Re: [exim] missing message id in email converted to user in virtual users

2021-08-15 Thread Jasen Betts via Exim-users 
On 2021-08-13, Patrick Unthank via Exim-users  wrote:

> I am not sure why there is no message-id passed to postfix when there is 
> one recorded in the exim log, i.e. id=3D1mDi3K-0005a1-RG

That id is an exim ID that exim uses to track the email, not a
Message-Id header that should have been added by the senders's 
email client or the initial MTA.


-- 
  Jasen.

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] DKIM signing and header choices?

2021-08-15 Thread Simon Josefsson via Exim-users 
Evgeniy Berdnikov via Exim-users  writes:

>  The built-in value could be changed with dkim_sign_headers, but
>  this patch gives much more reasonable default, IMHO.

I'm now running with this local config instead:

DKIM_SIGN_HEADERS = 
From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type:Content-Transfer-Encoding:Content-ID:Content-Description:=Resent-Date:=Resent-From:=Resent-Sender:=Resent-To:=Resent-Cc:=Resent-Message-ID:=In-Reply-To:=References:=List-Id:=List-Help:=List-Unsubscribe:=List-Subscribe:=List-Post:=List-Owner:=List-Archive

Reviewing modern exim source makes me suggest the patch below.  This
makes DKIM signature not cover any non-existing List-* headers in the
message to be signed, which seems reasonable to me, and consistent with
RFC 4871:

   The following header fields SHOULD be included in the signature, if
   they are present in the message being signed:
...
   o  List-Id, List-Help, List-Unsubscribe, List-Subscribe, List-Post,
  List-Owner, List-Archive

RFC 6376 does not contain the same wording, so maybe this is a complex
area.  Perhaps a review of what other DKIM signing software is using
would be useful?  In case there is any established best practice out
there.

/Simon
From 203f6e74ef669080afbc9f1adc45f64269fba3a0 Mon Sep 17 00:00:00 2001
From: Simon Josefsson 
Date: Fri, 13 Aug 2021 17:38:47 +0200
Subject: [PATCH] DKIM: Make List-* headers optional in
 PDKIM_DEFAULT_SIGN_HEADERS.

---
 src/src/pdkim/pdkim.h | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/src/pdkim/pdkim.h b/src/src/pdkim/pdkim.h
index f6ff78251..4a6ff820a 100644
--- a/src/src/pdkim/pdkim.h
+++ b/src/src/pdkim/pdkim.h
@@ -32,8 +32,8 @@
  "Content-Description:Resent-Date:Resent-From:"\
  "Resent-Sender:Resent-To:Resent-Cc:"\
  "Resent-Message-ID:In-Reply-To:References:"\
- "List-Id:List-Help:List-Unsubscribe:"\
- "List-Subscribe:List-Post:List-Owner:List-Archive"
+ "=List-Id:=List-Help:=List-Unsubscribe:"\
+ "=List-Subscribe:=List-Post:=List-Owner:=List-Archive"
 
 #define PDKIM_OVERSIGN_HEADERS "+From:+Sender:+Reply-To:+Subject:+Date:"\
  "+Message-ID:+To:+Cc:+MIME-Version:+Content-Type:"\
-- 
2.30.2



signature.asc
Description: PGP signature
-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

[exim] missing message id in email converted to user in virtual users

2021-08-15 Thread Patrick Unthank via Exim-users 
Hi,

 

I am having some issues for an email that has been redirected to a different 
user and domain in virtual users. The divert is to a sympa server behind a 
remote postfix server. The original address is to hostmas...@billybob.com 
  which is a domain in local_domains. The 
hostmaster local element is then converted to sherr...@boandluke.org 
 , which is the email address for the sympa 
list. The email is not delivered to the sympa list because the sympa report 
that it cannot deliver to the list as the message-id is blank, which on 
inspection, it is.

 

2021-08-11 06:49:20 1mDi3E-0005Zt-7D <= marsh...@roscoepcoltrane.net 
  H=ssmail3.sec.dc.comodoca.net 
[2a0e:ac00:231:8088::a31:88ce] P=esmtps 
X=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=no S=6276 DKIM=trust-provider.com

2021-08-11 06:49:26 1mDi3K-0005a1-RG <= marsh...@roscoepcoltrane.net 
  H=(localhost) [127.0.0.1] P=esmtp S=6780 
DKIM=trust-provider.com

2021-08-11 06:49:26 1mDi3E-0005Zt-7D => hostmas...@billybob.com 
  R=amavis T=amavis H=localhost.localdomain 
[127.0.0.1] C="250 2.6.0 from MTA(smtp:[127.0.0.1]:10025): 250 OK 
id=1mDi3K-0005a1-RG"

2021-08-11 06:49:26 1mDi3E-0005Zt-7D Completed

2021-08-11 06:49:27 1mDi3K-0005a1-RG => sherr...@boandluke.org 
  mailto:hostmas...@billybob.com> > R=sympa_router T=remote_smtp 
H=lists.geant.org [2001:798:3::b3] X=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 
CV=yes C="250 2.0.0 Ok: queued as zgrep "

2021-08-11 06:49:27 1mDi3K-0005a1-RG Completed

 

On the postfix server I see the received email as below:

Aug 11 06:49:27 prod-lists02 postfix/smtpd[66596]: AAE7E80122: 
client=mail.billybob.com[2001:897:X::11f]

Aug 11 06:49:27 prod-lists02 postfix/cleanup[65922]: AAE7E80122: message-id=<>

Aug 11 06:49:27 prod-lists02 postfix/qmgr[1813]: AAE7E80122: 
from=no_reply_supp...@roscoepcoltrane.net, size=7239, nrcpt=1 (queue active)

Aug 11 06:49:28 prod-lists02 postfix/pipe[66821]: AAE7E80122: 
to=sherr...@boandluke.org  , relay=sympa, 
delay=1, delays=0.02/0.01/0/1, dsn=2.0.0, status=sent (delivered via sympa 
service)

Aug 11 06:49:28 prod-lists02 postfix/qmgr[1813]: AAE7E80122: removed

 

And that has the effect of the following on the sympa list server:

 

Aug 11 06:49:32 prod-lists02 sympa_msg[19699]: err main::#243 > 
Sympa::Spindle::spin#83 > Sympa::Spindle::ProcessIncoming::_twist#108 Message 
Sympa::Message   
sherr...@boandluke.org.1628664567.66822 has no message ID

 

I am not sure why there is no message-id passed to postfix when there is one 
recorded in the exim log, i.e. id=1mDi3K-0005a1-RG

 

Looking for clues for answers.

 

Kind regards,

 

Patrick Unthank

Linux IT Engineer

 

GÉANT 

T: +44 (0)1223 371 368

M: +44 (0)7795 121 994

 

Networks • Services • People 

Learn more at   www.geant.org​

 

GÉANT Vereniging (Association) is registered with the Chamber of Commerce in 
Amsterdam with registration number 40535155 and operates in the UK as a branch 
of GÉANT Vereniging. Registered office: Hoekenrode 3, 1102BR Amsterdam, The 
Netherlands. UK branch address: City House, 126-130 Hills Road, Cambridge CB2 
1PQ, UK.  

 



smime.p7s
Description: S/MIME cryptographic signature
-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/