[exim] Exim 4.75 RC3 uploaded

2011-03-01 Thread Phil Pennock
I have uploaded Exim 4.75 RC3 to: ftp://ftp.exim.org/pub/exim/exim4/test/ ChangeLog can be found at: http://git.exim.org/exim.git/blob/552193f0d6f4281f0d61d359f126d2236edcd181:/doc/doc-txt/ChangeLog I currently suspect that this will be the last RC and that I will release Exim 4.75

Re: [exim] HELO with short mailname

2011-03-02 Thread Phil Pennock
On 2011-03-02 at 16:25 +0100, Narcis Garcia - GiLUG wrote: I send mail from an Exim4 installation, and it's rejected from some MTA servers with: Helo command rejected: Host not found because Exim announces with the short hostname instead of the specified in /etc/mailname (FQDN) If I run:

Re: [exim] add X-Source headers

2011-03-03 Thread Phil Pennock
On 2011-03-03 at 10:00 +0100, Joachim Astel wrote: Setup a perl script at /etc/exim4/mailheaderadd.pl, which contains: sub mailheaderadd { my $xsource = $ENV{'X-SOURCE'}; This may be problematic -- using a hyphen in an environment variable renders it inaccessible to shell and might

Re: [exim] HELO with short mailname

2011-03-03 Thread Phil Pennock
On 2011-03-04 at 07:43 +0100, Marc Haber wrote: On Wed, 2 Mar 2011 15:42:55 -0500, Phil Pennock exim-us...@spodhuis.org wrote: There's two parts: Exim, and the Debian integration of Exim. Debian does the stuff which uses all the M4 macros. There ain't no m4 around the Debian exim packages

Re: [exim] DKIM problem

2011-03-06 Thread Phil Pennock
On 2011-03-05 at 13:13 -0600, René Berber wrote: deny message = DKIM: Message with invalid/missing signature sender_domains = gmail.com:paypal.com:ebay.com:$dkim_signers dkim_status = none:invalid:fail Simple, isn't it? But all gmail messages are being rejected and I see

Re: [exim] Maildrop + Quota Full, no bounce message

2011-03-06 Thread Phil Pennock
On 2011-03-06 at 20:15 +0100, Chack wrote: I am running Exim4 with virtual users from a mysql databse. Mails are delivered through courier maildrop into the maildirs. Everythign works fine except that if a mailbox goes over the quota, maildrop just fails with error code 75 and exim will defer

Re: [exim] DKIM problem

2011-03-06 Thread Phil Pennock
On 2011-03-06 at 16:33 -0600, René Berber wrote: On 3/6/2011 3:55 PM, Phil Pennock wrote: How about if you add to the deny: log_message = DKIM: $dkim_cur_signer / $dkim_domain / $dkim_key_testing / $dkim_verify_status / $dkim_verify_reason Do you get something more useful out

Re: [exim] DKIM problem

2011-03-06 Thread Phil Pennock
On 2011-03-06 at 17:52 -0600, René Berber wrote: On 3/6/2011 5:43 PM, Phil Pennock wrote: Sorry for changing my email address, I'm only subscribed with one, not the other. Your configuration so far looks sane. Can you post the mail headers from rejectlog ? Here they are: There's

Re: [exim] DKIM problem

2011-03-06 Thread Phil Pennock
On 2011-03-06 at 16:33 -0600, René Berber wrote: On 3/6/2011 3:55 PM, Phil Pennock wrote: How about if you add to the deny: log_message = DKIM: $dkim_cur_signer / $dkim_domain / $dkim_key_testing / $dkim_verify_status / $dkim_verify_reason Do you get something more useful out

Re: [exim] configure file

2011-03-07 Thread Phil Pennock
On 2011-03-07 at 09:15 -0700, The Doctor wrote: I would like to send the configure file without the conmments. How can I do this? grep '^ *[^# ]' /path/to/exim.conf stripped-config -- ## List details at http://lists.exim.org/mailman/listinfo/exim-users ## Exim details at

Re: [exim] configure file

2011-03-07 Thread Phil Pennock
On 2011-03-07 at 18:00 -0500, Phil Pennock wrote: You probably want to add a domains = +local_domains restriction to both of those and move them to be the first Routers, or put them immediately after the dnslookup Router. Well, actually you probably want them after the amavis Router

Re: [exim] configure file

2011-03-07 Thread Phil Pennock
On 2011-03-07 at 13:24 -0700, The Doctor wrote: begin routers These are tried *in order*. Please read: http://www.exim.org/exim-html-current/doc/html/spec_html/ch03.html#SECTprocaddress check_system_aliases: driver = redirect allow_fail allow_defer data =

Re: [exim] Expanding $header_from

2011-03-10 Thread Phil Pennock
; you'll be rejecting messages that are technically well-formed, but it's your system and you get to choose what you accept (unless you have contracts with customers saying otherwise). The easy way to test these things: $ cat EOM test.eml From: Phil Pennock p...@example.com, Snert sn...@example.com

