Yahoo can stay in the queue for 4
>> hours when there's so much communication going on in the
>> mailing list.
>> 
>> I am sure there are people having larger yahoo subscriber
>> database How does one bribe/prod yahoo to be kind to the
>> world? :-)
>
>The consensus is that it is hopeless.  There are several views
>of the reasons, with the one I think most credible is that Yahoo
>has become so focused on anti-spam and anti-phishing efforts
>that they simply do not care about anyone else or the users of
>any other mail or mailing list provider.

Yes. E-Mail is dying, especially for those who are not yet ready to
trust their e-mail to one of the big big yummy providers but instead
prefer running their own mail server.

And it's not the spammers who kill it. It's the antispammers.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] Assistance configuring router

2016-12-16 Thread Marc Haber
On Tue, 13 Dec 2016 18:51:21 +, Jeremy Harris 
wrote:
>But routing is also done on any delivery attempt, which
>is after the (reception) SMTP DATA phase.

Of course. I haven't done exim stunts in quite a while and apologize
for my ignorance.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] Assistance configuring router

2016-12-13 Thread Marc Haber
On 11 Dec 2016 17:50:55 GMT, Jasen Betts  wrote:
>On 2016-12-11, Marc Haber  wrote:
>> On 8 Dec 2016 20:27:53 GMT, Jasen Betts  wrote:
>>>from your brief description it spounds like you want a manualroute router 
>>>with 
>>>
>>> condition = ${if match{$h_subject:}{\N\[secure\]\N}}
>>
>> Is h_subject available in a router?
>
>when it's used in or after the data ACL, yes,  so it won't work for
>address verification in earlier ACLs. This probably means that the 
>destination address must be valid when used with a regular subject.

You suggested using condition = in a router. Don't routers run before
the DATA phase? We haven't been talking about ACLs yet, have we?

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] Assistance configuring router

2016-12-11 Thread Marc Haber
On 8 Dec 2016 20:27:53 GMT, Jasen Betts  wrote:
>from your brief description it spounds like you want a manualroute router with 
>
> condition = ${if match{$h_subject:}{\N\[secure\]\N}}

Is h_subject available in a router?

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -----
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] If DKIM or SPF fail reject to folder, not sender

2016-06-26 Thread Marc Haber
On Sat, 25 Jun 2016 22:43:17 -0400, Chip  wrote:
>I'm assuming that since failed messages go back to the sender when DKIM 
>and SPF validations fail, it might be trivial to tweak that code so that 
>it sends the bad message to folder in the user's email directory instead.

Rejecting a message is the exact opposite of accepting and delivering
it in some folder.

Aside from that, both operations are quite identical, yes.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] Auto Answer

2016-05-08 Thread Marc Haber
On Sun, 8 May 2016 12:17:02 +0200, Luciano Rinetti
 wrote:
>   if personal then
>   mail to $reply_address
>   mail from myaddress@mydomain
>   subject "I am on holiday - Auto Answer"
>   file /var/spool/mail/example.com/user/.vacation.msg
>   endif
>   the auto answer message works, but it is sent also a mail from:
>   Debian-exim@mydomain
>   with no subject and no body
>   to the sender.
>   How can i avoid the mail from Debian-exim@mydomain to be sent ?
>   Regards,

What do your logs say?

Additionally, you should read filters.txt for the vacation command or
the once option to avoid mailbombing people.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] Missing normal message delivery logs

2016-03-04 Thread Marc Haber
On Wed, 2 Mar 2016 23:21:03 -0500, "Paul Faure"  wrote:
>This is all I get now:
>
>2016-03-02 20:07:09 [27626] 1abHjR-0007Ba-1M <= x...@xxx.ca H=([123.1.2.3])
>[123.456.789.012]:28175 I=[1.2.3.4]:465 P=esmtpsa
>X=TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256 CV=no A=plain_saslauthd_server:
>S=13321 M8S=8 id=2ca0c8ab-e046-47d6-a63c-d47b999b5...@x.ca T="Re: Fwd:
>Welcome" from  for y...@y.ca yy...@.ca

What do you get from grep 1abHjR-0007Ba-1M yourlog?

Greetings
Marc
 
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] "No local mail" enables local mail

2016-02-03 Thread Marc Haber
On Tue, 2 Feb 2016 17:40:03 +0200, Jordan Gigov 
wrote:
>I don't really know or care who maintains the scripts for that, but when I
>choose that option, it enables local mail! The exact thing that I tell it
>not to do!

Did you read the fine documentation that came with your package? There
are some manpages, and also some documentation in
/usr/share/doc/exim4-base/. There is also a splendid document found on
the web by asking your favorite search engine for "catb smart
questions" which you should also read.

Feel free to yell at the people who have spent months of their life on
the package and the docs on the appropriate mailing list. Feel free to
file meaningful bug reports with the Debian BTS.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] exim4, gmail and 550-5.7.1

2015-12-23 Thread Marc Haber
On Wed, 23 Dec 2015 01:17:47 +, Chris Knadle
 wrote:
>Please understand that I don't suggest reading Chapter 3 lightly.  If you're
>going to be administering Exim, you owe it to /yourself/ to read that
>chapter to get the basic understanding of how Exim works.  I'm telling you
>this because /I/ didn't understand Exim configuration until I read that
>chapter, and after doing so a lot more of Exim's config makes sense.

To make things a bit more clear: I started using Exim in 1998. And I
still make it a habit of reading chapter 3 at least once a year, from
beginning to end. And I still learn something new from chapter 3.
Every single time.

>More specifically, the ipv4_only router you had shown:
>
>   ipv4_only:
>  driver = dnslookup
>  domains = +ipv4_force_domains
>  transport = ipv4_smtp
>  ignore_target_hosts = <; 0::0/0|
>
>/ignores/ all IPv6 addresses.  Therefore if the DNS MX record lookup on a
>domain your mail server is sending mail to returns no IPv4 addresses, the
>router is thus skipped and the next one is tried.  /Assuming/ the ipv4_only
>router was in the configuration /before/ the dnslookup router, the dnslookup
>router would be the router most likely to match.  If the ipv4_only router
>were /after/ the dnslookup router in the config, then the dnslookup router
>would match first and get used, then the mail would go out via IPv6 and get
>rejected.

I would prefer to at least try delivering a message via IPv6 if there
is no other way to try. Even if this fails, having tried is better
than not having tried at all.

>> Good. I'm confident enough in what should happen that I'm going to try to 
>> implement it.
>> I'm getting ready to leave for the holidays so after the first of the year 
>> I'll 
>> be able to test it.
>> I'll be able to report back if it works or doesn't. If it works this is 
>> pretty 
>> simple and I may suggest that it be added to the basic Debian configuration.
>
>That likely won't be needed.  Remember: the problem you're having with
>sending via IPv6 is lack of rDNS (reverse DNS, i.e. lack of PTR DNS record
>on the IPv6 IP).  Lack of rDNS is a known issue for mail servers.

And a common issue for ISPs who don't understand how the Internet
works. Caused by people who went too far in fighting spam and are
fighting e-mail instead.

>You could suggest it to the maintainers of exim4 in Debian with a 'wishlist'
>bug and including a patch if you'd like -- they'll likely appreciate the
>thought and effort, but I expect they'll let you know they don't intend to
>include the patch because it's a niche issue that would normally be handled
>by getting the ISP to insert a PTR record for the IP.

I would take such a patch, since it's such a common issue. I would
also suggest adding this to the upstream default config.

>>> I think in my case none of the variables in the .ifdefs are defined, though
>>> I've added another option to avoid the SSL/TLS POODLE attack:
>>>
>>> remote_smtp:
>>>debug_print = "T: remote_smtp for $local_part@$domain"
>>>driver = smtp
>>># Avoid SSLv3 due to POODLE attack
>>>#http://www.gossamer-threads.com/lists/exim/users/100539
>>>tls_require_ciphers = NORMAL:!VERS-SSL3.0
>>>
>>
>> I believe some of them do get defined based on the questions you answer 
>> during 
>> the configurations but it's no altogether clear to me what the answers to 
>> those 
>> questions do.
>
>I don't think these particular options are affected by the debconf
>questions.

They are not. They are bracketed in .ifdefs so that they can be set
from a different file without making relevant changes in the actual
file coming from the package to allow for easier updates.
Unfortunately, exim errors out on "option = MACRO" when MACRO is
undefined, so the .ifdef brackets are needed. Ugly, but needed.

>(You can see these questions again at any time by running
>'dpkg-reconfigure exim4-config' as root.)  The debconf questions instead
>write to /etc/exim4/update-exim4.conf.conf and the variables set there get
>pulled into the main configuration via exim4.conf.template or the split
>configuration files (depending if you're using the split config or not).

there are also fine man pages in the package, such as man
update-exim4.conf and man update-exim4.conf.conf.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] exim4, gmail and 550-5.7.1

2015-12-22 Thread Marc Haber
On Sun, 13 Dec 2015 15:13:22 -0800, Ian Zimmerman 
wrote:
>On 2015-12-13 20:58 +, Jasen Betts wrote:
>> One big advantage of split config is that when exim is upgraded by 
>> debian your changes will persist while the stock config files are
>> updated. saving you from crawling through a 2000 line config file.
>> duplicating all the edits.
>
>How so?  When I keep my own exim4.conf, it is _never_ touched by
>upgrades, simply because the package doesn't contain the file at all.

So, updates done in the package are not even offered to you. This
might be an advantage for the exim veteran who knows everything to the
heart, but the vast majoriy of users would _want_ updates to the
default configuration to be offered to them.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] exim4, gmail and 550-5.7.1

2015-12-22 Thread Marc Haber
On 13 Dec 2015 20:58:55 GMT, Jasen Betts  wrote:
>the only real difficulty is that syntax error messages will not give
>the address of the error but instead point to the generated file.

Right, that's an issue. Unfortunately, .include was not there at thet
time of the writing, and changing this now would mean millions of
Debconf questions on upgrade.

>The reason behind this config splitting is so that debian can offer
>seamless ingeration with other mail processing packages like 
>spamassassin and clamav using connector packages that drop additional
>config  files into the config tree to activate the integration.

Unfortunately, this has not become as widely used as we hoped.

>One big advantage of split config is that when exim is upgraded by 
>debian your changes will persist while the stock config files are
>updated. saving you from crawling through a 2000 line config file.
>duplicating all the edits.

This is the real advantage. All my exim installations do even run with
the stock configuration snippets completely unchanged, which allows
for even more seamless upgrades. Special configuration, dedicated
file.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] exim4, gmail and 550-5.7.1

2015-12-22 Thread Marc Haber
On Sun, 13 Dec 2015 08:46:01 -0800, Ian Zimmerman 
wrote:
>On 2015-12-13 09:42 +0100, Marc Haber wrote:
>>> Maybe, as a first step, you could move from the Debian configuration
>>> infrastructure for exim to a hand edited configuration file.
>
>> Why would one want to do that?
>
>In this particular situation, because most and perhaps all answers the
>OP will get on this list will refer to the bare example configuration.

