[exim] Security: GnuTLS remote compromise

2006-02-17 Thread Phil Pennock
A heads-up for those who use GnuTLS in their Exim: make sure that you upgrade GnuTLS to deal with this security problem: URL:http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0645 http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0645 Description: Tiny ASN.1 Library

Re: [exim] hostlist check failing

2006-02-17 Thread Phil Pennock
On 2006-02-17 at 10:28 -, Edward Kay wrote: relay_hosts is a hostlist defined as: hostlist relay_hosts = lsearch;/etc/relayhosts : \ lsearch;/etc/relayhosts.omniquad : \ localhost The two files /etc/relayhosts.omniquad and /etc/relayhosts contain lists of IP addresses,

Re: [exim] want to skip dspam router

2006-02-17 Thread Phil Pennock
On 2006-02-16 at 13:08 +0200, Brent Clark wrote: dspam_router: no_verify check_local_user condition = ${if and { \ {!def:h_X-Spam-Flag:} \ {!def:h_X-FILTER-DSPAM:} \ {!eq {$received_protocol}{local}} \ { = {$message_size}{512k}} \ }\ {1}{0}} headers_add = X-FILTER-DSPAM: by

Re: [exim] exim php shell_exec question

2006-02-17 Thread Phil Pennock
On 2006-02-16 at 14:33 -0800, John W. Baxter wrote: I'm rather surprised that in all of Exim's years, no one has written and contributed a set of SNMP agents (if that's the right SNMP jargon) to provide this sort of information. Someone posted details of their set-up a while back; I think

Re: [exim] Restricting SMTP access

2006-02-17 Thread Phil Pennock
On 2006-02-15 at 11:49 -, Edward Kay wrote: I want to stop any hosts that I don't explicitly allow from accessing my SMTP server. Move the problem out of the Exim configuration logic to keep things simple. If there is no legitimate reason for any server to directly contact your host (and

Re: [exim] lsearch

2006-02-18 Thread Phil Pennock
On 2006-02-17 at 14:00 -0500, Sergei Gerasenko wrote: I'm running the current stable version of Debian and the packaged version of Exim 4. I'm switching from 3 and I have this problem with lsearch that I just can't figure out. It's a very simple scenario. I want to block hosts that are

Re: [exim] Redirect router condition - local smtp

2006-02-18 Thread Phil Pennock
On 2006-02-17 at 11:42 -0800, Doug Jolley wrote: If I wanted to add a condition to an ACL statement that would limit application of the satement to local SMTP processes I would say: hosts = : What I'm trying to figure out is how I could do that same sort of thing in a redirect

Re: [exim] Exim Config Issues

2006-02-20 Thread Phil Pennock
On 2006-02-18 at 18:29 -0700, Koa McCullough wrote: We have a server that hosts multiple sites via IP aliasing so we would also like Exim to serve the same site/IP pairs that apache does. At this time I have very little control over the server itself so setting this up with chroot is

Re: [exim] RHS expansion a la mailertable

2006-02-20 Thread Phil Pennock
On 2006-02-15 at 23:31 +0600, Victor Sudakov wrote: Let's take the following router definition: and a little bit of time for me to notice the email amongst the exim-users backlog ... sorry for the delay. fido: transport = ifmail driver = manualroute route_list = \

Re: [exim] Exim: smart_route / routing based on From:

2006-02-23 Thread Phil Pennock
On 2006-02-23 at 13:42 +0100, [EMAIL PROTECTED] wrote: smart_route: driver = manualroute domains = ! +local_domains transport = remote_smtp route_list = * serverabc which works pretty good, but now i want one exception from this rule: If From: of the Mail (not neccessarily the

Re: [exim] Accepting messages to certain transport by authentication

2006-02-23 Thread Phil Pennock
On 2006-02-23 at 15:26 +0200, Ville Mattila wrote: would like to create a configuration that accepts messages to this router/transport only if a) the SMTP user has authenticated (and if possible, only as a certain user) b) the SMTP connection comes from a certain domain or domains What

Re: Re: [exim] Exim: smart_route / routing based on From:

2006-02-24 Thread Phil Pennock
On 2006-02-24 at 08:18 +0100, [EMAIL PROTECTED] wrote: My config now looks like: addresslist senders_to_xyz = [EMAIL PROTECTED] : [EMAIL PROTECTED] smart_route_xyz: condition = ${if match_address{${address:$h_from}}{+senders_to_xyz} {yes}{no}} driver = manualroute transport =

Re: [exim] [Patch supplied] Exim enhancement request.

