Bug#1003399: Correct configuration of Exim

2022-01-23 Thread karsten

Am 22.01.22 um 16:23 schrieb Marc Haber:

Maybe you are so kind to provide an example how you have included Spamassassin 
in Exim,
so that it will run with the packages of Debian 11?


Personally I am running spamassassin via the exiscan extension, using
the spamd_address option in main configuration and the spam option in
the data ACL. To get a report into the message you need to use, for
example, a system filter. See the exim specification chapter 45.2 for
more information.


Always only references to the documentation but no usable examples.
Specially for the introduced "tainted" problem.




Indeed i am thinking that maybe Postfix is a better choice as MTA, because Exim 
seems to be
more and more complicated to configure?


That depends on what you intend to do. postfix is like menu of a
restaurant: You can choose from the dishes if you like them. Exim is the
fully equipped kitchen: You can do anything you like but you need some
knowledge to do that.


Indeed. There is another software with such a concept: Asterix PBN.
But for Asterisk you can find many examples for detail problems out there.


I would define an virtual mail system as email server for different domains,
that can ideally be managed with entries in an database like Mariadb.


That is not enough defition, I am afraid. I guess defining this is
enough content for a Master's thesis.


What is a "Master's thesis" ?

Up to now i only know one standard virtual mail system integrated into 
https://www.ispconfig.de/

Greetings
karsten



Bug#1003399: Correct configuration of Exim

2022-01-22 Thread Marc Haber
On Mon, Jan 10, 2022 at 12:00:09PM +0100, karsten wrote:
> Am 09.01.22 um 19:05 schrieb Marc Haber:
> > > Yes - the other possibility is to prevent upgrades of this package.
> > 
> > That is a decidedly bad idea. Exim is a huge suid binary (a design one
> > out never choose today, the concept was valid 25 years ago) and you need
> > security updates for that.
> 
> That's of course true.
> Hopefully the version of Exim will not change until the configuration could 
> be adapted.
> Security updates will not need a new version of Exim within this stable 
> distribution?

Security updates are done, if possible, by backporting the fix to the
version currently in stable. The goal is to provide minimally invasive
security updates that don't break existing systems, concentrating
potentially breaking changes to the time when a new stable distribution
is released.

> > Spamassassin in YOUR configuration doesn't work any more. My systems
> > using spamassassin via exiscan-ACL have not even ridden a bump during
> > the upgrade.
> 
> Maybe you are so kind to provide an example how you have included 
> Spamassassin in Exim,
> so that it will run with the packages of Debian 11?

Personally I am running spamassassin via the exiscan extension, using
the spamd_address option in main configuration and the spam option in
the data ACL. To get a report into the message you need to use, for
example, a system filter. See the exim specification chapter 45.2 for
more information.

> Indeed i am thinking that maybe Postfix is a better choice as MTA, because 
> Exim seems to be
> more and more complicated to configure?

That depends on what you intend to do. postfix is like menu of a
restaurant: You can choose from the dishes if you like them. Exim is the
fully equipped kitchen: You can do anything you like but you need some
knowledge to do that.

> I would define an virtual mail system as email server for different domains,
> that can ideally be managed with entries in an database like Mariadb.

That is not enough defition, I am afraid. I guess defining this is
enough content for a Master's thesis.

Greetings
Marc

-- 
-
Marc Haber | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany|  lose things."Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature |  How to make an American Quilt | Fax: *49 6224 1600421



Bug#1003399: Correct configuration of Exim

2022-01-10 Thread karsten

Hello Marc,

thank you for the response.

Am 09.01.22 um 19:05 schrieb Marc Haber:

Yes - the other possibility is to prevent upgrades of this package.


That is a decidedly bad idea. Exim is a huge suid binary (a design one
out never choose today, the concept was valid 25 years ago) and you need
security updates for that.


That's of course true.
Hopefully the version of Exim will not change until the configuration could be 
adapted.
Security updates will not need a new version of Exim within this stable 
distribution?


But there are additional other problems like spamassasin does not work any more,
so the configuration must be updated in many kinds.


Spamassassin in YOUR configuration doesn't work any more. My systems
using spamassassin via exiscan-ACL have not even ridden a bump during
the upgrade.


Maybe you are so kind to provide an example how you have included Spamassassin 
in Exim,
so that it will run with the packages of Debian 11?


Is there a default configuration for a private virtual mail server on dynamic 
IP's ?


Not that I am aware of. But if you roll yourself, you need to be able to
take care of it. I think there might be solutions that might be better
suited to your needs than Exim.


Indeed i am thinking that maybe Postfix is a better choice as MTA, because Exim 
seems to be
more and more complicated to configure?


btw, this triggers me, as "virtual mail" does not have a definition, it
leaves like ten way to interpret the task at hand.


I would define an virtual mail system as email server for different domains,
that can ideally be managed with entries in an database like Mariadb.

Greetings
karsten