Re: [exim] BODY=7BIT

2011-03-12 Thread Phil Pennock
On 2011-03-13 at 11:35 +1000, Ted Cooper wrote: I've been getting a LOT of errors similar to the following in my logs. I haven't cared all that much since after some initial quick checking, every one of the connections ended up being a spam bot that would have been blocked by other means

Re: [exim] Exim rejects colons in from name: bug or correct behaviour? [corrected]

2011-03-13 Thread Phil Pennock
On 2011-03-13 at 18:12 -0400, Paul Schreiber wrote: (the sendmail call was missing angle brackets in the previous version of this message) New subscribers are moderated by default; I've cleared your moderation flag and I didn't let the previous version through. When called from the command

Re: [exim] Exim rejects colons in from name: bug or correct behaviour? [corrected]

2011-03-13 Thread Phil Pennock
On 2011-03-14 at 01:26 -0400, Paul Schreiber wrote: This fails in exim, but succeeds in Postfix: /usr/sbin/sendmail -i -t -f foo: bar \i...@foo.ca\ some...@gmail.com note the colon after foo: This succeeds in both: /usr/sbin/sendmail

[exim] STARTTLS issue: Exim not affected

2011-03-16 Thread Phil Pennock
Folks, During the RC process for Exim 4.75, we were notified of a possible issue in Exim, as part of a general much software has this problem alert, by CERT. The issue relates to STARTTLS and command injection, as described by Wietse Venema at:

Re: [exim] Compile errors: /usr/bin/ld: cannot find -lgds

2011-03-18 Thread Phil Pennock
On 2011-03-18 at 15:49 +, Ron White wrote: I've compiled Exim a couple of times on Cent, and even Slackware and had no problems that a few minutes with my friend 'Google' could not fix. However, my Ubuntu build has thrown up an error I cannot get to the bottom of. When I run make I get:

Re: [exim] Strange exim issue in the paniclog

2011-03-18 Thread Phil Pennock
On 2011-03-18 at 11:14 -0700, William King wrote: mailman_router: driver= accept domains = +mm_domains What is the definition of the mm_domains domainlist, please? transport = mailman_transport And what is the definition of this transport? -Phil --

[exim] Anyone using SSLv2?

2011-03-22 Thread Phil Pennock
Folks, This month, RFC 6176 was published: Prohibiting Secure Sockets Layer (SSL) Version 2.0 Is there anyone depending upon being able to speak SSLv2 instead of SSLv3 or TLS to a remote server? Note: GnuTLS does not implement SSLv2, and never has. So this only affects OpenSSL users. You can

[exim] Purpose of exim-users

2011-03-25 Thread Phil Pennock
, as set out by those who provide the resources that run the list. Regards, -Phil Pennock pgp253ExMjgGB.pgp Description: PGP signature -- ## List details at http://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http

Re: [exim] pgsql client encoding issue

2011-04-07 Thread Phil Pennock
On 2011-04-07 at 12:48 +0100, Mark Adams wrote: I fixed other encoding issues I had by adding :rfc2047: in as follows ${quote_pgsql:rfc2047:$h_subject:} Assuming you mean ${rfc2047:...} then that encodes data. I'd expect you to normally want to decode data. As written though, that does not

Re: [exim] SMTP-AUTH, Kerberos and SSL

2011-04-08 Thread Phil Pennock
On 2011-04-08 at 19:27 +0200, Jaap Winius wrote: Is it possible to configure an Exim4 server (exim4-daemon-heavy 4.72-6 on Debian squeeze) to offer an authenticated SMTP service with end-to-end SSL encryption while authenticating the passwords with Kerberos? Yes. But I can't help you

Re: [exim] Edit wiki pages

2011-04-12 Thread Phil Pennock
On 2011-04-12 at 18:51 +0200, Aarno Aukia wrote: I wanted to add a python variant to http://wiki.exim.org/AuthenticatedSmtpUsingIMAP, but the wiki page is immutable. Who can enable editing the page or who wants to add my 0.02 ? Uhm, the Perl on that page is designed to be run by Exim, when

Re: [exim] Strange loglines when using alternative exim.conf

2011-04-14 Thread Phil Pennock
On 2011-04-14 at 10:40 +0200, Matthias Hank wrote: /etc/exim/exim.conf (exim-4.63-5.el5_6.2 on RHEL 5.6) This Mail is delivered correctly BUT exim only logs the received part of this mail = The delivery line and the Completed line is missing and is not logged. This was a bug in 4.73, when