Whch is perfectly ok with the Debian configuration. Even the comments
in our default configuration are matching the ones in the upstream
default config.

>I appreciate
>the Debian infrastructure very much, and I used it myself for a long
>time.  I finally left it for a rather specific reason: I want to keep
>all my configuration in version control and share it among my
>heterogeneous set of hosts.  That is harder to do when the information is
>spread in many files, and some of it comes from debconf answers.

I disagree with that, but that's a matter of style.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] Delivering Mail to Yahoo user

2015-12-21 Thread Marc Haber
On Mon, 21 Dec 2015 16:19:18 +0300, Evgeniy Berdnikov 
wrote:
>On Mon, Dec 21, 2015 at 01:31:03PM +0100, Marc Haber wrote:
>> On Mon, 21 Dec 2015 15:04:23 +0300, Odhiambo Washington
>>  wrote:
>> >2015-12-21 10:24:17 1a9cA9-0005Hu-3s == johnowino2...@yahoo.co.uk
>> >R=outbound_throttled T=throttled_smtp defer (-18) H=mx-eu.mail.a
>> >m0.yahoodns.net [188.125.69.79]: Remote host closed connection in response
>> >to end of data
>> 
>> Yahoo - a service provider too big to care for standards - is dropping
>> your connection at a place where it should not do that without telling
>> you why.
>
> IMHO, posted logs show indications of broken Path MTU Discovery.
> Traffic dump between client and Yahoo relay may clarify this issue.

If that would be the case, the SMTP session would most probably not
get beyond the first block of DATA; and it would time out afterwards.
In the current case, the remote host is actively ending the
connection.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] Delivering Mail to Yahoo user

2015-12-21 Thread Marc Haber
On Mon, 21 Dec 2015 15:04:23 +0300, Odhiambo Washington
 wrote:
>2015-12-21 10:24:17 1a9cA9-0005Hu-3s == johnowino2...@yahoo.co.uk
>R=outbound_throttled T=throttled_smtp defer (-18) H=mx-eu.mail.a
>m0.yahoodns.net [188.125.69.79]: Remote host closed connection in response
>to end of data

Yahoo - a service provider too big to care for standards - is dropping
your connection at a place where it should not do that without telling
you why.

Exim has no choice but to retry.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] Delivering Mail to Yahoo user

2015-12-21 Thread Marc Haber
On Mon, 21 Dec 2015 13:06:08 +0300, Odhiambo Washington
 wrote:
>Here is the error:
>
>
>  xx...@yahoo.co.uk
>host mx-eu.mail.am0.yahoodns.net [188.125.69.79]
>retry timeout exceeded
>
>So, my server tries to deliver all mail to mx-eu.mail.am0.yahoodns.net
>which times out.

That is only the result. See your logs why the retries fail.

A retry timeout is not a connection timeout.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] Exim misses some attachments.

2015-12-17 Thread Marc Haber
On Thu, 17 Dec 2015 12:22:05 +0200 (EET), kuncho pencho
 wrote:
>I can't update exim. It's run on gentoo with linux kernel 2.4, i should 
>install it from scratch bit it's impossible for me. :(

Gentoo is a distribution for people who _really_ know their way around
Linux. If you can't update a single package on Gentoo, you need to
change to a distribution that matches your skills.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] How to limit exim to send emails to Yahoo & Hotmails?

2015-12-16 Thread Marc Haber
On Tue, 15 Dec 2015 23:54:27 +0530, Mohan Kavinda
 wrote:
>Is there any way to limit exim to send emails to Yahoo & Hotmails from exim
>configuration file?

Yes.

Google, catb, smart questions.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] Mails are not sent

2015-12-15 Thread Marc Haber
On Mon, 14 Dec 2015 15:35:06 -0300, "Jaime Stuardo"
 wrote:
>By the way, is there a forum or something where I can receive real support by 
>exim members, not only by volunteers?

There are individuals and companies who do commercial exim support for
money, yes.

What would you mean by "exim members"? If you mean "employees of the
company making exim", there is no company behind exim, and thus no
emplyees. You won't get any closed to exim than on this list, and on
this list there is some expectation that people have tried to get
acquainted with exim and to solve their problems themselves before
asking here.

If you want somebody to teach you about the basics of Internet e-mail
and/or exim, you need to pay somebody or read up existing
documentation.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] exim4, gmail and 550-5.7.1

2015-12-14 Thread Marc Haber
On Mon, 14 Dec 2015 14:10:18 +, Ian Eiloart 
wrote:
>Why use IPv6 if you have an IPv4 address? Have you found an email recipient 
>that doesn’t accept email from IPv4 addresses?
>
>If you really want to use IPv6, then move to an ISP that supports it properly.

Because only using IPv6 will single out the ISPs that don't support it
properly. Because only using IPv6 will make it feel natural to be
used. Because only using IPv6 will get people acquainted with its
peculiarities.

Grüße
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] exim4, gmail and 550-5.7.1

2015-12-13 Thread Marc Haber
On Sat, 12 Dec 2015 21:11:36 -0800, Ian Zimmerman 
wrote:
>On 2015-12-12 21:34 -0600, Robert Steinmetz wrote:
>
>> How would one implement your suggestion in an Ubuntu/Debian server?
>> 
>> The git hub link I provided in my original post also seems a valid approach, 
>> but
>> Again, I'm not sure how to implement it in a Debian/Ubuntu environment.
>> 
>> Please be gentle.
>
>Maybe, as a first step, you could move from the Debian configuration
>infrastructure for exim to a hand edited configuration file.

Why would one want to do that?

>The exim4
>package is already prepared for that; all you have to do is to create
>the configuration file as /etc/exim4/exim4.conf.  You can start with the
>example configuration /usr/share/doc/exim4-base/examples/example.conf.gz
>and make changes as necessary.
>
>While it _is_ possible to achieve your goal within the Debian
>infrastructure, it involves creating or modifying files in an entire
>tree of configurations [1], which many find not "intuitive" and/or
>unfamiliar.

Explain "many". I guess the vast majority of exim installation these
days run just fine with the Debian magic. Debian is the last big Linux
distribution that has not yet switched away from exim.

There might be people thinking that this is the case _because_ Debian
does a pretty good job in hiding away the clumsyness of hand-crafting
exim configuration away from the vast majority of users while keeping
it reasonably easy to modify exim's behavior.

spec.txt is 35522 lines
README.Debian.txt is 1300 lines.

Even if the man pages added by Debian add up to anothe 2000 lines,
Debian-specific documentation is less than 10 % of what one needs to
read and understand anyway to write a hand-crafted exim configuration.

Please consider not dismissing Debian's work on exim as "unuseable
rubbish" just because you don't understand it. That's horribly
impolite to do even if doing it not right in front of the people who
have done a considerable part of the work of packaging Exim for
Debian.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] mail delivery to smarthost very slow

2015-11-16 Thread Marc Haber
On Mon, 16 Nov 2015 10:50:12 +, Jeremy Harris 
wrote:
>On 16/11/15 10:06, Jonas Meurer wrote:
>> As you can see, the mails are sent to the smarthost one by one, with
>> a new connection for each mail. Is it possible to make Exim4 deliver
>> several mails together to the smarthost in one connection?
>
>Exim normally reuses a connection for multiple deliveries; it takes
>specific configuration to make it not do so.

In my experience, exim delivers messages immediately. If one wants to
make use of connection, reuse, one needs to make exim put the message
on the queue first.

>  This is a Debian
>config problem; you need to ask in a Deb-specific place.  The Deb
>docs should tell you where.

Is this Anti-Debian knee-jerk reaction still commonplace on this list?
It's a pity. The Debian configuration goes to _lengths_ to _not_
change the default behavior. We even try to keep the _COMMENTS_ in our
configuration in line with the upstream default configs so that
third-party HOWTO documents still fit and to make it easy for the
members of _this_ list to help Debian and to some extent even Ubuntu
users.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] Exim + Multi domain SSL + HA Proxy

2015-11-04 Thread Marc Haber
On Mon, 2 Nov 2015 10:36:50 +, Jeremy Harris 
wrote:
>On 02/11/15 10:19, Matt Bryant wrote:
>> Dont have an issue with inbound and MX servers ... this is for a shared
>> outbound client SMTP relay cluster where SMTP Auth is used and clients
>> connect via a branded DNS name (potentially).
>
>"branded" ?
>
>But even so, the clients will be doing a DNS A-lookup?  Will they
>handle multiple IPs returned?

If they do, they might wait for a time out first, which causes the
normal muggle MUA user to yell at some support agent.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] replacement / supplement for localuser - Unknown User

2015-09-04 Thread Marc Haber
On Thu, 3 Sep 2015 22:21:08 +0100, Jeremy Harris 
wrote:
>On 03/09/15 20:47, Marc Haber wrote:
>>> no. to capture the content acceptance must progress to the end of DATA,
>>> so, you need to mess with the RCPT acl so the bad email addresses
>>> are accepted.
>> 
>> How would an RCPT ACL block those addresses? In a standard
>> configuration, adding a redirect router will do the trick.
>
>If that ACL does recipient verification, which invokes the routers.

You're of course right. I didn't do stuff like that in years.

Greetings
Marc
-- 
------ !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] replacement / supplement for localuser - Unknown User

2015-09-03 Thread Marc Haber
On 3 Sep 2015 05:40:15 GMT, Jasen Betts  wrote:
>On 2015-09-02, Jeremy Harris  wrote:
>> On 02/09/15 16:36, Gary Stainburn wrote:
>>> localuser:
>>>   driver = accept
>>>   check_local_user
>>>   transport = local_delivery
>>>   cannot_route_message = Unknown user
>>
>> I guess that's the last router in your chain, so when it passes
>> you get to the end and a "cannot route" situation.
>>
>> If you append a redirect router to a spambucket account, marked
>> unseen, does that do the job?
>
>no. to capture the content acceptance must progress to the end of DATA,
>so, you need to mess with the RCPT acl so the bad email addresses
>are accepted.

How would an RCPT ACL block those addresses? In a standard
configuration, adding a redirect router will do the trick.

Grüße
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] Block mail of reverse DNS fails

2015-09-02 Thread Marc Haber
On Wed, 2 Sep 2015 19:45:35 +0200, Cyborg 
wrote:
>Am 02.09.2015 um 18:54 schrieb Marc Haber:
>>
>>> * A spammer sends an email from the IP 94.123.123.123 with
>>> i...@example.com in the "From" field. In this case example.com is my own
>>> domain and it cannot be located at 94.123.123.123. I want this to be
>>> blocked too.
>> So you do not want to use your domain when you're on the road?
>>
>> Greetings
>> Marc
>
>He could bypass his filter with SMTP-AUTH, no big deal.

