Your message dated Mon, 31 Jul 2006 03:21:57 -0700
with message-id <[EMAIL PROTECTED]>
and subject line Bug#378935: fixed in exim4 4.62-3
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message ---
Package: exim4-config
Version: 4.62-2
Severity: normal
Tags: patch
Exim currently accepts mail from clients that didn't issue HELO/EHLO in its
default configuration. Given that:
- Issuing HELO/EHLO is mandated by the RFCs.
- The only known clients that send mail in such broken manner are spam bulk
mailers (TTBOMK).
- Skipping HELO might break custom checks that rely on HELO's argument, such as
SPF.
I think it's not a big loss if exim rejects these in the MAIL ACL :)
Patch attached.
-- System Information:
Debian Release: testing/unstable
APT prefers testing
APT policy: (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.17-1-amd64-k8
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL
set to en_US.UTF-8)
Versions of packages exim4-config depends on:
ii adduser 3.87 Add and remove users and groups
ii debconf [debconf-2.0] 1.5.2 Debian configuration management sy
exim4-config recommends no packages.
-- debconf information excluded
diff -Nur exim4-4.62.old/debian/debconf/conf.d/acl/25_exim4-config_check_mail
exim4-4.62/debian/debconf/conf.d/acl/25_exim4-config_check_mail
--- exim4-4.62.old/debian/debconf/conf.d/acl/25_exim4-config_check_mail
1970-01-01 01:00:00.000000000 +0100
+++ exim4-4.62/debian/debconf/conf.d/acl/25_exim4-config_check_mail
2006-07-19 21:10:59.000000000 +0200
@@ -0,0 +1,14 @@
+
+### acl/25_exim4-config_check_mail
+#################################
+
+# This access control list is used for every MAIL command in an incoming
+# SMTP message. The tests are run in order until the address is either
+# accepted or denied.
+#
+acl_check_mail:
+ deny
+ message = 503 polite people say hello first
+ condition = ${if def:sender_helo_name {no}{yes}}
+
+ accept
diff -Nur exim4-4.62.old/debian/debconf/conf.d/main/02_exim4-config_options
exim4-4.62/debian/debconf/conf.d/main/02_exim4-config_options
--- exim4-4.62.old/debian/debconf/conf.d/main/02_exim4-config_options
2006-07-14 21:19:12.000000000 +0200
+++ exim4-4.62/debian/debconf/conf.d/main/02_exim4-config_options
2006-07-19 21:10:59.000000000 +0200
@@ -4,6 +4,15 @@
# Defines the access control list that is run when an
+# SMTP MAIL command is received.
+#
+.ifndef MAIN_ACL_CHECK_MAIL
+MAIN_ACL_CHECK_MAIL = acl_check_mail
+.endif
+acl_smtp_mail = MAIN_ACL_CHECK_MAIL
+
+
+# Defines the access control list that is run when an
# SMTP RCPT command is received.
#
.ifndef MAIN_ACL_CHECK_RCPT
--- End Message ---
--- Begin Message ---
Source: exim4
Source-Version: 4.62-3
We believe that the bug you reported is fixed in the latest version of
exim4, which is due to be installed in the Debian FTP archive:
exim4-base_4.62-3_i386.deb
to pool/main/e/exim4/exim4-base_4.62-3_i386.deb
exim4-config_4.62-3_all.deb
to pool/main/e/exim4/exim4-config_4.62-3_all.deb
exim4-daemon-heavy-dbg_4.62-3_i386.deb
to pool/main/e/exim4/exim4-daemon-heavy-dbg_4.62-3_i386.deb
exim4-daemon-heavy_4.62-3_i386.deb
to pool/main/e/exim4/exim4-daemon-heavy_4.62-3_i386.deb
exim4-daemon-light-dbg_4.62-3_i386.deb
to pool/main/e/exim4/exim4-daemon-light-dbg_4.62-3_i386.deb
exim4-daemon-light_4.62-3_i386.deb
to pool/main/e/exim4/exim4-daemon-light_4.62-3_i386.deb
exim4-dbg_4.62-3_i386.deb
to pool/main/e/exim4/exim4-dbg_4.62-3_i386.deb
exim4_4.62-3.diff.gz
to pool/main/e/exim4/exim4_4.62-3.diff.gz
exim4_4.62-3.dsc
to pool/main/e/exim4/exim4_4.62-3.dsc
exim4_4.62-3_all.deb
to pool/main/e/exim4/exim4_4.62-3_all.deb
eximon4_4.62-3_i386.deb
to pool/main/e/exim4/eximon4_4.62-3_i386.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Marc Haber <[EMAIL PROTECTED]> (supplier of updated exim4 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Mon, 31 Jul 2006 06:10:51 +0000
Source: exim4
Binary: exim4-daemon-light-dbg exim4-daemon-custom exim4-daemon-heavy exim4-dbg
exim4-daemon-heavy-dbg exim4-config exim4-daemon-custom-dbg eximon4 exim4-base
exim4 exim4-daemon-light
Architecture: source i386 all
Version: 4.62-3
Distribution: unstable
Urgency: low
Maintainer: Exim4 Maintainers <[EMAIL PROTECTED]>
Changed-By: Marc Haber <[EMAIL PROTECTED]>
Description:
exim4 - metapackage to ease exim MTA (v4) installation
exim4-base - support files for all exim MTA (v4) packages
exim4-config - configuration for the exim MTA (v4)
exim4-daemon-heavy - exim MTA (v4) daemon with extended features, including
exiscan-ac
exim4-daemon-heavy-dbg - debugging symbols for the exim MTA (v4) packages
exim4-daemon-light - lightweight exim MTA (v4) daemon
exim4-daemon-light-dbg - debugging symbols for the exim MTA (v4) packages
exim4-dbg - debugging symbols for the exim MTA (v4) packages
eximon4 - monitor application for the exim MTA (v4) (X11 interface)
Closes: 290464 368242 376459 376460 376953 378581 378935 379898 380357
Changes:
exim4 (4.62-3) unstable; urgency=low
.
