[exim] nwildlsearch does not match

2023-03-31 Thread Niels Kobschätzki via Exim-users
Hi, I have set up a ratelimit for my users and also a whitelist-file. The acl for the ratelimit looks like this: defer authenticated = * ratelimit = 30 / 5m / strict / $authenticated_id condition = ${lookup{$sender_address}nwildlsearch{/usr/local/etc/exim/conf/ratelimit_whitelist}{no}

Re: [exim] spam_score_int - what to do with negative values?

2023-01-26 Thread Niels Kobschätzki via Exim-users
Jeremy Harris via Exim-users @ 2023-01-26 14:23 : > On 26/01/2023 10:31, Niels Kobschätzki via Exim-users wrote: >> with a score of -12.6 > > How was that part verified? Thanks - I shouldn’t write to mailing lists when I have a cold. I was mislead by the original mail from the

[exim] spam_score_int - what to do with negative values?

2023-01-26 Thread Niels Kobschätzki via Exim-users
Hi! I deny messages in an acl if they have a score of more than 8 or 12: (shortened version with less conditions, that are not relevant here probably): deny message = delivery error with obfuscating details condition = ${if >{$spam_score_int}{120}{1}{0}} Usually this is no problem. But now I h

Re: [exim] who starts the delivery process?

2022-12-26 Thread Niels Kobschätzki via Exim-users
Maybe you should tell us what you want to do. Best, Niels On 26. Dec 2022, at 10:27, Askhat Tokabay wrote: � Thanks, as I understand it, the delivery process, that the message has arrived, can be told by the process of receiving the message, which puts

Re: [exim] who starts the delivery process?

2022-12-26 Thread Niels Kobschätzki via Exim-users
Hi, > > On 26. Dec 2022, at 09:41, Askhat Tokabay via Exim-users > wrote: > > Helo > I found in the documentation: > Delivery processes may be started as a > result of a message’s arrival, by a queue runner process, > or by an administrator using the -M option. > > The question is the follow

Re: [exim] Sender verify and Null MX (localhost.)

2021-11-03 Thread Niels Kobschätzki via Exim-users
On 3 Nov 2021, at 9:31, Slavko via Exim-users wrote: > Hi, > > Dňa 3. 11. o 4:30 Niels Kobschätzki via Exim-users napísal(a): >> LOG: lowest numbered MX record points to local host: senderdomain.com (while >> verifying from host rs224.mailgun.us >> [209.61.151.224])

Re: [exim] Sender verify and Null MX (localhost.)

2021-11-02 Thread Niels Kobschätzki via Exim-users
On 2 Nov 2021, at 22:56, Jeremy Harris via Exim-users wrote: > On 02/11/2021 20:29, Niels Kobschätzki via Exim-users wrote: >> ::1 in "0.0.0.0 : 127.0.0.0/8 : 192.168.0.0/16 : 10.0.0.0/8 : 172.16.0.0/12 >> : [::1/128]"? no (malformed IPv4 address or address mask) &g

Re: [exim] Sender verify and Null MX (localhost.)

2021-11-02 Thread Niels Kobschätzki via Exim-users
On 2 Nov 2021, at 20:39, Evgeniy Berdnikov via Exim-users wrote: > Hi. > > On Tue, Nov 02, 2021 at 08:12:49PM +0100, Niels Kobschätzki via Exim-users > wrote: >> What setting do I have to make in the dnslookup-router that a “MX 0 >> localhost.” fails

[exim] Sender verify and Null MX (localhost.)

2021-11-02 Thread Niels Kobschätzki via Exim-users
Hi, I have a sender who sends from a domain with a null MX set to localhost. Exim returns a 451 loca temporary failure because the dnslookup router defers the mail (lowest mx points at localhost). I would expect some form of 500-type error returning. When I send a mail to that domain it also g

Re: [exim] Better way to deal with phished users?

