Re: [exim] av_scanner is broken suddenly?

2020-12-30 Thread Jeremy Harris via Exim-users
On 30/12/2020 13:10, Victor Sudakov via Exim-users wrote: You must be a wise man Evgeniy! On the exim host, I set sysctl net.inet.tcp.fastopen.client_enable=0 and the problem seemed to go away. That's good to know; thanks. It may be worth raising a bug against FreeBSD. Now if you care :-)

Re: [exim] av_scanner is broken suddenly?

2020-12-30 Thread Jeremy Harris via Exim-users
On 30/12/2020 08:04, Evgeniy Berdnikov via Exim-users wrote: On Wed, Dec 30, 2020 at 02:25:19PM +0700, Victor Sudakov via Exim-users wrote: Is this ktrace informative https://termbin.com/zjsv ? Yes; thanks. 8889 exim CALL socket(PF_INET,0x1,IPPROTO_IP) 8889 exim RET socket

Re: [exim] Authentication returns code 435 instead of 535

2020-12-29 Thread Jeremy Harris via Exim-users
On 29/12/2020 16:11, Yves Goergen via Exim-users wrote: Strange, then why does authentication work fine with correct data? It's only the incorrect data (decided by a separate server which is contacted by my PAM module) that causes a temporary error code in Exim Ah. I didn't understand that

Re: [exim] av_scanner is broken suddenly?

2020-12-29 Thread Jeremy Harris via Exim-users
On 29/12/2020 11:03, Victor Sudakov via Exim-users wrote: Evgeniy Berdnikov via Exim-users wrote: On Tue, Dec 29, 2020 at 10:20:51AM +0700, Victor Sudakov via Exim-users wrote: You can see from it that exim's host opens a TCP connection to the clamav host, the clamav host replies with SYN+ACK,

Re: [exim] Authentication returns code 435 instead of 535

2020-12-28 Thread Jeremy Harris via Exim-users
On 29/12/2020 00:05, Yves Goergen via Exim-users wrote: I see a lot of lines like this in the mainlog: 2020-12-27 20:04:00 login authenticator failed for (USER) [199.192.16.253]: 435 Unable to authenticate at present (set_id=scan...@mydomain.de): Permission denied So it returns the

Re: [exim] More log questions

2020-12-28 Thread Jeremy Harris via Exim-users
On 28/12/2020 17:10, Yves Goergen via Exim-users wrote: I=[nnn.nnn.nnn.nnn]* Is it just for the I field (local interface used) or also for the shown remote IP address? The quoted text doesn't mention the local interface at all. If you're not logging the local IP, it'll be on the remote IP.

Re: [exim] More log questions

2020-12-28 Thread Jeremy Harris via Exim-users
On 28/12/2020 16:23, Yves Goergen via Exim-users wrote: When two or more messages are delivered down a single SMTP connection, an asterisk follows the IP address in the log lines for the second and subsequent messages. How does that look like in the log file? I=[nnn.nnn.nnn.nnn]* 2. I

Re: [exim] MX record exists but exim doesn't detect it

2020-12-27 Thread Jeremy Harris via Exim-users
On 25/12/2020 13:01, Sagar Acharya via Exim-users wrote: The central problem is however, that dig gives me the correct MX record and nslookup doesn't. MX record exists, just exim is not able to find it. I even tried this email id. It gives these prompts ... dnslookup router called for

Re: [exim] Queue ID format

2020-12-24 Thread Jeremy Harris via Exim-users
On 24/12/2020 23:30, Yves Goergen via Exim-users wrote: Well, if that log was intended for humans, would it be an interesting idea to write a machine-readable log as well? See bugs 2142 and 2610. So far, not enough actual interest to get anyone to put the effort into the developement and

Re: [exim] Queue ID format

2020-12-24 Thread Jeremy Harris via Exim-users
On 24/12/2020 22:17, Yves Goergen via Exim-users wrote: I'm parsing Exim log files, specifically the mainlog. Man, that's a complex structure and it's hard to find all necessary details from the documentation and by reading my actual log files. I'm using several regular expressions for

Re: [exim] Taint mismatch, string_nextinlist: expand_getlistele 1309

2020-12-24 Thread Jeremy Harris via Exim-users
On 23/12/2020 22:05, Jeremy Harris via Exim-users wrote: On 21/12/2020 12:50, Bart Noordervliet via Exim-users wrote: Taint mismatch, string_nextinlist: expand_getlistele 1309 The fix will be available in the next few days. Commit 942f0be6c2. -- Cheers, Jeremy -- ## List details

Re: [exim] Taint mismatch, string_nextinlist: expand_getlistele 1309

2020-12-23 Thread Jeremy Harris via Exim-users
On 21/12/2020 12:50, Bart Noordervliet via Exim-users wrote: Taint mismatch, string_nextinlist: expand_getlistele 1309 That's a bug; spotted by an internal selfcheck. Well found! I thought we'd cleared most of those. The fix will be available in the next few days. If you can build from

Re: [exim] Forward from external immediately without queue

2020-12-23 Thread Jeremy Harris via Exim-users
On 23/12/2020 19:25, Yves Goergen via Exim-users wrote: So I had another idea. If queuing and bouncing is the problem, can I get rid of that? Slight terminology diversion... "store-and-forward" is a better description of the cause of your problem. Exim generally tries to deliver forwarded

Re: [exim] How to reject overlong addresses/local parts in From: header?