Which needs to be catered for. People who don't know the difference
between envelope and header tend not to do that.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] Block mail of reverse DNS fails

2015-09-02 Thread Marc Haber
On Tue, 01 Sep 2015 18:42:33 +, Archil Imnadze 
wrote:
>I have an Exim instance running on Debian Jessie. For each mail that is
>received by Exim I would like to check if the reverse DNS for the sender
>domain matches the connecting IP and if not reject the mail.

Bad idea.

>Consider the following scenarios.
>* A spammer sends an email from the IP 94.123.123.123 with
>i...@spammerwebsite.com in the "From" field but the domain
>spammerwebsite.com doesn't resolve to 94.123.123.123. I want this to be
>blocked.

Bad idea.

>* A spammer sends an email from the IP 94.123.123.123 with
>i...@example.com in the "From" field. In this case example.com is my own
>domain and it cannot be located at 94.123.123.123. I want this to be
>blocked too.

So you do not want to use your domain when you're on the road?

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] Encrypted for Some, Plain for the Rest

2015-08-30 Thread Marc Haber
On Sat, 29 Aug 2015 19:57:16 -0400, Terrance Devor
 wrote:
>1) All authentication (ie, passing of username and password) should be done
>over SSL/TLS port 465. Attempts to pass username and password over port
>25 will result in deny, error message returned to the MTA, and log

Why?

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -----
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] implementing a spamgourmet substitute with exim

2015-08-17 Thread Marc Haber
On Mon, 17 Aug 2015 11:21:03 +0100, Nick 
wrote:
>Thank you to Marc and Ian's suggestions, Ian's being particularly detailed!

Ian's is actually way superior. Ignore what I said.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] implementing a spamgourmet substitute with exim

2015-08-13 Thread Marc Haber
On Wed, 12 Aug 2015 12:33:39 +0100, Nick 
wrote:
>I do know about the simple method for routing any arbitrary prefix to 
>local user addresses (local_part_prefix = ...; 
>local_part_prefix_optional), but
>
>   a) this exposes the real user name in the disposable address - just 
>remove the prefix and you have a non-disposable address
>   b) wont permit with shared aliases which route to several users
>   c) there is no fine control for specific prefixes - or at least, not 
>without the help of a unix admin

You can use local_part_(prefix|suffix) on a redirect router, and you
can have addresses without prefix|suffix fail before that.

Greetings
Marc, who has made the mistake ten years ago of actually allowing the
unplussed variant
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] spaces and quotes

2015-08-08 Thread Marc Haber
On Sat, 8 Aug 2015 16:15:16 +0100, Jeremy Harris 
wrote:
>On 08/08/15 03:55, Jasen Betts wrote:
>> Exim doesn't seem to like spaces in sender email addresses, 
>> is this intentional? 
>
>> mail from: <"a b"@example.com>
>> 02:41:13 11983 SMTP<< mail from: <"a b"@example.com>
>> 02:41:13 11983 LOG: smtp_syntax_error MAIN
>> 02:41:13 11983   SMTP syntax error in "mail from: <"a b"@example.com>"
>> H=(yue) [192.168.2.4] unmatched doublequote in local part
>> 02:41:13 11983 SMTP>> 501 <"a: unmatched doublequote in local part
>> 501 <"a: unmatched doublequote in local part
>
>The testsuite includes a testcase with a localpart having spaces;
>I just tried modifying it with that extra space after the colon
>and it still accepts the syntax.
>
>Are you running an unmodified source?  What version?

I tried googling for the error message, the one word "doublequote" is
rather uncommon in English. I am pretty sure that this error message
originates from exim.

exim 3, that is.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] 550 Restricted characters in address

2015-07-10 Thread Marc Haber
On Fri, 10 Jul 2015 14:59:32 +, "Managed Pvt nets"
 wrote:
>On 10/07/2015 1:26:21 PM, "Andrew Colin Kissa"  
>wrote:
>
>>
>>You need to add control retain_sender
>>
>>http://topdog.za.net/2012/06/08/how-to-fix-exim-smtp-auth-rewritting-the-from-address/
>>
>This was the trick that got it working for me. Many thanks for the help.

You got a technical solution from a 404 error page?

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] 550 Restricted characters in address

2015-07-10 Thread Marc Haber
On Fri, 10 Jul 2015 06:18:10 +, "Managed Pvt nets"
 wrote:
>I hope someone can point me in the right direction. I am totally new to 
>Exim and need some help. I am using Exim 4.85 sitting on a FreeBSD 10.1, 
>and my problem occurs on sending mail, I do not seem to be able to send 
>mail after a successful authentication as follows. What am I missing? I 
>have attached my logs and tests below:
>
>===
>2015-07-08 14:57:09 1ZCouT-CM-A9 <= 
>"mailto:myaddr...@mydomain.com%...@myhostname.mydomain.com 
>H=([127.0.0.1]) [555.555.555.555] P=esmtpsa X=TLSv1:AES256-SHA:256 
>A=plain_login:myaddr...@mydomain.com S=1777 
>id=em76ffc817-ad6b-4c73-8c0a-1b292e64d689@jagged T="SSL test"
>2015-07-08 14:57:10 1ZCouT-CM-A9 ** mnt...@gmail.com 
>R=send_to_gateway T=remote_smtp H=smtp2.mydomain.com [666.666.666.666]: 
>SMTP error from remote mail server after RCPT TO:: 
>550-Verification failed for 
><"mailto:myaddr...@mydomain.com%...@myhostname.mydomain.com%3E\n550-Unrouteable
> 
>address\n550 Sender verify failed
>2015-07-08 14:57:10 1ZCouU-CQ-2c <= <> R=1ZCouT-CM-A9 U=mailnull 
>P=local S=2885 T="Mail delivery failed: returning message to sender"
>2015-07-08 14:57:10 1ZCouT-CM-A9 Completed
>2015-07-08 14:57:10 1ZCouU-CQ-2c ** 
>myaddr...@mydomain.com@myhostname.mydomain.com 
><"mailto:myaddr...@mydomain.com%...@myhostname.mydomain.com> 
>R=send_to_gateway T=remote_smtp H=smtp2.mydomain.com [666.666.666.666]: 
>SMTP error from remote mail server after RCPT 
>TO:<"mailto:myaddr...@mydomain.com%...@myhostname.mydomain.com>: 550 
>Restricted characters in address
>2015-07-08 14:57:10 1ZCouU-CQ-2c Frozen (delivery error message)

The Software you are using is using
"mailto:myaddr...@mydomain.com%...@myhostname.mydomain.com (including
the opening, but no closing quote) as a sender address.

Exim rightfully refuses that.

To verify that it's actually your MUA software, you can try sending a
test message using swaks or manual SMTP on a telnet session:

>
>
>exim -bh 127.0.0.1
>
> SMTP testing session as if from host 127.0.0.1
> but without any ident (RFC 1413) callback.
> This is not for real!
>
> >>> host in hosts_connection_nolog? no (option unset)
> >>> host in host_lookup? yes (matched "*")
> >>> looking up host name for 127.0.0.1
> >>> IP address lookup yielded localhost.mydomain.com
> >>> gethostbyname2 looked up these IP addresses:
> >>>   name=localhost.mydomain.com address=127.0.0.1
> >>> checking addresses for localhost.mydomain.com
> >>>   127.0.0.1 OK
> >>> host in host_reject_connection? no (option unset)
> >>> host in sender_unqualified_hosts? no (option unset)
> >>> host in recipient_unqualified_hosts? no (option unset)
> >>> host in helo_verify_hosts? no (option unset)
> >>> host in helo_try_verify_hosts? no (option unset)
> >>> host in helo_accept_junk_hosts? no (option unset)
>220 myhostname.mydomain.com ESMTP Exim 4.85 Thu, 08 Jul 2015 16:29:03 
>+0200
>ehlo me
> >>> host in pipelining_advertise_hosts? yes (matched "*")
> >>> host in auth_advertise_hosts? yes (matched "*")
> >>> 127.0.0.1 in "@[]"? yes (matched "@[]")
> >>> 127.0.0.1 in "@[]"? yes (matched "@[]")
> >>> host in tls_advertise_hosts? yes (matched "*")
>250-myhostname.mydomain.com Hello localhost.mydomain.com [127.0.0.1]
>250-SIZE 52428800
>250-8BITMIME
>250-PIPELINING
>250-AUTH PLAIN LOGIN CRAM-MD5
>250-STARTTLS
>250 HELP
>quit
>221 myhostname.mydomain.com closing connection
>===

MAIL FROM:
RCPT TO:
DATA
.

And, please do not obfuscate. Having to figure out whether an obvious
error was added during obfuscation or whether one is looking at the
actual issue makes things so much harder for people trying to help.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] reverse_host_lookup exception list

2015-07-06 Thread Marc Haber
On Sun, 05 Jul 2015 17:41:12 -0700, UltraWebHosting - David
 wrote:
>I would like to integrate :
>
>require verify = reverse_host_lookup
>
>as it has stopped SPAM tremendously. My concern is I have a couple users 
>of the system who log into their email, then send but fail this lookup 
>as they are on static IPs without PTRs set (I don't know why, I just 
>need to deal with it)
>
>My question is, is their a global variable list of logged in IPs which I 
>can utilize to place an exception on the above lookup?

(untested, extra ACL taken from Debian's config)

|acl_local_deny_exceptions:
|  accept
|hosts = ${if exists{CONFDIR/host_local_deny_exceptions}\
| {CONFDIR/host_local_deny_exceptions}\
| {}}
|  accept
|senders = ${if exists{CONFDIR/sender_local_deny_exceptions}\
|   {CONFDIR/sender_local_deny_exceptions}\
|   {}}

|deny
|  !acl = acl_local_deny_exceptions
|  !verify = reverse_host_lookup

Greetings
Marc
-- 
------ !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] mail gateway requirements

2015-07-03 Thread Marc Haber
On Fri, 3 Jul 2015 16:35:41 +, Sujit Acharyya-choudhury
 wrote:
>Just ping can cause DOS attack by Ping flooding.  So if not needed for mail 
>gateway, we can disable ping on our mail gateways. 

You'd need your ISP to do that blocking. If you block on your side of
your access line, you'll still be denied service. And, ping flooding
is not often used as DoS since traffic amplification is much easier
available using other protocols.