2006-02-24 Thread Phil Pennock
On 2006-02-23 at 14:52 +, Dennis Davis wrote: Anyone should feel free to shoot my ideas down in flames if they can think of a better way of doing the following. Not in flames; the Exim stuff is useful, I can't think of a way to do it without modifying either Exim or Cyrus and your way

Re: [exim] [Patch supplied] Exim enhancement request.

2006-02-24 Thread Phil Pennock
On 2006-02-24 at 11:41 +, Tony Finch wrote: Doesn't Cyrus's sieve subaddress facility handle this already? We do unauthenticated delivery to Cyrus over LMTP and have unofficial support for +subaddresses, which get delivered to the user's inbox unless they have written appropriate Sieve

[OT] Sieve/Cyrus (was Re: [exim] [Patch supplied] Exim enhancement request.)

2006-02-24 Thread Phil Pennock
On 2006-02-24 at 13:21 +, Tony Finch wrote: You can do it as a general rule if you have a sufficiently studly sieve implementation - it needs the variables extension. Since draft-ietf-sieve-variables-08.txt only defines scalar variables, you're not going to be able to validate the

Re: [exim] change username for mail only

2006-02-26 Thread Phil Pennock
On 2006-02-26 at 17:19 -0500, Jay Rouman wrote: Is there a simple way to change a username for received mail only? Block it in a RCPT ACL but still route it normally. Aliases handle the externally visible value, you route it normally to the real user, but the real user can't be directly sent to

Re: [exim] transport to another smtp

2006-03-01 Thread Phil Pennock
On 2006-03-01 at 14:10 +0100, Stan Novogroudski wrote: I'll have a list of mail adresses, which have to be redirected to another smtp's --- #File /etc/mail/exim/redirects [EMAIL PROTECTED] another-smtp-ONE.my-domain.foo [EMAIL PROTECTED]

Re: [exim] message size

2006-03-01 Thread Phil Pennock
On 2006-02-28 at 11:51 -0300, Diego Angelini wrote: Actually, we have restricted the message size that exim can proccess by message_size_limit directive. This value is advertised to the sender host in SMTP; you can change it based upon where someone connects _from_ but not by recipient: it's

Re: [exim] transport to another smtp

2006-03-01 Thread Phil Pennock
On 2006-03-01 at 15:12 +0100, Stan Novogroudski wrote: Phil Pennock schrieb: Untested, treat with caution: smtp_redirect_local: driver = manualroute transport = remote_smtp domains = +local_domains condition = ${lookup [EMAIL PROTECTED] [EMAIL PROTECTED]/etc/mail/exim/redirects

Re: [exim] Problem with local_domains

2006-03-02 Thread Phil Pennock
On 2006-03-02 at 09:31 +0100, Luca Bertoncello wrote: I think I have a problem with local_domains... domainlist local_domains= mysql;select domainname from domain where domainname is not null; deny domains = +local_domains condition= ${if eq

Re: [exim] Retry time not reached for any host

2006-03-02 Thread Phil Pennock
On 2006-03-02 at 10:59 -, Gareth Hastings wrote: I am seeing loads and loads of these errors 2006-03-02 10:36:29 1FElAa-000327-00 == [EMAIL PROTECTED] message filter T=smtp defer (-44): retry time not reached for any host Cached failure; look back to when they started; or remove the

Re: [exim] Debugging 'Invalid base64 data

2006-03-02 Thread Phil Pennock
On 2006-03-02 at 15:23 +0100, Felix Brack wrote: I understand that exim gets the command AUTH LOGIN and then sends the prompt Username: (VXNlcm5hbWU6 base64 encoded); this is fine and exactly what exim should do. The next thing exim does is send the message 501 Invalid base64 data. In between

Re: [exim] Debugging 'Invalid base64 data

2006-03-02 Thread Phil Pennock
On 2006-03-02 at 16:14 +0100, Felix Brack wrote: debugging features, I normally preferre these. Just for clarity: there is no debug option in exim that would enable showing things like username and password entered on the remote client during the SMTP session? For this particular case: not

Re: [exim] virtual users and aliases

2006-03-03 Thread Phil Pennock
On 2006-03-02 at 20:39 +0100, Torben Janssen wrote: system_aliases: driver = redirect allow_fail allow_defer domains = +local_domains data = ${lookup{$local_part}lsearch{/etc/exim/aliases/$domain}} file_transport = address_file pipe_transport = address_pipe but then every mail is

Re: [exim] Host-based retrying problem

2006-03-03 Thread Phil Pennock
On 2006-03-03 at 10:12 -0800, Christian Gregoire wrote: The problem is that when A gets a host error from B for some reason, all messages destined to B are queued. And when retry time has come, A sends all messages to B at once, whose load average rises, so leading Sendmail to refuse