2020-12-16 Thread Jeremy Harris via Exim-users
On 16/12/2020 16:49, Frank Richter via Exim-users wrote: On 12/12/2020 15:30, Jeremy Harris via Exim-users wrote: On 12/12/2020 14:46, Frank Richter via Exim-users wrote: It comes from an e-mail with an overlong From: header: From: "…" I'd like to reject such "address m

Re: [exim] Problem with filter on Base64-encoded subject field

2020-12-15 Thread Jeremy Harris via Exim-users
On 15/12/2020 18:13, Andreas Metzler via Exim-users wrote: On 2020-12-15 Kirill Sluchanko via Exim-users wrote: [...]     Subject: =?UTF-8?B?UmU6IFtFWFRFUk5BTF0gUmU6IFJlOiBSZTog0JzQsNGA0YjRgNGD0YLQuNC30LDRhtC4?= я почты [...]     echo  

Re: [exim] How to reject overlong addresses/local parts in From: header?

2020-12-14 Thread Jeremy Harris via Exim-users
On 14/12/2020 11:51, Mike Tubby via Exim-users wrote: If its the sender address, i.e. the envelope then in acl_check_mail something like: He said "header". should do it, otherwise if you want to test the 'From' header in the body do something like:     deny    condition = ${if >

Re: [exim] How to reject overlong addresses/local parts in From: header?

2020-12-12 Thread Jeremy Harris via Exim-users
On 12/12/2020 14:46, Frank Richter via Exim-users wrote: It comes from an e-mail with an overlong From: header: From: "…" I'd like to reject such "address monsters". How's the best way to achieve this? Try a rewrite rule: ^.{40,}@tuced.eu deny...@tuced.de before your existing

Re: [exim] transport compression for port 25, 143, 110

2020-12-12 Thread Jeremy Harris via Exim-users
On 12/12/2020 13:11, Cyborg via Exim-users wrote: I was wondering, do modern smtp/imap/pop connections support compression ? I've never seen it being offered for SMTP (but I've not been looking specifically for it). It was suggested in 2016:

Re: [exim] Autoreply transport and DKIM

2020-12-04 Thread Jeremy Harris via Exim-users
On 04/12/2020 17:40, Charlie Elgholm via Exim-users wrote: Any way to get the autoreply transport to sign with DKIM? The autoreply transport generates a message and submits it for further processing - routing and transport, per your entire configuration. An smtp transport, as called by your

Re: [exim] Android Outlook App

2020-12-04 Thread Jeremy Harris via Exim-users
On 04/12/2020 11:55, Andreas via Exim-users wrote: Every hint is really welcome. When all else fails: packet capture. -- Cheers, Jeremy -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list -

Re: [exim] Tainted PATH (file or directory name for maildir_spam_delivery transport) not permitted

2020-12-02 Thread Jeremy Harris via Exim-users
On 02/12/2020 11:03, Adam Major via Exim-users wrote: Will check your fix/optimisations on test server. I see I missed off a Megabytes "M" on the quota, and the default handling for it. You'll need to do those bits. -- Cheers, Jeremy -- ## List details at

Re: [exim] Tainted PATH (file or directory name for maildir_spam_delivery transport) not permitted

2020-12-02 Thread Jeremy Harris via Exim-users
On 29/11/2020 15:07, Adam Major via Exim-users wrote: mysql_localuser:     driver = accept # This gives you $domain_data     domains = +local_domains     condition = ${if eq{}{${lookup mysql {SELECT mail_user FROM mail_box WHERE \     mail_domain='${quote_mysql:$domain}' AND

Re: [exim] Getting duplicate deliveries with redirect router

2020-12-02 Thread Jeremy Harris via Exim-users
On 26/11/2020 09:06, Gedalya via Exim-users wrote: When user1 sends a message to user2 and user3, and user3 also gets generated *twice* by a redirect router, user3 ends up getting the message twice. bcc:   debug_print = "R: bcc for $local_part@$domain"   driver = redirect   data =

Re: [exim] Using multiple tls_certificates and tls_keys

2020-11-28 Thread Jeremy Harris via Exim-users
On 28/11/2020 17:24, The Doctor via Exim-users wrote: All roght how can I do this without usingtls_sni or tls_in_sli ? Insufficient information. In what situation do you want to use what? -- Cheers, Jeremy -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim

Re: [exim] Exim+Samba4 AD - lookup problem

2020-11-24 Thread Jeremy Harris via Exim-users
dovecot: debug_print = "R: dovecot for $local_part@$domain" driver = accept domains = +local_domains transport = dovecot_virtual_delivery cannot_route_message = Unknown user The problem I am experiencing is that a test against _any_ address, existent or not,