Re: [exim] DKIM and mailing lists

2011-04-15 Thread Phil Pennock
On 2011-04-15 at 14:38 +0200, Luca Bertoncello wrote: Now, as I know, DKIM (and DomainKey before) should solve the problem of a forward, which can fail with SPF. Could someone say me, why I get these errors? Mailing-lists tend to edit Subject: lines (see [exim] above) and add footers: --

Re: [exim] dk-filter for DomainKeys with Exim4

2011-04-17 Thread Phil Pennock
On 2011-04-17 at 08:27 +0200, Andreas Metzler wrote: En Snare ensn...@gmail.com wrote: Hi -- I have exim4 correctly signing with DKIM signatures but I would also like to add a DomainKey signature. I am running Exim 4.72 on Ubuntu 10.10. I understand that DomainKeys support doesn't come

Re: [exim] authentication / relay

2011-04-29 Thread Phil Pennock
On 2011-04-28 at 13:59 -0400, Seth Dillingham wrote: Samson sends email 'from' quite a few different addresses. It can have any number of group projects, and each group project has a name, and the names become part of a cluster of associated email accounts, such as project1-s...@example.com

Re: [exim] DKIM signature where the identity field has a leading slash attempts to touch the filesystem

2011-05-04 Thread Phil Pennock
On 2011-05-03 at 21:25 +1200, Tony Meyer wrote: If a message contains a DKIM signature header where the identity field begins with a slash, like /free_electronic_cigare...@dogg.testcredit.net, then entries like the following appear in the paniclog: 2011-04-25 13:41:50 1QEL6r-0007jM-VV

Re: [exim] DKIM signature where the identity field has a leading slash attempts to touch the filesystem

2011-05-05 Thread Phil Pennock
On 2011-05-05 at 19:40 +1200, Tony Meyer wrote: accept dkim_status= none sender_domains = KNOWN_DKIM_SIGNERS dkim_signers = KNOWN_DKIM_SIGNERS condition = ${if match_domain{$sender_address_domain}{$dkim_cur_signer}} log_message= Possible DKIM Forgery:

[exim] Exim 4.76 RC1 uploaded - SECURITY

2011-05-06 Thread Phil Pennock
Phil Pennock p...@exim.org. Please use your own discretion in assessing what trust paths you might have to this uid. This email should be signed with the same key, which should provide some authentication for the above patching instructions and, because of git's security model, some protection

Re: [exim] DKIM signature where the identity field has a leading slash attempts to touch the filesystem

2011-05-06 Thread Phil Pennock
On 2011-05-07 at 09:08 +1000, Ted Cooper wrote: On 07/05/11 08:51, Tony Meyer wrote: condition = ${if eqi{$sender_address_domain}{$dkim_cur_signer}} Unfortunately, this didn't fix the problem. I get the paniclog entry even using this ACL: Is this at all related?

Re: [exim] problem : x-vbr=hardfail

2011-05-08 Thread Phil Pennock
On 2011-05-08 at 12:20 +0200, techni...@dreamhosting.fr wrote: Hi have a problem when I test emails on *dkim-t...@altn.com I have this error : * x-vbr=hardfail header.vbr-info=mydomain.here (domain not recognized); I do not find how to solve this problem, there are only few post in

[exim] Exim 4.76 RC2 uploaded - SECURITY

2011-05-08 Thread Phil Pennock
honestly expect much review, but now's your chance to scream stop!. Checksums below. Detached PGP signatures in .asc files. Thank you for your patience, testing and feedback, - -Phil Pennock, pp The Exim Maintainers. SHA1(exim-4.76_RC2.tar.bz2)= 5f9e829330ead59cf91b24ee4728089f730e7224 SHA1(exim

Re: [exim] Fwd: Re: Testing DKIM

2011-05-09 Thread Phil Pennock
On 2011-05-10 at 01:13 +0200, Luciano Rinetti wrote: Thank You i see the DKIM signature in my header. There is a method i can use to test by miself ? My notes include these DKIM testing services; I suspect that most, if not all, will DKIM-sign their responses, letting you both verify your

Re: [exim] String expansion in smtp_accept_max_per_connection?

2011-05-12 Thread Phil Pennock
On 2011-05-11 at 14:55 -0700, carbonated beverage wrote: I saw the smtp_accept_max_per_connection variable is not subject to string expansion -- are there plans to change this? If not, what have others with this kind of requirement done to work around it? No plans which I'm aware of. Use

Re: [exim] problem : x-vbr=hardfail

2011-05-12 Thread Phil Pennock
On 2011-05-12 at 15:47 -0700, Murray S. Kucherawy wrote: [ quoting Phil Pennock: ] So this just means that, for whatever certification organisations altn.com is using when assessing via VBR, you haven't paid one of them to be included. Right, and I agree it's not a concern unless someone

Re: [exim] String expansion in smtp_accept_max_per_connection?