And, please do not top post.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] mail gateway requirements

2015-07-03 Thread Marc Haber
On Fri, 3 Jul 2015 14:26:11 +, Paul Havinden
 wrote:
>>On 03.07.2015 11:58, Sujit Acharyya-choudhury wrote:
>>> We have seen recently two DoS attacks on our mail gateways, but the
>>> machines and Exim coped well.  Our network administrator suggested to
>>> block ping, but from my previous experience elsewhere it cause some
>>> problem - I cannot recall exactly what.  Any thoughts on this.  I know it 
>>> is Out of Topic.
>>You mentioned that you suspected DOS attack on your mail gateway previously 
>>but never provided any >details. I suspected some major misconfiguration on 
>>your side, like running an open relay or a policy of >accept-then-bounce, 
>>which would be very serious issues that have to be solved.
>
>>I you don't want to disclose any details on this list, you should consider 
>>hiring external consulting.
>
>We block pings to out mail servers and it's doesn’t appear to cause any issues.

And what does it help?

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] Exim accepts mail for domains it's supposed to accept mail for, until we add a load balancer.

2015-06-27 Thread Marc Haber
On Fri, 26 Jun 2015 15:09:42 -0700, Ernie Dunbar
 wrote:
>I've actually fixed this issue (at least I hope it's fixed the way I've 
>set it) by adding the load balancer's IP address to the file 
>/etc/exim4/local_host_whitelist. As far as I can tell, this hasn't 
>turned our server into an open relay, while by default allowing mail to 
>come in from this IP address.

This adds more strangeness, since the whitelists are only used - in
Debian's default config - to exempt delivering hosts from sender
verificatoin and sender callouts. Those are the only places that are
processed in the RCPT ACL before the "relay not permitted" case that
seems to trigger in your case.

Since you chose not to show your configuration or your logs, I cannot
comment any more than "strange. Which is really a pity.

Greetings
Marc
-- 
------ !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] Exim accepts mail for domains it's supposed to accept mail for, until we add a load balancer.

2015-06-26 Thread Marc Haber
On Fri, 26 Jun 2015 11:14:40 -0700, Ernie Dunbar
 wrote:
>This whole segment of the ACL configuration is the default configuration 
>that comes with Debian, and if these messages come in from a different 
>IP address, mail delivery works just fine.

Is there something in the fine logs?

Let me re-phrase this: You have a Debian exim running as a MX server
which accepts mail from the Internet and which works fine if the MX
record points to your exim host itself. Your list of local_domains in
/etc/exim4/local_domains is in fine working order.

Then, you just let the MX record point to your load balancer, and the
exim suddenly begins to reject all messages with a "relay not
permitted" error?

I haven't done serious eximing in the the last few years, but there
used to be a config option that made exim relay automatically to any
target domain where the MX record of the domain points to an IP
address bound to the host that runs exim. I have always thought that
doing so would be a bad idea so I have never actually set this option,
and I believe that it has gone away with exim3, but the behavior you
report does fit this option. Alas, I'm gettig old and do not remember
the name. This is really embarrassing.

To explain Jeremy's comment: When your exim is accepting a message, it
does so because some ACL statement in your config file between the
lines saying "acl_check_rcpt:" and "message = relay not permitted"
tells it to accept the message. In the default config, this is only
the case if:

- the message was not received via IP
- the message is addressed to postmaster at a local domain
- the message is delivered from an IP address that your exim is
configured to relay for
- the sender authenticated before delivering the message

I cannot think of a setup that would fail in the way you're reporting,
this is really interesting.

If you want help on this mailing list, I'm afraid that you'll need to
post at least the part of your configuration between the lines saying
"acl_check_rcpt:" and "message = relay not permitted". As an exception
to my usual rule, you can also reply to me in private and I'll try
helping.

On the other hand: Why are you using a load balancer in the first
place? SMTP does have its own mechanisms to spread load between
systems that work quite well. A load balancer on the receiving end of
an MX record is really only necessary in exceptional setups, such as
when there is a vast number of MX hosts (more then twenty, thirty, I'd
say) behind the domains in question.

My educated guess is that you have somehow configured exim to accept
mail for any domain that has its MX record pointing to the host that
runs exim, which is not recommended, and this of course jumps in your
face claws forward when you point the MX away from the host running
exim.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] In LAN, initial delay suddenly appear...

2015-06-12 Thread Marc Haber
On Thu, 11 Jun 2015 15:53:07 +0200, Marco Gaiarin
 wrote:
>I've tried with a client (Thunderbird ESR latest version, Windows 7) and a
>tshark dump depicted:

dump _everything_ the host does including other TCP/UDP ports and
ICMP. That'll most probably help.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] Exim quota exceeded

2015-06-04 Thread Marc Haber
On Thu, 4 Jun 2015 17:51:21 +0200, Jan Ingvoldstad
 wrote:
>On Thu, Jun 4, 2015 at 2:44 PM, Marc Haber 
>wrote:
>> On Thu, 4 Jun 2015 12:12:51 +0300, "Dzmitry Shykuts"
>>  wrote:
>> >### transport/30_exim4-config_maildir_virtual
>> >#
>>
>> Just for the record and as a hint for those who might want to help,
>> this transport is not shipped with the Debian packages of exim.
>>
>> I would recommend not calling local configuratoin snippets
>> xxx_exim4-config_foo but something along the lines of xxx_local_foo to
>> avoid confusion
>>
>>
>That's a nice recommendation when order is unimportant.
>
>Regrettably, config snippets in the "split file" config are loaded in
>order, which means that if there is an xxx_exim4-config_bar and
>xxx_exim4-config_foo you need to get inbetween, your best bet of getting
>there, is by naming it xxx_exim4-config_bar_foo or somesuch.

xxx is a number for a reason.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] Exim quota exceeded

2015-06-04 Thread Marc Haber
On Thu, 4 Jun 2015 12:12:51 +0300, "Dzmitry Shykuts"
 wrote:
>### transport/30_exim4-config_maildir_virtual
>#

Just for the record and as a hint for those who might want to help, 
this transport is not shipped with the Debian packages of exim.

I would recommend not calling local configuratoin snippets
xxx_exim4-config_foo but something along the lines of xxx_local_foo to
avoid confusion

Greetings
Ma "no, we didn't break this" rc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] TLS error on connection

2015-06-01 Thread Marc Haber
On Mon, 1 Jun 2015 10:45:13 +0100, Gary Stainburn
 wrote:
>One of our business partners is trying to send us automated emails from one 
>one their system, but is failing.
>
>Normal emails from person to person between our companies are working fine.  
>However, every time they try to send a system generated email I get the 
>following error in my logs and they get the email bounced back
>
>2015-05-25 14:02:35 TLS error on connection from  
>[999.9.999.999] (SSL_accept): timed out

If that's the same IP address that the person-to-person mail is coming
from, I suspect it's a NAT setup and the automated mails actually come
from a totaly different internal system which has borked TLS.

If the remote side is remotely cooperative[1], you can try suggesting
to smarthost the automated sende via the system that usually sends
person-to-person e-mail.

Greetings
Marc

[1] pun intended
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] Guide to setting up exim for multiple Domains on Centos

2015-05-21 Thread Marc Haber
On Wed, 20 May 2015 17:49:15 -0400, Mike McKoy 
wrote:
>Exim Specifications: 43, Virtual Domains
><http://www.exim.org/exim-html-3.20/doc/html/spec_43.html> < on the
>Exim.org website and in the documentation

You have pulled the docs for exim 3.20, which was released in late
2000, 14 and a half years ago. Exim has changed surprisingly in these
years. Please consider reading current documentation.

Currently, virtual domains is chapter 49.7 in the docs and the very
first sentence is "The phrase virtual domain is unfortunately used
with two rather different meanings". Unfortunately, you didn't say yet
which meaning you need.

>Does anyone know what they are talking about? 

Looks like we all share one eye and you behave as if you were blind.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] Guide to setting up exim for multiple Domains on Centos

2015-05-20 Thread Marc Haber
On Wed, 20 May 2015 14:56:26 -0400, Mike McKoy 
wrote:
>I would like to learn how to do this. i thought this channel was for
>support not solicitation. If you do not want to assist I understand.

I tried to assist. I will refrain from doing so in the future.

>In my context Virtual domains are more than one domain sending and
>receiving on standalone Ips without using system users.

Domains dont send and receive. If you want help, you need to get your
terminology right. If you need help fest, get your terminology right
fast.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] Guide to setting up exim for multiple Domains on Centos

2015-05-20 Thread Marc Haber
On Tue, 19 May 2015 22:11:15 -0400, Mike McKoy 
wrote:
>Is there a comprehensive step by step guide for setting up sending and
>receiving on virtual domains with virtual users via centos?

First, you need to define what "virtual" means in your context.

> I really need
>to do this fast. Spent weeks on centos with no luck.

The most promising way is probably to hire a paid consultant.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] host list for IPv6 addresses

2015-05-16 Thread Marc Haber
On Thu, 14 May 2015 13:42:10 +0200, Marc Haber
 wrote:
>On Thu, 14 May 2015 10:55:28 +0100, Jeremy Harris 
>wrote:
>>On 14/05/15 10:09, Marc Haber wrote:
>>> Am I incorrect in this assessment?
>>
>>Dunno.  Have you tried it?  With debug on to
>>watch the processing?
>
>Not yet. I was hoping that someone knew the answer to this rather
>basic issue right away.

Both configuration and the IP address list with undoubled colons and
without brackets work as configured and as designed. The error was
that my spamassassin whitelist for the secondary MX was reading from a
different file and not from local_host_whitelist.

Greetings
Marc
-- 
------ !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] Immediate Rejection

2015-05-14 Thread Marc Haber
On Thu, 14 May 2015 21:00:00 +0800, Rob Gunther 
wrote:
>So at some point Exim records in its internal systems that it is not
>possible to deliver to that server and will stop trying totally?

See exim spec.txt chapter 3, especially the subchapters starting with
3.14

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] host list for IPv6 addresses

2015-05-14 Thread Marc Haber
On Thu, 14 May 2015 13:25:53 +0100, Jeremy Harris 
wrote:
>On 14/05/15 09:27, Marc Haber wrote:
>> |  accept
>> |hosts = ${if exists{CONFDIR/local_host_whitelist}\
>> | {CONFDIR/local_host_whitelist}\
>> | {}}
>> 
>> The corresponding local_host_whitelist list is like this:
>> |127.0.0.1
>> |85.214.68.41
>> |85.214.131.164
>> |2a01:238:40b7:9102::200:100
>> |85.214.53.218
>> |2a01:238:4350:6101::100:100
>> 
>> This does not seem to work for the IPv6 addresses. Before I try
>> various combinations with doubled colons or brackets, how do I write
>> IPv6 addresses in those lists?
>> 
>> Greetings
>> Marc
>> 
>FWIW, a quick test with file content:
>
>===%%===
># Lookup hosts file
>
>127.0.0.1
>::1
>===%%===
>
>... and a default hosts list separator, works perfectly for me.
>
>Are you certain about the IPv6 addresses in question?  What form
>of "not seem to work" do you get?