Re: [exim] dkim permissions

2020-11-23 Thread Jeremy Harris via Exim-users
On 18/11/2020 15:25, James Strother via Exim-users wrote: Can you suggest owners/permissions for the key? Mine are root:exim 640 -- Cheers, Jeremy -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with

Re: [exim] tainted data issues

2020-11-23 Thread Jeremy Harris via Exim-users
On 23/11/2020 14:20, Gary Stainburn via Exim-users wrote:   data = ${lookup{$local_part}lsearch{/etc/aliases.d/$domain}} Don't use a tainted name as the filename for that lsearch. Assuming that not doing the lsearch when the file doesn't exist is what you want: use a dsearch in that

Re: [exim] Strange error from exim -bV

2020-11-22 Thread Jeremy Harris via Exim-users
On 22/11/2020 13:30, Odhiambo Washington via Exim-users wrote: 2020-11-22 15:37:25.691 Exim configuration error in line 3 of /etc/exim4/exim4-ldap-config.conf: option setting expected:debug_print = "R: user_ad_aliases for $local_part@$domain" If I comment out the mentioned line, the

Re: [exim] exim reading from samba?

2020-11-20 Thread Jeremy Harris via Exim-users
On 20/11/2020 06:05, Dan Egli via Exim-users wrote: I was hoping someone here could point me in the right direction. I am setting up an Active Directory domain using Samba, and I wanted to have exim check for mailboxes and passwords against samba's LDAP database. The idea is to synchronize

Re: [exim] tainted data issues

2020-11-11 Thread Jeremy Harris via Exim-users
On 11/11/2020 16:29, Ian Zimmerman via Exim-users wrote: On 2020-11-11 13:16, Jeremy Harris wrote: Semi-radical: provide an ACL, router, and transport modifier that checks some variable or content for dangerous contents We have that. All data provided by an untrusted source, described

Re: [exim] tainted data issues

2020-11-11 Thread Jeremy Harris via Exim-users
On 10/11/2020 19:45, Chris Siebenmann via Exim-users wrote: Moderate: there should be a full chapter in the Exim documentation on tainting and how to deal with it. This should cover the security risks that it's there to deal with, common configuration snippets that are now a problem, and how

Re: [exim] tainted data issues

2020-11-11 Thread Jeremy Harris via Exim-users
On 10/11/2020 20:45, Sebastian Nielsen via Exim-users wrote: I think as I said, provide a untaint tool, that allows custom data to verify against. Like: ${untaint(${var}, "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789")} No; this is a bad idea. It is far to easy for someone

Re: [exim] tainted data issues

2020-11-11 Thread Jeremy Harris via Exim-users
On 10/11/2020 09:33, Mike Tubby via Exim-users wrote: I am all for improved security but a single "step change" that breaks existing configurations is IMHO going too far.     taint_mode = off | warn | enforce Warn and enforce, I could see as an interim measure. But only interim - to be

Re: [exim] Exim 4.94.0.4 works where Exim 4.94 fails with tainted path 'not permitted'

2020-11-10 Thread Jeremy Harris via Exim-users
On 08/11/2020 22:15, Michael Haardt via Exim-users wrote: If the documentation stated that somehow, it would ease migrations. Suggestions for (wording and where to put it) welcome. The generic discussion how a router works sounds like a good place to me for giving a hint on the intended

Re: [exim] tainted data issues

2020-11-10 Thread Jeremy Harris via Exim-users
On 10/11/2020 06:44, Kai Bojens via Exim-users wrote: The only problem I have with tainting is the lack of documentation. Why is there no single page with just "Hey, external data is now considered tainted. To help the discussion along I've put up a copy of the current (git HEAD)

Re: [exim] tainted data issues

2020-11-10 Thread Jeremy Harris via Exim-users
On 09/11/2020 22:27, Heiko Schlittermann via Exim-users wrote: We're open for suggestions. The one major hole I know of is for the creation of a mailbox file, first time, for an account. To that end I'm intending an enhancement of the "create_file" option on the appendfile transport. The

Re: [exim] Exim 4.94.0.4 works where Exim 4.94 fails with tainted path 'not permitted'

2020-11-08 Thread Jeremy Harris via Exim-users
On 08/11/2020 14:47, Michael Haardt via Exim-users wrote: In the old days, that was the standard way of matching. Then conditions were added, many people switched to them, and now we go back to the old domains/local_parts way, because that sets the *_data variables. If the documentation stated

Re: [exim] Exim 4.94.0.4 works where Exim 4.94 fails with tainted path 'not permitted'

2020-11-07 Thread Jeremy Harris via Exim-users
On 07/11/2020 23:30, Michael Haardt via Exim-users wrote: Previously, a single lookup that checked both local part and domain to let the router match was popular. Now that's fighting against the design. Use two lookups, one for local_parts and one for domains, even if both perform the same

Re: [exim] Exim 4.94.0.4 works where Exim 4.94 fails with tainted path 'not permitted'