Re: [exim] Sender Verify for aliases / forwards

2006-03-03 Thread Phil Pennock
On 2006-03-03 at 14:44 -0800, Tracy Phillips wrote: If someone has thier mail server setup to do sender verification, how can I get my exim to verify aliases? By making sure that all handled addresses, including aliases, are used during verification. For example, I have an alias setup for

Re: [exim] Host-based retrying problem

2006-03-05 Thread Phil Pennock
On 2006-03-04 at 00:48 -0800, Christian Gregoire wrote: Thanks a lot for the hints. I'll give it a try. The Exim author's hint, lower the retry time, is even better for almost all circumstances. I should've thought back to why we do things as we do. For us, our front-end hosts can also

Re: [exim] How reject HELLO with my IP

2006-03-10 Thread Phil Pennock
On 2006-03-09 at 09:30 +0500, Viktor Vislobokov wrote: Some spam hosts send MY IP address (xxx.xxx.xxx.xxx) in HELLO. See following line: 2006-03-07 16:00:57 H=(xxx.xxx.xxx.xxx) [61.109.9.90] F=[EMAIL PROTECTED] rejected RCPT [EMAIL PROTECTED]: Unknown user How can I check HELLO and

Re: [exim] How to substitute colon `:' for another character in maildir_format delivery file name?

2006-03-11 Thread Phil Pennock
On 2006-03-11 at 13:45 -0500, My BSD wrote: I was actually not asking about Maildir names, rather, the names of the message files that exim saves or writes in the cur subdirectory of the Maildir. Exim doesn't really touch the cur/ sub-directory[1]. Exim only delivers mails, which for Maildir

Re: [exim] virtual mail redirect question

2006-03-12 Thread Phil Pennock
On 2006-03-11 at 22:45 -0600, Vincent wrote: I have successfully configured it to have separate alias files for each domain for virtual domains. I am using data = ${lookup{$local_part} nwildlsearch{/etc/exim/virtual/$domain}} Is there a way to configure exim so I can have something like

Re: [exim] Exim 4.60 -error saving a message to a public folder

2006-03-12 Thread Phil Pennock
On 2006-03-12 at 19:10 +0100, Juergen Edner wrote: based on a .forward file I try to save a message to a public folder. Now I wonder why this message appears although the user 'test', with uid '2006', has write access to the file and why the delivery process insists on the same uid. It's the

Re: [exim] missing email problem

2006-03-14 Thread Phil Pennock
On 2006-03-13 at 15:04 +, Peter Bowyer wrote: On 13/03/06, Thad Bryson [EMAIL PROTECTED] wrote: or $message_body contains cum ... or $message_headers contains sex Have a think for a moment, how many legitimate messages will this match? Cumulative statistics for the county of Essex

Re: [exim] exim w/ Amavis Majordomo

2006-03-14 Thread Phil Pennock
On 2006-03-13 at 09:07 -0600, David Byte wrote: ah I see the miscommunitcation.. Majordomo is submitting locally and via port 25.. port 10025 is for the off box amavis process to submit mail back in to.. I've not looked at majordomo in years, but I've just grabbed 1.94.5 and the distribution

Re: [exim] Loopy idea: tunnel SMTP through HTTP

2006-03-14 Thread Phil Pennock
On 2006-03-14 at 16:54 -0500, Greg Ward wrote: So ... why not tunnel SMTP through HTTP? draft-ietf-lemonade-firewall-binding-00.txt -Phil -- ## List details at http://www.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list -

Re: [exim] srs_alt.h

2006-03-17 Thread Phil Pennock
On 2006-03-16 at 15:23 -0800, Doug Jolley wrote: I'm trying to compile Exim 4.60 on an FC2 system. I am upgrading an old 4.43 system and part of the motivation is to take advantage of the integrated Exiscan capabilities. However, I think that is causing me a bit of a problem at the moment.

Re: [exim] Connection refused: too many connections - why?

2006-03-18 Thread Phil Pennock
On 2006-03-18 at 18:43 +0100, Jürgen Herz wrote: The server is under almost no traffic, so the server isn't overloaded. And the log also doesn't show connection attempts right before the error lines start. Have you explicitly turned on extra logging, to see connections and not just rejected

[exim] .ifdef SUPPORT_TLS; exim 4.60

2006-03-18 Thread Phil Pennock
Exim 4.60, most stuff going to smarthost but some stuff going out directly to MX, based on existence of a flag-file for the domain. I just added another flag-file for a friend's system and was surprised to see TLS used. Whether or not it's a good idea, I do actually disable the automatic use of

Re: [exim] MX record lookup quest.