2021-07-05 Thread Niels Kobschätzki via Exim-users
On 5 Jul 2021, at 15:09, Heiko Schlittermann via Exim-users wrote: > Niels Kobschätzki (Mo 05 Jul 2021 13:54:47 CEST): >> >>> addresses the users sends mails to in a given time frame. >>> >>> ratelimit = … / per_addr >> >> According to the documentation: “The per_addr option is like the

Re: [exim] Better way to deal with phished users?

2021-07-05 Thread Niels Kobschätzki via Exim-users
On 5 Jul 2021, at 14:00, Cyborg via Exim-users wrote: Am 05.07.21 um 13:19 schrieb Niels Kobschätzki via Exim-users: The problem is the identification because you usually get to know it only, when the accounts are actively misused. If I get to know that users where specifically targeted I

Re: [exim] Better way to deal with phished users?

2021-07-05 Thread Niels Kobschätzki via Exim-users
On 5 Jul 2021, at 7:48, Heiko Schlittermann via Exim-users wrote: > Hi Niels, > > Niels Kobschätzki via Exim-users (Mo 05 Jul 2021 > 05:40:04 CEST): >> I have again and again problems with phished users. I want to try a new way >> to deal with them but I worry tha

Re: [exim] Better way to deal with phished users?

2021-07-05 Thread Niels Kobschätzki via Exim-users
On 5 Jul 2021, at 13:25, Niels Dettenbach via Exim-users wrote: > Am Montag, 5. Juli 2021, 13:19:45 CEST schrieb Niels Kobschätzki: >> The moment I identify them I lock them out of the system, remove all their >> mails in the queues and they have to reset their password before they can >> do any

Re: [exim] Better way to deal with phished users?

2021-07-05 Thread Niels Kobschätzki via Exim-users
On 5 Jul 2021, at 13:06, Niels Dettenbach wrote: > Am Montag, 5. Juli 2021, 09:04:16 CEST schrieb Niels Kobschätzki: >> On 5 Jul 2021, at 7:54, Niels Dettenbach via Exim-users wrote: >> Phished users are users from my mail system which are proven regular users >> who have their accounts for year

Re: [exim] Better way to deal with phished users?

2021-07-05 Thread Niels Kobschätzki via Exim-users
On 5 Jul 2021, at 7:48, Heiko Schlittermann via Exim-users wrote: > Hi Niels, > > Niels Kobschätzki via Exim-users (Mo 05 Jul 2021 > 05:40:04 CEST): >> I have again and again problems with phished users. I want to try a new way >> to deal with them but I worry tha

Re: [exim] Better way to deal with phished users?

2021-07-05 Thread Niels Kobschätzki via Exim-users
On 5 Jul 2021, at 7:54, Niels Dettenbach via Exim-users wrote: > Am Montag, 5. Juli 2021, 05:40:04 CEST schrieb Niels Kobschätzki via Exim- > users: >> I have again and again problems with phished users. > just my view to this: > > what are "phished users"? Phish

[exim] Better way to deal with phished users?

2021-07-04 Thread Niels Kobschätzki via Exim-users
Hi, I have again and again problems with phished users. I want to try a new way to deal with them but I worry that I mess up parts of our monitoring. One sign of a phished user (if they do not try to log in from lots of different countries) is that they amass in a short time quite some time in m

Re: [exim] randomize spamscanning- and av-IPs?

2021-05-19 Thread Niels Kobschätzki via Exim-users
On 19 May 2021, at 14:26, Peter Wullinger wrote: > On 19.05.21 09:14, Niels Kobschätzki via Exim-users wrote: >> But is there a way to randomize how the spam-servers are tried? I have one >> machine that has always a very high load and the other machines are a bit >> bor

Re: [exim] randomize spamscanning- and av-IPs?

2021-05-19 Thread Niels Kobschätzki via Exim-users
On 19 May 2021, at 9:46, Kai Bojens via Exim-users wrote: Am 19.05.21 um 09:14 schrieb Niels Kobschätzki via Exim-users: But is there a way to randomize how the spam-servers are tried? You could use a hostname and round robin DNS. That would distribute the load in a random way

[exim] randomize spamscanning- and av-IPs?