2020-11-07 Thread Jeremy Harris via Exim-users
On 07/11/2020 22:45, Mike Tubby via Exim-users wrote: Basically 'tainted as default' unless you turn it back off ...? Sigh. You should preferably actually check that the values exist in your database. Yes, you can game it. Don't be so stupid. -- Cheers, Jeremy -- ## List details at

Re: [exim] Exim 4.94.0.4 works where Exim 4.94 fails with tainted path 'not permitted'

2020-11-07 Thread Jeremy Harris via Exim-users
On 07/11/2020 20:43, Mike Tubby via Exim-users wrote: What do I need to know to fix this one? Either - read back through exim-users, which has amply covered tainting or - start by hauling up the concept index in the docs, and search on the string "taint. Then , if that doesn't answer your

Re: [exim] Exim and Sophos command line AV wrong exit codes?

2020-11-07 Thread Jeremy Harris via Exim-users
On 07/11/2020 17:41, Mike Tubby via Exim-users wrote: Does Sophie still work? Is it still supported?? If you're asking about the interface from Exim, it's still in the sourcebase. Whether it's included in the binary depends on the builder, which is apparently you. Whether the thing that

Re: [exim] Exim and Sophos command line AV wrong exit codes?

2020-11-07 Thread Jeremy Harris via Exim-users
On 07/11/2020 16:16, Mike Tubby via Exim-users wrote: Sophos manual for savscan says it returns:    0  If no errors are encountered and no threats are detected.    1  If you interrupt savscan (usually by pressing CRTL+C) or kill the process.    2  If some error

Re: [exim] SPF and DKIM error processing when receiving emails

2020-11-06 Thread Jeremy Harris via Exim-users
On 06/11/2020 18:00, Chris Siebenmann via Exim-users wrote: One thing to be aware of when writing DKIM related rules is that it's quite possible (and in some environments routine) for legitimate incoming email to have multiple DKIM signatures, some of which fail to validate and some of which

Re: [exim] SPF and DKIM error processing when receiving emails

2020-11-06 Thread Jeremy Harris via Exim-users
On 06/11/2020 14:02, Mark Elkins via Exim-users wrote: For now, I'd like to accept anything - just have the Data about whether an incoming email was compliant or not - with the option of then moving to become more strict. So, just replace your deny & defer with accept, and add into each (and

Re: [exim] SPF and DKIM error processing when receiving emails

2020-11-06 Thread Jeremy Harris via Exim-users
On 06/11/2020 11:53, Mark Elkins via Exim-users wrote: I've got the following in exim.conf acl_check_dkim: ... This is breaking some of my customers... First define your required policies. We can't really do that for you. The obvious response is "do not use DKIM" - but I suspect that

Re: [exim] original_local_part sometimes does not match

2020-11-04 Thread Jeremy Harris via Exim-users
On 04/11/2020 21:45, Rainer Dorsch via Exim-users wrote: elif "$original_local_part" is "web.de-forward" then save Maildir/.AA- bokomoko.web-de/ does not match this mail: Return-Path: Envelope-to: web.de-forw...@bokomoko.de On possibility is that you have configured a local_part_suffix

Re: [exim] Enhancing acl_check_rcpt

2020-11-04 Thread Jeremy Harris via Exim-users
On 04/11/2020 14:15, Victor Sudakov via Exim-users wrote: OTOH it would be good to have the +dovecot_domains compiled automatically from all the domains in /etc/dovecot/users instead of defining it as a semi-static list. (I call it semi-static because it's defined as "domainlist dovecot_domains

Re: [exim] Wrong enhanced status code

2020-10-29 Thread Jeremy Harris via Exim-users
On 29/10/2020 12:06, Wolfgang Breyha via Exim-users wrote: On 29/10/2020 12:45, Jeremy Harris via Exim-users wrote: On 29/10/2020 11:21, Niels Kobschätzki via Exim-users wrote: I got a message from a user that our exim apparently sends a wrong status code on full mailboxes. Something like

Re: [exim] Wrong enhanced status code

2020-10-29 Thread Jeremy Harris via Exim-users
On 29/10/2020 11:21, Niels Kobschätzki via Exim-users wrote: I got a message from a user that our exim apparently sends a wrong status code on full mailboxes. Something like this: 550 Mailbox is full 550 5.1.1 u...@domain.com… User unknown That's two separate responses. The client much

Re: [exim] original_local_part sometimes does not match

2020-10-28 Thread Jeremy Harris via Exim-users
On 28/10/2020 07:22, Rainer Dorsch via Exim-users wrote: elif "$original_local_part:" is "web" or "$original_local_part:" is "impressum" then save Maildir/.AA-bokomoko.public/ You have an extraneous ":" there. -- Cheers, Jeremy OpenPGP_0xBCE58C8CE41F32DF.asc Description:

Re: [exim] Queue time logging incorrect in 4.94?

2020-10-27 Thread Jeremy Harris via Exim-users
On 27/10/2020 13:59, Matt Rubright via Exim-users wrote: While troubleshooting some user complaints about email queue times, I discovered some cases where emails are logged as having longer queue times than they actually do. The QT log entry shows the total queue time to be 1m24s, but the

Re: [exim] How do I skip a router when I get an expansion failure?