* remove pkg-exim4-user mail address from README.Debian, mention
that one needs to be subscribed to post.
Thanks to Ross Boylan. Closes: #368242
* re-word -o description in update-exim4.conf(8) man page.
Thanks to Ross Boylan.
* Flag update-exim4.conf(8) man page for a re-work in its BUGS
section.
* Give a - hopefully - better explanation of the mail name thingy in
README.Debian.
* Fix occurrences of default_acl file in documentation. Make part of
README.Debian less confusing.
Thanks to Ross Boylan. Closes: #376459
* When installing via apt using dpkg-preconfigure the value of
dc_hide_mailname was overwritten during the second run of the debconf
script (invoked by postinst), before the value was stored in the
configuration file. Fix this. (am) Closes: #376460
* Make spamassassin example in 40_exim4_config_check_data actually
work, add link to documentation for "really suiteable" configuration
examples. Thanks, again, to Ross Boylan.
* remove left-over "and a bunch" sentence from exim4-config_files.5
* Add a symlink from /etc/email-addresses to /etc/exim4/email-addresses
* Fix bad parsing of CHECK_RCPT_DOMAIN_DNSBLS.
Thanks to Robert Millan. Closes: #378581
* Note in README.Debian that other parts of the Debian system might
give outdated and/or wrong advice. See #378684, #378685.
* SPF support: (rm) Closes: #290464
* Add (disabled) template to check SPF in 30_exim4-config_check_rcpt.
* Add libmail-spf-query-perl (>= 1.999-1) to Suggests.
* Rewrite Q/A about SPF from README.Debian.
* Add a small note to exim4-config.NEWS.
* Add conf.d/acl/30_exim4-config_check_mail to reject mail without HELO/EHLO.
(rm) Closes: #378935
* Add LSBized init script. Thanks to Carlos Villegas. Closes: #376953
* re-order RCPT ACL statements to resemble Upstreams default config
a little more. This used to be the case in the beginning, but was
changed eventually, and I didn't find any rationale for our deviation.
Thus, we change back to upstream's default to see which things might
break.
* remove cron.d from exim4-base dirs - we do not have a cron.d job
any more for years.
* Re-work daily cron job:
* Make statistics configurable with a variable
* Comment that the log handling code is fragile and depending on
log rotation strategy
* Add code to generate warnings if paniclog non-empty.
Thanks to Andrew Ferrier. Closes: #379898
* Build -dbg packages.
* Updated vi (vietnamese) translation.
Thanks to Clytie Siddall. (am) Closes: #380357
Files:
cea0b4bcebfddf9e22696d18d482ba74 1123 mail standard exim4_4.62-3.dsc
28e34e84b495e8d15b58aa5d37dded89 380369 mail standard exim4_4.62-3.diff.gz
c740d19f15a51f47ebac46a00cd7d8d1 916108 mail standard
exim4-base_4.62-3_i386.deb
b99d61f80a140da71bdb943d0b8a6da0 86404 mail optional eximon4_4.62-3_i386.deb
656e96881e9f65e7b7f8e871b4fad996 400848 mail standard
exim4-daemon-light_4.62-3_i386.deb
8615c73c929f6b968d66f0d5e0373a8b 452530 mail optional
exim4-daemon-heavy_4.62-3_i386.deb
e842a1efb939ae26026a3e2ba4f2d095 609140 mail extra
exim4-daemon-light-dbg_4.62-3_i386.deb
0d95313ca3e634c316acad2960862ccb 690676 mail extra
exim4-daemon-heavy-dbg_4.62-3_i386.deb
9d86ab3f105ea5ee857335e9f4292a03 235874 mail extra exim4-dbg_4.62-3_i386.deb
c0373bc7488f4d3b364cccdb675af643 302180 mail standard
exim4-config_4.62-3_all.deb
bb757308d180d5715c179de83aed6c4f 1644 mail standard exim4_4.62-3_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)
iD8DBQFEzaHZgZalRGu6PIQRAuKgAJ9oHkRdEJoRF9BPkpfYuvHrCM25NgCfYRFv
RZ0TcZlsHRktozVEog+Ok2M=
=cw0I
-----END PGP SIGNATURE-----
--- End Message ---