2006-03-20 Thread Phil Pennock
On 2006-03-19 at 19:24 -0800, Derrick MacPherson wrote: Hmm, gmail will send to them, so I guess they are doing only a IPv4 or it's working with the v4 address and ignoring the ::1. Is there anything I can do to get around it? Use ignore_target_hosts on your dnslookup Router. Put :: in that

Re: [exim] smtp_accept_max good values

2006-03-20 Thread Phil Pennock
On 2006-03-20 at 09:26 -, Gareth Hastings wrote: I am looking to increase the number of concurrent connections my server can handle. Currently it's the default limit of 20. Is there any kind of guide on how high I can set this? The machine it's running on it only a P3 1Ghz. I don't want to

Re: [exim] Using flat lists of domains in exim.conf domain lists and lookup expansions.

2006-03-20 Thread Phil Pennock
On 2006-03-20 at 11:34 +, Adam Funk wrote: I'm fairly certain that for an option that takes a domain list, the following the correct way to say this option applies if the domain is in either of the two lists, and that I can use entries like *.example.com lines as well as example.com in

Re: [exim] setup Exim to improve SMTP performance

2006-03-21 Thread Phil Pennock
On 2006-03-21 at 17:22 +0100, Olivier Bonvalet wrote: Have I to set anything else to improve perf ? Local DNS cache, or LDAP slave if using LDAP for lookups. If doing many file lookups per recipient, consider building the data into CDB files for faster lookups. /var/log being a different

Re: [exim] permanent error if delivery ends with segv

2006-03-21 Thread Phil Pennock
On 2006-03-21 at 21:53 +0100, Nicolas KOWALSKI wrote: From time to time, the procmail delivery transports fails because procmail terminates with a sigsegv. Our problem is that this generates a permanent error, and the original mail is lost. How can we change such errors as temporary ones ?

Re: [exim] forward

2006-03-22 Thread Phil Pennock
On 2006-03-21 at 18:05 -0500, Hugo Osorio wrote: also i know that i have to issue the command #exim4 -bf /path/.forward or -bF for to be real i have tried it but nothing happens... as soon as put the command, it stays forever, without giving to me the shell again.. You need to supply the

Re: [exim] permanent error if delivery ends with segv

2006-03-24 Thread Phil Pennock
On 2006-03-22 at 15:02 +0100, Nicolas KOWALSKI wrote: Does this looks good enough/reliable for you ? The only serious problem is that any Perl going into production use really should have warnings turned on. warnings + strict. And taint, if dealing with untrusted data. This especially applies

Re: [exim] forward

2006-03-24 Thread Phil Pennock
On 2006-03-22 at 19:24 -0500, Hugo Osorio wrote: is there any tutorial on this? the information in the official page is so huge and too much theory... there is not much practical stuff Absolutely. The book written by the author of Exim is a tutorial. See: http://www.uit.co.uk/exim-book ISBN

Re: [exim] Mail traffic that shouldn't be?

2006-03-31 Thread Phil Pennock
On 2006-03-30 at 16:37 -0500, daniel wrote: Internet - Firewall/NAT (dallaire) - Mail Server (brazilian) The firewall has two IP's, the legal, external IP on eth0 and the reservered 192.168.0.1 on the internal interface. The mail server has only a reserved IP (192.168.0.7). Now here's

Re: [exim] How to Specify Cyrus SASL environment variables for authentication

2006-03-31 Thread Phil Pennock
On 2006-03-27 at 15:50 -0700, Ehren Wilson wrote: I am trying to use NTLM via Cyrus SASL 2.1.19 backed into Windows Server 2003. I have managed to get this working under cyrus imap by adding the following line into the imapd.conf file I would like to set the ntlm_server environmental

Re: [exim] FreeBSD pipe_transport_setup build failure

2006-04-04 Thread Phil Pennock
On 2006-04-04 at 18:25 +0200, Oliver Heesakkers wrote: In the dev-mailinglist I found mention of such an error at the release of the RC-1 for Exim-4.61. One solution offered was to add -lutil to LIBS= in OS/Makefile-FreeBSD. This did not solve my problem. -lutil should be correct. Did you run

Re: [exim] emails going down under

2006-04-27 Thread Phil Pennock
On 2006-04-26 at 16:11 +0100, John Clement wrote: How do I go about tracing where his emails are going? At the last place I worked if I typed 'exim -bt [EMAIL PROTECTED]' it would check through the aliases until it found where the mail actually gets delivered to, here though it seems that

Re: [exim] forward

2006-04-27 Thread Phil Pennock
I was just checking back over something, and re-reading saw this anomaly in my replies to you. Cc'ing the list for public humiliation and to ensure the archives have this corrected. On 2006-03-22 at 12:32 +0100, Phil Pennock wrote: If the test message is in a file test-mail.msg, then: # exim4