2021-05-19 Thread Niels Kobschätzki via Exim-users
Hi, it is possible to add multiple IPs to the av_scanner- and the spamd_address-settings like this: spamd_address = 10.10.10.10 783 : 11.11.11.11 783 : 12.12.12.12 783 It seems that the machines always try first 10.10.10.10, then 11.11.11.11 and then 12.12.12.12 I know that I can give prioritie

Re: [exim] router yields tainted data

2021-04-27 Thread Niels Kobschätzki via Exim-users
Hi, I found the problem. The server accessed the wrong configuration file because of a missing symlink. Best Niels > On 28. Apr 2021, at 02:07, Niels Kobschätzki wrote: > > Hi, > > I have here a router which yields tainted data and I don‘t understand why - > especially since it works on s

[exim] router yields tainted data

2021-04-27 Thread Niels Kobschätzki via Exim-users
Hi, I have here a router which yields tainted data and I don‘t understand why - especially since it works on some machines and not on others: Log-output: exim -v -bt t...@domain.com LOG: MAIN PANIC Tainted filename '/usr/local/etc/exim/redirects/domain.com' t...@jobcenter-ge.de cannot be res

Re: [exim] Dynamic recipients_max?

2021-03-16 Thread Niels Kobschätzki via Exim-users
On 16 Mar 2021, at 20:27, Jeremy Harris via Exim-users wrote: On 16/03/2021 19:05, Niels Kobschätzki via Exim-users wrote: is there any way that I could set recipients_max by default to let’s say 50 but for special senders set a higher limit (like 1000)? In ACLs or routers I can use

[exim] Dynamic recipients_max?

2021-03-16 Thread Niels Kobschätzki via Exim-users
Hi, is there any way that I could set recipients_max by default to let’s say 50 but for special senders set a higher limit (like 1000)? In ACLs or routers I can use conditions and stuff like that. For example I have a router with senders = nwildlsearch;/etc/exim/conf/ratelimit_whitelist and

Re: [exim] Routing for aliases

2021-01-19 Thread Niels Kobschätzki via Exim-users
On 19 Jan 2021, at 10:19, Jeremy Harris via Exim-users wrote: On 19/01/2021 08:55, Niels Kobschätzki via Exim-users wrote: I have the following case: I have users who have their mail-address aliased to an external address. The moment a router resolves the alias it doesn’t go again for the

Re: [exim] Routing for aliases

2021-01-19 Thread Niels Kobschätzki via Exim-users
On 19 Jan 2021, at 9:48, Evgeniy Berdnikov via Exim-users wrote: On Tue, Jan 19, 2021 at 09:40:03AM +0100, Niels Kobschätzki via Exim-users wrote: But there are several routers before the dnslookup-router and the debug-output does not indicate that they are checked before. Are they checked

Re: [exim] Routing for aliases

2021-01-19 Thread Niels Kobschätzki via Exim-users
On 19 Jan 2021, at 9:46, Odhiambo Washington wrote: On Tue, 19 Jan 2021 at 11:40, Niels Kobschätzki wrote: On 19 Jan 2021, at 9:36, Odhiambo Washington wrote: On Tue, 19 Jan 2021 at 11:31, Niels Kobschätzki via Exim-users < exim-users@exim.org> wrote: Hi, I have the following c

Re: [exim] Routing for aliases

2021-01-19 Thread Niels Kobschätzki via Exim-users
On 19 Jan 2021, at 9:36, Odhiambo Washington wrote: On Tue, 19 Jan 2021 at 11:31, Niels Kobschätzki via Exim-users < exim-users@exim.org> wrote: Hi, I have the following case: I have users who have their mail-address aliased to an external address. The moment a router resolves the al

[exim] Routing for aliases

2021-01-19 Thread Niels Kobschätzki via Exim-users
Hi, I have the following case: I have users who have their mail-address aliased to an external address. The moment a router resolves the alias it doesn’t go again for the new target address through all routers but jumps directly the router to my dnslookup-router which is used for external mai

Re: [exim] Removing header from mail in spool?

