[Fwd: [AMaViS-user] Amavis-ng + exim -- help please.]

2002-10-19 Thread Gerald V. Livingston II
I'm forwarding the message below that I sent to the amavis-user list
because I haven't gotten even so much as a request for more info about
the problem there.

If anyone has any ideas please let me know.

G

 Original Message 
Subject: [AMaViS-user] Amavis-ng + exim -- help please.
From: Gerald V. Livingston II [EMAIL PROTECTED]
Date: Sat, October 19, 2002 2:22
To: [EMAIL PROTECTED]

amavis-ng 0.1.4.1
exim 3.36

The error seems to occur when Exim.pm attempts to feed the scanned
message back to the real exim MTA.

When the error occurs the messages are left in /var/tmp where amavis
opens them up for scanning. I could probably feed them back to exim
by hand and have them delivered after disabling amavis.

Any idea why it's griping about a PATH environment being insecure
and where it's getting that particular environment setting? I'm no
programmer and have dug around about a week now trying to track it
down. I had one more thought that I haven't yet tried and that is to
set amavis to run as UID/GID mail/mail, the same as exim. I'm
working from remote right now (I'm at work and the box is at home).
May ssh into the box later and kill fetchmail to try re-setting the
UID/GID in the config files.

This is on a Debian distribution system with amavis running
uid=amavis gid=amavis

Thanks,

Gerald

Begin error email genertaed by exim:

Date: Mon, 14 Oct 2002 09:33:54 -0500
From: Mail Delivery System [EMAIL PROTECTED]
To: x@
Subject: Mail delivery failed: returning message to sender


This message was created automatically by mail delivery software
(Exim).

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es)
failed:

  xx@localhost

The following text was generated during the delivery attempt:

-- xx@localhost --

binmode() on unopened filehandle GEN2 at
/usr/share/perl5/File/MMagic.pm line 354.
Insecure $ENV{PATH} while running with -T switch at
/usr/share/perl5/AMAVIS/MTA/Exim.pm line 140.

---

This is the section of MMagic.pm that contains the failing line:

sub new {
my $self = {};
my $proto = shift;
my $class = ref($proto) || $proto;
$self-{MF} = [];
$self-{magic} = [];
if (! @_) {
my $fh = *File::MMagic::DATA{IO};
binmode($fh);
bless $fh, 'FileHandle' if ref $fh ne 'FileHandle';
$dataLoc = $fh-tell() if (! defined $dataLoc);
$fh-seek($dataLoc, 0);
readMagicHandle($self, $fh);
} else {
my $filename = shift;
my $fh = new FileHandle;
354---binmode($fh);
if ($fh-open( $filename)) {
readMagicHandle($self, $fh);
} else {
warn __PACKAGE__ .  couldn't load specified file
$filename;
}
}

---
This is the section of Exim.pm that has the failing line:


# Generate a copy of the scanned message and pipe it to mailer.
sub accept_message {
  my $self = shift;
  my $args = shift;
  writelog($args,LOG_INFO, __PACKAGE__.: Accepting message);
  my @cfg_exim_args;

  push @cfg_exim_args, split(/\s+/,$cfg_exim_args);
  push @cfg_exim_args, $$args{'sender'};
  push @cfg_exim_args, @{$$args{'recipients'}};

140 ---  open(MAIL, |-) || exec($cfg_exim_binary,
@cfg_exim_args);
  if ($cfg_x_header) {
print MAIL $cfg_x_header_tag: $cfg_x_header_line\n;
  }
  while (my $line=$$args{'filehandle'}-getline()) {
print MAIL $line;
  }
  close(MAIL);

  if ($? != 0) {
writelog($args,LOG_ERR, __PACKAGE__.: $cfg_exim_binary exited
with .($?8));
  }

  $$args{'status'} = 'accept';

  # Return successfully
  return 1;
}


___
AMaViS-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




exim help (running)

2002-10-08 Thread louie miranda

euclid bin # ./exim -bd -C ../exim.conf
2002-10-09 10:18:17 spool_directory undefined: cannot proceed
2002-10-09 10:18:17 spool_directory undefined: cannot proceed
exim: could not open panic log - aborting: original error above

Hi, im trying to run exim, but it sends me error!




--
thanks,
louie miranda
chikka asia, inc.
noc +63-2(7535000-511)



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]




Re: Exim help

2001-12-01 Thread Karsten M. Self
on Mon, Nov 26, 2001 at 11:38:42AM -0500, Eric Brooks ([EMAIL PROTECTED]) wrote:

 Hi. 

 I am trying to get Exim to work as my mail transport agent. I
 configured exim using eximconfig. I selected the smarthost option
 since I am running on a laptop connected to an ISP via an ISDN line. I
 have no trouble with the connection itself in that I can browse using
 Mozilla and send/receive mail with Mozilla as well. I see the mail
 queued when I run mailq, some marked as frozen and some just queued
 but not sent.
 
 My hostname is localhost. Is this a problem? 

No.  Though it starts getting interesting on a network with multiple
systems, if they're aware of one another.  But hostnames are merely a
convention within a network.

What specifically is your problem?  I don't see any issues here.

Or are you trying to say none of your mail is being delivered?

Have you tried running exim in non-daemon mode or looking through your
error logs?

Peace.

-- 
Karsten M. Self kmself@ix.netcom.com   http://kmself.home.netcom.com/
 What part of Gestalt don't you understand? Home of the brave
  http://gestalt-system.sourceforge.net/   Land of the free
   Free Dmitry! Boycott Adobe! Repeal the DMCA! http://www.freesklyarov.org
Geek for Hire http://kmself.home.netcom.com/resume.html


pgpYjd1FYF0Ue.pgp
Description: PGP signature


Exim help

2001-11-26 Thread Eric Brooks
Hi. I am trying to get Exim to work as my mail transport agent. I 
configured exim using eximconfig. I selected the smarthost option since 
I am running on a laptop connected to an ISP via an ISDN line. I have no 
trouble with the connection itself in that I can browse using Mozilla 
and send/receive mail with Mozilla as well. I see the mail queued when I 
run mailq, some marked as frozen and some just queued but not sent.


My hostname is localhost. Is this a problem? I did not see anything in 
the exim info or man pages that set off any light bulbs for me.


I listed my exim parameters using exim -bP.  The output is attached as 
is my exim.conf file.


Any suggestions of pages I should read or ideas that might help will be 
very appreciated.


Regards,

Eric




no_accept_8bitmime
accept_timeout = 0s
admin_groups =
no_always_bcc
auth_hosts = 
auto_thaw = 0s
bi_command = 
check_log_inodes = 0
check_log_space = 0
check_spool_inodes = 0
check_spool_space = 0
no_collapse_source_routes
daemon_smtp_port = 
debug_level = -1
delay_warning = 1d
delay_warning_condition = ${if 
match{$h_precedence:}{(?i)bulk|list|junk}{no}{yes}}
deliver_load_max =
deliver_queue_load_max =
delivery_date_remove
dns_again_means_nonexist = 
dns_check_names
dns_check_names_pattern = (?i)^(?(?(1)\.|())[^\W_](?[a-z0-9-]*[^\W_])?)+$
dns_retrans = 0s
dns_retry = 0
envelope_to_remove
errmsg_file = 
errmsg_text = 
errors_address = postmaster
errors_copy = 
errors_reply_to = 
exim_group = mail
exim_path = /usr/sbin/exim
exim_user = mail
extract_addresses_remove_arguments
finduser_retries = 0
no_forbid_domain_literals
freeze_tell_mailmaster
gecos_name = $1
gecos_pattern = ^([^,:]*)
no_headers_check_syntax
headers_checks_fail
no_headers_sender_verify
no_headers_sender_verify_errmsg
helo_accept_junk_hosts = 
no_helo_strict_syntax
helo_verify = 
hold_domains = 
host_accept_relay = localhost
host_auth_accept_relay = 
host_lookup = *
host_reject = 
host_reject_recipients = 
hosts_treat_as_local = 
no_ignore_errmsg_errors
ignore_errmsg_errors_after = 0s
ignore_fromline_hosts = 
no_ignore_fromline_local
keep_malformed = 4d
kill_ip_options
ldap_default_servers = 
local_domains = localhost:localdomain:tds.net:[207.1.7.252]
local_domains_include_host
local_domains_include_host_literals
local_interfaces = 
localhost_number = 
locally_caseless
no_log_all_parents
no_log_arguments
log_file_path = /var/log/exim/%slog
log_ip_options
log_level = 5
log_queue_run_level = 0
no_log_received_recipients
no_log_received_sender
no_log_refused_recipients
no_log_rewrites
no_log_smtp_confirmation
no_log_smtp_connections
no_log_smtp_syntax_errors
no_log_subject
lookup_open_max = 25
max_username_length = 0
message_body_visible = 500
message_filter = 
message_filter_directory2_transport = 
message_filter_directory_transport = 
message_filter_file_transport = 
message_filter_group =
message_filter_pipe_transport = 
message_filter_reply_transport = 
message_filter_user =
message_id_header_text = 
message_size_limit = 0
no_message_size_limit_count_recipients
never_users = root
nobody_group =
nobody_user =
percent_hack_domains = 
pid_file_path = /var/run/exim/exim%s.pid
no_preserve_message_logs
primary_hostname = localhost
no_print_topbitchars
prod_requires_admin
prohibition_message = 
qualify_domain = dimension11.net
qualify_recipient = dimension11.net
queue_list_requires_admin
no_queue_only
queue_only_file = 
queue_only_load =
queue_remote_domains = 
no_queue_run_in_order
queue_run_max = 5
queue_smtp_domains = 
rbl_domains = 
rbl_hosts = *
no_rbl_log_headers
no_rbl_log_rcpt_count
rbl_reject_recipients
rbl_warn_header
received_header_text = Received: ${if def:sender_rcvhost {from 
${sender_rcvhost}\n\t}{${if def:sender_ident {from ${sender_ident} }}${if 
def:sender_helo_name {(helo=${sender_helo_name})\n\tby ${primary_hostname} 
${if def:received_protocol {with ${received_protocol}}} (Exim ${version_number} 
#${compile_number} (Debian))\n\tid ${message_id}${if def:received_for {\n\tfor 
$received_for}}
received_headers_max = 30
no_receiver_try_verify
receiver_unqualified_hosts = 
no_receiver_verify
receiver_verify_addresses = 
receiver_verify_hosts = *
receiver_verify_senders = 
recipients_max = 0
no_recipients_max_reject
recipients_reject_except = 
recipients_reject_except_senders = 
refuse_ip_options
relay_domains = 
no_relay_domains_include_local_mx
no_relay_match_host_or_sender
remote_max_parallel = 1
remote_sort = 
retry_data_expire = 1w
retry_interval_max = 1d
return_path_remove
return_size_limit = 100K
rfc1413_hosts = *
rfc1413_query_timeout = 30s
security = setuid+seteuid
sender_address_relay = 
sender_reject = 
sender_reject_recipients = 
no_sender_try_verify
sender_unqualified_hosts = 
no_sender_verify
no_sender_verify_batch
no_sender_verify_fixup
sender_verify_hosts = *
sender_verify_max_retry_rate = 12
sender_verify_reject
smtp_accept_keepalive
smtp_accept_max = 20
smtp_accept_max_per_host = 0
smtp_accept_queue = 0
smtp_accept_queue_per_connection = 100

Exim help

2001-07-01 Thread aparra
I will like to use the host_auth_accept_relay option from exim, but it 
doesn work. I am usin exim 3.12-10 from debian 2.2.