Re: [exim] bSMTP questions

2006-04-27 Thread Phil Pennock
On 2006-04-25 at 18:35 +0200, Arjan wrote: I want to run an bSMTP server for the domainname 'testdomain.com'. After reading and trying i added this to the exim.conf: [snip ACL and local delivery BSMTP router/transport] That seems to work; mail sent to [EMAIL PROTECTED] is placed in the

Re: [exim] emails going down under

2006-04-28 Thread Phil Pennock
On 2006-04-27 at 14:00 +0100, John Clement wrote: Phil Pennock wrote: How about if you specify exim -oMr spam-scanned -bt [EMAIL PROTECTED]? Changing spam-scanned to whichever Received Protocol is actually used to bypass the spamcheck Router in the configuration? Does it seem

[exim] fuel on fire: RFCs for Sender ID, SPF, etc.

2006-04-28 Thread Phil Pennock
Please don't respond to this posting with discussion, I really don't fancy reading an epic flame war over/after a holiday weekend (in NL). This is purely an informative heads up so that people can silently go read documents and digest the information. Please? Four new RFCs have just been

[exim] Feature req: env var logging

2006-08-13 Thread Phil Pennock
I have a feature request for Exim for consideration, which might be awkward to integrate. On an Exim receive (=) line, the ability to log the value of a specified environment variable. Rationale: PHP webhosting, which on Unix uses sendmail for submission, rather than talking SMTP, so the

Re: [exim] FreeBSD ffs vs. ufs?

2006-08-13 Thread Phil Pennock
On 2006-07-17 at 14:00 +1000, Marcus Barczak wrote: I'm currently doing some performance tuning on a pretty heavily used exim server we have here. We're running FreeBSD 6.1 and am noticing the disk loading to be quite high. The filesystems are currently configured as UFS however i'm

[exim] try_verify TLS on smtp transport?

2007-07-20 Thread Phil Pennock
Perhaps I'm having one of my doh-days and I'm just missing something in the docs. Is there a way to attempt to verify a remote server's TLS certificate in the smtp transport, without actually failing it? Something analogous to tls_try_verify_hosts in the main configuration section for inbound

Re: [exim] How can I distinguish between files and directories using require_files?

2007-08-22 Thread Phil Pennock
On 2007-08-12 at 13:17 +0200, Roland Illig wrote: for mailboxes: /var/mailboxes/$domain/$local_part/{new,cur,tmp} for redirections: /var/mailboxes/$domain/$local_part (a regular file containing the redirections) [...] This setup would ensure that no user can have both a

Re: [exim] Conditional file include?

2007-08-24 Thread Phil Pennock
On 2007-08-24 at 14:21 -0500, D. Dante Lorenso wrote: I'm trying to do a conditional file include so that I can roll out the same exim configs to several hosts. I can't seem to get this to work: .include /etc/exim/host/${primary_hostname}.conf --- Starting exim:

Re: [exim] Conditional file include?

2007-08-24 Thread Phil Pennock
On 2007-08-24 at 16:34 -0500, D. Dante Lorenso wrote: Thanks for your RTFM suggestion. Did that. Was hoping someone might have an architecture recommendation on how I CAN do what I'm trying to do ... Sorry, wasn't clear from the post that you had. There are enough people asking for what's

Re: [exim] Log stats to DB?

2007-08-29 Thread Phil Pennock
On 2007-08-29 at 15:28 -0500, D. Dante Lorenso wrote: It would be nice if Exim included a means of executing queries without forcing me to use what seems like a side-effect of the 'warn' feature. I mean, technically it's not a warning, you know. That would be the continue ACL modifier which

Re: [exim] Using exim -Mvc in ACLs

2007-09-09 Thread Phil Pennock
On 2007-09-07 at 22:22 +0200, [EMAIL PROTECTED] wrote: So I have this in ACL DATA: warn set acl_m_sa = ${run {/etc/domeny/testme $message_exim_id $acl_m_user} {$value} } log_message = acl_m_user: $acl_m_user warn continue = {true} log_message = Testme result for

Re: [exim] verify recipe when forwarding for a non MX host

2007-09-10 Thread Phil Pennock
On 2007-09-10 at 07:11 +0200, Steen Eugen Poulsen wrote: I have a mail server thats the front door and a semi hidden real mail server for it to hand off the mail to. So I want it to do accept domains = +gateway_for_domains endpass message = unroutable address verify = recipient off

Re: [exim] Using exim -Mvc in ACLs

2007-09-11 Thread Phil Pennock
On 2007-09-10 at 13:53 +0200, Marcin Krol wrote: Hmm.. Thanks for answer, that's plausible, I wonder how this dlfunc is able to deliver the headers, however??? warn continue = ${dlfunc{/usr/sbin/exim-ext.so}{pipe_message} {/etc/domeny/savestdin}} It's a dl, its code is being loaded into