2021-01-05 Thread Niels Kobschätzki via Exim-users
not in the H file, they are either in the D file or are getting added by some rule in your exim.conf or a file included by it. So check the -D, and if it's not there then search your configs. If that's not working, can you post the output of the -Mvc? On 1/5/2021 3:39 PM, Niels Kobsc

Re: [exim] Removing header from mail in spool?

2021-01-05 Thread Niels Kobschätzki via Exim-users
the .db files and restart exim so that it rebuilds them. If it's a > different problem that one of those, then explain exactly what you mean by > the header being in the system twice. > > >> On 1/5/2021 5:55 AM, Niels Kobschätzki via Exim-users wrote: >> Hi, >

[exim] Removing header from mail in spool?

2021-01-05 Thread Niels Kobschätzki via Exim-users
Hi, I am finally working on changing my config to wo 4.94. There is one thing I could not get working so far and this led to mails being in limbo on my secondary mx. I would need to delete a certain header once from those mails because now it is twice in the mails. When it is only once in the

Re: [exim] Wrong enhanced status code

2020-10-29 Thread Niels Kobschätzki via Exim-users
On 29 Oct 2020, at 13:30, Jeremy Harris via Exim-users wrote: On 29/10/2020 12:06, Wolfgang Breyha via Exim-users wrote: On 29/10/2020 12:45, Jeremy Harris via Exim-users wrote: On 29/10/2020 11:21, Niels Kobschätzki via Exim-users wrote: I got a message from a user that our exim apparently

[exim] Wrong enhanced status code

2020-10-29 Thread Niels Kobschätzki via Exim-users
Hi, I got a message from a user that our exim apparently sends a wrong status code on full mailboxes. Something like this: 550 Mailbox is full 550 5.1.1 u...@domain.com… User unknown So on a Mailbox is full a User unknown seems to be returned on a full mailbox. In my In my acl I have wher

Re: [exim] How to delay multiple adresses in TO CC or CCI ?

2020-07-24 Thread Niels Kobschätzki via Exim-users
> On 24. Jul 2020, at 14:04, Yves ROUX via Exim-users > wrote: > > Hello, > have users that put hundreds of addresses in their TO, CC or CCI fields. > I know this is bad practice and they should use maillists, but most of > them don't know how to do this. > So to avoid overloading distant reci

Re: [exim] de-taint a file string

2020-07-13 Thread Niels Kobschätzki via Exim-users
On 13 Jul 2020, at 14:38, Jeremy Harris via Exim-users wrote: On 13/07/2020 12:56, Niels Kobschätzki via Exim-users wrote: I am looking through the documentation and the mailing list but I cannot find out how to convert this simple acl:  deny  message = Invalid user     domains

[exim] de-taint a file string

2020-07-13 Thread Niels Kobschätzki via Exim-users
Hi, I am looking through the documentation and the mailing list but I cannot find out how to convert this simple acl: deny message = Invalid user domains = partial-lsearch;/usr/local/etc/exim/conf/secondary_filter_domains local_parts = !nwildlsearch;/usr/local/etc/exim/conf

Re: [exim] message_size_limit depending on incoming domain

2019-11-18 Thread Niels Kobschätzki via Exim-users
Jeremy Harris via Exim-users writes: On 18/11/2019 12:31, Niels Kobschätzki via Exim-users wrote: this variable contains the domain. In particular, it is set during user since a message may have many recipients Doh. I should have remembered that. You'll need to either decide your p

Re: [exim] message_size_limit depending on incoming domain

2019-11-18 Thread Niels Kobschätzki via Exim-users
Jeremy Harris via Exim-users writes: On 18/11/2019 09:20, Niels Kobschätzki via Exim-users wrote: I know that there is a setting message_size_limit and that I can control it globally and per router. I accept mails for a lot of domains and for some of those domains I'd like to h

[exim] message_size_limit depending on incoming domain

2019-11-18 Thread Niels Kobschätzki via Exim-users
Hi, I know that there is a setting message_size_limit and that I can control it globally and per router. I accept mails for a lot of domains and for some of those domains I'd like to have a bigger message_size_limit than for the rest. Those domains are already handled differently but I am no