A reject that is written in the ACL later than the accept hosts
applies. This does not happen when the message is delivered from a
whitelisted host using IPv4.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] host list for IPv6 addresses

2015-05-14 Thread Marc Haber
On Thu, 14 May 2015 10:55:28 +0100, Jeremy Harris 
wrote:
>On 14/05/15 10:09, Marc Haber wrote:
>> Am I incorrect in this assessment?
>
>Dunno.  Have you tried it?  With debug on to
>watch the processing?

Not yet. I was hoping that someone knew the answer to this rather
basic issue right away.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] host list for IPv6 addresses

2015-05-14 Thread Marc Haber
On Thu, 14 May 2015 09:40:15 +0100, Jeremy Harris 
wrote:
>On 14/05/15 09:27, Marc Haber wrote:
>> |hosts = ${if exists{CONFDIR/local_host_whitelist}\
>> | {CONFDIR/local_host_whitelist}\
>> | {}}
>[...]
>> This does not seem to work for the IPv6 addresses.
>
>Change the separator for the hostlist away from the default colon;
>then you don't have to change every IPv6 address.

Really? spec.txt 10.3 "file names in lists" says that "Putting a file
name in a list has the same effect as inserting each line of the
file as an item in the list". I interpret that as the items are
inserted post separator processing.

Also, the last example in spec.txt 10.11 explicitly gives the example:

|recipient_unqualified_hosts = /opt/exim/unqualnets
|
|could make use of a file containing
|
|172.16.0.0/12
|3ffe::836f::/48

which is nearly identical to my setup.

Am I incorrect in this assessment?

Greetings
Marc
-- 
------ !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

[exim] host list for IPv6 addresses

2015-05-14 Thread Marc Haber
Hi,

I have in an ACL the following whitelist construct

|  accept
|hosts = ${if exists{CONFDIR/local_host_whitelist}\
| {CONFDIR/local_host_whitelist}\
| {}}

The corresponding local_host_whitelist list is like this:
|127.0.0.1
|85.214.68.41
|85.214.131.164
|2a01:238:40b7:9102::200:100
|85.214.53.218
|2a01:238:4350:6101::100:100

This does not seem to work for the IPv6 addresses. Before I try
various combinations with doubled colons or brackets, how do I write
IPv6 addresses in those lists?

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] Security in Exim

2015-05-07 Thread Marc Haber
On Thu, 7 May 2015 13:57:30 +0200, Jan Ingvoldstad
 wrote:
>On Wed, May 6, 2015 at 12:07 PM, Ajit Mhatre  wrote:
>> i am having a problem in *exim4* ,that is* /etc/exim4/password.client*
>>  file contain *email id* and *password* . The both email id and password in
>> Plain text format. so anyone can acess the password.client file can get my
>> password.
>> So please help me out how to hide or encrypt that password field in
>> *password.clien*t so no one can hack or know my password
>
>
>This may not be the answer you want. Others have provided info on how to
>avoid file permission mistakes, so this is a different take on your
>question.
>
>You appear to be using CRAM-MD5 or DIGEST-MD5 authentication, which
>requires plaintext passwords to be stored on the server side.
>
>If you're instead willing to use PLAIN and LOGIN authentication, you can
>run saslauthd (a piece of Cyrus software), or even an IMAP-based
>authentication, where only the hashed passwords are stored on disk or in a
>database.

This applies to exim as server. He is using exim as a client, which
_needs_ the plain-text password on the client side.

See the reference to /etc/exim4/password.client (misspelled, it's
passwd.client).

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] Security in Exim

2015-05-07 Thread Marc Haber
On Thu, 7 May 2015 08:43:12 +0200, Heiko Schlittermann
 wrote:
>Since Exim runs as Debian-Exim (or some other system user on other
>systems) during SMTP delivery, it should be possible to chown this file
>to Debian-Exim: and chmod u=r,go= this file. (I'd suppose, this file is
>already 0600 Debian-exim:Debian-exim, isn't it?)

normally, the file is root:Debian-exim 640.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] how exim parses multiple headers into variables

2015-05-02 Thread Marc Haber
On Fri, 1 May 2015 21:38:31 +0200, Heiko Schlittermann
 wrote:
>Seing this, there is no bug in Exim. Exim does just what you told it to
>do. As indicated by the filter test output.

I see. It's still clumsy behavior that the output of $h_header_foo
cannot be inserted into another header without jumping through hoops.

>Using 'headers add "x-torres-spam-score: $h_x-spam-score"' IS wrong.

yes. that violates the principle of least surprise.

>For that reason I proposed the solution using reduce{}, that does
>basically the same as the sg{} solution from Marc. Both may be
>considered ugly, but the reduce{} at least treats the $h_x-spam-score
>as what it is - a '\n' delimted LIST of header values.

Yes, that sounds elegant indeed.

Greetings
Marc
-- 
------ !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] Rate limit

2015-05-01 Thread Marc Haber
On Fri, 01 May 2015 10:53:14 -0400, Chris Siebenmann
 wrote:
>> After receiving a phishing e-mail where the recipient gave away the
>> address and password and that resulted in a huge number of e-mails
>> coming in and going out.  I was wondering whether a rate limit could
>> have reduced the damage?
>
> It's extremely likely that a ratelimit on message submission would
>limit the damage by limiting how much email the spammer could send out
>through you before you detected and cut them off.

Also, a ratelimit kicking in can serve as an easy metric to detect
mail accounts that would be worth taking a closer look.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] how exim parses multiple headers into variables

2015-05-01 Thread Marc Haber
On Fri, 1 May 2015 00:57:40 +0200, Jan Ingvoldstad
 wrote:
>Feel free to amend Heiko's suggestion so that it adds a folding whitespace
>at the beginning of each continued line. :)

See the solution I posted in ,
three days ago.

I still find it ugly.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] how exim parses multiple headers into variables

2015-04-30 Thread Marc Haber
On Thu, 30 Apr 2015 16:15:05 +0200, Heiko Schlittermann
 wrote:
>Headers add "X-torres-Spam-Score: -4.2\n-4.4\n"

The problem is that a header line beginning with "-" is regarded as
beginning of the body, at least by mutt. This causes the better part
of the actual header to be displayed in the body pane. As far as I
remember, a proper header line either starts with whitespace or with a
Header Name followed by a colon.

http://imgur.com/svdZSv3 illustrates how it looks in the mail client.
Ignore the image name though, ksnapshot just sucks hamsters.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] how exim parses multiple headers into variables

2015-04-30 Thread Marc Haber
On Thu, 30 Apr 2015 11:23:29 +0100, Jeremy Harris 
wrote:
>On 30/04/15 10:54, Marc Haber wrote:
>>>headers add "${if def:h_x-spam-score: \
>>>{X-Torres-Spam-Score:${reduce{<\n $h_x-spam-score:}{}{$value 
>>> $item"
>> 
>> Hm. That basically replaces \n with whitespace in $h_x-spam-score:.
>> What's the functional difference to the sg solution?
>
>You still have not defined what result you actually
>want when there is more than one input header matching.

You don't want to understand.

Greetings
Marc, who holds a degree in computer science as well
-- 
------ !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] how exim parses multiple headers into variables

2015-04-30 Thread Marc Haber
On Tue, 28 Apr 2015 21:00:09 +0200, Heiko Schlittermann
 wrote:
>Depending on the result you want to achieve:
>
># Exim flter
>headers add "${if def:h_x-spam-score: \
>{X-Torres-Spam-Score:${reduce{<\n $h_x-spam-score:}{}{$value $item"

Hm. That basically replaces \n with whitespace in $h_x-spam-score:.
What's the functional difference to the sg solution?

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] how exim parses multiple headers into variables

2015-04-29 Thread Marc Haber
On 29 Apr 2015 11:41:23 GMT, Jasen Betts  wrote:
>On 2015-04-29, Marc Haber  wrote:
>> On Tue, 28 Apr 2015 20:27:46 +0100, Jeremy Harris 
>> wrote:
>>>On 28/04/15 20:16, Marc Haber wrote:
>>>> Just a header that is completely recognized as header by the MUA.
>>>
>>>Ah, a nice minimalist spec.
>>>
>>>headers_add = X_this_is_a_header: foo
>>
>> You must be a computer scientist ;-)
>>
>> "... preserving as much as possible of the original header that was
>> delivered by the remote server".
>
>headers_add = X_spam_scores: ${sg{$h_x_spam_score}{\n}{; }}

Up thread five messages.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] how exim parses multiple headers into variables

2015-04-29 Thread Marc Haber
On Tue, 28 Apr 2015 20:27:46 +0100, Jeremy Harris 
wrote:
>On 28/04/15 20:16, Marc Haber wrote:
>> Just a header that is completely recognized as header by the MUA.
>
>Ah, a nice minimalist spec.
>
>headers_add = X_this_is_a_header: foo

You must be a computer scientist ;-)

"... preserving as much as possible of the original header that was
delivered by the remote server".

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] how exim parses multiple headers into variables

2015-04-28 Thread Marc Haber
On Tue, 28 Apr 2015 19:38:20 +0100, Jeremy Harris 
wrote:
>On 28/04/15 19:09, Marc Haber wrote:
>>  I'd rather have a cleaner solution.
>
>Treat the $h_x-spam-score: as a newline-sep list,
>to be walked with foreach, or reduce, or listextract?
>
>What result do you want?

Just a header that is completely recognized as header by the MUA.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] how exim parses multiple headers into variables

2015-04-28 Thread Marc Haber
On Mon, 27 Apr 2015 21:57:28 +0200, Heiko Schlichting
 wrote:
>Marc Haber wrote:
>> I have an interesting behavior of exim on Debian regarding multiply
>> existing headers - but it also may be something really stupid.
>>
>> [...]
>> |X-Spam-Score: -4.2
>> |X-Spam-Score: -4.4
>> [...]
>> |headers add "${if !eq {$h_x-malware-found:}{}\
>> |  {X-torres-Malware-Found: $h_x-malware-found:\n}{}}\
>> | ${if !eq {$h_x-spam-score:}{}\
>> |  {X-torres-Spam-Score: $h_x-spam-score:\n}{}}\
>> [...]
>> Please notice that the contents of the two X-Spam-Score headers get
>> folded into a single one, with an empty line between the two
>> instances, and the second content without a leading space.
>
>This is not a bug. $h_x-spam-score: has a value of "-4.2\n-4.4" within your
>filter as documented:
>
>| If there is more than one header with the same name, they are all
>| concatenated to form the substitution string, up to a maximum length of
>| 64K. Unless rheader is being used, leading and trailing white space is
>| removed from each header before concatenation, and a completely empty
>| header is ignored. A newline character is then inserted between non-empty
>| headers, but there is no newline at the very end.

Well, that sucks.

>For insertion with correct folding you can try experimenting with $rh_...