2020-10-27 Thread Jeremy Harris via Exim-users
On 27/10/2020 05:25, Alex King via Exim-users wrote:   condition = ${if >={$spam_score_int}{400}{1}{0}} I want this copy to be made if spam_score_int is above the threshold, but to be skipped if it's lower, or if spam_score_int isn't defined. $spam_score_int is defined whenever your Exim

Re: [exim] De-taint data

2020-10-26 Thread Jeremy Harris via Exim-users
On 26/10/2020 11:50, Gregory Edigarov via Exim-users wrote: So the question is how to correctly connect shadow transport to this processing in case of 4.94? So you're doing a major lookup into a MySQL DB, populating $address_data. You should be able to extend that suitably to return validated

Re: [exim] De-taint data

2020-10-26 Thread Jeremy Harris via Exim-users
On 26/10/2020 09:53, Gregory Edigarov via Exim-users wrote: Having this in config, exim-4.94 local_copy_incoming:   driver = appendfile   directory = /var/vmail/backup/$domain/$local_part/incoming Most of this info is in the documentation. You need to deliberately check that those variable

Re: [exim] Don't add received header for scanned mails

2020-10-21 Thread Jeremy Harris via Exim-users
I should caution you that by obscuring the actual message flow, you will be making diagnosis of problems much harder. -- Cheers, Jeremy OpenPGP_0xBCE58C8CE41F32DF.asc Description: application/pgp-keys OpenPGP_signature Description: OpenPGP digital signature -- ## List details at

Re: [exim] Don't add received header for scanned mails

2020-10-20 Thread Jeremy Harris via Exim-users
On 19/10/2020 11:28, Matthias Rieber via Exim-users wrote: I'm passing mails to spamassassin via a transport like: I'm wondering if it's possible to NOT add new received header and a new envelope-to header? Not while using that way of talking to SA. You could perhaps switch to a direct call

Re: [exim] unable to use $home variable in accept router?!

2020-10-16 Thread Jeremy Harris via Exim-users
On 15/10/2020 15:04, Andrew C Aitchison via Exim-users wrote: Routers and transports have the options "user" and "group" (chapters 15 and 24) which allow you to change the user/group that exim runs as for these actions. Not quite. They set up the user/group which will be used for the final

Re: [exim] Limit sending mail by destination domain to avoid being blacklisted

2020-10-16 Thread Jeremy Harris via Exim-users
On 15/10/2020 16:44, Benoît PELISSIER via Exim-users wrote: I would like to know if it is possible to put a limit of emails sent per minute / hour to a particular domain ? Yes; investigate the "ratelimit" ACL condition. -- Cheers, Jeremy -- ## List details at

Re: [exim] unable to use $home variable in accept router?!

2020-10-14 Thread Jeremy Harris via Exim-users
On 14/10/2020 19:25, Jürgen Edner via Exim-users wrote: localuser_maildir:   driver = accept   check_local_user   debug_print = DEBUG-HOME:$home:   condition = ${if exists{$home/.imapmail/cur}}   transport = local_delivery_maildir Trace: 25242 > localuser_maildir router <

Re: [exim] 421 lost input connection, not logged?

2020-10-08 Thread Jeremy Harris via Exim-users
On 08/10/2020 17:50, Cyborg via Exim-users wrote: > Am 08.10.20 um 17:11 schrieb Graeme Fowler via Exim-users: >> ...but if the client never managed to actually connect to Exim, there is >> nothing to log. > In this case, you could see the messages exim sent for the smtp session > with tcpdump,

Re: [exim] 421 lost input connection, not logged?

2020-10-08 Thread Jeremy Harris via Exim-users
On 08/10/2020 15:34, Cyborg via Exim-users wrote: > @Devs: Maybe a nice FR to put a "421 client aborted connection from ip > x.x.x.x." in the logs. Not sure what the significance of the "@" is, nor what an FR might be... If it was supposed to be an RFE, bugs.exim.org is the place to record it.

Re: [exim] exim 4.93 and at least 4.94 need seconds to write to queue?

2020-10-08 Thread Jeremy Harris via Exim-users
Could you get a debug run using "-d+timestamp" and with log_selector = +millisec in the config? Also, since you think it's the queue-write, you could add queue_only so that we don't do the delivery (and get the full debug of that). -- Cheers, Jeremy -- ## List details at

Re: [exim] Sieve filter not working properly anymore, how to debug?

2020-10-07 Thread Jeremy Harris via Exim-users
On 07/10/2020 15:56, Yves Goergen via Exim-users wrote: > I don't know what "tainting" means http://exim.org/exim-html-current/doc/html/spec_html/ch-string_expansions.html Third paragraph. -- Cheers, Jeremy -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim

Re: [exim] Sieve filter not working properly anymore, how to debug?

2020-10-07 Thread Jeremy Harris via Exim-users
On 07/10/2020 14:14, Yves Goergen via Exim-users wrote: > How can I debug [...] Sieve filter in Exim? I thought that the Command line "-d" facilities. Depending how you are submitting a test message, you may need to run your daemon in foreground mode.