Do I need to recompile exim with AUTH_CRAM_MD5=yes???

Can anybody give me an example of comfiguration for accept relays to 
anywhere form anywhere if the user has a correct pasword??



Thank you for all!


Angel




Re: exim help needed

2000-11-12 Thread Krzys Majewski
Thanks Carel! This is exactly what I had in mind, but I
didn't know how to pull it off. Much nicer than my 
/etc/init.d/tcp-pipes hack, though a bit more overhead 
(slow on this 486/33, should be ok on the p3/500).
groetjes,
chris

 So I did it differently using tcp-wrappers/inetd, like this:
 
 In /etc/services I added lines like isp-smtp  100025/tcp. Numbers
 above 10 go beyond the specs, but they seam to work here and
 no-one else is likely to use them, so no conflicts expected:)
 
 In /etc/inetd.conf I added long-one-liners like:
 isp-smtp   stream  tcp  nowait  carel\
 /usr/bin/ssh   /usr/bin/ssh isp bin/nc mail.isp.nl smtp
 
 At my reliable ips I have compiled nc (netcat) and put it in ~/bin/nc.



Re: exim help needed

2000-11-01 Thread Carel Fellinger
On Tue, Oct 31, 2000 at 11:58:51PM +0100, Carel Fellinger wrote:
...
 In /etc/services I added lines like isp-smtp  100025/tcp. Numbers
 above 10 go beyond the specs, but they seam to work here and
 no-one else is likely to use them, so no conflicts expected:)

Stupid me, ofcourse it works, the numbers silently overflow:(
100025 is actually 34489, so you better not use my stupid numbering scheme.

-- 
groetjes, carel



Re: exim help needed

2000-10-31 Thread Carel Fellinger
On Mon, Oct 30, 2000 at 08:17:21PM -0800, Krzys Majewski wrote:
...
  Just curious, what tricks do you use to create this port forwarding?
  And is it created on the fly? 
 
 I create the pipes in /etc/network/interfaces:
 
  up sleep 3  /etc/init.d/tcp-pipes start  /usr/local/sbin/sync-date
  down /etc/init.d/eam  tcp nowait  carel   /usr/bin/ssh
 /usr/bin/ssh iae bin/nc mail.iae.nl eam  tcp nowait  carel   /usr/bin/ssh 
/usr/bin/ssh ire bin/nc uucp.iae.nl uucp-pipes stop

Ah neat, again a different approach.

...
 SSHARGS=${SSHFLAGS} -l ${USER} -L ${LOCALPORT}:${DEST}:${REMOTEPORT} 
 ${HOST} ${PIPE}l

what is this ${PIPE}l? some program you run on the other side?
I would have expected something like sleep forever.

...snipped a lot of code to deal with pide's

The problem with your way for me I think is that my ISP is flacky, so
the connections would get brooken all to often, and I don't know whether
the up and down scripts would get run, I'm not even sure whether such
breakdowns would go unnoticed by the network layer on my firewall or
automagically repaired. An other problem seems to me that you expect
that at your school the ${PIPE}l magic program runs forever, whereas
even my more reliable second isp is not that reliable:(, more over
I don't feel comsy with those pipes open all the time (silly I know)

So I did it differently using tcp-wrappers/inetd, like this:

In /etc/services I added lines like isp-smtp  100025/tcp. Numbers
above 10 go beyond the specs, but they seam to work here and
no-one else is likely to use them, so no conflicts expected:)

In /etc/inetd.conf I added long-one-liners like:
isp-smtp   stream  tcp  nowait  carel\
/usr/bin/ssh   /usr/bin/ssh isp bin/nc mail.isp.nl smtp

At my reliable ips I have compiled nc (netcat) and put it in ~/bin/nc.
I'm quit sure that rlogin instead of nc will work too, but I didn't try.
I've setup keys and ~/.ssh/config so that my local user carel can ssh isp
and wines-up being login-ed into my differently named account at my isp
without password hassels.

So whenever someone locally tries to connected to one of those isp-* ports
a secure connection to my isp is created using my local carel's ssh setup
and once he/she is done the connection is closed again.

I think this is reasonable secure, as I allow everbody locally to use news
and mail anyhow and my isp's imap/pop3 service is still password-protected.

-- 
groetjes, carel



Re: exim help needed

2000-10-31 Thread Krzys Majewski
On Tue, 31 Oct 2000, Carel Fellinger wrote:

down /etc/init.d/eam  tcp nowait carel  /usr/bin/ssh /usr/bin/ssh iae
bin/nc mail.iae.nl eam tcp  nowait carel /usr/bin/ssh /usr/bin/ssh ire
bin/nc uucp.iae.nl uucp-pipes stop

Come again? 

  SSHARGS=${SSHFLAGS} -l ${USER} -L ${LOCALPORT}:${DEST}:${REMOTEPORT} 
  ${HOST} ${PIPE}l
 
 what is this ${PIPE}l? some program you run on the other side?
 I would have expected something like sleep forever. 

Oh yeah.  It's basically sleep  forever except replace  sleep with
wait and  add this  feature: if an  instance of the  program already
exists, replace it with this one. Code follows below.

 So I did it differently using tcp-wrappers/inetd, like this:

Cool, let me try it..

-chris

/* program that hangs forever */
/* only one instance of it (by a given name) may run at a time */
/* ln(1) the executable to whatever names you need */
#include stdio.h
#include unistd.h
#include strings.h
#include sys/types.h
#include signal.h
#include stdlib.h
#include malloc.h
#include libgen.h

int
main(int arc, const char** argv)
{
  const char* home = getenv(HOME);
  char* fullName = (char *)malloc(1000*sizeof(char));
  char* name = NULL;
  pid_t pid = getpid();
  pid_t previousPid = 0;
  char* fileName = (char*)malloc(1000*sizeof(char));
  FILE* file = NULL;
  int _signal = 9;

  strcpy(fullName, argv[0]);
  name = basename(fullName);
  fileName[0] = (char)0;
  strcat(fileName, home);
  strcat(fileName, /var/run/);
  strcat(fileName, name);
  strcat(fileName, .pid);
  file = fopen(fileName, r);
  if (file == NULL) {
fprintf(stderr, Failed to open file '%s' for reading\n, fileName);
exit(1);
  }
  fscanf(file, %d, previousPid);
  if (previousPid != pid) {
if (previousPid  0) {
  /* There is a race condition here. If we kill the old instance
 before overwriting its PID, a third instance could try to kill 
 a nonexistent process. If on the other hand we overwrite
 the PID first, a third instance could kill us before we have 
 a chance to kill the old instance. 
  */
  int result = kill(previousPid, _signal);
  if (result != 0) {
fprintf(stderr, 
Failed to kill PID '%d' with signal '%d'\n
Continuing anyway...\n,
previousPid, 
_signal);
  }
}
  } else {
fprintf(stderr,
Suicide attempt thwarted\n);
exit(1);
  }
  {
int result;
fclose(file);
file = fopen(fileName, w);
if (file == NULL) {
  fprintf(stderr, Failed to open file '%s' for writing\n, fileName);
  exit(1);
}
fprintf(file, %d, pid);
fflush(file);
fclose(file);
result = pause();
fprintf(stderr, pause() returned value '%d'\n, result);
return 0;
  }
}



Re: exim help needed

2000-10-31 Thread Carel Fellinger
On Tue, Oct 31, 2000 at 03:36:08PM -0800, Krzys Majewski wrote:
 On Tue, 31 Oct 2000, Carel Fellinger wrote:
 
 down /etc/init.d/eam  tcp nowait carel  /usr/bin/ssh /usr/bin/ssh iae
 bin/nc mail.iae.nl eam tcp  nowait carel /usr/bin/ssh /usr/bin/ssh ire
 bin/nc uucp.iae.nl uucp-pipes stop
 
 Come again? 

cc-ing you in mutt I forgot that I had put something else in gpm's buffer
and foolishly clicked the 2e mouse button. Not sure what commands got
executed:(, this is just a left over, let's pretend it isn't there:)

  I would have expected something like sleep forever. 
 
 Oh yeah.  It's basically sleep  forever except replace  sleep with
 wait and  add this  feature: if an  instance of the  program already
 exists, replace it with this one. Code follows below.

Looks like something worth of adding to my toolbox.
You could add mkdir and rmdir calls around this pid reading/writing stuff
to ment this race condition you mentioned. Not really necessary for your
current use.

-- 
groetjes, carel



Re: exim help needed

2000-10-30 Thread Krzys Majewski
   Add a transport in the Transport section:
 
 tunneled_smtp:
driver = smtp
port = 6025
 
   Start the Router section with:
 
 smart_tunnel:
driver = domainlist
transport = tunneled_smtp
self = send
route_list = * localhost byname
 
 And of you go! That is, if the port is forwarded in time.
 It works here, but I give no garantees:)

Thanks for the response, I will try it out. 

 Just curious, what tricks do you use to create this port forwarding?
 And is it created on the fly? 

I create the pipes in /etc/network/interfaces:

 up sleep 3  /etc/init.d/tcp-pipes start  /usr/local/sbin/sync-date
 down /etc/init.d/tcp-pipes stop

(don't remember what the 'sleep 3' is for..) 

/etc/init.d/tcp-pipes  is the  script below.  The command  msleep is
just a C  wrapper around usleep(3c). You can  use sleep instead (but
maybe make the numbers smaller..) 
-chris

#! /bin/sh
#
# Port forwarding to servers which would otherwise refuse connections from us
#
set -x
echo $*
NAME=`basename $0`
PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin
SSH=/usr/bin/ssh2 
SSHBASENAME=`basename ${SSH}`
SSHFLAGS=-f -x
HOST=cascade.cs.ubc.ca
USER=majewski

start()
{
LOCALPORT=$1
DEST=$2
REMOTEPORT=$3
PIPE=$4
SSHARGS=${SSHFLAGS} -l ${USER} -L ${LOCALPORT}:${DEST}:${REMOTEPORT} 
${HOST} ${PIPE}l
PIDFILE=/var/run/${PIPE}-pipe.pid
if [ -e ${PIDFILE} ]; then
rm ${PIDFILE}
fi
if start-stop-daemon --start --verbose  --background --make-pidfile 
--pidfile ${PIDFILE} --exec ${SSH} -- ${SSHARGS} 21 | logger; then
fixpid ${PIPE} ${PIDFILE}
fi
}