That didn't work. Replacing \n with \n did:
| ${if !eq {$h_x-spam-score:}{}\
|  {X-Old-Spam-Score: ${sg{$h_x-spam-score:}{[\n\r]}{\n }}\n}{}}\

Mucho ugly. I'd rather have a cleaner solution.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


[exim] how exim parses multiple headers into variables

2015-04-27 Thread Marc Haber
Hi,

I have an interesting behavior of exim on Debian regarding multiply
existing headers - but it also may be something really stupid.

This is my exim:
|Exim version 4.80 #2 built 24-Jul-2014 03:28:02
|Copyright (c) University of Cambridge, 1995 - 2012
|(c) The Exim Maintainers and contributors in ACKNOWLEDGMENTS file, 2007 - 2012
|Berkeley DB: Berkeley DB 5.1.29: (October 25, 2011)
|Support for: crypteq iconv() IPv6 PAM Perl Expand_dlfunc GnuTLS 
move_frozen_messages Content_Scanning DKIM Old_Demime
|Lookups (built-in): lsearch wildlsearch nwildlsearch iplsearch cdb dbm dbmjz 
dbmnz dnsdb dsearch ldap ldapdn ldapm mysql nis nis0 passwd pgsql sqlite
|Authenticators: cram_md5 cyrus_sasl dovecot plaintext spa
|Routers: accept dnslookup ipliteral iplookup manualroute queryprogram redirect
|Transports: appendfile/maildir/mailstore/mbx autoreply lmtp pipe smtp
|Fixed never_users: 0
|Size of off_t: 8
|Configuration file is /var/lib/exim4/config.autogenerated

This is the message:
|From: Marc Haber 
|To: Marc Haber 
|Subject: Re: subject
|X-Spam-Score: -4.2
|X-Spam-Score: -4.4
|
|this is the message body

My exim is running with a system filter:
|# Exim Filter
|
|headers add "${if !eq {$h_x-malware-found:}{}\
|  {X-torres-Malware-Found: $h_x-malware-found:\n}{}}\
| ${if !eq {$h_x-spam-score:}{}\
|  {X-torres-Spam-Score: $h_x-spam-score:\n}{}}\
| ${if !eq {$h_x-spam-report:}{}\
|  {X-torres-Spam-Report: $h_x-spam-report:\n}{}}\
| ${if !eq {$h_x-spam-checker-version:}{}\
|  {X-torres-Spam-Checker-Version: $h_x-spam-checker-version:\n}{}}\
| ${if !eq {$h_x-spam-status:}{}\
|  {X-torres-Spam-Status: $h_x-spam-status:\n}{}}\
| ${if !eq {$h_x-spam-level:}{}\
|  {X-torres-Spam-Level: $h_x-spam-level:\n}{}}\
| "
|headers remove 
X-Malware-Found:X-Spam-Score:X-Spam-Report:X-Spam-Checker-Version:X-Spam-Status:X-Spam-Level
|
|headers add "${if !eq {$acl_m_malware_name}{}\
|  {X-Malware-Found: $acl_m_malware_name\n}{}}\
| ${if !eq {$acl_m_spam_score}{}\
|  {X-Spam-Score: $acl_m_spam_score\n}{}}\
| ${if !eq {$acl_m_spam_report}{}\
|  {X-Spam-Report: $acl_m_spam_report\n}{}}\
|"

And this is what is delivered to my Inbox when I feed the message to
exim on the command line or via SMTP using swaks --data:

|From: Marc Haber 
|Subject: Re: subject
|To: Marc Haber 
|Date: Mon, 27 Apr 2015 19:48:06 +0200
|Return-path: 
|Envelope-to: m...@zugschlus.de
|Delivery-date: Mon, 27 Apr 2015 19:48:06 +0200
|Received: from root by torres.zugschlus.de with local (Exim 4.80)
| (envelope-from ) id 1Ymn8Y-0003NJ-R8 for
| m...@zugschlus.de; Mon, 27 Apr 2015 19:48:06 +0200
|Message-Id: 
|X-torres-Spam-Score: -4.2
|
|-4.4
|
|this is the message body

Please notice that the contents of the two X-Spam-Score headers get
folded into a single one, with an empty line between the two
instances, and the second content without a leading space. This makes
other software think that this is the end of the headers, and the rest
of the message is placed in the body.

exim -d+all yields the following:
|19:49:24 13145 condition: !eq {$h_x-spam-score:}{}
|19:49:24 13145result: true
|19:49:24 13145 expanding: X-torres-Spam-Score: $h_x-spam-score:
|19:49:24 13145
|19:49:24 13145result: X-torres-Spam-Score: -4.2
|19:49:24 13145 -4.4
|19:49:24 13145

Is this the intended behavior? Is it the result of some
misconfiguration? Is it a (known) bug in Exim? Is there a fix/a
workaround?

Greetings
Marc, who hasnt straced Exim in a decade
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Failed to get write lock for /var/spool/exim4/db/retry.lockfile: timed out

2015-03-22 Thread Marc Haber
On Sat, 21 Mar 2015 02:16:41 + (UTC), "J." 
wrote:
>Sorry to bug you with a likely non-issue, but I've been getting this message 
>from root every day:
>Subject:exim paniclog on me.myserver.com has non-zero size

See /usr/share/doc/exim4-base/README.Debian.gz Chapter 2.5.1.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Smtp not possible from some clients

2015-02-10 Thread Marc Haber
On Fri, 5 Dec 2014 15:36:29 +0100, matthiasmuelle...@web.de wrote:
>No idea why this setting is set as default. It hink there will be many 
>problems with this. What a research to find the iroot cause.

Because it's still the right thing to do and a properly configured
Internet Host will issue a TCP RST or an ICMP unreachable, preventing
the timeout from happening.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Anyone with experience setting up exim on gentoo linux?

2015-02-10 Thread Marc Haber
On Tue, 23 Dec 2014 15:53:19 -0500, Harry Putnam 
wrote:
>I've setup exim4 on several debian boxes but from what I'm told debian
>makes some changes that probably don't exist in exim in the wild.

In Debian, there are no special changes to the actual exim code, and
our scripts are open source. So why not taking them and using them on
Gentoo?

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Gmail will not communicate with exim on the inbound server

2012-11-02 Thread Marc Haber
On Wed, 31 Oct 2012 22:49:08 -0600, "Dave Shariff Yadallee - System
Administrator a.k.a. The Root of the Problem" 
wrote:
>I cannot neither send nor recieve with Exim 4.77 from Gmail .

What do your logs say?

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -----
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Some Remote Mail not making it

2012-11-02 Thread Marc Haber
On Tue, 30 Oct 2012 07:50:31 -0600, The Doctor
 wrote:
>When I sent from outside the LAN , I am still waiting for the e-mail
>to turn up .
>
>Perplexing!
>
>Looks like I may have forgetten to turn something on or off.
>
>What can I look for IF the Log files are not indicating an error?

Give log examples please.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] use system filter to create a copy of each outgoing message

2012-10-09 Thread Marc Haber
On Mon, 8 Oct 2012 00:02:54 +0200, Martin Kaiser 
wrote:
>When I send a mail to exter...@address.xyz a copy to
>redir...@test.xyz is created. However, when mails to
>exter...@address.xyz can be delivered but mails to redir...@test.xyz
>can't (temporary problem), the entire mail ends up in the queue.

Can I see an exim -bp example of such a mail? I would expect the
recipients to be handled as if the message was sent to both addresses,
with both being delivered individually.

>When redir...@test.xyz becomes available some time later, the entire
>mail is re-sent. In other words, exter...@address.xyz receives the mail
>twice.

I would like to see log entries for that.

>Is there anything I can do to make sure that each address is delivered
>(and retried) individually?

I would expect that to happen, but I have not done serious exim
twisting for a long time.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Gmail and Google blocking inbound port 25?

2012-06-03 Thread Marc Haber
On Fri, 1 Jun 2012 15:44:07 -0700, Mike Lyon 
wrote:
>Mike needed more coffee today..
>
>Thank you all for your help!
>
>

Will anybody who has ever fooled itself into thinking that some remote
site was at fault while the real problem was a local misconfiguration
please raise hand?

Greetings
Marc, raising hand
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Gmail and Google blocking inbound port 25?

2012-06-03 Thread Marc Haber
On Fri, 1 Jun 2012 13:17:34 -0700, Mike Lyon 
wrote:
>Would they actually refuse the connection if there were no MX records for
>that domain?

Some broken sites do that, but Google and Yahoo are not among those.
Thankfully so.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Gmail and Google blocking inbound port 25?

2012-06-03 Thread Marc Haber
On Fri, 1 Jun 2012 12:35:07 -0700, Mike Lyon 
wrote:
>I know this isn't an exim related question but it's affecting the ability
>for my exim install to deliver email... Anyways, It appears when my exim
>install tries to deliver email to Google or Yahoo, both of them refuse the
>port 25 connection from my host. I went to another server I have in a
>different subnet and was able to telnet to port 25 at both Google and
>Yahoo. So it appears they are blocking this one subnet I have from
>connecting to them.

Are you connecting from a Dial-Up?

>How does one resolve this issue?

Use your ISPs Smarthost.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Am I right that no_more has no effect within the included simple routers?

2012-06-03 Thread Marc Haber
On Mon, 28 May 2012 23:24:23 -0400, Phil Pennock
 wrote:
>On 2012-05-28 at 16:42 -0700, Regid Ichira wrote:
>>   I think the no_more has significance for dnslookup_relay_to_domains and
>> for dnslookup.  It has no effect for nonlocal and smarthost.
>> One advantage for keeping the no effect no_more in place is not making 
>> unnecessary changes.  One might argue whether keeping that no effect
>> directive makes the default configuration more, or less, readable.
>> My opinion is that a concise configuration is better.
>
>Explicit conveys information about intent, and acts as a backup for
>unexpected problems and changes upstream.

Thanks for your opinion. The Debian configuration will stay as it is
as far as my decision is concened.

Greetings
Marc
-- 
------ !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Am I right that no_more has no effect within the included simple routers?

2012-05-27 Thread Marc Haber
On Wed, 23 May 2012 03:03:47 -0700 (PDT), Regid Ichira
 wrote:
>1) nonlocal:
>  driver = redirect
>  domains = ! +local_domains
>  allow_fail
>  data = :fail: Mailing to remote domains not supported
>  no_more
>
>2) dnslookup_relay_to_domains:
>  driver = dnslookup
>  domains = ! +local_domains : +relay_to_domains
>  transport = remote_smtp
>  same_domain_copy_routing = yes
>  no_more

Those have been taken from the Debian configuration. This is Debian's
full routers configuration (sans .if[n]def and comments, but in
order):

|begin routers
|
|domain_literal:
|  driver = ipliteral
|  domains = ! +local_domains
|  transport = remote_smtp
|
|hubbed_hosts:
|  driver = manualroute
|  domains = "${if exists{CONFDIR/hubbed_hosts}\
|   {partial-lsearch;CONFDIR/hubbed_hosts}\
|  fail}"
|  same_domain_copy_routing = yes
|  route_data = ${lookup{$domain}partial-lsearch{CONFDIR/hubbed_hosts}}
|  transport = remote_smtp
|
|dnslookup_relay_to_domains:
|  driver = dnslookup
|  domains = ! +local_domains : +relay_to_domains
|  transport = remote_smtp
|  same_domain_copy_routing = yes
|  no_more
|
|dnslookup:
|  driver = dnslookup
|  domains = ! +local_domains
|  transport = remote_smtp
|  same_domain_copy_routing = yes
|  # ignore private rfc1918 and APIPA addresses
|  ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8 : 192.168.0.0/16 :\
|172.16.0.0/12 : 10.0.0.0/8 : 169.254.0.0/16 :\
|255.255.255.255
|  no_more
|
|nonlocal:
|  driver = redirect
|  domains = ! +local_domains
|  allow_fail
|  data = :fail: Mailing to remote domains not supported
|  no_more
|
|smarthost:
|  driver = manualroute
|  domains = ! +local_domains
|  transport = remote_smtp_smarthost
|  route_list = * DCsmarthost byname
|  host_find_failed = defer
|  same_domain_copy_routing = yes
|  no_more

Does the no_more hurt on any of the routers where we set it? I think
that we set no_more on all routers that take parts of the upstream
default's dnslookup router. I think it is more easily understood that
way, but I am open to (convincing) arguments.

If the no_more statements don't hurt, I'd rather keep them in place
for the sake of not making unnecessary changes.

Greetings
Marc
-- 
------ !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Exim4 for relaying to internet

2011-10-29 Thread Marc Haber
On Wed, 22 Jun 2011 13:38:37 +0200, Andres Aguado
 wrote:
>Finally, I've tried to e-mail by telnet localhost 25
>
>ehlo hostname
>250-hostname.domain.com Hello localhost [127.0.0.1]
>250-SIZE 52428800
>250-PIPELINING
>250-STARTTLS
>250 HELP
>
>No user and password are requested, as I thought that it was going to
>happen.

For the archives, exim from Debian packages doesn't advertise SMTP
AUTH over unencrypted connections by default.

Greetings
Marc
-- 
------ !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Exim4 (x2) and mail relay unusual behaviour

2011-04-18 Thread Marc Haber
On Mon, 18 Apr 2011 16:49:38 +1000 (EST), Edward Cox
 wrote:
>mail2 has a 'configure' file in /usr/local/etc/exim) 

Unless that box has a local compile of exim, it won't use that file.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] spamassin running, but headers not always added

2011-04-13 Thread Marc Haber
Hi,

any more ideas what might be causing this?

Greetings
Marc


On Thu, 07 Apr 2011 08:42:28 +0200, Marc Haber
 wrote:
>Hi,
>
>I am using spamassassin and exiscan integration with the following
>ACL:
>
>|  accept
>|condition = ${if eq{acl_m_spam_no_filter}{1}}
>|
>|  deny
>|demime = com:vbs:bat:pif:scr:exe
>|message = no Windows executeables accepted here
>|log_message = reject, $found_extension file
>|
>|  accept
>|condition = ${if >{$message_size}{SPAM_SCAN_THRESHOLD}}
>|
>|  # the following stanzas are only executed for messages that do not
>|  # exceed the size of SPAM_SCAN_THRESHOLD
>|
>|  discard
>|spam = exiscan:true
>|log_message = drop, spam_score $spam_score, but delivered from 
>whitelisted sender $sender_address
>|condition = ${if >{$spam_score_int}{SPAM_REJECT_THRESHOLD}}
>|senders = ${if exists{CONFDIR/sa_mailinglist_senders}\
>|   {CONFDIR/sa_mailinglist_senders}\
>|   {}}
>|
>|  discard
>|spam = exiscan:true
>|log_message = drop, spam_score $spam_score, but delivered from 
>whitelisted host $host_address
>|condition = ${if >{$spam_score_int}{SPAM_REJECT_THRESHOLD}}
>|hosts = ${if exists{CONFDIR/sa_noreject_hosts}\
>|   {CONFDIR/sa_noreject_hosts}\
>|   {}}
>|
>|  deny
>|spam = exiscan:true
>|message = Message spam score is beyond reject threshold
>|log_message = reject, spam_score $spam_score
>|condition = ${if >{$spam_score_int}{SPAM_REJECT_THRESHOLD}}
>|
>|
>|  deny
>|spam = exiscan:true
>|message = Message spam score is beyond reject threshold for heavily 
>filtered recipients, try making your message look less spammy or re-send to 
>mh+lightlyfiltered200...@zugschlus.de
>|log_message = reject (heavy), spam_score $spam_score
>|condition = ${if eq{acl_m_spam_heavy_filter}{1}}
>|condition = ${if >{$spam_score_int}{30}}
>|
>|  warn
>|spam = exiscan:true
>|set acl_m_spam_score = ($spam_bar) $spam_score
>|set acl_m_spam_report = $spam_report
>
>The score and report are then inserted into the message by the
>following system filter:
>
>|# Exim Filter
>|
>|headers add "${if !eq {$h_x-malware-found:}{}\
>|  {X-Old-Malware-Found: $h_x-malware-found:\n}{}}\
>| ${if !eq {$h_x-spam-score:}{}\
>|  {X-Old-Spam-Score: $h_x-spam-score:\n}{}}\
>| ${if !eq {$h_x-spam-report:}{}\
>|  {X-Old-Spam-Report: $h_x-spam-report:\n}{}}\
>| ${if !eq {$h_x-spam-checker-version:}{}\
>|  {X-Old-Spam-Checker-Version: $h_x-spam-checker-version:\n}{}}\
>| ${if !eq {$h_x-spam-status:}{}\
>|  {X-Old-Spam-Status: $h_x-spam-status:\n}{}}\
>| ${if !eq {$h_x-spam-level:}{}\
>|  {X-Old-Spam-Level: $h_x-spam-level:\n}{}}\
>| "
>|headers remove 
>X-Malware-Found:X-Spam-Score:X-Spam-Report:X-Spam-Checker-Version:X-Spam-Status:X-Spam-Level
>|
>|headers add "${if !eq {$acl_m_malware_name}{}\
>|  {X-Malware-Found: $acl_m_malware_name\n}{}}\
>| ${if !eq {$acl_m_spam_score}{}\
>|  {X-Spam-Score: $acl_m_spam_score\n}{}}\
>| ${if !eq {$acl_m_spam_report}{}\
>|  {X-Spam-Report: $acl_m_spam_report\n}{}}\
>|"
>
>This works, usually.
>
>But occasionally, a message comes through with no Spamassassin Headers
>inserted. When I inspect the logs for this message, I find out that
>spamassassin has actually been running on the message (and has found
>an exceptionally high score for the message), so it has not been found
>to be too large to be scanned.
>
>There are no other calls to the ACL spam = condition than listed
>above, so I can be reasonably sure that the ACL is actually executed,
>
>What might be going wrong here, and how can I debug and/or fix it?
>
>Greetings
>Marc
>-- 
>-- !! No courtesy copies, please !! -
>Marc Haber |   " Questions are the | Mailadresse im Header
>Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
>Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Relay incoming email

2011-04-09 Thread Marc Haber
On Fri, 8 Apr 2011 18:03:12 -0400, luda posch 
wrote:
>I have an exim 4.69 server and I want to set up an ACL that will check
>certain conditions and if one is met, then the email will be sent off to a
>different server (another exim server, that one running 4.74)
>
>How can I selectively relay incoming email to other servers?

Use a router that accepts an address if your conditions are met.

For example:
|hubbed_hosts:
|  debug_print = "R: hubbed_hosts for $domain"
|  driver = manualroute
|  domains = "${if exists{CONFDIR/hubbed_hosts}\
|   {partial-lsearch;CONFDIR/hubbed_hosts}\
|  fail}"
|  same_domain_copy_routing = yes
|  route_data = ${lookup{$domain}partial-lsearch{CONFDIR/hubbed_hosts}}
|  transport = remote_smtp

will read a config file in the form of
domain.example.com: server.example.com
and relay all messages for @domain.example.com to server.example.com.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Mailing list trouble

2011-04-09 Thread Marc Haber
On Fri, 08 Apr 2011 17:22:44 +0100, David Woodhouse
 wrote:
>On Tue, 2011-04-05 at 22:33 +0200, Stef Hoesli wrote:
>> However, my companies mailserver rejects messages coming from outside
>> with a sender adress from inside.
>> 
>> What do you suggest? 
>
>Your company's mailserver is broken. Fix it.

Frequently, the mail server is operated by a clueless IT department or
governed by policies written by clueless people. Rejecting messages
coming from the outside with a "local" mail address is a common
measure implemented by such people to get rid of spam with forged
senders.

One is not always in a position to have these policies changed.

Greetings
Marc
-- 
------ !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] spamassin running, but headers not always added

2011-04-07 Thread Marc Haber
On Thu, 07 Apr 2011 09:59:10 +0100, Graeme Fowler 
wrote:
>On Thu, 2011-04-07 at 08:42 +0200, Marc Haber wrote:
>> This works, usually.
>
>> What might be going wrong here, and how can I debug and/or fix it?
>
>You might find that Exim has timed out the spamassassin call - this
>should be logged in your panic log.