Re: [exim] Help to logical OR two conditions

2020-10-04 Thread Jeremy Harris via Exim-users
On 04/10/2020 08:30, Victor Sudakov via Exim-users wrote: > Jeremy Harris via Exim-users wrote: >> On 03/10/2020 15:18, Victor Sudakov via Exim-users wrote: >>> And why did they call bool{...} and friends "Expansion conditions" >>> while they are

Re: [exim] Help to logical OR two conditions

2020-10-03 Thread Jeremy Harris via Exim-users
On 03/10/2020 15:18, Victor Sudakov via Exim-users wrote: > And why did they call bool{...} and friends "Expansion conditions" > while they are clearly not conditions, but operators? The operate on things and result in conditionals. Have to call them something. -- Cheers, Jeremy -- ## List

Re: [exim] Remove & Replace Message Body Content

2020-10-02 Thread Jeremy Harris via Exim-users
On 02/10/2020 17:26, Patrick Porteous via Exim-users wrote: > However, it appears that the $message_body variable doesn't analyze the > source HTML of the message, but instead just looks at the plain text > produced by the HTML output.  Is Exim capable of analyzing the source > HTML No.

Re: [exim] Help to logical OR two conditions

2020-10-01 Thread Jeremy Harris via Exim-users
On 01/10/2020 12:45, Victor Sudakov via Exim-users wrote: > accept condition = > ${lookup{$local_part@$domain}lsearch{/etc/dovecot/aliases}{yes}} > > Doesn't this line mean that the right part of the expression is err... hmm... > a condition? No. The ACL general-purpose condition called

Re: [exim] Help to logical OR two conditions

2020-10-01 Thread Jeremy Harris via Exim-users
On 01/10/2020 10:00, Victor Sudakov via Exim-users wrote: > And I'm damned if I understand what is "condition name expected." http://exim.org/exim-html-current/doc/html/spec_html/ch-string_expansions.html Section 7, "Expansion conditions". -- Cheers, Jeremy -- ## List details at

Re: [exim] msg:fail:internal

2020-09-30 Thread Jeremy Harris via Exim-users
On 30/09/2020 15:57, Ian Zimmerman via Exim-users wrote: > What I want to do is to track a particular error (AUTH used when not > advertised), in a cleaner way than scanning the log. My impression was > this was just the kind of thing events were meant for. Was I wrong? Yes and no. Event

Re: [exim] msg:fail:internal

2020-09-30 Thread Jeremy Harris via Exim-users
On 29/09/2020 16:44, Ian Zimmerman via Exim-users wrote: > Where can I find a list of possible $event_data values for this event? > > I realize that the list may not be fixed or guaranteed stable. Just give > me a starting point. There's no formal list. It's a string intended to give a hint to

Re: [exim] PRDR config example

2020-09-28 Thread Jeremy Harris via Exim-users
On 28/09/2020 23:47, Yves Goergen via Exim-users wrote: > Can I add individual headers to the messages for each recipient? No, not in ACL. There's still only the one message. -- Cheers, Jeremy -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at

Re: [exim] PRDR config example

2020-09-28 Thread Jeremy Harris via Exim-users
On 28/09/2020 20:52, Yves Goergen via Exim-users wrote: > I'm trying to get the PRDR extension to work but can't find any > documentation about its ACL. All I see is the global option > 'prdr_enable' and the ACL 'acl_smtp_data_prdr'. But I don't know how to > use it. It gives you a chance to

Re: [exim] TLS connection with Microsoft server stalls

2020-09-26 Thread Jeremy Harris via Exim-users
On 26/09/2020 06:02, Andreas Metzler via Exim-users wrote: > On 2020-09-25 Heiko Schlittermann via Exim-users wrote: >> Jeremy Harris via Exim-users (Fr 25 Sep 2020 14:12:31 >> CEST): >>> Debian Sid has a 4.94-related looking package version for Exim; >>> I

Re: [exim] Router / Transport not working

2020-09-25 Thread Jeremy Harris via Exim-users
On 25/09/2020 15:03, Gary Stainburn via Exim-users wrote: > If I use the following command it shows the router working as expected, > and the transport is queued, but never shows the transport doing anything. > > exim -f g...@ringways.co.uk -d+all -bt nore...@ringways.co.uk 2>&1|gvim - Doh, I

Re: [exim] Router / Transport not working

2020-09-25 Thread Jeremy Harris via Exim-users
On 25/09/2020 15:03, Gary Stainburn via Exim-users wrote: > If I use the following command it shows the router working as expected, > and the transport is queued, but never shows the transport doing anything. > > exim -f g...@ringways.co.uk -d+all -bt nore...@ringways.co.uk 2>&1|gvim - and the