# Wait for the PIDFILE to get the initial PID of the ssh process
# Wait for the ssh process to exec() to a different PID
# Put the new PID in the PIDFILE
fixpid()
{
PIPE=$1
PIDFILE=$2
PID=
NEWPID=
COUNT=1
MAXCOUNT=60
GOTCHA=false
while [ ${PID} =  ]; do
if [ ${COUNT} -gt ${MAXCOUNT} ]; then
logger ${NAME}: initial PID not found for ${PIPE}
logger ${NAME}: continuing anyway...
break
fi
if [ -e ${PIDFILE} ]; then
PID=`cat ${PIDFILE}`
fi
COUNT=`expr ${COUNT} + 1`
msleep 1
done
# sleep until the process with the old PID goes away
# can't use 'wait' because the ssh process is not our child
logger Waiting for ${PIPE} pipe to fork
COUNT=1
while ps h -o pid -p ${PID}  /dev/null; do
if [ ${COUNT} -gt ${MAXCOUNT} ]; then
logger ${NAME}: new PID not found for ${PIPE}
logger ${NAME}: continuing anyway...
break
fi
COUNT=`expr ${COUNT} + 1`
GOTCHA=true
msleep 1
done
NEWPID=`ps h -C ${SSHBASENAME} | grep ${PIPE} | awk '{print $1}'`
if [ ${NEWPID} =  ]; then
logger ${NAME}: Empty PID, you may have to stop ${PIPE} manually later 
on
else
echo ${NEWPID}  ${PIDFILE}
fi
}

stop()
{
PIPE=$1
PID=
logger Stopping ${PIPE}
PIDFILE=/var/run/${PIPE}-pipe.pid
start-stop-daemon --stop --verbose --pidfile ${PIDFILE}
if [ $? -ne 0 ]; then
PID=`ps h -C ${SSHBASENAME} | grep ${PIPE} | awk '{print $1}'`
if [ ${PID} !=  ]; then
echo Killing ${PIPE} pipe by brute force
logger ${NAME}: Killing ${PIPE} pipe by brute force
# ask process to die honorably
kill -TERM ${PID}
# coup de grace if necessary
PID=`ps h -C ${SSHBASENAME} | grep ${PIPE} | awk '{print $1}'`
if [ ${PID} !=  ]; then
kill -KILL ${PID}
fi
else
logger ${NAME}: Couldn't find PID for ${PIPE}, not killing
fi
fi
rm -f ${PIDFILE}
}

startImap()
{
logger Starting IMAP pipe
start 6143 imap.cs.ubc.ca 143 imap

}

startNntp()
{
logger Starting NNTP pipe
start 6119 news.cs.ubc.ca 119 nntp 
}

startSmtp()
{
logger Starting SMTP pipe
start 6025 mailhost.cs.ubc.ca 25 smtp 
}

startAll()
{
echo Starting ${NAME}: 
startImap
startNntp
startSmtp
echo ${NAME}.
}


stopAll()
{
echo Stopping ${NAME}: 
stop imap
stop nntp
stop smtp
echo ${NAME}.
}

case $1 in
imap)
startImap
;;
nntp)
startNntp
;;
smtp)
startSmtp
;;  
  start)
startAll
;;
  stop)
stopAll
;;
  restart)
stopAll
startAll
;;
  *)
N=/etc/init.d/${NAME}
# echo Usage: $N {start|stop|restart|reload|force-reload} 2
# echo Usage: $N {start|stop|restart|force-reload} 2
echo Usage: $N {start|stop} 2
exit 1
;;
esac

exit 0




Re: exim help needed

2000-10-22 Thread Carel Fellinger
Hai Krzys,

sorry to bud in so late, and for breaking the thread referencing
but it was only after I deleted the whole thread from within mutt
that I realised that I might offer some help. I picked up your
first request from the muc.list.debian.user netnews copy of debian-user.

 Newsgroups: muc.lists.debian.user
 
 OK I've given up on sendmail. On  to exim now. Here are the features I
 want. Right now, it looks like sending mail fails silently.
 -  cron   jobs  can   send  mail  to   root,  who  forwards   them  to
 [EMAIL PROTECTED]
 - remote machines can't send mail to my machine (ie don't run a daemon
 on port 25)
 - outgoing mail  (e.g. from Mutt) send via  localhost:6025 which is port
 forwarded to smtp.cs.ubc.ca:25.

As was pointed out to you, and you already started doing, you have to
reconfigure exim to use a smart-host. Then do some editing in /etc/exim.conf:

  Add a transport in the Transport section:

tunneled_smtp:
   driver = smtp
   port = 6025

  Start the Router section with:

smart_tunnel:
   driver = domainlist
   transport = tunneled_smtp
   self = send
   route_list = * localhost byname

And of you go! That is, if the port is forwarded in time.
It works here, but I give no garantees:)

Just curious, what tricks do you use to create this port forwarding?
And is it created on the fly?

-- 
groetjes, carel



Re: exim help needed (fwd)

2000-10-21 Thread Krzys Majewski
#/part
#part type=application/octet-stream filename=/etc/hosts.allow 
disposition=attachment description=/etc/hosts.allow
#/part
#part type=application/octet-stream filename=/etc/hosts.deny 
disposition=attachment description=/etc/hosts.deny
#/part
References: [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED]
From: Krzys Majewski [EMAIL PROTECTED]
Date: 21 Oct 2000 11:54:26 -0700
In-Reply-To: [EMAIL PROTECTED]'s message of Fri, 20 Oct 2000 14:49:57 -0500
Message-ID: [EMAIL PROTECTED]
Lines: 11
User-Agent: Gnus/5.0803 (Gnus v5.8.3) Emacs/20.5
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
--text follows this line--
OK, I got exim running with eximconfig option 3, ie satellite
system. Main  problem with this: people  can still telnet  to my port
25. I don't want this. With sendmail  I was able to not run the daemon
at all, and mail would still get sent (sendmail would run every couple
minutes and process the queue). Can I do something similar in exim? 
Secondary problem with  my setup: My home machine /  IP appears in the
headers (not in this mail, but when I use exim), can I disable this? 
Attached are my exim.conf,  hosts.deny, and hosts.allow, maybe someone
can look at them and tell me what needs changing.. 
chris




Re: exim help needed (fwd)

2000-10-20 Thread timmy
On Thu, Oct 19, 2000 at 01:27:01PM -0700, Krzys Majewski wrote:
   Dunno, what's that? I want my mail going to/from my school server. 
  
  exim calls this a smarthost.  Rerun eximconfig and two of your canned
  configuration options will be 
  
   (2) Internet site using smarthost: You receive Internet mail on this 
   machine, either directly by SMTP or by running a utility such as 
   fetchmail. Outgoing mail is sent using a smarthost. optionally with
   addresses rewritten. This is probably what you want for a dialup
   system.
  
   (3) Satellite system: All mail is sent to another machine, called a smart 
   host for delivery. root and postmaster mail is delivered according 
   to /etc/aliases. No mail is received locally.
  
  Choose one of these (probably the first) and, if your school will let you 
  use
  them as a smarthost, you should be set.
 
 I did this.  Mutt claims to send  my mail (in other words  it does not
 complain),  but  the mail  is  never sent.  I  don't  see anything  in
 /var/spool/mqueue, though  perhaps I shouldn't. Maybe  someone who has
 this working  can just send me  the relevant config  files, for either
 exim  or   any  other  MTA  (though  preferably   not  the  gargantuan
 sendmail). It would really be nice to be able to send mail, sigh.. 
 chris

mutt will by default pipe its message to /usr/lib/sendmail (?)
and that will send the mail to the smtp server or whatever.
I have ssmtp and a smtpd server i made, so ssmtp (which has
/usr/lib/sendmail and /usr/sbin/ssmtp i think) sends the smtp
data to my mail host which is localhost and my smtpd sends it to my
smarthost.






Re: exim help needed (fwd)

2000-10-20 Thread Moritz Schulte
[EMAIL PROTECTED] writes:

 mutt will by default pipe its message to /usr/lib/sendmail (?)

from muttrc(5):

   [...]
   sendmail
  Type: path
  Default: /usr/sbin/sendmail -oem -oi

  Specifies the program and arguments used to deliver
  mail sent by Mutt.
   [...]

That's correct, 'cause /usr/sbin/sendmail is a link to /usr/sbin/exim,
if you're using Exim as your MTA.

 and that will send the mail to the smtp server or whatever.

This *is* your MTA; Mutt will just give it to your MTA, not send
it (if that makes it clearer). Then it's the MTA's job to actually
sent it out somewhere...

 I have ssmtp and a smtpd server i made, so ssmtp (which has
 /usr/lib/sendmail and /usr/sbin/ssmtp i think) sends the smtp
 data to my mail host which is localhost and my smtpd sends it to my
 smarthost.

Oh, i just read the package description of 'ssmtp'. Ehm, it has
nothing to do with Exim (?). ssmtp is an own, very simple MTA, which
just delivers mail.

moritz
-- 
/* Moritz Schulte [EMAIL PROTECTED]
 * http://hp9001.fh-bielefeld.de/~moritz/
 * PGP-Key available, encrypted Mail is welcome.
 */



Re: exim help needed (fwd)

2000-10-20 Thread Keith G. Murphy
Moritz Schulte wrote:
 
 
 Oh, I've an idea. Some mail servers (for example GMX's ones) filter
 (yes, they just kick them out) mails, which have some header wrong
 header entries. For example, if you have an X-Sender:
 [EMAIL PROTECTED] entry, it gets filtered out by GMX,
 IIRC. Try sending yourself a mail local, just to
 [EMAIL PROTECTED] Does this mail arrive? Can you see, wether it has
 bad headers?
 
Also, perhaps it doesn't like your sending domain name.  Try changing
the value of qualify_domain in exim.conf, for example, to your school's
own domain name.



Re: exim help needed (fwd)

2000-10-20 Thread Krzys Majewski
Yow. You  mean I  need to  write my own  daemon just  to do  this?! If
that's the case I think I'll  foresake the idealistic Mutt and go back
to pine.. 
*sigh*
chris


 mutt will by default pipe its message to /usr/lib/sendmail (?)
 and that will send the mail to the smtp server or whatever.
 I have ssmtp and a smtpd server i made, so ssmtp (which has
 /usr/lib/sendmail and /usr/sbin/ssmtp i think) sends the smtp
 data to my mail host which is localhost and my smtpd sends it to my
 smarthost.
 
 
 
 



Re: exim help needed (fwd)

2000-10-20 Thread Krzys Majewski
On Fri, 20 Oct 2000 [EMAIL PROTECTED] wrote:

 
 no i mean you can use exim, i just like to use what i made.
 
 i think you only really need exim for receiving mail.
 this is how it works i think for most people:
 
 receiving: fetchmail pull from pop3 server - localhost port 25 (your
 mta) - /var/spool/mail/blahblah
 
 sending: mutt - piped to program like ssmtp - your smtp server
 (nslookup mail?) - ...
 
 
 is that what you were asking? 

Yeah except ssmtp is a bit too flaky for me, I think it won't even let
me specify  the port. I  was hoping to  use a regular-joe  mailer like
sendmail or exim. Receiving mail is not a problem, I use IMAP. -chris



Re: exim help needed (fwd)

2000-10-20 Thread timmy
On Fri, Oct 20, 2000 at 11:46:54AM -0700, Krzys Majewski wrote:
 On Fri, 20 Oct 2000 [EMAIL PROTECTED] wrote:
 
  
  no i mean you can use exim, i just like to use what i made.
  
  i think you only really need exim for receiving mail.
  this is how it works i think for most people:
  
  receiving: fetchmail pull from pop3 server - localhost port 25 (your
  mta) - /var/spool/mail/blahblah
  
  sending: mutt - piped to program like ssmtp - your smtp server
  (nslookup mail?) - ...
  
  
  is that what you were asking? 
 