[exim] HELO/EHLO reject rates

2007-09-19 Thread Phil Pennock
It appears that the effectiveness of filtering out known-bad HELO/EHLO has dropped somewhat in the past few months: http://people.spodhuis.org/phil.pennock/img/exim-reject.2007-09-19.png http://people.spodhuis.org/phil.pennock/img/exim-reject.2007-09-19.ylog.png Of course, this is in absolute

Re: [exim] Exclude recipient from wildcard

2007-09-21 Thread Phil Pennock
On 2007-09-21 at 00:01 +0200, Peter Thomassen wrote: I have set up an additional router that determines the target mailbox by looking up an alias file using lsearch*. Unfortunately, the recipients that are being routed to a particular user (root!) are finally also routed to peter, obviously

Re: [exim] Exclude recipient from wildcard

2007-09-21 Thread Phil Pennock
On 2007-09-21 at 09:56 +0200, Peter Thomassen wrote: The output of `exim -bt postmaster` shows that Exim recursively tries to lookup for an alias (have a look at the comments I put in) and finally finds *:peter, regardless of the fact that root is a Linux user account and not an alias: Each

[exim] PGP signatures of future Exim releases

2007-10-08 Thread Phil Pennock
Hi, Who will be PGP signing future Exim releases please? With which PGP key? (And is there a signature by Philip Hazel's key on the new key?) Thanks, -Phil -- ## List details at http://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki

Re: [exim] Authentication

2007-11-03 Thread Phil Pennock
On 2007-10-31 at 15:26 -0700, Yan Seiner wrote: My policies are as follows: 1. Clients connecting on 25 unauthenticated can send email only to the local domains. 2. Clients requesting relaying must connect encrypted and authenticate. 3. Clients requesting relaying unencrypted are

Re: [exim] LDAP lookup caching

2007-11-03 Thread Phil Pennock
On 2007-11-02 at 13:57 -0400, Maykel Moya wrote: I would like to know if my lookup are cached troughout the session if I use the same query. Now I'm doing some ${extract {attrName} {${lookup ldap ... so the lookup could be exactly the same whenever I need something from LDAP, but if the

Re: [exim] [Exim] Exim4 trying to talk to GMAIL

2007-11-09 Thread Phil Pennock
On 2007-11-08 at 00:52 +0900, Mark Fletcher wrote: I'm having problems getting exim 4.63 to talk to Gmail. What I have done is set up Exim4 on my Debian GNU/Linux laptop to use smtp.gmail.com as a smarthost for sending email. This is to avoid narking off my ISP by trying to send out mail

Re: [exim] [Exim] Exim4 trying to talk to GMAIL

2007-11-11 Thread Phil Pennock
On 2007-11-11 at 00:58 +0900, Mark Fletcher wrote: hosts_require_tls = *.google.com Yeah, the log file said something about that -- unfortunately I couldn't find in the readme where that hosts_require_tls should be set and a Fletcher classic find / grep combination of the exim-relevant

Re: [exim] [Exim] Exim4 trying to talk to GMAIL

2007-11-13 Thread Phil Pennock
On 2007-11-13 at 12:44 -0800, Jeroen van Aart wrote: Which reminds me. There is probably no easy way to avoid a block on incoming port 25 by an ISP. Except to have an MTA outside the block which receives your email and sends it to your MTA configured to listen on a different port? If you

Re: [exim] [Exim] Exim4 trying to talk to GMAIL

2007-11-13 Thread Phil Pennock
On 2007-11-12 at 22:06 +0900, Mark Fletcher wrote: AND THAT NAILED IT! You were right in the very beginning. The issue was the port -- I was getting a similarly unhelpful failure in the debug output on ssl_connect() when I used port 25, but when I switched to port 587, bingo -- my mobile phone

Re: [exim] [Exim] Exim4 trying to talk to GMAIL

2007-11-15 Thread Phil Pennock
On 2007-11-14 at 17:09 -0800, Jeroen van Aart wrote: I used xs4all back in NL, they're good imo. Though I never tried if they blocked port 25 I would assume they don't, they gave a free static IP. *cough* I used to work for Demon NL until KPN bought it and told the NOC staff that there were

Re: [exim] exim and cyrus disagree about mail-from-syntax

2007-11-16 Thread Phil Pennock
On 2007-11-16 at 16:32 +0100, Patrick von der Hagen wrote: Am Freitag, den 16.11.2007, 16:15 +0100 schrieb Patrick von der Hagen: Hi all, I realised that lately messages arrive which cause unnessessary bounces because they are accepted by exim and rejected by cyrus. I should have