Re: [exim] TLS connection with Microsoft server stalls

2020-09-25 Thread Jeremy Harris via Exim-users
On 25/09/2020 12:50, Heiko Schlittermann via Exim-users wrote: > Isn't that the "cork" issue that was fixed around > 8f9adfd36222d4e9e730734e00dffe874073e5b4, > which is not part of 4.92. I do not remember the pre-conditions to > trigger this bug, I believe, it was related to pipelining, wasn't

Re: [exim] TLS connection with Microsoft server stalls

2020-09-25 Thread Jeremy Harris via Exim-users
On 25/09/2020 10:26, Christian Eyrich via Exim-users wrote: > I’ve sent mails from @outlook.de to my server but the TLS encrypted > communication just stops at one point after some progress through EHLO, > MAIL FROM, RCPT TO (exim -bd -d+all): > > 10:04:45 15402 SMTP>> 250 Accepted > 10:04:45

Re: [exim] remote MX does not support STARTTLS

2020-09-23 Thread Jeremy Harris via Exim-users
On 23/09/2020 18:49, Bill Cole via Exim-users wrote: >>     22 212.227.15.19 → 94.16.119.13 TCP 66 41705 → 25 [FIN, ACK] >> Seq=20 Ack=228 Win=64128 Len=0 TSval=3976249530 TSecr=307582370 > > Why is your server setting the FIN flag on that packet? That's GMX's FIN. -- Cheers, Jeremy -- ##

Re: [exim] remote MX does not support STARTTLS

2020-09-23 Thread Jeremy Harris via Exim-users
On 23/09/2020 16:59, Bill Cole via Exim-users wrote: > 1. You don't allow any TLS versions below 1.2. While that may seem to be > a safety measure, it actually can cause problems because a client that > does not support v1.2 or v1.3 can only resort to sending in clear text. > > 2. Your server is

Re: [exim] remote MX does not support STARTTLS

2020-09-23 Thread Jeremy Harris via Exim-users
On 23/09/2020 14:23, Andrew C Aitchison via Exim-users wrote: > I note http://www.postfix.org/BDAT_README.html#downsides IMHO there is some bogus advice there. If Postfix's "reject_unauth_pipelining" is not working aright then you can't trust it to work right, barring some CHUNKING-specific bug

Re: [exim] remote MX does not support STARTTLS

2020-09-23 Thread Jeremy Harris via Exim-users
On 22/09/2020 17:10, Christian Eyrich via Exim-users wrote: >     20 212.227.15.19 → 94.16.119.13 SMTP 85 C: EHLO mout.gmx.net >     21 94.16.119.13 → 212.227.15.19 SMTP 224 S: 250-mail.eyrich-net.org: > Hello mout.gmx.net [212.227.15.19] | 250-SIZE 52428800 | 250-8BITMIME | > 250-PIPELINING |

Re: [exim] Adding authentication-results header field only locally

2020-09-22 Thread Jeremy Harris via Exim-users
On 22/09/2020 01:41, Jim Fenton via Exim-users wrote: > I’m not sure whether > this would be considered a bug or just a misconfiguration, but I’m happy > to create a bug report if appropriate. Yes please; any crash that can be induced by a particular config is a bug, even if the config is not

Re: [exim] Limit Inbound E-mail to Certain IP Range Per cPanel Domain

2020-09-21 Thread Jeremy Harris via Exim-users
On 21/09/2020 20:34, Danielle McLeod via Exim-users wrote: > I'm trying to make it so only a certain IP range will be allowed through > Exim to a specific domain, with other domains unaffected by this ACL. OK, ACL's chapter in the docs. And you're looking at the sender's IP. This is available is

Re: [exim] PLEASE NOTE: Upcoming changes in Let's Encrypt issuer certificates

2020-09-21 Thread Jeremy Harris via Exim-users
On 21/09/2020 09:34, Dan Egli via Exim-users wrote: > Forgive me for being a bit dense, but I'm new to the SSL world. I have > certificates by LetsEncrypt, generated about a month ago. Where and how > do I look to determine if I need new certificates. And what's with the > TLSA DNS entries? I've

Re: [exim] Adding authentication-results header field only locally

2020-09-19 Thread Jeremy Harris via Exim-users
On 19/09/2020 05:08, Jim Fenton via Exim-users wrote: > On 9/18/20 5:09 PM, Jeremy Harris via Exim-users wrote: > Related question: when a router does a headers_add, does it only do that > if that router accepts? The documentation does say, in the obvious place: "a list o

Re: [exim] Adding authentication-results header field only locally

2020-09-18 Thread Jeremy Harris via Exim-users
On 17/09/2020 23:30, Jim Fenton via Exim-users wrote: > So instead I have tried putting into my mail_spool transport: > > headers_add = ${authresults {$primary_hostname}} > > but I'm not seeing the header field in locally-delivered messages (yes, > I am using mail_spool local delivery). Is this

Re: [exim] Absent username and "Failed to get user name for uid"

2020-09-18 Thread Jeremy Harris via Exim-users
On 18/09/2020 09:13, Henry Pootel via Exim-users wrote: > I would like to deprecate find usernames for special uids and take > default username(s) (if it necessary for exim). Is it possible? No. That would be a security breach. We want to know what the actual user is, for a message being sent