 Yeah except ssmtp is a bit too flaky for me, I think it won't even let
 me specify  the port. I  was hoping to  use a regular-joe  mailer like
 sendmail or exim. Receiving mail is not a problem, I use IMAP. -chris
 

so we are back to the problem where we have to tell your sendmail or
exim to send to your school smtp server, right?

well i don't really know how to help you there... i would probably try
the exim or sendmail config tools and see if you can masquerade and
use the school as your smarthost or something like that and then
chooes the port also... well, i don't know...

or if you're really up to the challenge, i could try to help you set
up my program but i don't know if it is worth the trouble because it
is still alpha or beta or not really tested, but i'm using it right now
atleast!



Re: exim help needed (fwd)

2000-10-19 Thread Krzys Majewski
  Dunno, what's that? I want my mail going to/from my school server. 
 
 exim calls this a smarthost.  Rerun eximconfig and two of your canned
 configuration options will be 
 
  (2) Internet site using smarthost: You receive Internet mail on this 
  machine, either directly by SMTP or by running a utility such as 
  fetchmail. Outgoing mail is sent using a smarthost. optionally with
  addresses rewritten. This is probably what you want for a dialup
  system.
 
  (3) Satellite system: All mail is sent to another machine, called a smart 
  host for delivery. root and postmaster mail is delivered according 
  to /etc/aliases. No mail is received locally.
 
 Choose one of these (probably the first) and, if your school will let you use
 them as a smarthost, you should be set.

I did this.  Mutt claims to send  my mail (in other words  it does not
complain),  but  the mail  is  never sent.  I  don't  see anything  in
/var/spool/mqueue, though  perhaps I shouldn't. Maybe  someone who has
this working  can just send me  the relevant config  files, for either
exim  or   any  other  MTA  (though  preferably   not  the  gargantuan
sendmail). It would really be nice to be able to send mail, sigh.. 
chris



Re: exim help needed (fwd)

2000-10-19 Thread Krzys Majewski
Philipp Schulte [EMAIL PROTECTED] writes:

  No I get my mail from the  school's IMAP server. I want to send it via
  it's SMTP  server, or SMTP relay  server, or any  server whatsoever at
  cs.ubc.ca. Surely it can't be that hard! -chris
 
 But why? If you can't reach that server why don't you use your ISP's?
 What exactly is your problem then?
 Phil

Well, the  point isn't really  why I want  to do it  but how can  I do
it. In any case,  the reason I want to do it  is elegance (all my mail
is dealt with  by the same organization) and the fact  that I trust my
school sysadmins  more than  Rogers.com. Though if I  can't figure
out how to tell exim to telnet to localhost:6025 within a week, I will
do as you  suggest and use my ISP's server.  Except, that still leaves
me   with   the  same   problem:   whether   it's  localhost:6025   or
smtp.ISP.com:25, I can't convince exim to look there! -chris




Re: exim help needed (fwd)

2000-10-19 Thread Moritz Schulte
Krzys Majewski [EMAIL PROTECTED] writes:

  Choose one of these (probably the first) and, if your school will
  let you use them as a smarthost, you should be set.
 
 I did this.  Mutt claims to send  my mail (in other words  it does not
 complain),  but  the mail  is  never sent.

Are you sure, that the mail is not *sent*?

 I don't see anything in /var/spool/mqueue, though perhaps I
 shouldn't.

If you tell Mutt to send the mail, it gives it to exim via a command.
With 'mailq' you can see your mail queue, it is empty? So, it could
be, that the mail is already sent by exim. Check the log files in
/var/log for more information...

Oh, I've an idea. Some mail servers (for example GMX's ones) filter
(yes, they just kick them out) mails, which have some header wrong
header entries. For example, if you have an X-Sender:
[EMAIL PROTECTED] entry, it gets filtered out by GMX,
IIRC. Try sending yourself a mail local, just to
[EMAIL PROTECTED] Does this mail arrive? Can you see, wether it has
bad headers?

 Maybe someone who has this working can just send me the
 relevant config files, for either exim or any other MTA (though
 preferably not the gargantuan sendmail).

The standard eximconfig has alway worked fine for me.

moritz
-- 
/* Moritz Schulte [EMAIL PROTECTED]
 * http://hp9001.fh-bielefeld.de/~moritz/
 * PGP-Key available, encrypted Mail is welcome.
 */



Re: exim help needed (fwd)

2000-10-19 Thread Moritz Schulte
Krzys Majewski [EMAIL PROTECTED] writes:

 Though if I can't figure out how to tell exim to telnet to
 localhost:6025 within a week, I will do as you suggest and use my
 ISP's server.

Sorry, why should your exim telnet to localhost:6025? Exim should
sent the mails there?

 Except, that still leaves me with the same problem: whether it's
 localhost:6025 or smtp.ISP.com:25, I can't convince exim to look
 there!

That's really easy with eximconfig; there you can configure a
smarthost, a host, where all the (non-local) mails are sent.


moritz
-- 
/* Moritz Schulte [EMAIL PROTECTED]
 * http://hp9001.fh-bielefeld.de/~moritz/
 * PGP-Key available, encrypted Mail is welcome.
 */



Re: exim help needed (fwd)

2000-10-17 Thread Philipp Schulte
On Mon, Oct 16, 2000 at 06:30:37PM -0700, Krzys Majewski wrote: 

  Doesn't your ISP offer you a SMTP-Relay-Server? If you are connected
  most of the time you don't need one anyway...
 
 Dunno, what's that? I want my mail going to/from my school server. 

To me it seems like you are assuming that mails _from_ you have to go
the same way like mails _to_ you. That is not the case!
An SMTP-Relay-Server may be located somewhere in the Internet, you
just need to be able to relay over it. Exim calls this a Smarthost and
asks you after installation if you have one. Usually your ISP has one
and so you can relay mails over this server.
So it is possible to receive mails from POP3-Server A and send mails
over SMTP-Server B.
Phil



Re: exim help needed (fwd)

2000-10-17 Thread Krzys Majewski
Philipp Schulte [EMAIL PROTECTED] writes:
 To me it seems like you are assuming that mails _from_ you have to go
 the same way like mails _to_ you. That is not the case!
 An SMTP-Relay-Server may be located somewhere in the Internet, you
 just need to be able to relay over it. Exim calls this a Smarthost and
 asks you after installation if you have one. Usually your ISP has one
 and so you can relay mails over this server.
 So it is possible to receive mails from POP3-Server A and send mails
 over SMTP-Server B.
 Phil

No I get my mail from the  school's IMAP server. I want to send it via
it's SMTP  server, or SMTP relay  server, or any  server whatsoever at
cs.ubc.ca. Surely it can't be that hard! -chris



Re: exim help needed (fwd)

2000-10-17 Thread Philipp Schulte
On Tue, Oct 17, 2000 at 09:18:31AM -0700, Krzys Majewski wrote: 

 Philipp Schulte [EMAIL PROTECTED] writes:
  To me it seems like you are assuming that mails _from_ you have to go
  the same way like mails _to_ you. That is not the case!
  An SMTP-Relay-Server may be located somewhere in the Internet, you
  just need to be able to relay over it. Exim calls this a Smarthost and
  asks you after installation if you have one. Usually your ISP has one
  and so you can relay mails over this server.
  So it is possible to receive mails from POP3-Server A and send mails
  over SMTP-Server B.
  Phil
 
 No I get my mail from the  school's IMAP server. I want to send it via
 it's SMTP  server, or SMTP relay  server, or any  server whatsoever at
 cs.ubc.ca. Surely it can't be that hard! -chris

But why? If you can't reach that server why don't you use your ISP's?
What exactly is your problem then?
Phil

Please no more CC, I am reading the list.



Re: exim help needed (fwd)

2000-10-16 Thread Philipp Schulte
On Sun, Oct 15, 2000 at 07:21:01PM -0700, Krzys Majewski wrote: 

  Did you look at /etc/aliases?
 Yeah, what should it say? 

Mine says:

postmaster: root
root: phil
...

   - outgoing mail  (e.g. from Mutt) send via  localhost:6025 which is port
   forwarded to smtp.cs.ubc.ca:25. 
  
  May I ask why you want outgoing mail to be sent through port 6025?
 
 Nominally because my school smtp server (the one I want to use) 
 won't accept connections from machines outside the school subnet,
 and my ISP is different from the school's. So I've set up a tcp
 pipe from home to school via one of the school servers. Pine and Gnus
 use it, for example. -chris

Doesn't your ISP offer you a SMTP-Relay-Server? If you are connected
most of the time you don't need one anyway...
Phil



Re: exim help needed (fwd)

2000-10-16 Thread Krzys Majewski
Philipp Schulte [EMAIL PROTECTED] writes:

 Mine says:
 
 postmaster: root
 root: phil

Aha, so does mine, now. (except for the phil part..) 

 Doesn't your ISP offer you a SMTP-Relay-Server? If you are connected
 most of the time you don't need one anyway...

Dunno, what's that? I want my mail going to/from my school server. 
-chris




exim help needed

2000-10-15 Thread Krzys Majewski
OK I've given up on sendmail. On  to exim now. Here are the features I
want. Right now, it looks like sending mail fails silently. 
-  cron   jobs  can   send  mail  to   root,  who  forwards   them  to
[EMAIL PROTECTED]
- remote machines can't send mail to my machine (ie don't run a daemon
on port 25)
- outgoing mail  (e.g. from Mutt) send via  localhost:6025 which is port
forwarded to smtp.cs.ubc.ca:25. 
- I think that's all. 

-chris



Re: exim help needed

2000-10-15 Thread Moritz Schulte
Krzys Majewski [EMAIL PROTECTED] writes:

 OK I've given up on sendmail. On  to exim now. Here are the features I
 want. Right now, it looks like sending mail fails silently. 
[...]
 - outgoing mail  (e.g. from Mutt) send via  localhost:6025 which is port
 forwarded to smtp.cs.ubc.ca:25. 
[...]

How have you Mutt configured to sent mail via SMTP to localhost:6025?
Mutt, like the most MUAs, wants to send mail via /usr/sbin/sendmail,
and _not_ directly via SMTP. So, it's the MTA's role to _send_ the
mail somewhere.

I'm not sure about it, but IIRC I've heard, that there's a compile
option for Mutt, which enables direct SMTP transport.
But, it would be better, IMHO, to configure your exim correctly and
let Mutt send via /usr/sbin/sendmail...

moritz
-- 
/* Moritz Schulte [EMAIL PROTECTED]
 * http://hp9001.fh-bielefeld.de/~moritz/
 * PGP-Key available, encrypted Mail is welcome.
 */



Re: exim help needed

2000-10-15 Thread Philipp Schulte
On Sun, Oct 15, 2000 at 04:22:50PM -0700, Krzys Majewski wrote: 

 OK I've given up on sendmail. On  to exim now. Here are the features I
 want. Right now, it looks like sending mail fails silently. 

 -  cron   jobs  can   send  mail  to   root,  who  forwards   them  to
 [EMAIL PROTECTED]

Did you look at /etc/aliases?

 - remote machines can't send mail to my machine (ie don't run a daemon
 on port 25)

This line should be in your exim.conf:
host_accept_relay = localhost

The deamon can run on port 25 because this setting will refuse to
accept mails from other hosts than your localhost. If you don't want
other hosts to connect to 25 in the first place, have a look at
/etc/hosts.allow and .deny

 - outgoing mail  (e.g. from Mutt) send via  localhost:6025 which is port
 forwarded to smtp.cs.ubc.ca:25. 

