Re: [exim] Help with AUTH DDOS

2019-06-28 Thread Phil Pennock via Exim-users
On 2019-06-26 at 10:42 -, Jasen Betts via Exim-users wrote: > alternatively in ACL_AUTH > > drop > set acl_c_auth_count = ${eval: $acl_c_auth_count + 1} > condition = ${if >{1}{$acl_c_auth_count }} > message = "go away" > > which will allow only one attempt at auth per connect.

Re: [exim] modification of router for empty return-path

2019-06-28 Thread Jonathan Gilpin via Exim-users
Sorry I mustn’t have made myself clear OR I don’t understand your answer… The issue is that I have spam messages going to the INBOX not the Spam Folder.. ie: it is not matching this router.. The message scores 10 and is clearly spam, but I don’t understand what to change to make a message with

Re: [exim] Failure to deliver to Gmail

2019-06-28 Thread Andreas Metzler via Exim-users
Viktor Dukhovni via Exim-users wrote: >> On Jun 27, 2019, at 5:58 AM, Richard Jones via Exim-users >> wrote: >> There have been a few mails about this recently, but I don't think they >> cover my case (nor is this about my previous mail about retry times) > There was a recent thread that's an

Re: [exim] modification of router for empty return-path

2019-06-28 Thread Jeremy Harris via Exim-users
On 28/06/2019 17:09, Jonathan Gilpin via Exim-users wrote: > MYSQL_Q_WHITELIST=SELECT DISTINCT MYSQL_WHITETABLE.address FROM > MYSQL_WHITETABLE WHERE ('${quote_mysql:$sender_address}' LIKE > whitelist.address) OR ('*@${quote_mysql:$sender_address_domain}' LIKE > whitelist.address) > > >> On

Re: [exim] modification of router for empty return-path

2019-06-28 Thread Jonathan Gilpin via Exim-users
Appologies: MYSQL_Q_WHITELIST=SELECT DISTINCT MYSQL_WHITETABLE.address FROM MYSQL_WHITETABLE WHERE ('${quote_mysql:$sender_address}' LIKE whitelist.address) OR ('*@${quote_mysql:$sender_address_domain}' LIKE whitelist.address) > On 28 Jun 2019, at 16:50, Jeremy Harris via Exim-users >

Re: [exim] modification of router for empty return-path

2019-06-28 Thread Jeremy Harris via Exim-users
On 28/06/2019 16:23, Jonathan Gilpin via Exim-users wrote: > senders = ! ${lookup mysql {MYSQL_Q_WHITELIST}{$value}} ^ Missing information. -- Cheers, Jeremy -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim

[exim] modification of router for empty return-path

2019-06-28 Thread Jonathan Gilpin via Exim-users
Hi, I have a router as follows: virtual_local_spamw: driver = accept condition = "${if eq{$h_X-Spam-Flag:}{YES} {1}{0}}" senders = ! ${lookup mysql {MYSQL_Q_WHITELIST}{$value}} domains = ${lookup mysql {MYSQL_Q_LOCSPAW}{$value}} transport = virtual_local_spamw_delivery The problem

Re: [exim] Failure to deliver to Gmail

2019-06-28 Thread Jeremy Harris via Exim-users
On 28/06/2019 15:50, Richard Jones via Exim-users wrote: > Is this the expected behaviour? If you're wanting to affect the behaviour of Exim sending messages, yes, the relevant configuration goes on the transport. -- Cheers, Jeremy -- ## List details at

Re: [exim] Failure to deliver to Gmail

2019-06-28 Thread Richard Jones via Exim-users
On Jun 28, Antoine via Exim-users wrote > -VERS-TLS1.3 Thanks Antoine, but that doesn't seem to work: $ gnutls-cli -l --priority SECURE256:-VERS-TLS1.3 Cipher suites for SECURE256:-VERS-TLS1.3 TLS_ECDHE_ECDSA_AES_256_GCM_SHA384 0xc0, 0x2c TLS1.2

Re: [exim] Failure to deliver to Gmail

2019-06-28 Thread Jeremy Harris via Exim-users
On 28/06/2019 14:50, Richard Jones via Exim-users wrote: > Thanks Viktor, and also for your other response. I don't suppose you > know the magic priority string to stop this? I've had a read through the > gnutls pages on the subject, but it's not obvious how to disable TLSv1.3 > ("!VERS-TLS1.3"

Re: [exim] Failure to deliver to Gmail

2019-06-28 Thread Viktor Dukhovni via Exim-users
On Fri, Jun 28, 2019 at 02:50:25PM +0100, Richard Jones via Exim-users wrote: > On Jun 27, Viktor Dukhovni via Exim-users wrote > > Which is exactly this. IIRC there's a recent Exim patch, or you > > can disable TLS 1.3, or switch to Exim built with OpenSSL. > > Thanks Viktor, and also for your

Re: [exim] Failure to deliver to Gmail

2019-06-28 Thread Antoine via Exim-users
On 28/06/2019 15:50, Richard Jones via Exim-users wrote: > On Jun 27, Viktor Dukhovni via Exim-users wrote >> Which is exactly this. IIRC there's a recent Exim patch, or you >> can disable TLS 1.3, or switch to Exim built with OpenSSL. > Thanks Viktor, and also for your other response. I don't

Re: [exim] Failure to deliver to Gmail

2019-06-28 Thread Richard Jones via Exim-users
On Jun 27, Viktor Dukhovni via Exim-users wrote > Which is exactly this. IIRC there's a recent Exim patch, or you > can disable TLS 1.3, or switch to Exim built with OpenSSL. Thanks Viktor, and also for your other response. I don't suppose you know the magic priority string to stop this? I've

Re: [exim] Failure to deliver to Gmail

2019-06-28 Thread Viktor Dukhovni via Exim-users
On Thu, Jun 27, 2019 at 04:44:33PM +0100, Richard Jones via Exim-users wrote: > On Jun 27, Niels Dettenbach wrote > > Relaying to GMail from "unknown third party" SMTP servers could be very > > limited / "downslowed" by different "temp avail" strategies. Google offers > > a > > "postmaster

Re: [exim] From rewrite for incoming messages

2019-06-28 Thread Andrew C Aitchison via Exim-users
On Fri, 28 Jun 2019, Sujit Acharyya-Choudhury via Exim-users wrote: Is there a safe way to rewrite From field for ALL incoming messages?  Sadly there is not. Or at least there is no way to determine *for all messages* what would be a safe string to use as the replacement. Each message can

Re: [exim] Failure to deliver to Gmail

2019-06-28 Thread Richard Jones via Exim-users
On Jun 27, Niels Dettenbach wrote > Relaying to GMail from "unknown third party" SMTP servers could be very > limited / "downslowed" by different "temp avail" strategies. Google offers a > "postmaster tool" which seem to shift reputation of "registered" SMTP > Servers: >

[exim] Exim TLS client hostnames verification

2019-06-28 Thread lzwmmg via Exim-users
Hello Exim Users. I've been using Exim4 on my workstation for sometime . I discover a problem in Exim4's handing of server certificates verification, when the smtp smarthosts' hostnames are DNS aliases Exim4 always can't pass verification and log with something like "certificate/cert name

[exim] From rewrite for incoming messages

2019-06-28 Thread Sujit Acharyya-Choudhury via Exim-users
Is there a safe way to rewrite From field for ALL incoming messages?  We are having problems with Phishing where recipients only see the From field and assume it has come from a trusted person and then click on the link or download the file. An example is as follows: