[exim] Re: MySQL connection with SSL

2024-05-25 Thread Gandalf Corvotempesta via Exim-users
any help on this? im rally stuck, the new mysql server only accept ssl connections and i have to connect an exim to it but doesn't work anyone had success using SSL with mysql? Il gio 23 mag 2024, 20:54 Gandalf Corvotempesta < gandalf.corvotempe...@gmail.com> ha scritto: > This is a strace when

[exim] Re: MySQL connection with SSL

2024-05-23 Thread Gandalf Corvotempesta via Exim-users
This is a strace when trying to connect to a mysql server that has SSL forced (that's why i'm hitting an access denied) Now the configuration file is read as expected, but the option group that is forcing the ssl-mode seems to be ignored (honestly, as default, ssl is preferred, it should connect

[exim] Re: MySQL connection with SSL

2024-05-22 Thread Gandalf Corvotempesta via Exim-users
ok now the file is read as expected, i can see it from the trace, but i'm still getting access denied because the connection is not made with SSL. I'm out of ideas Il giorno ven 17 mag 2024 alle ore 21:39 Gandalf Corvotempesta ha scritto: > > Il giorno ven 17 mag 2024 alle ore 16:37 Jeremy

[exim] Re: Blowfish auth

2024-05-22 Thread Gandalf Corvotempesta via Exim-users
So, a little example to use that in a login authenticator with hash coming from DB ? Il giorno ven 17 mag 2024 alle ore 22:42 Slavko via Exim-users ha scritto: > > Dňa 17. mája 2024 16:31:08 UTC používateľ Andreas Metzler via Exim-users > napísal: > > >ametzler@argenau:~$ /usr/sbin/exim -be

[exim] Re: MySQL connection with SSL

2024-05-17 Thread Gandalf Corvotempesta via Exim-users
Il giorno ven 17 mag 2024 alle ore 16:37 Jeremy Harris via Exim-users ha scritto: > If there were, then it should go on to try those files. > This is not an Exim problem. This is the issue: https://jira.mariadb.org/browse/CONC-396 -- ## subscription configuration (requires account): ##

[exim] Re: MySQL connection with SSL

2024-05-17 Thread Gandalf Corvotempesta via Exim-users
Il giorno gio 16 mag 2024 alle ore 22:55 Jeremy Harris via Exim-users ha scritto: > ... (I'm guessing) say to look fist in a directory called conf.d - > and we don't see the strace doing that either. > > I think you're not running the mysql configuration you think you are running. That's the

[exim] Re: MySQL connection with SSL

2024-05-16 Thread Gandalf Corvotempesta via Exim-users
# strace exim -be 2>&1 | grep my.cnf ${lookup mysql{SELECT password AS password}} access("/etc/my.cnf", R_OK) = -1 ENOENT (No such file or directory) access("/etc/mysql/my.cnf", R_OK) = 0 openat(AT_FDCWD, "/etc/mysql/my.cnf", O_RDONLY) = 3 access("/etc/mysql/conf.d//my.cnf",

[exim] Re: MySQL connection with SSL

2024-05-16 Thread Gandalf Corvotempesta via Exim-users
Il giorno gio 16 mag 2024 alle ore 22:21 Jeremy Harris ha scritto: > If my.cnf is beaing read, but does not contain the actual conn spec > you want used, then there's something wrong with your "include" setup. > > That configuration can't get read by magic. The config is read, and it's the

[exim] Re: MySQL connection with SSL

2024-05-16 Thread Gandalf Corvotempesta via Exim-users
Il giorno gio 16 mag 2024 alle ore 16:52 Jeremy Harris via Exim-users ha scritto: > Run a test using "exim -be" of a mysql expansion, under strace. > Is that file accessed? Not read because that file is included from my.cnf and my.cnf is read. But seems that the [exim] node is ignored (or the

[exim] Re: Blowfish auth

2024-05-16 Thread Gandalf Corvotempesta via Exim-users
Il giorno gio 16 mag 2024 alle ore 19:32 Jeremy Harris via Exim-users ha scritto: > Calling a ${perl } expansion in an authenticator's server_condition option > (thanks, Kai!) sounds like the best bet. Looks like you need > both Crypt::Blocwfish and Crypt::CBC though. Is what' i'm trying but

[exim] Re: MySQL connection with SSL

2024-05-16 Thread Gandalf Corvotempesta via Exim-users
Il giorno gio 16 mag 2024 alle ore 15:39 Gandalf Corvotempesta ha scritto: > EXACTLY THAT ! > thank you .. but it doesnt' work hide mysql_servers = 10.23.105.2[exim]/mail/username/dsHg*Qw!eNt6n%nH # cat /etc/mysql/mariadb.conf.d/99-exim.cnf [exim] ssl-mode=REQUIRED (ssl-mode

[exim] Re: MySQL connection with SSL

2024-05-16 Thread Gandalf Corvotempesta via Exim-users
Il giorno gio 16 mag 2024 alle ore 13:01 Jeremy Harris via Exim-users ha scritto: > Use a Mysql option file giving the required connection specifications. > > See > https://exim.org/exim-html-current/doc/html/spec_html/ch-file_and_database_lookups.html#SECTsql > on "option group name". EXACTLY

[exim] Re: Blowfish auth

2024-05-16 Thread Gandalf Corvotempesta via Exim-users
Il giorno gio 16 mag 2024 alle ore 12:59 Kai Bojens via Exim-users ha scritto: > Everything is possible with Exim+Perl: > > https://www.exim.org/exim-html-current/doc/html/spec_html/ch-embedded_perl.html Do you have an example how to use perl for smtp auth ? I've never used perl in my Exim

[exim] Re: Blowfish auth

2024-05-16 Thread Gandalf Corvotempesta via Exim-users
Il giorno gio 16 mag 2024 alle ore 14:32 Mike Tubby G8TIC via Exim-users ha scritto: > > As Kai says... everything is possible with Exim+PERL. > > I store user authentication details in salted SHA256 in a MySQL backend > and have Exim call a PERL shim that performs a web-services call to >

[exim] Re: Blowfish auth

2024-05-16 Thread Gandalf Corvotempesta via Exim-users
Il giorno gio 16 mag 2024 alle ore 14:39 Odhiambo Washington ha scritto: > I think you could do proxy authentication with a local instance of Dovecot > running on your Exim server. > https://fuerstnet.de/post/2021-07-30-proxy-imap-pop-smtp-using-dovecot-and-postfix/ I prefere to not add

[exim] Re: Blowfish auth

2024-05-16 Thread Gandalf Corvotempesta via Exim-users
Il giorno gio 16 mag 2024 alle ore 12:36 Andrew C Aitchison ha scritto: > Is PAM authentication a sensible option in your case ? It could be... as long i'm able to autheticate to users stored on mysql -- ## subscription configuration (requires account): ##

[exim] MySQL connection with SSL

2024-05-16 Thread Gandalf Corvotempesta via Exim-users
Hi all another question: a new mysql server i've created has SSL required for all connections. How can I setup exim to use an SSL connection to mysql server ? (no, using external tunnels is not a solution, it would add a SPOF and an additional layer to maintain). Is SSL supported by exim ? --

[exim] Blowfish auth

2024-05-16 Thread Gandalf Corvotempesta via Exim-users
Hi guys is possible to use blowfish password scheme in exim? I have some users stored on a DB with a blowfish crypted password, used by Dovecot The dovecot server is on a different server than the exim one so i can't use sockets and native dovecot auth in exim (AFAIK, is not possible to use a

[exim] Re: Multiple servers , same mysql DB

2023-12-09 Thread Gandalf Corvotempesta via Exim-users
Il giorno sab 9 dic 2023 alle ore 15:44 Jeremy Harris ha scritto: > Doing what I said would be. $primary_hostname seems to work. I can use that in the lookup query and at the same time, setting the value on DB to the proper hostname. In this way, the imap server knows which mailbox has to

[exim] Re: Multiple servers , same mysql DB

2023-12-09 Thread Gandalf Corvotempesta via Exim-users
Il giorno sab 9 dic 2023 alle ore 14:48 Jeremy Harris via Exim-users ha scritto: > Have your config pull in a server-number by .include of > a file which is different on each, setting a macro with the number. > Include this value in your mysql queries, using it to select > the required set of

[exim] Multiple servers , same mysql DB

2023-12-09 Thread Gandalf Corvotempesta via Exim-users
Hi all i need a simple advice I have 3 mail servers that shares the same mysql with email accounts, aliases and so on. Not all servers need to handle the full address list, in example, domain "test1.it" is handled by server1, domain test2.com is handled by server4 and so on. Usually, i set the

[exim] web interface?

2023-11-28 Thread Gandalf Corvotempesta via Exim-users
guys are you aware of any open source web interface to give customers ability to manage their email domains ? (like adding mail box, setting some limits and so on) tnx -- ## subscription configuration (requires account): ##

[exim] Re: Routing based on *recipient* IP address

2023-10-27 Thread Gandalf Corvotempesta via Exim-users
Il giorno ven 27 ott 2023 alle ore 10:10 Jasen Betts via Exim-users ha scritto: > Yes, in your config use the dnslookup router for that smarthost use > ignore_target_hosts with an > inverted host list ( that is put a ! in front of it ) > > hostlist iran_ips = . > > iram_mx: >

[exim] Re: Routing based on *recipient* IP address

2023-10-27 Thread Gandalf Corvotempesta via Exim-users
Il giorno ven 27 ott 2023 alle ore 10:07 Kirill Miazine via Exim-users ha scritto: > You'd have to do MX lookup, yes (as the example in the docs show), but > then dnslists would do the matching for you. I'd say it's easier to use > an existing matching facility, rather than re-implementing it

[exim] Re: Routing based on *recipient* IP address

2023-10-27 Thread Gandalf Corvotempesta via Exim-users
Il giorno ven 27 ott 2023 alle ore 09:17 Gandalf Corvotempesta ha scritto: > As you can see here, with some hosts the MXs are returned properly > (even with IPv6, i've cheded), > but with some others, don't. (it also fails on some of my domains). Any clue ? > > It's the "a+" lookup that fails,

[exim] Re: Routing based on *recipient* IP address

2023-10-27 Thread Gandalf Corvotempesta via Exim-users
Il giorno ven 27 ott 2023 alle ore 09:30 Kirill Miazine via Exim-users ha scritto: > Have you considered using the dnslists ACL condition and set an > appropriate ACL message variable to check in a router? There's an > example at the end of section 30 for how to query dnslists for multiple >

[exim] Re: Routing based on *recipient* IP address

2023-10-27 Thread Gandalf Corvotempesta via Exim-users
Il giorno gio 26 ott 2023 alle ore 18:43 Jeremy Harris via Exim-users ha scritto: > Run it seperately using "-be" expansion-test mode As you can see here, with some hosts the MXs are returned properly (even with IPv6, i've cheded), but with some others, don't. (it also fails on some of my

[exim] Re: Routing based on *recipient* IP address

2023-10-27 Thread Gandalf Corvotempesta via Exim-users
Il gio 26 ott 2023, 21:22 Kirill Miazine via Exim-users < exim-users@lists.exim.org> ha scritto: > Maybe you could solve the task at a lower level, e.g. use operating > system's networking facilities e.g. to redirect connections to port 25 > on those specific IP addresses to the smarthost, or

[exim] Re: Routing based on *recipient* IP address

2023-10-26 Thread Gandalf Corvotempesta via Exim-users
t; On 26/10/2023 14:28, Gandalf Corvotempesta via Exim-users wrote: > > But how can I use a single lookup (and not 2 like in the code above), > > merging route_data and condition ? From the condition can I set a > > variable to use with route_data ? > > I didn't find an

[exim] Re: Routing based on *recipient* IP address

2023-10-26 Thread Gandalf Corvotempesta via Exim-users
Il giorno gio 26 ott 2023 alle ore 13:11 Jeremy Harris via Exim-users ha scritto: > If MX-sorting not needed: >${lookup dnsdb{a+=${lookup dnsdb{>: mxh=example.com Actually, i'm here, with a custom router. relay_to_aws: debug_print = "R: relay_to_aws for $local_part@$domain . Remote

[exim] Re: Routing based on *recipient* IP address

2023-10-26 Thread Gandalf Corvotempesta via Exim-users
Il giorno gio 26 ott 2023 alle ore 11:48 Jeremy Harris via Exim-users ha scritto: > - a manualroute router, pointing to the required smarthost Ok > - placed in the routing chain early, to strip out from the >general "deliver to the MX" externals Ok. > - with a complicated "condition" to

[exim] Routing based on *recipient* IP address

2023-10-26 Thread Gandalf Corvotempesta via Exim-users
Hi guys TL;DR: how can i route, to a specific smarthost, all email based on the *recipient* mx IP address ? Long version: I have a mail server hosted on Google Cloud that can't reach some "restricted" countries, like Cuba, Iran, Syria and so on. A customer of us, has a department located in