May I ask why you want outgoing mail to be sent through port 6025?

Phil



Re: exim help needed (fwd)

2000-10-15 Thread Krzys Majewski


-- Forwarded message --
Date: Sun, 15 Oct 2000 19:10:05 -0700
From: Krzys Majewski [EMAIL PROTECTED]
To: Philipp Schulte [EMAIL PROTECTED]
Subject: Re: exim help needed

 Did you look at /etc/aliases?
Yeah, what should it say? 

  - remote machines can't send mail to my machine (ie don't run a daemon
  on port 25)
 
 This line should be in your exim.conf:
 host_accept_relay = localhost
 
 The deamon can run on port 25 because this setting will refuse to
 accept mails from other hosts than your localhost. If you don't want
 other hosts to connect to 25 in the first place, have a look at
 /etc/hosts.allow and .deny

Hm I'll check that out..

  - outgoing mail  (e.g. from Mutt) send via  localhost:6025 which is port
  forwarded to smtp.cs.ubc.ca:25. 
 
 May I ask why you want outgoing mail to be sent through port 6025?

Nominally because my school smtp server (the one I want to use) 
won't accept connections from machines outside the school subnet,
and my ISP is different from the school's. So I've set up a tcp
pipe from home to school via one of the school servers. Pine and Gnus
use it, for example. -chris




Re: sendmail (or exim) help, please

2000-02-25 Thread Mark Wagnon
On 02/25/00 05:39AM, [EMAIL PROTECTED] wrote:
 Hi !
 
 Is it possibble to masquarade my e-mail to the outside world from 
 my LAN ? I'll tell you exactly what I wanted to say. I have a local 
 LAN, one e-mail address. I have set up a local DNS and ipchains 
 rules but I stopped at sendmail. I want to relay mail for the local 
 machines and put the mail into a queue if it goes to the inet but 
 deliver immediatelly inside the LAN. The domain has the name 
 linbase.org (not registreted) so all of the outgoing mails have to 
 have [EMAIL PROTECTED] (the valid mail address) at the From: 
 and in the Reply-to: fields, not [EMAIL PROTECTED]
 Please, help me, how to setup this ! I welcome any URLs, RTFMs, 
 HOWTOs if it's apart from the official docs in the distros, 
 because I have already read through them but (maybe I'm too dumb 
 or overlooked something) found nothing to my special problem. 
 Does anyone has a working solution to the situation like this ? If 
 you have a solution with Exim I would welcome it too.
 Thanx a lot,
 Ago
 

I don't know how many users you have, or if you're looking for more
elegant way to do it, but there's a Linux Gazette article for
setting up mail for a home network. In it the author shares one
email address between himself and his wife by filtering on the Real
Name of the recipient rather than the email address. This isn't
very secure, so if you have a bunch of users, then it may not be the
best method. Check out the article, it may give you some pointers.
The URL is:

   http://www.linuxgazette.com/issue43/stumpel.html

and in case I messed that up, it's the July 1999 issue (#43)

hth
-- 
 
 ) Mark Wagnon  ) [EMAIL PROTECTED]  )
(  Chula Vista, CA (  [EMAIL PROTECTED] (
 


Re: sendmail (or exim) help, please

2000-02-25 Thread John Pearson
On Fri, Feb 25, 2000 at 05:39:08AM +0800, [EMAIL PROTECTED] wrote
 Hi !
 
 Is it possibble to masquarade my e-mail to the outside world from 
 my LAN ? I'll tell you exactly what I wanted to say. I have a local 
 LAN, one e-mail address. I have set up a local DNS and ipchains 
 rules but I stopped at sendmail. I want to relay mail for the local 
 machines and put the mail into a queue if it goes to the inet but 
 deliver immediatelly inside the LAN. The domain has the name 
 linbase.org (not registreted) so all of the outgoing mails have to 
 have [EMAIL PROTECTED] (the valid mail address) at the From: 
 and in the Reply-to: fields, not [EMAIL PROTECTED]
 Please, help me, how to setup this ! I welcome any URLs, RTFMs, 
 HOWTOs if it's apart from the official docs in the distros, 
 because I have already read through them but (maybe I'm too dumb 
 or overlooked something) found nothing to my special problem. 
 Does anyone has a working solution to the situation like this ? If 
 you have a solution with Exim I would welcome it too.
 Thanx a lot,
 Ago
 

I do this with exim; we have two dialup accounts, and a local
LAN.  We want outgoing mail to have our dial-up account name
in From and Reply-To, but we want local mail (including mail
addressed to the dial-up account names) delivered directly.
We also want to be able to send mail to other dial-up users
at our ISP.

What I've done is this:

 - Listed our ISP mail host name in local_domains in /etc/exim.conf:
   local_domains = localhost:*.localnet:isp.net.au

 - Added a special director that handles locally-generated mail for 
   one of our dialup accounts, at the head of the list of directors:
   dialup_localusers:
 driver = aliasfile
 domains = isp.net.au
 file = /etc/exim/isp-addresses
 search_type = lsearch

   /etc/exim/isp-addresses is a regular alias file that maps ISP
   account names to local usernames (or other addresses), like this:
   huiac:  [EMAIL PROTECTED]

 - Added another director after that one, that deals with any other
   customers of our ISP:
   dialup_otherusers:
 driver = smartuser
 domains = isp.net.au
 transport = remote_smtp

 - If I had accounts at more than one ISP, I'd need to create 
   a separate alias file and two directors (local users/other
   ISP users) for each ISP.

 - Use a smarthost (our ISP) for delivering non-local mail; as the
   local machine is mailserver for our entire LAN, this is the only
   entry in the ROUTERS section of /etc/exim.conf:
   smarthost:
 driver = domainlist
 transport = remote_smtp
 route_list = * mail.isp.net.au bydns_a

   If I wanted to deliver mail to other machines on my internal LAN,
   I'd need an additional router ahead of this one to handle those.

 - Added rewriting rules to replace our local LAN addresses with
   the appropriate ISP account addresses in any headers:
   [EMAIL PROTECTED]${lookup{$1}lsearch{/etc/exim/outgoing-addresses}\
{$value}fail} Fh
   
   /etc/exim/outgoing-addresses contains lines like this:
   john   [EMAIL PROTECTED]

   This example replaces the address [EMAIL PROTECTED] with
   [EMAIL PROTECTED] in all headers except envelope To: headers.

Simpler schemes are possible, but this is the only one I've
devised so far that will deliver locally-generated mail
addressed to one of my dial-up accounts (e.g.,
[EMAIL PROTECTED]) as local mail (i.e., without going via my
ISP's mailserver), deals with multiple dial-up account names
and also correctly delivers mail to other people's accounts 
on my ISP.


John P.
-- 
[EMAIL PROTECTED]
[EMAIL PROTECTED]
Oh - I - you know - my job is to fear everything. - Bill Gates in Denmark


Re: sendmail (or exim) help, please

2000-02-25 Thread aphro
sendmail has a masquerade option, postfix probably does too since its a
drop in replacement.

if you masquerade as say mydomain.com no matter what domain the sender
uses it'll get changed to mydomain.com ..is that what your lookin for ?

nate

On Fri, 25 Feb 2000, Matthew Dalton wrote:

matthe I'm not sure if this is what the original poster wanted, but...
matthe 
matthe Is is possible to masquerade a single email address in the same way the
matthe IP-Masq masquerades a single internet connection? By this I mean, to
matthe have a debian box receive emails via a single address, and be able to
matthe distribute each one to the intended recipient on the internal LAN.
matthe 
matthe There are dodgy ways you could do this, of course... like have the
matthe sender put the login name of the recipient in the subject somewhere,
matthe which exim/sendmail would rewrite the mail header with... but that's too
matthe much to expect the sender to do. You could also try writing some 'smart
matthe filter' which would try to identify the recipent from the contents of
matthe the email (most personal letters would probably start with 'Name,' or
matthe similar... but then of course there are problems with nicknames, non
matthe personal letters etc...). What I'm looking for is a better solution.
matthe 
matthe Matthew
matthe 
matthe Colin Watson wrote:
matthe  
matthe  [EMAIL PROTECTED] wrote:
matthe  Is it possibble to masquarade my e-mail to the outside world from
matthe  my LAN ? I'll tell you exactly what I wanted to say. I have a local
matthe  LAN, one e-mail address. I have set up a local DNS and ipchains
matthe  rules but I stopped at sendmail. I want to relay mail for the local
matthe  machines and put the mail into a queue if it goes to the inet but
matthe  deliver immediatelly inside the LAN. The domain has the name
matthe  linbase.org (not registreted) so all of the outgoing mails have to
matthe  have [EMAIL PROTECTED] (the valid mail address) at the From:
matthe  and in the Reply-to: fields, not [EMAIL PROTECTED]
matthe  
matthe  Can't help you with sendmail, I'm afraid, but it's almost trivial with
matthe  exim:
matthe  
matthe  [EMAIL PROTECTED]   [EMAIL PROTECTED]  frF
matthe  
matthe  ... in the rewrite configuration section.
matthe  
matthe  Please, help me, how to setup this ! I welcome any URLs, RTFMs,
matthe  HOWTOs if it's apart from the official docs in the distros,
matthe  because I have already read through them but (maybe I'm too dumb
matthe  or overlooked something) found nothing to my special problem.
matthe  
matthe  exim's (excellent) documentation is in /usr/doc/exim/spec.txt.gz
matthe  (there's also an HTML version); the documentation on address rewriting
matthe  is in chapter 32.
matthe  
matthe  --
matthe  Colin Watson   [EMAIL 
PROTECTED]
matthe  
matthe  --
matthe  Unsubscribe?  mail -s unsubscribe [EMAIL PROTECTED]  /dev/null
matthe 
matthe 
matthe -- 
matthe Unsubscribe?  mail -s unsubscribe [EMAIL PROTECTED]  /dev/null
matthe 

[mailto:[EMAIL PROTECTED] ]--
   Vice President Network Operations   http://www.firetrail.com/
  Firetrail Internet Services Limited  http://www.aphroland.org/
   Everett, WA 425-348-7336http://www.linuxpowered.net/
Powered By:http://comedy.aphroland.org/
Debian 2.1 Linux 2.0.36 SMPhttp://yahoo.aphroland.org/
-[mailto:[EMAIL PROTECTED] ]--
9:27pm up 189 days, 9:48, 1 user, load average: 1.05, 1.06, 1.00


sendmail (or exim) help, please

2000-02-24 Thread runner
Hi !