2011-05-12 Thread Phil Pennock
On 2011-05-12 at 22:28 +1000, Ted Cooper wrote: On 12/05/11 19:02, Phil Pennock wrote: On 2011-05-11 at 14:55 -0700, carbonated beverage wrote: I saw the smtp_accept_max_per_connection variable is not subject to Use ACLs; set a counter in the connect ACL in an $acl_c_foo variable

Re: [exim] Exim 5.x

2011-05-19 Thread Phil Pennock
On 2011-05-19 at 11:09 +0100, David Woodhouse wrote: I'm mostly familiar with LEMONADE in the context of IMAP. What needs doing on the SMTP side? BDAT, BURL (and thus urlauth validation, a policy engine, etc) -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim

Re: [exim] Exim 5.x

2011-05-19 Thread Phil Pennock
On 2011-05-19 at 09:58 +, Ian Eiloart wrote: But no, I don't see a sign of 5.0, or even discussion of what desirable radical changes would justify a major version number change. It might just be that we run out of minor version numbers! From the June 2010 maintainers meet-up summary notes

Re: [exim] Exim 5.x

2011-05-19 Thread Phil Pennock
On 2011-05-19 at 12:35 +0100, Dominic Benson wrote: On 19/05/11 11:50, Phil Pennock wrote: New queuing system refers to an approach to scale up the spool directory to something more queue-like, with segregated admin-defined queues (eg, big_freemail_provider_x). This is because while Exim

Re: [exim] Exim 5.x

2011-05-20 Thread Phil Pennock
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 On 2011-05-20 at 09:36 +, Ian Eiloart wrote: On 19 May 2011, at 19:05, W B Hacker wrote: If nothing has reverted, I read that as a U Cambridge server having accepted 8BITMIME with a 250-Ok many years and versions ago. It doesn't

Re: [exim] Exim 5.x

2011-05-20 Thread Phil Pennock
On 2011-05-19 at 14:10 +, W B Hacker wrote: Phil Pennock wrote: At present, there's split_spool_directory, which divides things up with one level of hashing, and then some people script their own queue-runner launchers, running in parallel over sub-trees of the split spool instead

Re: [exim] Numerous segfaults with 64 bit exim

2011-06-10 Thread Phil Pennock
On 2011-06-09 at 09:36 -0700, Todd Lyons wrote: On Thu, Jun 9, 2011 at 9:25 AM, Patrick Boutilier bouti...@ednet.ns.ca wrote: Didn't try removing the quotes but did come up with a solution. I believe that the messages causing segfaults were probably due to the length of $spam_report . So

Re: [exim] Numerous segfaults with 64 bit exim

2011-06-10 Thread Phil Pennock
On 2011-06-10 at 04:38 -0400, Phil Pennock wrote: Note that the *default* message for the ratelimit response contains At present, the only change I see to make is to ensure that the ratelimit default message is used when expansion failed. We'll still need more to go on, otherwise. s

Re: [exim] Sender verification failing sometimes

2011-06-13 Thread Phil Pennock
On 2011-06-13 at 00:32 +, Michael Jimenez wrote: So I've been looking at my mail server mainlog for the past couple of days watching mail come in and out, I've noticed that this Microsoft address keeps failing to verify: You're using sender *callout* verification to systems not under

Re: [exim] Sender verification failing sometimes

2011-06-14 Thread Phil Pennock
On 2011-06-14 at 20:58 +0100, Graeme Fowler wrote: On Tue, 2011-06-14 at 00:24 -0400, Phil Pennock wrote: You're using sender *callout* verification to systems not under your administrative control. Really? Not necessarily. Not necessarily, but highly likely given that the address which

Re: [exim] Bug in 4.69 ?

2011-06-20 Thread Phil Pennock
On 2011-06-20 at 04:56 +0100, Always Learning wrote: Recently a free-standing server disappeared after its Exim configuration was changed and before a Save of the changes was done :-( I'm failing to parse what exactly you mean by this? Eventually I discovered that the first host name,

Re: [exim] Commas in redirect data

2011-06-20 Thread Phil Pennock
On 2011-06-20 at 13:44 +0100, Chris Wilson wrote: I'm trying to write a redirect router that sends data into Redmine's email handler, which needs commas in some of the parameters, but the technique mentioned above appears not to work. I have the following router (changed to use /bin/echo to

Re: [exim] exim and a 64 bit OS?

2011-06-21 Thread Phil Pennock
On 2011-06-21 at 09:20 +, Thew, Alan wrote: Has anyone got exim and cdb working together on a 64 bit OS (RHEL 6 in this case)? cdb is really old now... My primary dev box is my colo machine, which runs 64-bit FreeBSD and I use CDB for most of my configuration files. Exim's CDB support is

Re: [exim] Headers not being removed?