Re: [exim] problem with exim-4.68

2007-11-23 Thread Phil Pennock
On 2007-11-22 at 15:25 +0300, Grigoriy S. Gusew wrote: I`m having problem with exim-4.68 installed on FreeBSD system I have Exim 4.68 running on FreeBSD 6.2 on one of my systems. The problem is that exim creates a child process handling incoming connection, I can input only following SMTP

Re: [exim] TLS Authentication Strength

2007-11-27 Thread Phil Pennock
On 2007-11-26 at 15:27 +, andylockran wrote: I'm setting up a cluster of servers for the PCI DSS and I've only got one vulnerability left - which is that SSL/TLS supports weak authentication in exim. (I managed to set SSLv2 to disabled on exim with the following line:)

Re: [exim] Too Many Arguments

2007-12-05 Thread Phil Pennock
On 2007-12-05 at 15:28 -0800, Marc Perkel wrote: Getting error Too many arguments in command .. in ${run} expansion Just wondering what the limitations are and how to fix it. Would eliminating spaces reduce the number of arguments or is it the length of the strings? 60 parameters.

Re: [exim] Too Many Arguments

2007-12-05 Thread Phil Pennock
On 2007-12-05 at 16:41 -0800, Marc Perkel wrote: I guess one thing I don't understand is why Exim is counting the parameters and not just passing the string as is. Because that's how security holes happen. What if one of those strings contained `cmd` substitution? etc etc. Exim breaks up to

Re: [exim] expansion string logic

2007-12-05 Thread Phil Pennock
On 2007-12-06 at 01:42 +1100, Ted Cooper wrote: If I just use the exim -be command line and type in pretty much anything over multiple lines it works ok so it's going to boil down to an issue with shell escaping. No, the shell leaves those backslashes in. The problem is that the \\\n

Re: [exim] Syslog logging?

2007-12-07 Thread Phil Pennock
On 2007-12-07 at 10:35 +0200, Chris Knipe wrote: cathlasphere:/etc/exim # cat exim.conf |grep log_file_path; exim -bV log_file_path = /var/log/exim/%s.log I cannot get Exim to stop logging to syslog? From what I understood in the documentation, log_file_path specifies only files that exim

Re: [exim] Decimal IP Calculation

2007-12-09 Thread Phil Pennock
On 2007-12-09 at 12:40 +, Phil White wrote: I'm trying to store the DECIMAL IP address of a connecting host in $acl_c*. Do do this, I'm using the following: set acl_c5= ${eval10: \ (${extract {1}{.}{$sender_host_address}}24) \ +

Re: [exim] Decimal IP Calculation

2007-12-09 Thread Phil Pennock
On 2007-12-09 at 13:56 +, Phil White wrote: warn message = X-Info: Return = \ ${lookup mysql { SELECT value FROM system WHERE \ ip_addr=$acl_c5 } \ {$value}{0} \ } Database that I am trying to access

Re: [exim] Regex or sg how

2007-12-10 Thread Phil Pennock
On 2007-12-10 at 16:44 -0600, Craig Jackson wrote: Often a ehlo is of the the form server23.mx23.domain.com. I would like to record only domain.com from the ehlo into a database. This is what I have, And then you need to deal with UK (example.co.uk, etc, so an extra level) or US

Re: [exim] Regex or sg how

2007-12-11 Thread Phil Pennock
On 2007-12-10 at 20:33 -0600, Craig Jackson wrote: I have written a Mysql stored procedure to whitelist $recipients, by parsing that variable. It did not occur to me to use a stored procedure for this -- looks a lot harder to do. I'm not a MySQL user; PostgreSQL is my poison of choice when I

Re: [exim] Recipient Checking

2007-12-12 Thread Phil Pennock
On 2007-12-12 at 03:14 -0500, Daniel Aquino wrote: I'm looking for a simple way to do recipient checking against my own external daemon. I have come up with a few possible way to do this: 1) Get queryprogram to simply query a unix socket instead? Problem) I doubt it supports

Re: [exim] Recipient Checking

2007-12-12 Thread Phil Pennock
On 2007-12-12 at 19:23 -0500, Daniel Aquino wrote: On Dec 12, 2007 3:48 AM, Phil Pennock [EMAIL PROTECTED] wrote: You can use an accept Router with verify_only on it, with ${readsocket}. Untested: verify_against_my_funky_daemon: driver = accept verify_only domains

[exim] Exim's configuration (was: Recipient Checking)