Is it possibble to masquarade my e-mail to the outside world from 
my LAN ? I'll tell you exactly what I wanted to say. I have a local 
LAN, one e-mail address. I have set up a local DNS and ipchains 
rules but I stopped at sendmail. I want to relay mail for the local 
machines and put the mail into a queue if it goes to the inet but 
deliver immediatelly inside the LAN. The domain has the name 
linbase.org (not registreted) so all of the outgoing mails have to 
have [EMAIL PROTECTED] (the valid mail address) at the From: 
and in the Reply-to: fields, not [EMAIL PROTECTED]
Please, help me, how to setup this ! I welcome any URLs, RTFMs, 
HOWTOs if it's apart from the official docs in the distros, 
because I have already read through them but (maybe I'm too dumb 
or overlooked something) found nothing to my special problem. 
Does anyone has a working solution to the situation like this ? If 
you have a solution with Exim I would welcome it too.
Thanx a lot,
Ago


Re: sendmail (or exim) help, please

2000-02-24 Thread Colin Watson
[EMAIL PROTECTED] wrote:
Is it possibble to masquarade my e-mail to the outside world from 
my LAN ? I'll tell you exactly what I wanted to say. I have a local 
LAN, one e-mail address. I have set up a local DNS and ipchains 
rules but I stopped at sendmail. I want to relay mail for the local 
machines and put the mail into a queue if it goes to the inet but 
deliver immediatelly inside the LAN. The domain has the name 
linbase.org (not registreted) so all of the outgoing mails have to 
have [EMAIL PROTECTED] (the valid mail address) at the From: 
and in the Reply-to: fields, not [EMAIL PROTECTED]

Can't help you with sendmail, I'm afraid, but it's almost trivial with
exim:

[EMAIL PROTECTED]   [EMAIL PROTECTED]  frF

... in the rewrite configuration section.

Please, help me, how to setup this ! I welcome any URLs, RTFMs, 
HOWTOs if it's apart from the official docs in the distros, 
because I have already read through them but (maybe I'm too dumb 
or overlooked something) found nothing to my special problem. 

exim's (excellent) documentation is in /usr/doc/exim/spec.txt.gz
(there's also an HTML version); the documentation on address rewriting
is in chapter 32.

-- 
Colin Watson   [EMAIL PROTECTED]


Re: sendmail (or exim) help, please

2000-02-24 Thread Matthew Dalton
I'm not sure if this is what the original poster wanted, but...

Is is possible to masquerade a single email address in the same way the
IP-Masq masquerades a single internet connection? By this I mean, to
have a debian box receive emails via a single address, and be able to
distribute each one to the intended recipient on the internal LAN.

There are dodgy ways you could do this, of course... like have the
sender put the login name of the recipient in the subject somewhere,
which exim/sendmail would rewrite the mail header with... but that's too
much to expect the sender to do. You could also try writing some 'smart
filter' which would try to identify the recipent from the contents of
the email (most personal letters would probably start with 'Name,' or
similar... but then of course there are problems with nicknames, non
personal letters etc...). What I'm looking for is a better solution.

Matthew

Colin Watson wrote:
 
 [EMAIL PROTECTED] wrote:
 Is it possibble to masquarade my e-mail to the outside world from
 my LAN ? I'll tell you exactly what I wanted to say. I have a local
 LAN, one e-mail address. I have set up a local DNS and ipchains
 rules but I stopped at sendmail. I want to relay mail for the local
 machines and put the mail into a queue if it goes to the inet but
 deliver immediatelly inside the LAN. The domain has the name
 linbase.org (not registreted) so all of the outgoing mails have to
 have [EMAIL PROTECTED] (the valid mail address) at the From:
 and in the Reply-to: fields, not [EMAIL PROTECTED]
 
 Can't help you with sendmail, I'm afraid, but it's almost trivial with
 exim:
 
 [EMAIL PROTECTED]   [EMAIL PROTECTED]  frF
 
 ... in the rewrite configuration section.
 
 Please, help me, how to setup this ! I welcome any URLs, RTFMs,
 HOWTOs if it's apart from the official docs in the distros,
 because I have already read through them but (maybe I'm too dumb
 or overlooked something) found nothing to my special problem.
 
 exim's (excellent) documentation is in /usr/doc/exim/spec.txt.gz
 (there's also an HTML version); the documentation on address rewriting
 is in chapter 32.
 
 --
 Colin Watson   [EMAIL PROTECTED]
 
 --
 Unsubscribe?  mail -s unsubscribe [EMAIL PROTECTED]  /dev/null


Fw: Problem with Exim, HELP ME !

2000-01-20 Thread Mark Symonds

- Original Message - 
From: Mark Symonds [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, January 19, 2000 8:20 PM
Subject: Re: Problem with Exim, HELP ME !


 
 
 Is lorenzo a bot?!
 
 I already responded to it off-list and specifically asked it
 to respond off-list like five mails ago.  Not only did it
 reply to my reply by posting my reply and nothing else, 
 but it also kept posting the original question again and again.
 
 Whatever is doing this is obviously not human.  :)
 
 -Mark
 
 -
 I know everything we've done is absolutely right and proper
 --Microsoft CEO Steve Ballmer on MSNBC, 01/13/00
 -
 
 
 - Original Message - 
 From: [EMAIL PROTECTED]
 To: debian-user@lists.debian.org
 Sent: Tuesday, January 18, 2000 2:40 AM
ct: Problem with Exim, HELP ME !
 
 
  Hi to all!
 
  I am not able to send remote e-mails by 'Exim', but only locally.
  
  I have got a dial-up Linux Box (Debian 2.1), without a local network,
  and I wish to deliver e-mails by my ISP's smart host.
  
 

 snip-snap-crackle-pop



Re: About Exim : HELP ME !!!!!!

2000-01-19 Thread Shao Zhang
Why do you send the same emails three times?? Please consider that
debian is a Non-profit organisation, and it costs them money!

While I am willing to help, I cannot understand your question, and that
is why I did not reply your first 2 emails.


You said:

Lorenzo Zampese [EMAIL PROTECTED] wrote:
 I am not able to send remote e-mails by 'Exim', but only locally.

and then you said:
 When I send e-mails to internet, my exim's configuration seems to work
 fine,

and then you said:
 but my addresses don't receive my e-mails at all.

So is your problem receiving or sending??

 When I run 'fetchmail' it says something like this :
   SMTP error, I can't relay mail for following addresses : 

paste a couple lines from fetchmail logs would be very usefull. Have
you checked that exim is actually listening on port 25?
telnet localhost 25 see if you can get anything...

And what mda you are using to to deliver local mails? Procmail, or you
simiply forward them to port 25? You might have a look at the FAQ for
exim about the issues between procmail and exim.

 NOTE 1: my ISP's user name is different than my Linux's user name,
 so I need to use the exim's DB-rewrite feature,
 that I tested successfully with 'exim -brw address'.

why do you need this? You should be able to use your ISP's smtp with no
problem if you are dialing up from them


-- 

Shao Zhang - Running Debian 2.1  ___ _   _
Department of Communications/ __| |_  __ _ ___  |_  / |_  __ _ _ _  __ _ 
University of New South Wales   \__ \ ' \/ _` / _ \  / /| ' \/ _` | ' \/ _` |
Sydney, Australia   |___/_||_\__,_\___/ /___|_||_\__,_|_||_\__, |
Email: [EMAIL PROTECTED]  |___/ 
_


Problem with Exim, HELP ME !

2000-01-18 Thread lorenzo . zampese
Hi to all!

I am not able to send remote e-mails by 'Exim', but only locally.

I have got a dial-up Linux Box (Debian 2.1), without a local network,
and I wish to deliver e-mails by my ISP's smart host.

I used 'eximconfig', but it didn't seem to set a good configuration for my
needings.
I have changed for a lot of times /etc/exim.conf but I can deliver
locally only.

When I send e-mails to internet, my exim's configuration seems to work
fine, but
my addresses don't receive my e-mails at all.
When I run 'fetchmail' it says something like this : SMTP error, I can't
relay
mail for following addresses : 

NOTE 1: my ISP's user name is different than my Linux's user name,
so I need to use the exim's DB-rewrite feature,
that I tested successfully with 'exim -brw address'.
NOTE 2: my ISP connection works fine and it is well configured.
NOTE 3: '.fetchmailrc' is well configured too.

I don't know if I have to change something in '/etc/host' or what...
Please, is there anybody who can show me where I have to put the following
parameters
in '/etc/exim.conf' ?

my hostname  :  xyz
Linux's user name:  myself_linux
my ISP account   :  myself
my address   :  [EMAIL PROTECTED]
SMTP server  :  smtp.mail.company.it
POP3 server  :  pop3.mail.company.it


THANKS TO ALL.



Problem with Exim, HELP ME !

2000-01-18 Thread lorenzo . zampese
Hi to all!

I am not able to send remote e-mails by 'Exim', but only locally.

I have got a dial-up Linux Box (Debian 2.1), without a local network,
and I wish to deliver e-mails by my ISP's smart host.

I used 'eximconfig', but it didn't seem to set a good configuration for my
needings.
I have changed for a lot of times /etc/exim.conf but I can deliver
locally only.

When I send e-mails to internet, my exim's configuration seems to work
fine, but
my addresses don't receive my e-mails at all.
When I run 'fetchmail' it says something like this : SMTP error, I can't
relay
mail for following addresses : 

NOTE 1: my ISP's user name is different than my Linux's user name,
so I need to use the exim's DB-rewrite feature,
that I tested successfully with 'exim -brw address'.
NOTE 2: my ISP connection works fine and it is well configured.
NOTE 3: '.fetchmailrc' is well configured too.

I don't know if I have to change something in '/etc/host' or what...
Please, is there anybody who can show me where I have to put the following
parameters
in '/etc/exim.conf' ?

my hostname  :  xyz
Linux's user name:  myself_linux
my ISP account   :  myself
my address   :  [EMAIL PROTECTED]
SMTP server  :  smtp.mail.company.it
POP3 server  :  pop3.mail.company.it


THANKS TO ALL.



Re: Problem with Exim, HELP ME !

2000-01-18 Thread Mike Werner
On Tue, Jan 18, 2000 at 11:40:24AM +0100, [EMAIL PROTECTED] wrote:
snip exim troubles

 NOTE 1: my ISP's user name is different than my Linux's user name,
 so I need to use the exim's DB-rewrite feature,
 that I tested successfully with 'exim -brw address'.
 NOTE 2: my ISP connection works fine and it is well configured.
 NOTE 3: '.fetchmailrc' is well configured too.
 