Negative. No entry in the panic log, and the time between "SMTP
connection from" and the "=>" log entry is about ten seconds.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


[exim] spamassin running, but headers not always added

2011-04-06 Thread Marc Haber
Hi,

I am using spamassassin and exiscan integration with the following
ACL:

|  accept
|condition = ${if eq{acl_m_spam_no_filter}{1}}
|
|  deny
|demime = com:vbs:bat:pif:scr:exe
|message = no Windows executeables accepted here
|log_message = reject, $found_extension file
|
|  accept
|condition = ${if >{$message_size}{SPAM_SCAN_THRESHOLD}}
|
|  # the following stanzas are only executed for messages that do not
|  # exceed the size of SPAM_SCAN_THRESHOLD
|
|  discard
|spam = exiscan:true
|log_message = drop, spam_score $spam_score, but delivered from whitelisted 
sender $sender_address
|condition = ${if >{$spam_score_int}{SPAM_REJECT_THRESHOLD}}
|senders = ${if exists{CONFDIR/sa_mailinglist_senders}\
|   {CONFDIR/sa_mailinglist_senders}\
|   {}}
|
|  discard
|spam = exiscan:true
|log_message = drop, spam_score $spam_score, but delivered from whitelisted 
host $host_address
|condition = ${if >{$spam_score_int}{SPAM_REJECT_THRESHOLD}}
|hosts = ${if exists{CONFDIR/sa_noreject_hosts}\
|   {CONFDIR/sa_noreject_hosts}\
|   {}}
|
|  deny
|spam = exiscan:true
|message = Message spam score is beyond reject threshold
|log_message = reject, spam_score $spam_score
|condition = ${if >{$spam_score_int}{SPAM_REJECT_THRESHOLD}}
|
|
|  deny
|spam = exiscan:true
|message = Message spam score is beyond reject threshold for heavily 
filtered recipients, try making your message look less spammy or re-send to 
mh+lightlyfiltered200...@zugschlus.de
|log_message = reject (heavy), spam_score $spam_score
|condition = ${if eq{acl_m_spam_heavy_filter}{1}}
|condition = ${if >{$spam_score_int}{30}}
|
|  warn
|spam = exiscan:true
|set acl_m_spam_score = ($spam_bar) $spam_score
|set acl_m_spam_report = $spam_report

The score and report are then inserted into the message by the
following system filter:

|# Exim Filter
|
|headers add "${if !eq {$h_x-malware-found:}{}\
|  {X-Old-Malware-Found: $h_x-malware-found:\n}{}}\
| ${if !eq {$h_x-spam-score:}{}\
|  {X-Old-Spam-Score: $h_x-spam-score:\n}{}}\
| ${if !eq {$h_x-spam-report:}{}\
|  {X-Old-Spam-Report: $h_x-spam-report:\n}{}}\
| ${if !eq {$h_x-spam-checker-version:}{}\
|  {X-Old-Spam-Checker-Version: $h_x-spam-checker-version:\n}{}}\
| ${if !eq {$h_x-spam-status:}{}\
|  {X-Old-Spam-Status: $h_x-spam-status:\n}{}}\
| ${if !eq {$h_x-spam-level:}{}\
|  {X-Old-Spam-Level: $h_x-spam-level:\n}{}}\
| "
|headers remove 
X-Malware-Found:X-Spam-Score:X-Spam-Report:X-Spam-Checker-Version:X-Spam-Status:X-Spam-Level
|
|headers add "${if !eq {$acl_m_malware_name}{}\
|  {X-Malware-Found: $acl_m_malware_name\n}{}}\
| ${if !eq {$acl_m_spam_score}{}\
|  {X-Spam-Score: $acl_m_spam_score\n}{}}\
| ${if !eq {$acl_m_spam_report}{}\
|  {X-Spam-Report: $acl_m_spam_report\n}{}}\
|"

This works, usually.

But occasionally, a message comes through with no Spamassassin Headers
inserted. When I inspect the logs for this message, I find out that
spamassassin has actually been running on the message (and has found
an exceptionally high score for the message), so it has not been found
to be too large to be scanned.

There are no other calls to the ACL spam = condition than listed
above, so I can be reasonably sure that the ACL is actually executed,

What might be going wrong here, and how can I debug and/or fix it?

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] HELO with short mailname

2011-03-03 Thread Marc Haber
On Wed, 2 Mar 2011 15:42:55 -0500, Phil Pennock
 wrote:
>There's two parts: Exim, and the Debian integration of Exim.  Debian
>does the stuff which uses all the M4 macros.

There ain't no m4 around the Debian exim packages.

>If this doesn't match, after running a reconfigure, then you need to
>pick through what's going wrong with the Debian side of things.  You'll
>probably get more help (and more informed help) on the Debian-specific
>mailing-list; Debian resources can be found at:
>  http://pkg-exim4.alioth.debian.org/

The Debian packages also come with extensive documentation.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Unrouteable address to Mailman (example.net)

2011-03-03 Thread Marc Haber
On Tue, 01 Mar 2011 18:19:30 +0100, Narcis Garcia - GiLUG
 wrote:
>But when a message is sent to the list, it's rejected by Exim with:
>Diagnostic-Code: smtp; 550 Unrouteable address
>And when I create a new list in Mailman, it's froxen with this log data:
>routing failed for mailman-l...@example.net: Unrouteable address
>*** Frozen (delivery error message)

If you really have "example.net" in your actual logs, you need to know
that you cannot simply cut&paste from arbitrary sources on the net
without understanding what you're doing.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] queue runner on OS X

2011-01-22 Thread Marc Haber
On Tue, 18 Jan 2011 21:49:03 +, Graeme Fowler 
wrote:
>At work we run "-bd -q5m", and in a previous config we ran it with "-bd
>-q1m" on one set of machines which punted mail older than 5 minutes to a
>"slow lane" server which ran "-bd -q2h".

I have always been wondering why -qq is not the default. This handling
seems much more sensible to me.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] delivery not succesfull

2010-12-23 Thread Marc Haber
On Wed, 22 Dec 2010 16:53:51 +0100, Alexander Curvers
 wrote:
>other question i have is the output shows.. that i use config
>/etc/exim4/exim4.conf
>which has only one line
>log_selector = +-rejected_header

Using /etc/exim4/exim4.conf turns off all Debian magic and leaves you
with a completely manually configured exim. All Debian config is
irrelevant once this file exists.

Your exim config is now one line long and completely broken.

If you don't know how to manually configure exim, please update to the
latest Debian package, remove that file and run dpkg-reconfigure
exim4-config.

And while you're at it, /usr/share/doc/exim4-base/README.Debian.gz
contains a lot of important hints.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] redirect all email from a host to an address ?

2010-12-23 Thread Marc Haber
On Wed, 22 Dec 2010 09:17:28 +1300, Gregory Machin
 wrote:
>It's been ages since I last worked with Exim. Could someone please
>advise me. I have a situation where I need all email from
>webserver.example.com to be delivered to t...@example.com.
>
>I tried a couple of rewirte rules , but I'm missing the target and the
>mail to getting out.
>
>Any suggestions ?

I would do this with a router, but I am not so sure whether an
expansion variable expanding to the IP address of the delivering host
is available at routing time...

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Fwd: Re: Debian Exim4 setup as transfer agent to smarthost

2010-09-28 Thread Marc Haber
On Mon, 27 Sep 2010 14:11:54 -0700, Gary Roach
 wrote:
><-  235 2.7.0 CRAM-MD5 authentication successful.
>  -> MAIL FROM:
><** 550 5.7.1 Authentication is required to send mail as 
><*codestri...@verizon.net>
>  -> QUIT
><-  221 2.3.0 Bye received. Goodbye.
>=== Connection closed with remote host.
>
><** denotes an unexpected return in swaks.
>How can <-  235 2.7.0 CRAM-MD5 authentication successful. occure and 
>then get an
>** 550 5.7.1 Authentication is required to send mail as 
><*codestri...@verizon.net> error message.

I guess that verizon only allows you with a certain mail address after
authenticating, and either they or you have the address wrong.

Greetings
Marc
-- 
------ !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] Exim restart all 12 MINUTES in outgoing queue.

2010-09-18 Thread Marc Haber
On Mon, 13 Sep 2010 19:42:12 +0200, Stéphane Leclerc
 wrote:
>I found the problem. It was in fact a ssh remote script + a problem with
>exim. I forgotten the script was running. For the main problem. Outgoing run
>queue stacked. I found too.
>
>The script do an exim stop/start and update some config files. Previously,
>it was working and after the update, the stop/start was too fast and
>outgoing process was not well stopped.
>
>I replaced exim stop by exim force-stop and all is fine now.

You don't trust the init script's restart option, which does what you
want. Why?

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] How to configure sieve filtering?

2010-08-23 Thread Marc Haber
On Fri, 20 Aug 2010 14:43:34 -0400, Phil Pennock
 wrote:
>On 2010-08-19 at 14:49 -0700, Kaz Kylheku wrote:
>> The directory = line handles the translation of folder names
>> according to the pattern INBOX.Foo -> $home/Maildir/.Foo
>> Absolute names stay absolute, and all else is relative
>> to home. Comments, criticisms?
>
>(1) I take it that the 'user' is being set somewhere, probably on the
>userforward Router?
>(2) Do you want to filter out things like ../ appearing in the path?
>(3) I'll somewhat echo Peter's comments, but for once in a somewhat more
>mellow tone than Peter.  ;)

|# This router handles forwarding using traditional .forward files in users'
|# home directories. It also allows mail filtering with a forward file
|# starting with the string "# Exim filter" or "# Sieve filter".
|#
|# The no_verify setting means that this router is skipped when Exim is
|# verifying addresses. Similarly, no_expn means that this router is skipped if
|# Exim is processing an EXPN command.
|#
|# The check_ancestor option means that if the forward file generates an
|# address that is an ancestor of the current one, the current one gets
|# passed on instead. This covers the case where A is aliased to B and B
|# has a .forward file pointing to A.
|#
|# The four transports specified at the end are those that are used when
|# forwarding generates a direct delivery to a directory, or a file, or to a
|# pipe, or sets up an auto-reply, respectively.
|#
|userforward:
|  debug_print = "R: userforward for $local_p...@$domain"
|  driver = redirect
|  domains = +local_domains
|  check_local_user
|  file = $home/.forward
|  require_files = $local_part:$home/.forward
|  no_verify
|  no_expn
|  check_ancestor
|  allow_filter
|  forbid_smtp_code = true
|  directory_transport = address_directory
|  file_transport = address_file
|  pipe_transport = address_pipe
|  reply_transport = address_reply
|  skip_syntax_errors
|  syntax_errors_to = real-$local_p...@$domain
|  syntax_errors_text = \
|This is an automatically generated message. An error has\n\
|been found in your .forward file. Details of the error are\n\
|reported below. While this error persists, you will receive\n\
|a copy of this message for every message that is addressed\n\
|to you. If your .forward file is a filter file, or if it is\n\
|a non-filter file containing no valid forwarding addresses,\n\
|a copy of each incoming message will be put in your normal\n\
|mailbox. If a non-filter file contains at least one valid\n\
|forwarding address, forwarding to the valid addresses will\n\
|happen, and those will be the only deliveries that occur.

You'll notice a certain similiarity to the stock upstream exim
userforward router.

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


Re: [exim] proble m in sending mail from our sites to ceratin sites

2010-08-03 Thread Marc Haber
On Mon, 2 Aug 2010 11:11:48 +0100, Sujit Acharyya-Choudhury
 wrote:
>We are experiencing trouble in sending e-mails to certain sites from our Exim 
>Gateway, which is 4.60.   We don't know whether it is exim or our firewall 
>which is causing the problem.  Ordinary e-mail goes through, but e-mail with 
>attachments fail:

What do your logs say?

Please use a reasonable line length.

>This e-mail and its attachments are intended for the above named only and may 
>be confidential. If they have come to you in error you must not copy or show 
>them to anyone, nor should you take any action based on them, other than to 
>notify the error by replying to the sender.

Who is the "above named only" in a mailing list message?

Greetings
Marc
-- 
-- !! No courtesy copies, please !! -
Marc Haber |   " Questions are the | Mailadresse im Header
Mannheim, Germany  | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834

-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


  1   2   3   4   5   6   7   >