2011-06-24 Thread Phil Pennock
On 2011-06-24 at 05:59 +, Bruce A. Bergman wrote: [ headers_remove not working ] remote_smtp: debug_print = T: remote_smtp for $local_part@$domain driver = smtp headers_remove = X-FDA:X-Panda:X-Spam-Summary Does it work if you remove the quotes? If so, please file a bug (but you'll

Re: [exim] Long 'From:' header and verify = header_sender issue.

2011-06-24 Thread Phil Pennock
On 2011-06-22 at 15:06 -0400, Bryan Rawlins wrote: I have been working with the coordinators for the Virus Bulletin Spam test on an issue where our servers were returning 421 Unexpected failure, please try later in response to some messages relayed to us through the competition server.

[exim] RPM .spec file for Exim?

2011-06-28 Thread Phil Pennock
Folks, Does anyone have a basic RPM .spec file for Exim they'd care to share, please? Not covers every possibility, for packaging across multiple OSes with every library optional but just this works for me and is simple enough to change readily. Thanks, -Phil PS: anyone think there should be a

Re: [exim] v3 or v4? from configuration file

2011-06-28 Thread Phil Pennock
On 2011-06-28 at 17:04 +0300, Mihamina Rakotomandimby wrote: I would like to know if this configuration sample is for Exim 3 or Exim 4: http://www.bastard.net/~kos/mailrouter/sample-configure Exim 3. Separates sections with end, has the sections in a fixed order, has a separate concept of

Re: [exim] question regarding spamassassin in exim, especially headers

2011-07-14 Thread Phil Pennock
On 2011-07-13 at 10:14 -0700, David Mathog wrote: Nevertheless, none of the headers defined by add_header in any of those many configuration files actually show up in the messages. Instead the only headers created are those defined in exim.conf in this section: SpamAssassin's added headers

Re: [exim] question regarding spamassassin in exim, especially headers

2011-07-14 Thread Phil Pennock
On 2011-07-14 at 08:54 -0700, David Mathog wrote: I don't have a grasp on the relative benefits of doing the spam checking in these two different ways, beyond the observation that the sa-exim one ends up with the headers spamassassin is configured to add. Since there is usually no free lunch,

Re: [exim] exim mail queue sent off wrong IP

2011-07-18 Thread Phil Pennock
On 2011-07-19 at 02:34 +, Matt Justin wrote: I have cpanel/exim setup to send mail for specific urls over specific ips. This is working fine except when there was mail queued up due to a ISP temporary deferring it. Exim did its job and deferred sending the emails and they sat in queue

Re: [exim] ACLs and forward computation of final local_part after redirects

2011-07-23 Thread Phil Pennock
On 2011-07-21 at 09:54 +0100, Tim Watts wrote: The redirect router is less desireable as I have to handle mail I no longer want instead of being able to reject it at SMPT time (whereby the spammer who now has it might stop bothering me). Err, no. There are typically two runs through the

Re: [exim] how do I put a email messages back into the queue?

2011-07-23 Thread Phil Pennock
On 2011-07-21 at 16:40 +0100, Oliver Howe wrote: suppose i have a message file that i have saved as a text file as 1QjuGG-0005hY-AE-H and I want to send it again. Can I put it back into the /var/spool/exim4/input/1 directory? You've only got the headers. Exim uses the -H file for the

Re: [exim] Question about use of route_data as a condition to transport option

2011-07-23 Thread Phil Pennock
On 2011-07-22 at 18:43 +0200, Hubertus von Fuerstenberg wrote: The ldap query for route_data looks up the mailhost and yields either imap.ise.fraunhofer.de or notesmail.ise.fraunhofer.de, so I thought of using route_data in the selection of transport but I always get the error that

Re: [exim] Filter question - getting envelope-to header via pipe?

2011-07-23 Thread Phil Pennock
On 2011-07-22 at 14:02 -0600, Kirk Friggstad wrote: Everything works pretty much as expected - incoming mail gets saved in the mailattachments directory, and the perl script fires and gets the entire message on STDIN with no problems. However, I haven't been able to find how to find out the

Re: [exim] no queue_run started for several hours

2011-07-23 Thread Phil Pennock
On 2011-07-22 at 14:34 +0100, Oliver Howe wrote: 2011-07-22 09:55:11 Start queue run: pid=28711 # date Fri Jul 22 14:17:58 BST 2011 # # ps ax | grep 28711 28711 ?S 0:00 /usr/sbin/exim4 -q # does this mean I have a queue running since 09:55 (its now 14:17) and I can only

Re: [exim] ACLs and forward computation of final local_part after redirects

2011-07-23 Thread Phil Pennock
On 2011-07-23 at 15:47 +0100, Tim Watts wrote: system_aliases: [...] data = ${lookup{$local_part}lsearch{/etc/exim4/domains/$domain/aliases}} 3a) However (and it is logical) a + form on an alias cannot be blocked with the user level blacklist. Depends. You can *preserve* the +suffix

Re: [exim] exim authorization cram-md5 through sasl2 in ldap

2011-07-26 Thread Phil Pennock
On 2011-07-25 at 18:57 +0400, Ivan Usachev wrote: Hi! tell me please, is it possible to implement such a scheme exim authorization cram-md5 through sasl2 in ldap Should be, yes. http://www.exim.org/exim-html-current/doc/html/spec_html/ch36.html Chapter 36 - The cyrus_sasl authenticator The

Re: [exim] sender_host_address in split queue scenario?