2007-12-12 Thread Phil Pennock
On 2007-12-12 at 21:03 -0500, Daniel Aquino wrote: Thats cool that it works in real time I would think string expansion would be a single event that hard wires a value into the config... That's macros. Take a look at spec.txt or one of the other format variants of The Exim Specification (HTML,

Re: [exim] 500 error code

2007-12-13 Thread Phil Pennock
On 2007-12-13 at 07:31 +0100, zbigniew szalbot wrote: zbigniew szalbot pisze: Thank you Peter - thinking about it, I must admit that at that time the line must have been pretty choked (time to send some 2K emails each about 70KB in size). This could have made it difficult to properly

Re: [exim] Regex or sg how

2007-12-14 Thread Phil Pennock
On 2007-12-13 at 22:20 -0600, Craig Jackson wrote: But I still have a big problem. Even though this works fine from the command line as root user, it doesn't do anything at all when called from Exim. No record is updated. No errors. Nothing. The Mysql user Exim uses does have Exec

Re: [exim] Regex or sg how

2007-12-15 Thread Phil Pennock
On 2007-12-14 at 11:30 -0600, Craig Jackson wrote: It wasn't permissions. It was a leading spaces issue that I couldn't see in the log, but which closer scrutiny of binlog revealed. For some reason Exim was passing data with leading spaces. Mysql trim() fuunction fixed it. Whew. Following up

Re: [exim] Condition Problem

2007-12-15 Thread Phil Pennock
On 2007-12-12 at 17:39 +0100, a a wrote: condition = ${if or {{ {$acl_c1} {70} {${lookup {$sender_address} lsearch {FILE} {0} {1 { {$spam_score_int} {70} {${lookup {$sender_address_domain} lsearch {FILE} {0} {1}} It's a conceptual problem; the braces balance but that doesn't matter

Re: [exim] no IP address found for host

2007-12-15 Thread Phil Pennock
On 2007-12-14 at 10:08 -0800, Marc Perkel wrote: Which test produced log entries no IP address found for host ... during SMTP connection from $ fgrep -ir 'no IP address found for host' exim-4.68/ Look over the results. -Phil, Fishing Instructor -- ## List details at

Re: [exim] Lookup in rewrite rule

2007-12-19 Thread Phil Pennock
On 2007-12-18 at 13:41 -0500, Matthew Soccio wrote: I am testing a new server, which has the same user and auth data as the production server. I need a way to make sure that mail for my beta testers stays on the beta server, while everything else goes over to the production server. Since

[exim] Legality of spam rejection (Re: Out of Office and collateral spam)

2007-12-20 Thread Phil Pennock
[ changed Subject: since this is no longer helping the OP ] On 2007-12-20 at 09:51 +, Ian Eiloart wrote: Lots of the considerations below (privacy, for example) also apply in the UK. You'd expect that, as we're both in the EU. However, none of the considerations below prevent us from

Re: [exim] secondary MX: allow only a set of users

2007-12-20 Thread Phil Pennock
On 2007-12-19 at 22:46 +0100, Leonardo Boselli wrote: I have two servers and two more secondary MX. I want: avoid that the secondary mx accept email that in turn is sent to the primary and then bounced. So i would like to set a list of possible address that are accepted. such list however is

Re: [exim] secondary MX: allow only a set of users

2007-12-20 Thread Phil Pennock
On 2007-12-20 at 14:23 +0100, Wouter Verhelst wrote: Look for 'smtp_reserve_hosts'. With this, you can allow the backup MX to connect to the master even when the master is already 4xx'ing other hosts because of things like smtp_load_reserve. Look up Single Point Of Failure. The point of

Re: [exim] Debugging router condition

2007-12-20 Thread Phil Pennock
On 2007-12-20 at 13:20 +0100, Marcin Krol wrote: Is there any way to increase verbosity of debugging router condition? It's not enough in one complicated case I have - I need (incoming mail) router to skip one (outgoing) address and can't get it to work: Ye, this expression doesn't seem

Re: [exim] Ratelimit Spam

2007-12-20 Thread Phil Pennock
On 2007-12-20 at 16:23 -0600, Matt wrote: # Slow down fast senders; note the need to truncate $sender_rate # at the decimal point. warn ratelimit = 100 / 1h / per_rcpt / strict delay = ${eval: ${sg{$sender_rate}{[.].*}{}} - $sender_rate_limit }s Is there a way I can get it to

Re: [exim] Reading the value of a macro from a shell script

2007-12-20 Thread Phil Pennock
On 2007-12-20 at 17:37 +, Terry Burton wrote: Otherwise, is there a recommended way to obtain such values from a shell script without having to hardcode the value or grep the Exim config? With well-defined data syntaxes and exiting after first match (anchored to the start of the line) grep

  1   2   3   4   5   6   7   8   9   10   >