 I don't know if I have to change something in '/etc/host' or what...
 Please, is there anybody who can show me where I have to put the following
 parameters
 in '/etc/exim.conf' ?
 
 my hostname  :  xyz
 Linux's user name:  myself_linux
 my ISP account   :  myself
 my address   :  [EMAIL PROTECTED]
 SMTP server  :  smtp.mail.company.it
 POP3 server  :  pop3.mail.company.it

Here's most of my exim.conf - I've cut out the comments to save bandwidth.
I've inserted a few comments of my own - they are all in ()'s and will be
on the line after the one the comment will be referring to.
 begin /etc/exim.conf 
qualify_domain = earthlink.net
(I too am on a dialup - this is my ISP)

# qualify_recipient =
local_domains = localhost
local_domains_include_host = true
local_domains_include_host_literals = true
#relay_domains = 
#relay_domains_include_local_mx = true
#host_lookup = 0.0.0.0/0
#rbl_domains = rbl.maps.vix.com
#rbl_reject_recipients = false
#rbl_warn_header = true
host_accept_relay = ! * : \
*
# percent_hack_domains=*
trusted_users = mail
smtp_verify = false

smtp_accept_queue_per_connection = 0
(this is a usefull one - all mail is delivered immediately)

gecos_pattern = ^([^,:]*)
gecos_name = $1

received_header_text = Received: \
  ${if def:sender_fullhost {from ${sender_fullhost} \
  ${if def:sender_ident {(${sender_ident})}}\n\t}\
  {${if def:sender_ident {from ${sender_ident} \
  by ${primary_hostname} \
  ${if def:received_protocol {with ${received_protocol}}} \
  (Exim ${version_number} #${compile_number} (Debian))\n\t\
  id ${message_id}
end

local_delivery:
  driver = appendfile
  group = mail
  mode = 0660
  mode_fail_narrower = false
  file = /var/spool/mail/${local_part}

address_pipe:
  driver = pipe
  return_output

address_file:
  driver = appendfile

address_directory:
  driver = appendfile
  no_from_hack
  prefix = 
  suffix = 
# maildir_format

address_reply:
  driver = autoreply

remote_smtp:
  driver = smtp

end

real_local:
  prefix = real-
  driver = localuser
  transport = local_delivery

system_aliases:
  driver = aliasfile
#  Option added by convert4r3
  file_transport = address_file
#  Option added by convert4r3
  pipe_transport = address_pipe
  file = /etc/aliases
  search_type = lsearch
# user = list
# Uncomment the above line if you are running smartlist

userforward:
  driver = forwardfile
#  Option added by convert4r3
  file_transport = address_file
#  Option added by convert4r3
  pipe_transport = address_pipe
#  Option added by convert4r3
  reply_transport = address_reply
  no_verify
  check_ancestor
  file = .forward
  modemask = 002
  filter

# This director matches local user mailboxes.

localuser:
  driver = localuser
  transport = local_delivery

end

smarthost:
  driver = domainlist
  transport = remote_smtp
  route_list = * mail.earthlink.net bydns_a

end

(up to here everything was done by eximconfig)

# Domain   Error   Retries
# --   -   ---

*  *   F,2h,5m; G,16h,2h,1.5; F,4d,8h

end

[EMAIL PROTECTED] [EMAIL PROTECTED] bcfrF
(this is the bit I think will solve your problem)
(my user name on my Linux box is mike - that's the first part)
(the second part shows what my email address rewrite is to be)
(the third shows which parts of the headers to rewrite - I'm not sure
 about them but it seems to work)

# [EMAIL PROTECTED]${lookup{$1}lsearch{/etc/email-addresses}\
#   {$value}fail} bcfrF
 end exim.cond 

There we go.  That's the whole thing - probably more than was really needed
but I figured I'd better err on the side of too much in this case.  Especially
since I'm really not 100% sure on how everything there works.  What I do know
is that this works for me here on a potato system with exim 3.11-2 and
fetchmail 5.2.3-1
-- 
Mike Werner  KA8YSD   |  Where do you want to go today?
ICQ# 12934898 |  As far from Redmond as possible!
'91 GS500E|
Morgantown WV |  Only dead fish go with the flow.


Re: [Exim] Re: EXIM, Help stop relaying spam

1999-08-05 Thread Marc Haber
On Wed, 4 Aug 1999 10:19:27 -0600 (MDT), you wrote:
Just as a side-note, it is a silly option anyway, isn't it?  I've not used
it for anything useful... yet.

I consider it a good option for a host that is secondary MX for a lot
of domains. Saves its admin from maintaining a list of these domains.

Greetings
Marc

-- 
-- !! No courtesy copies, please !! -
Marc Haber  |Questions are the | Mailadresse im Header
Karlsruhe, Germany  | Beginning of Wisdom  | Fon: *49 721 966 32 15
Nordisch by Nature  | Lt. Worf, TNG Rightful Heir | Fax: *49 721 966 31 29


Re: EXIM, Help stop relaying spam

1999-08-04 Thread Marc Haber
On Tue, 3 Aug 1999 08:22:23 -0700 (PDT), you wrote:
On Tue, 3 Aug 1999, David Warnock wrote:
 relay_domains_include_local_mx = true

You can turn this off because a spammer can simply put you host in his DNS
makeing you an MX host and you will relay for him.

Nope. If a spammer puts the host in his DNS, you are going to relay
_TO_ him. So he can happily spam himself.

Greetings
Marc

-- 
-- !! No courtesy copies, please !! -
Marc Haber  |Questions are the | Mailadresse im Header
Karlsruhe, Germany  | Beginning of Wisdom  | Fon: *49 721 966 32 15
Nordisch by Nature  | Lt. Worf, TNG Rightful Heir | Fax: *49 721 966 31 29


Re: EXIM, Help stop relaying spam

1999-08-04 Thread Nathan Duehr
If you have the relay-domains-include-local-MX = true in your
/etc/exim.conf file, this is true.  It WILL relay for anyone who lists
your machine as an MX for their domain (real, or not).  I think this was
the original question. 

The other gentleman is right about if this setting is NOT on, and you add
the MX record, the spammer can spam themselves... so to speak.

On Tue, 3 Aug 1999, George Bonser wrote:

 On Wed, 4 Aug 1999, Marc Haber wrote:
 
  Nope. If a spammer puts the host in his DNS, you are going to relay
  _TO_ him. So he can happily spam himself.
  
 
 Ok, maybe this has changed but I thought at one point Exim would take mail
 in either direction from a host listing it as an MX.
 
 
 
 -- 
 Unsubscribe?  mail -s unsubscribe [EMAIL PROTECTED]  /dev/null
 
 

+---++
| Nate Duehr - [EMAIL PROTECTED]| Support Amateur Radio  Linux! |
| Private Pilot, Telephony Engineer |  Ham Callsign: N0NTZ   |
| UNIX Hack, Perl Hack, Tech-Freak  |  Grid Square: DM79 |
|   | May the Source be with you.  |
+---++
| HamRadio and Linux mailing lists available for interested parties: |
|http://www.natetech.com/mailman/listinfo|
++


Re: EXIM, Help stop relaying spam

1999-08-04 Thread Marc Haber
On Tue, 3 Aug 1999 19:15:59 -0700 (PDT), you wrote:
On Wed, 4 Aug 1999, Marc Haber wrote:
 Nope. If a spammer puts the host in his DNS, you are going to relay
 _TO_ him. So he can happily spam himself.

Ok, maybe this has changed but I thought at one point Exim would take mail
in either direction from a host listing it as an MX.

Philip would never incorporate an option that dangerous into his
program. He knows what he is doing and he also knows what an open
relay is.

I don't have older versions of exim here so I can't look in older
manuals though.

Greetings
Marc

-- 
-- !! No courtesy copies, please !! -
Marc Haber  |Questions are the | Mailadresse im Header
Karlsruhe, Germany  | Beginning of Wisdom  | Fon: *49 721 966 32 15
Nordisch by Nature  | Lt. Worf, TNG Rightful Heir | Fax: *49 721 966 31 29


Re: EXIM, Help stop relaying spam

1999-08-04 Thread Marc Haber
On Wed, 4 Aug 1999 00:53:15 -0600 (MDT), you wrote:
If you have the relay-domains-include-local-MX = true in your
/etc/exim.conf file, this is true.  It WILL relay for anyone who lists
your machine as an MX for their domain (real, or not).  I think this was
the original question.

This is either a bug in the program or in the documentation:

|If the domain in a recipient address matches local_domains or  
|
|relay_domains, or if relay_domains_include_local_mx is set and the domain  
|
|has an MX record pointing to the local host, the address is always 
|
|accepted (at least as far as this check is concerned - a subsequent
|
|verification check might fail it). This is the case of an incoming message 
|
|to a local domain or an incoming relay to a permitted domain.

|relay_domains_include_local_mx
|
|Type:boolean
|Default: false
|
|This option permits any host to relay to any domain that has an MX record
|pointing at the local host. It causes any domain with an MX record
|pointing at the local host to be treated as if it were in relay_domains.
|See host_accept_relay above. Warning: Turning on this option opens your
|
|server to the possibility of abuse in that anyone with access to a DNS 
|
|zone can list your server in a secondary MX record as a backup for their   
|
|domain without your permission. This is not a huge exposure because
|
|firstly, it requires the cooperation of a hostmaster to set up, and
|
|secondly, since their mail is passing through your server, they run the
|
|risk of your noticing and (for example) throwing all their mail away.

|The relaying check happens whenever a message's recipient is received, that
|is, immediately after a RCPT command. The first check is whether the address
|would cause relaying at all: if its domain matches something in local_domains
|then it is destined to be handled on the local host as a local address, and
|relaying is not involved, unless the 'percent hack' is in use. In this case,
|the local part is converted into a new address and that is then checked.
|
|When the relevant domain is not in local_domains, there is first a check for
|legitimate incoming relaying, by seeing if it matches relay_domains, or, when
|relay_domains_include_local_mx is set, if it is a domain with an MX record
|pointing to the local host. If it does match, this is an acceptable incoming
|relay, and it is permitted to proceed.

The specification says at three different places that
relay_domains_include_local_mx checks are only done on _recipient_
address. Thus, a message is only relayed if the local host has an MX
record for the _recipient's_ domain and the spammer can only use the
exim host as a relay to spam users in domains the spammer controls the
DNS of.

It will not relay _FOR_ anyone who lists the exim host as an MX for
their domain; it will relay _TO_ anyone who lists the exim host as an
MX for their domain. This is a siginificant difference.

I am not in a position to test this at the moment, but _if_ exim
doesn't behave as the docs say and as I interpreted, this is a severe
bug and I've got to ask you why you didn't report it to Philip yet.

This is crossposted to the exim-users mailing list for verification.

Greetings
Marc

-- 
-- !! No courtesy copies, please !! -
Marc Haber  |Questions are the | Mailadresse im Header
Karlsruhe, Germany  | Beginning of Wisdom  | Fon: *49 721 966 32 15
Nordisch by Nature  | Lt. Worf, TNG Rightful Heir | Fax: *49 721 966 31 29


Re: [Exim] Re: EXIM, Help stop relaying spam

1999-08-04 Thread Philip Hazel
On Wed, 4 Aug 1999, Marc Haber wrote:

 On Wed, 4 Aug 1999 00:53:15 -0600 (MDT), you wrote:
 If you have the relay-domains-include-local-MX = true in your
 /etc/exim.conf file, this is true.  It WILL relay for anyone who lists
 your machine as an MX for their domain (real, or not).  I think this was
 the original question.

That is incorrect.

 It will not relay _FOR_ anyone who lists the exim host as an MX for
 their domain; it will relay _TO_ anyone who lists the exim host as an
 MX for their domain. This is a siginificant difference.

That is correct. Relaying _FOR_ is controlled by hosts, not domains.
Typically: relay for any host on my local network.

There are some controls by sender (though they are weak, since senders 
are easily forged) but they do not involve looking up MX records for the 
sender.


-- 
Philip HazelUniversity of Cambridge Computing Service,
[EMAIL PROTECTED]  Cambridge, England. Phone: +44 1223 334714.


Re: [Exim] Re: EXIM, Help stop relaying spam

1999-08-04 Thread Nathan Duehr
Ahh... I stand corrected.

I really should avoid answering mail relaying questions in hte middle of
the night!

Just as a side-note, it is a silly option anyway, isn't it?  I've not used
it for anything useful... yet.

On Wed, 4 Aug 1999, Philip Hazel wrote:

 On Wed, 4 Aug 1999, Marc Haber wrote:
 
  On Wed, 4 Aug 1999 00:53:15 -0600 (MDT), you wrote:
  If you have the relay-domains-include-local-MX = true in your
  /etc/exim.conf file, this is true.  It WILL relay for anyone who lists
  your machine as an MX for their domain (real, or not).  I think this was
  the original question.
 