2011-08-07 Thread Phil Pennock
On 2011-08-05 at 10:54 -0400, Brent Bloxam wrote: I run exim in a split queue setup (inbound daemon is queue only) along with MailScanner. Is sender_host_address preserved or would the message be considered locally submitted when picked up by the outbound daemon? Depends on how it's

Re: [exim] SPF checking and type 99 filtering

2011-08-12 Thread Phil Pennock
On 2011-08-12 at 10:43 +0100, Christian Gregoire wrote: I bumped into this with a client of mine and now that he has removed the type 99 filtering on his firewall, everything's smooth. But is there a way to specify some sort of timeout in an ACL ? defer_ok ? delay ? Unfortunatelly I can't

Re: [exim] Re : SPF checking and type 99 filtering

2011-08-15 Thread Phil Pennock
On 2011-08-15 at 22:24 +0100, Christian Gregoire wrote: But ... in the last end, shouldn't it be Exim's responsability to check for timeout ? There's already this possibility with callouts (verify = sender/callout=5s) or ${readsocket ...} expansion item for example. So why not with SPF

Re: [exim] Multiple authentications acting as a client

2011-08-20 Thread Phil Pennock
On 2011-08-18 at 16:13 -0300, Reinaldo Matukuma wrote: This returns me: 2011-08-18 16:05:23 Exim configuration error: two client authenticators (client_plain_1 and client_plain_2) have the same public name (PLAIN) 2011-08-18 16:05:23 Exim configuration error: two client

Re: [exim] Blocking names from name@ip-address

2011-08-24 Thread Phil Pennock
On 2011-08-23 at 12:41 +0100, De Ranter, Nico wrote: I'm receiving a large number of spam messages from addresses of the form name@ip-address. I'm already blocking addresses of the form @[ip-address] using 'allow_domain_literals=false' but this doesn't seem to stop @ip-address. As long as

Re: [exim] Blocking names from name@ip-address

2011-08-24 Thread Phil Pennock
On 2011-08-24 at 10:37 +0100, De Ranter, Nico wrote: Hi Phil, when I try exim -bt test@110.1.1.1 I get R: smarthost for test@110.1.1.1 test@110.1.1.1 router = smarthost, transport = remote_smtp_smarthost host x.x.x.x [x.x.x.x] (the server is

Re: [exim] Valid working host failing for a long time

2011-08-24 Thread Phil Pennock
On 2011-08-24 at 16:44 +0100, Colin wrote: 2011-08-22 13:18:16 1QvTSJ-hJ-Rx ** sen...@domain1.tld sen...@domain1.tld R=static_route T=remote_smtp_smart: all hosts have been failing for a long time and were last tried after this message arrived Are you sure that it's the sender address

Re: [exim] envelope sender vs header from

2011-08-24 Thread Phil Pennock
On 2011-08-24 at 19:40 -0700, Jim Pazarena wrote: Is there an acl which can examine the From: name? Yes, acl_smtp_data. Remember that the RFC822/2822/5322 headers come in as part of the message body, after the DATA verb. So in acl_smtp_rcpt, you haven't yet seen the From: header. Also, note

Re: [exim] Negation list - NOR statement

2011-08-24 Thread Phil Pennock
On 2011-08-24 at 22:51 -0400, Frank DeChellis wrote: Hosts = !+host_list1 : !+host_list2 If I understand correctly again, I am setting up a resultant NAND function by negating the two lists that are ³OR² together. Boolean Algebra 201. How would I create a ³NOR² function between the two

Re: [exim] listed at .backscatterer.org

2011-08-25 Thread Phil Pennock
On 2011-08-25 at 07:45 +0200, Jan Ingvoldstad wrote: On Thu, Aug 25, 2011 at 00:50, Frank Elsner frank.els...@tu-berlin.dewrote: One idea might be to send bounces and only bounces from a different interface/IP. This avoids blacklisting of the interface/IP used to send all other normal

Re: [exim] Blocking names from name@ip-address

2011-08-25 Thread Phil Pennock
On 2011-08-25 at 09:03 +0100, De Ranter, Nico wrote: If I understand correctly the special_ipv4_bad part is just there so I can make some exceptions right? It's IP addresses we refuse to deliver to, even if that's what the DNS resolves to. $ exim -bP +special_ipv4_bad hostlist

Re: [exim] What field does sender_domain check?