Re: [exim] Temporary internal error

2020-09-17 Thread Jeremy Harris via Exim-users
On 17/09/2020 20:56, Yves Goergen via Exim-users wrote: >  PGSQL new connection: socket=/var/run/postgresql database=) user=dfctl >  lookup deferred: PGSQL invalid filename for socket: /var/run/postgresql > > I'm not sure what's exactly invalid here. But it's not what I configured > either. This

Re: [exim] Temporary internal error

2020-09-17 Thread Jeremy Harris via Exim-users
On 17/09/2020 20:32, Yves Goergen via Exim-users wrote: > exim -bt demo@test.local exim -d -bt demo@test.local -- Cheers, Jeremy -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list -

Re: [exim] What causes Exim to just silently skip SPF checking?

2020-09-17 Thread Jeremy Harris via Exim-users
On 17/09/2020 10:23, Sebastian Nielsen via Exim-users wrote: > But how can I manually debug SPF? Is there something I can write on the > command line to test the built-in SPF facility? -bh option on the exim command line. You might want to combine that with -d use. -- Cheers, Jeremy -- ##

Re: [exim] What causes Exim to just silently skip SPF checking?

2020-09-17 Thread Jeremy Harris via Exim-users
On 17/09/2020 04:54, Sebastian Nielsen via Exim-users wrote: > What causes Exim to just silently skip SPF checking? Without a debug run demonstrating the syndrome we can't be certain. Without seeing your config, we can't even guess. -- Cheers, Jeremy -- ## List details at

Re: [exim] Change PAM service name

2020-09-16 Thread Jeremy Harris via Exim-users
On 16/09/2020 22:40, Yves Goergen via Exim-users wrote: >> The PAM module is initialized with the service name “exim” > > Can I change this? No, it's hardwired. -- Cheers, Jeremy -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/

Re: [exim] Absent username and "Failed to get user name for uid"

2020-09-15 Thread Jeremy Harris via Exim-users
On 15/09/2020 10:27, Henry Pootel via Exim-users wrote: > exim panic and say "Failed to get user name for uid 2045 ..." > Yes, the uid has not a user name in /etc/passwd. > > Can I set user names for my uids to exim wo change system /etc/passwd No. -- Cheers, Jeremy -- ## List details at

Re: [exim] Debian9/exim4.89 does TLS and SMTP AUTH with gmail, but Debian10/exim4.92 doesn't?

2020-09-15 Thread Jeremy Harris via Exim-users
On 15/09/2020 03:01, Marc MERLIN via Exim-users wrote: > Either way, the debian10 Email isn't going through. > > Ok, so now I'm comparing the rest of the d+all that works (9) vs the one that > doesn't (10) You're not showing the debug from early enough. We need the point where exim decides to

Re: [exim] Debian9/exim4.89 does TLS and SMTP AUTH with gmail, but Debian10/exim4.92 doesn't?

2020-09-14 Thread Jeremy Harris via Exim-users
On 15/09/2020 00:29, Marc MERLIN wrote: > So, exim -d+all does not make it very clear that TLS is even failing and (I don't see that, in your output below) > that AUTH is being done without TLS, Nope. > which is why it fails. And therefore, nope. > Both use the exact same

Re: [exim] How to debug an encrypted smtp auth connection?

2020-09-11 Thread Jeremy Harris via Exim-users
On 11/09/2020 19:23, Marc MERLIN via Exim-users wrote: > Is there really no way for exim to show me the entire smtp session > without obfuscating it Not without modifying source code. -- Cheers, Jeremy -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details

Re: [exim] SMTP timeout after pipelined end of data (5334 bytes written), hang at DAT 7247 LAST. Local_scan vs chunking issue?

2020-09-11 Thread Jeremy Harris via Exim-users
>> Marc MERLIN via Exim-users (Do 10 Sep 2020 21:24:51 >> CEST): >>> Howdy, >>> I have Exim version 4.92 #3 built 07-May-2019 17:44:23 Note that Buster, at least, is showing 4.92-8+deb10u4 -- Cheers, Jeremy -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim

Re: [exim] How to debug an encrypted smtp auth connection?

2020-09-11 Thread Jeremy Harris via Exim-users
On 11/09/2020 03:02, Marc MERLIN via Exim-users wrote: > If I run exim -d+all my-em...@domain.tld , I'd like to see the entire > SMTP connection decrypted. > However, it is not shown. The authentication info is such an obvious security hole that the data is deliberately overwritten, in the

Re: [exim] SMTP timeout after pipelined end of data (5334 bytes written), hang at DAT 7247 LAST. Local_scan vs chunking issue?

2020-09-10 Thread Jeremy Harris via Exim-users
On 10/09/2020 20:24, Marc MERLIN via Exim-users wrote: > I have an issue where some Emails go to the backup MX, then the backup > MX sends to the main MX, and the mail gets delivered to my mailbox, but > the transaction isn't finished in a way that the backup knows the mail > went through, so it

<    3   4   5   6   7   8   9   10   11   12   >