 That is incorrect.
 
  It will not relay _FOR_ anyone who lists the exim host as an MX for
  their domain; it will relay _TO_ anyone who lists the exim host as an
  MX for their domain. This is a siginificant difference.
 
 That is correct. Relaying _FOR_ is controlled by hosts, not domains.
 Typically: relay for any host on my local network.
 
 There are some controls by sender (though they are weak, since senders 
 are easily forged) but they do not involve looking up MX records for the 
 sender.
 
 
 -- 
 Philip HazelUniversity of Cambridge Computing Service,
 [EMAIL PROTECTED]  Cambridge, England. Phone: +44 1223 334714.
 
 
 -- 
 Unsubscribe?  mail -s unsubscribe [EMAIL PROTECTED]  /dev/null
 
 

+---++
| Nate Duehr - [EMAIL PROTECTED]| Support Amateur Radio  Linux! |
| Private Pilot, Telephony Engineer |  Ham Callsign: N0NTZ   |
| UNIX Hack, Perl Hack, Tech-Freak  |  Grid Square: DM79 |
|   | May the Source be with you.  |
+---++
| HamRadio and Linux mailing lists available for interested parties: |
|http://www.natetech.com/mailman/listinfo|
++


Re: EXIM, Help stop relaying spam

1999-08-04 Thread David Warnock
George and everyone else.

Thanks for the help.

We are now relay free according to all the tests I can do.

I have put exim on the firewall and am currently directly accessing it
via pop3 (qpopper). Now I would like to instead relay from exim on the
firewall to exim inside the firewall. How do I do that?

Thanks

Dave


-- 
David Warnock
Sundayta Ltd


Re: EXIM, Help stop relaying spam

1999-08-04 Thread David Warnock
Many thanks George.

Dave

snip
 As the final entry in the section under directors:
 
 smart:
   driver = smartuser
   new_address = [EMAIL PROTECTED]
snip

-- 
David Warnock
Sundayta Ltd


EXIM, Help stop relaying spam

1999-08-03 Thread David Warnock
Hi,

We have just had out exim router on our server abused by some spammers.

We had thought that we were securely setup, but it appears that our ISP
has recently changed something in their dns setup and it meant that
spammers have been able to use us as a relay.

I have some temporary fixes in which stop all outgoing mail (turned off
just while I send this) - this is obviously not ideal but does stop
these nasty people.

How do we stop this problem?

I have spent a whole day pulling my hair out trying to stop exim
allowing other people in but I have not suceeded unless I also stop us
being able to send (or in some cases recieve).

Our setup is that our firewall forwards port 25 onto the main server
which is running exim.  This is using redir at present and I think that
is part of the problem. If someone telnets onto exim they appear to be
coming from the firewall.

I have turned off all relaying (but don't know how to check that it is
sucessful). But it seems that I am still allowing telnet onto port 23 to
issue the smtp commands to send mail from an invalid user to outside our
domain. I don't want that to happen.  How can I fix that?

The bits of my exim.conf (comments removed to save space) are

relay_domains = *.sundayta.co.uk
relay_domains_include_local_mx = true

never_users = root

host_lookup_nets = 0.0.0.0/0

rbl_domains = rbl.maps.vix.com
rbl_reject_recipients = true
rbl_warn_header = false

sender_host_reject_relay = *
sender_host_reject_relay_except =
romans.sundayta.co.uk:proverbs.sundayta.co.uk

sender_net_reject_relay = 0.0.0.0/0
sender_net_reject_relay_except = 192.168.100.0/8
# firewall is 192.168.101.2

sender_verify_reject = true

# I don't want to incorrectly blame anyone but all the spam had a name
within this domain
# as the to and from
sender_reject = *.quintessenz.at



I would like to reject all hosts apart from some named machines at
sundayta.co.uk but whenever I try that I stop all incoming mail from
other hosts which is obviously not correct.

Any help much appreciated while I still have some hair left.



-- 
David Warnock
Sundayta Ltd


RE: EXIM, Help stop relaying spam

1999-08-03 Thread Pollywog

On 03-Aug-99 David Warnock wrote:
 I would like to reject all hosts apart from some named machines at
 sundayta.co.uk but whenever I try that I stop all incoming mail from
 other hosts which is obviously not correct.
 
 Any help much appreciated while I still have some hair left.
 
You did not say which Exim version you are using.  The exim.conf file
format changed with version 3.x so that might be important.

--
Andrew


Re: EXIM, Help stop relaying spam

1999-08-03 Thread David Warnock
I am using the version that installs with slink which is 2.0.5 (I think)

Thanks

Dave

Pollywog wrote:
 
 On 03-Aug-99 David Warnock wrote:
  I would like to reject all hosts apart from some named machines at
  sundayta.co.uk but whenever I try that I stop all incoming mail from
  other hosts which is obviously not correct.
 
  Any help much appreciated while I still have some hair left.
 
 You did not say which Exim version you are using.  The exim.conf file
 format changed with version 3.x so that might be important.


-- 
David Warnock
Sundayta Ltd


Re: EXIM, Help stop relaying spam

1999-08-03 Thread Ernest Johanson
David,

You can check your mail hosts for relaying at
http://maps.vix.com/tsi/ar-test.html.

Ernest Johanson
Web Systems Administrator
Fuller Theological Seminary


On Tue, 3 Aug 1999, David Warnock wrote:

 I have turned off all relaying (but don't know how to check that it is
 sucessful). But it seems that I am still allowing telnet onto port 23 to
 issue the smtp commands to send mail from an invalid user to outside our
 domain. I don't want that to happen.  How can I fix that?
 
 


EXIM help

1998-04-20 Thread BRIAN SCHRAMM
 I am looking at the EXIM mail transport to handle the UUCP and pop
 mail that I have along with filtering mail and local mail.  I remember
 a person on this list that offered someone a copy of the mail files
 that they use.  Can I get a copy of them from anyone that is using
 this to filter mail, get mail from pop and uucp on a dial up
 connection and deliver mail locally.

 Any parts of that would be helpful too.

 Brian Schramm

 [EMAIL PROTECTED]
 [EMAIL PROTECTED]
 [EMAIL PROTECTED]


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: EXIM Help

1998-03-29 Thread Bill Leach
Did you turn off fetchmail's rewrite option?

Also you can tell exim:
sender_unqualified_hosts = localhost
in it's configuration file (see the fetchmail FAQ)


-- 
best,
-bill
  [EMAIL PROTECTED]  [EMAIL PROTECTED]
   [EMAIL PROTECTED]  [EMAIL PROTECTED]
from a 1996 Micro$loth ad campaign:
The less you know about computers the more you want Micro$oft!
 See!  They do get some things right!



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: EXIM Help

1998-03-28 Thread Mike Acklin
At 03:35 PM 3/27/98 -0800, you wrote:

DUH!  It looks like Fetchmail is attempting deliver. Configure it to pass
the mail to SMTP.



George, Rob, List

Ok I think I have exim now the SMTP host, but now I am getting a message
when I run fetchmail --verbose.

fetchmail: SMTPrect to htuttle
fetchmail: SMTP501 htuttle: recipient address must contain a domain
fetchmail: listener doesn't like recipient address 'htuttle'
fetchmail: SMTP501 htuttle: recipient address must contain a domain
fetchmail: can't even send to calling user!
fetchmail: POP3QUIT

Where do I let fetchmail/exim the domain of htuttle? I have tried 
putting
it in .fetchmailrc and then it complains about wrong user
'[EMAIL PROTECTED]@mail.dallas.net'. So take it out of there and put it in
exim.conf and it make no difference as I get the same message as above.
Looked over the info exim and it said to try using the .netrc. So put it in
there and still got the above.

Where do I let exim know of my domain. I think that is what is my 
problem
and it is not accepting the messages. I have a system name of archangel,
user names of root and htuttle. My POP3 account it listed as
[EMAIL PROTECTED] and all I want to do is get the mail off the server
mail.dallas.net without having to shutdown and start winblows95. 

Thanks for everyone help



Mike Acklin
[EMAIL PROTECTED] (Work)
[EMAIL PROTECTED] (Home)
Debian Newbie (Please bear with me!)


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


EXIM Help

1998-03-27 Thread Mike Acklin
Hello again,

I am sorry to be such a pain, but I can not get exim working properly. I
have tried reading all the info pages/man pages/FAQ's/archives/homepages
for the last two days. I guess I am in a special class by myself. All the
above all talk about ethernet/workstations/networked systems. All I have is
a small system that connects to my ISP and all I want to do is get my mail.
I am having to go back and forth between debian and winbloze95 to get any
help.

First I entered a exim.conf like the one I found in the archives. When I
ran exim, it kept complaining about the lines I put in so # them out. Now
when I run fetchmail I get the following:

reading message 1 (2580 bytes)
fetchmail: found received address 'htuttle'
fetchmail: no local matches, forwarding to root
fetchmail: SMTP connect to (null) failed
fetchmail: POP3QUIT

Now I can send mail fine with Pine and it configured to send via my ISP.
There is no problem there. And it goes there. It is that I cannot download
my mail. What am I doing wrong. I am very new at this and don't know to
much about setting up accounts etc. I don't know how to look at logs as I
don't know which ones are available. I have looked in the log directory and
about the only one I see is syslog and it doesn't say to much about exim. I
only have 2 accounts that were created when I installed debian. root and
htuttle. That's it.

Second: I tried something else (find . -name exim.conf -print) and got 
the
following message: 

EXT2-fs warning (Device 03:42): ext_free_inode: bit already cleared for
inode 89435

How do I fix this or can I. Is there a chkdsk for debian?

Third: How do I set my time right. When I installed debian it looked at 
my
system clock and asked if I wanted to be on GMT and what my TZ was. I said
to use GMT and that I was in CST6CDT. Now when I boot my time is wrong.
When it is 1600 in my wallclock time my system says it is 1000. I use the
bash: date 03271600, but when I reboot it always goes back to the -6. I
know I screwed it up, but how do I fix it with out having to do it
everytime I boot up. Also by bios clock is correct for walltime.

Sorry to bother everyone, but I am really confused and I don't know 
where
to look for info.



Mike Acklin
[EMAIL PROTECTED] (Work)
[EMAIL PROTECTED] (Home)
Debian Newbie (Please bear with me!)


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]


Re: EXIM Help

1998-03-27 Thread Mike Acklin
At 02:45 PM 3/27/98 -0800, you wrote:
On Fri, 27 Mar 1998, Mike Acklin wrote:

 reading message 1 (2580 bytes)
 fetchmail: found received address 'htuttle'
 fetchmail: no local matches, forwarding to root
 fetchmail: SMTP connect to (null) failed
 fetchmail: POP3QUIT

It is having trouble finding an account on your local system called
htuttle.  Do you have a htuttle login account on your local machine? If
not, create an alias in /etc/aliases for it like this:

htuttle: username

where username is a valid login account on your local linux box.



George,

Yes I have a username of htuttle and the name of the system is htuttle.
Does that mess things up? I also have the aliases set up with htuttle. 

Thanks for the reply...



Mike Acklin
[EMAIL PROTECTED] (Work)
[EMAIL PROTECTED] (Home)
Debian Newbie (Please bear with me!)


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]