2011-08-26 Thread Phil Pennock
On 2011-08-25 at 16:28 -0400, Frank DeChellis wrote: Does the sender_domain condition test check the domain name in ³from:², ³return-path:² or ³envelope-from:² The condition is sender_domains, with a trailing s. Per the documentation: 8 cut here

Re: [exim] problem confirmed with exim and mailing off wrong IPs when mail is queued

2011-08-29 Thread Phil Pennock
On 2011-08-29 at 13:13 +, Matt Justin wrote: I have recently opened a ticket with cpanel support and it was escalated to there dev team and this behavior was confirmed. We have found the following to be true: When 2 or more domians/ips are setup to use /etc/mailhelo /etc/mailips and

Re: [exim] Blacklisted @ gmail.com

2011-08-29 Thread Phil Pennock
On 2011-08-29 at 15:24 +0200, tower wrote: Can You tell me what can I do to be unblacklisted in gmail spam filter? For one week ago I had open mail system and some spam passed from one of my servers. Today I filled out the form at

Re: [exim] problem confirmed with exim and mailing off wrong IPs when mail is queued

2011-08-30 Thread Phil Pennock
On 2011-08-29 at 22:06 +, Matt Justin wrote: what so u need to see my exim.conf? Yes. That's pretty essential to debugging problems, since it's the exim.conf which dictates how Exim is supposed to deal with any particular problem. -Phil -- ## List details at

Re: [exim] problem confirmed with exim and mailing off wrong IPs when mail is queued

2011-08-30 Thread Phil Pennock
On 2011-08-30 at 11:49 -0400, Dean Brooks wrote: What you are seeing in Exim with regards to having to set connection_max_messages=1 in order to ensure that the interface= transport option is honored properly is indeed the case. Without it, other messages waiting on the queue will get sent

Re: [exim] delaying inbound messages

2011-09-01 Thread Phil Pennock
On 2011-09-01 at 11:05 -0700, Jeff Lasman wrote: # Accept hosts who are polite enough to wait rather than just send, as spammers do accept hosts = * delay = 3s Is there a community concensus on whether or no this is reasonable? This is email. There's no community consensus

[exim] SECURITY: OpenSSL advisory's impact on Exim

2011-09-06 Thread Phil Pennock
Today, OpenSSL issued a security advisory: http://www.openssl.org/news/secadv_20110906.txt OpenSSL is one of the two available implementations of the TLS protocol in Exim. The other is GnuTLS. In the output of { exim -bV } is a line Support for:; if it does not include OpenSSL then you are

Re: [exim] Web Site 404 error

2011-09-06 Thread Phil Pennock
On 2011-09-07 at 00:58 +0100, Always Learning wrote: http://www.exim.org/exim-html-current/doc/html/spec_html/filter_ch03.html the bottom RIGHT link (Next) has:- http://www.exim.org/exim-html-current/doc/html/spec_html/filter_ch04.html but I continually get a 404 error. There is no

Re: [exim] 30 minute delay outgoing mail : tahini.csx.cam.ac.uk

2011-09-07 Thread Phil Pennock
On 2011-09-07 at 12:57 +1000, Ted Cooper wrote: I'm assuming that Phil, the person most likely to be in contact with Tahini mailops, is based in the UK and as such is probably asleep since it's 2am-3am there. I'm not the Tahini mailop, that's someone else who frequents this list, and probably

Re: [exim] Re : Exim as an external filter : how to check recipient address existence

2011-09-07 Thread Phil Pennock
On 2011-09-07 at 16:50 +0100, Christian Gregoire wrote: Actually, in Graeme example (below), I can't see where Exim retrieves the relay host(s) to check against. warn domains = +filter_domains:+relay_to_domains !verify = recipient/callout=30s,defer_ok,no_cache,use_sender set

Re: [exim] Cannot send mail to gmail.com after reconfigure Exim 4.76?

2011-09-07 Thread Phil Pennock
On 2011-09-07 at 18:51 +0300, Face wrote: cannot start exim with this error: 2011-09-07 18:07:14 Exim configuration error in line 821 of /etc/mail.d/exim.d/exim.conf: error in ACL: unknown ACL condition/modifier in demime = * You built Exim without demime support. Either build with

Re: [exim] Varying message size limit according to sending host?

2011-09-08 Thread Phil Pennock
On 2011-09-08 at 10:14 +0100, ROGERS Richard wrote: Is it possible to vary the message size limit according to where the message is received from? I've had a bit of a look at this but it appears that message_size_limit is set globally - is this correct, or is there another way?

Re: [exim] General protection error

2011-09-08 Thread Phil Pennock
On 2011-09-07 at 20:30 +0200, Pawel Rutkowski wrote: Today i try to compile and run Exim 4.76 version on my Centos 5 64bit. After compile i thought that everythink work OK, but from time to time i get in kernel: exim[4921] general protection rip:46b660 rsp:7fffe3f34e10 error:0

Re: [exim] Varying message size limit according to sending host?

