Noah Meyerhans wrote:

>>>    server_password = ${lookup{$1}dbmnz{/etc/exim/passwd}}
>>Anyone with an arbitrary username and empty password can send mails
> This does not seem to be the case.  I have just tested sending mail via

But it is. I tried cosmo.csail.mit.edu before (which refuses connections
now) and now again with outgoing.csail.mit.edu, both worked.

>>instead of dbmnz, though. You are sure you ran exim_dbmbuild with the
>>-nozero option the last time you updated passwd?

so you are?

>  4986 lookup yielded: someboguspasswordfortesting
>  4986 CRAM-MD5: user name = noahm
>  4986           challenge = <[EMAIL PROTECTED]>
>  4986           received  = 92c7df4232f5ebee8cc2c0a350aa692a
>  4986           digest    = be6d10292874fd3448087355d47597d4

Exim's digest is correct. Strange...
Have you tested other clients and servers?


-- 
## List details at http://www.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/

Reply via email to