2011-09-08 Thread Phil Pennock
On 2011-09-08 at 11:15 +0100, ROGERS Richard wrote: Phil Pennock wrote: = On 2011-09-08 at 10:14 +0100, ROGERS Richard wrote: Is it possible to vary the message size limit according to where the message is received from? I've had a bit of a look at this but it appears

Re: [exim] Varying message size limit according to sending host?

2011-09-08 Thread Phil Pennock
On 2011-09-08 at 18:13 -0400, Phil Pennock wrote: On 2011-09-08 at 11:15 +0100, ROGERS Richard wrote: Phil Pennock wrote: = On 2011-09-08 at 10:14 +0100, ROGERS Richard wrote: Is it possible to vary the message size limit according to where the message is received from? I've

Re: [exim] pipes: what am I missing?

2011-09-10 Thread Phil Pennock
On 2011-09-09 at 20:54 -0700, Yan Seiner wrote: I am trying to set up a pipe to a shell script. rt_router: driver = accept local_part_prefix_optional local_part_prefix = rt- transport = rt_transport rt_transport: driver = pipe command = /usr/local/bin/rtcat The goal is

Re: [exim] Quoting questions

2011-09-10 Thread Phil Pennock
On 2011-09-10 at 23:11 +, Steffen Heil (Mailinglisten) wrote: I have a text-file that I use for lookups like this: set acl_m1 = ${lookup{a...@b.de}lsearch*@{filename}{$value}fail} then I extract some information from this: ${extract{key}{$acl_m1}} Also, I need to extract a password

Re: [exim] General protection error

2011-09-11 Thread Phil Pennock
On 2011-09-11 at 07:16 +0200, Pawel Rutkowski wrote: Hello, Else: Configure your system to permit setuid programs to dump core; set rlimits accordingly; grab coredump, run: $ gdb /path/to/exim /path/to/exim.core and issue the bt command, which will tell you where it died, and

Re: [exim] Quoting questions

2011-09-11 Thread Phil Pennock
On 2011-09-11 at 08:52 +, Steffen Heil (Mailinglisten) wrote: While this is no answer to my question, it is yet way better. That's why I offered it. :) 4) driver = redirect data = ${expand:${extract{forward}{$address_data}}} Incoming mail for a...@c.de was correctly redirected to

Re: [exim] Is DomainsKeys (DK not DKIM) disabled since v4.70-4.71?

2011-09-11 Thread Phil Pennock
On 2011-09-11 at 00:40 -0500, Pedro Mansilla wrote: Simple questions are: Is domainkeys (dk) disabled on exim 4.70 and up? It was removed; DomainKeys support was only ever experimental, and the world moved on, to DKIM. See also the README.UPDATING file with Exim, which calls out explicitly

Re: [exim] General protection error

2011-09-11 Thread Phil Pennock
On 2011-09-11 at 18:49 +0200, Pawel Rutkowski wrote: Yes, now more information: (gdb) bt #0 0x0046b660 in smtp_read_response (inblock=0x718bad50,buffer=0x718b9d10 220 proksima.home.pl ESMTP IdeaSmtpServer v0.70 ready.\r, size=4041, okdigit=50, timeout=300) at

Re: [exim] Quoting questions

2011-09-11 Thread Phil Pennock
On 2011-09-11 at 16:19 +, Steffen Heil (Mailinglisten) wrote: Whitespaces shoud not matter as long as the string is double quotet, right? Like this: pass=ab\$c d\!ef That gets the whitespace into the string which is used as the result of the later expansion; without looking at where it's

Re: [exim] Is DomainsKeys (DK not DKIM) disabled since v4.70-4.71?

2011-09-11 Thread Phil Pennock
On 2011-09-11 at 15:59 -0500, Pedro Mansilla wrote: Hi Phil, thanks for the answers. Ok, so lets say that I need both. What was the last version that supported both as Experimental. I mean the SRC. And what should I do or need to compile it and have both working and signing out messages.

Re: [exim] match local_domain with $sender_adresse_domain and or ${domain:$h_From:}

2011-09-16 Thread Phil Pennock
On 2011-09-15 at 14:01 -0400, Nerigal . wrote: exim but I would know if it is possible to compare the domain in the $sender_adresse_domain and or ${domain:$h_From:} value with the owned in local_domain and reject email if it doesn’t match I tried something like condition = ${if

Re: [exim] Configure separate qualified domain for one user

2011-09-16 Thread Phil Pennock
On 2011-09-16 at 15:29 +0200, Patryk wrote: I'd like to configure one user to send with a different qualified domain than the default one. Is this possible? I couldn't find a way to achieve this in the documents of exim. qualify_domain is applied too early and is constant; also, it won't

<    4   5   6   7   8   9   10   11   12   13   >