Re: [exim] Suggestion: detainting via string exp

2020-06-03 Thread Jeremy Harris via Exim-users
On 03/06/2020 11:56, Sebastian Nielsen via Exim-users wrote: > I have a suggestion, and that is to allow detainting of data via a new string > expansion called detaint.${detaint{}{}} No. Absolutely not. This would be an open invitation to evade the security measure. -- Cheers, Jeremy --

Re: [exim] Taint mismatch in spam checking

2020-06-03 Thread Jeremy Harris via Exim-users
On 03/06/2020 01:15, Ken Olum via Exim-users wrote: check spam = $acl_m2/defer_ok = kdo/defer_ok > LOG: 198 [5883] 1jgCzR-0001Wt-U4 Taint mismatch, string_nextinlist: > acl_check_condition 3675 Third time around... yes, this is a bug. If you can't avoid it (by arranging

Re: [exim] Taint mismatch in spam checking

2020-06-03 Thread Jeremy Harris via Exim-users
On 03/06/2020 01:15, Ken Olum via Exim-users wrote: > LOG: 198 [5883] 1jgCzR-0001Wt-U4 Taint mismatch, string_nextinlist: > acl_check_condition 3675 Having checked that line number, you're not running 4.94. You didn't say what, but it's not the latest - so that's something else you could do. --

Re: [exim] Taint mismatch in spam checking

2020-06-03 Thread Jeremy Harris via Exim-users
On 03/06/2020 01:15, Ken Olum via Exim-users wrote: check spam = $acl_m2/defer_ok = kdo/defer_ok > LOG: 198 [5883] 1jgCzR-0001Wt-U4 Taint mismatch, string_nextinlist: > acl_check_condition 3675 > > Is the problem that $address_data is tainted Sounds like it > and so can't

Re: [exim] Exim 4.94 - daemon_notifier_socket bind: Address already in use

2020-06-03 Thread Jeremy Harris via Exim-users
On 03/06/2020 09:42, Mikhail Golub via Exim-users wrote: > 42885 creating notifier socket > 42885  /var/spool/exim/exim_daemon_notify > 42885 LOG: MAIN PANIC > 42885   daemon_notifier_socket bind: Address already in use > > It's bug? It's something still using that socket. Either "ss -p" or

Re: [exim] README.UPDATING typo?

2020-06-02 Thread Jeremy Harris via Exim-users
On 02/06/2020 22:07, john via Exim-users wrote: > I have two users who are active and afer I built 4.94 one of them got > mail as usuual (user jpff) but the other had mail deferred > > 2020-06-02 18:06:09 1jgAMV-0001uS-F7 <= > mail.rmqfdelalpjhcevwhvfec...@email-vodafone.co.uk >

Re: [exim] how to make use of custom variables in a router

2020-06-02 Thread Jeremy Harris via Exim-users
On 02/06/2020 19:39, Jürgen Edner via Exim-users wrote: > public_folder_maildir: > driver = accept > set = r_dir = ${extract{folder}{${lookup{$local_part} \ > lsearch{/etc/pubfolders}}}{$value}} > debug_print = r_dir=$r_dir > condition = ${if

Re: [exim] Exim 4.94 - Virtual domains

2020-06-02 Thread Jeremy Harris via Exim-users
On 02/06/2020 19:06, Patrick Boutilier via Exim-users wrote: > This router no longer works: > > virtual: >   driver = redirect >   domains = dsearch;/etc/mail/virtual >   data = ${lookup{$local_part}lsearch{/etc/mail/virtual/$domain}} >   no_more > > > Testing with -bh I get "Tainted filename

Re: [exim] Testing sender and recipient domains in MIME ACL

2020-06-02 Thread Jeremy Harris via Exim-users
On 02/06/2020 17:15, Mike Tubby via Exim-users wrote: > Right now I' doing this in the RCPT ACL: tl;dr. Which bit does not work? -- Cheers, Jeremy -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with

Re: [exim] Database lookup tainted

2020-06-02 Thread Jeremy Harris via Exim-users
On 02/06/2020 15:29, dan...@k8n.de wrote: > The only thing I replaced is database name, database user and password. > > so it is "127.0.0.1/mail/mailro/mysupersecretpassword" > (password obviously changed), it doesn't say anything else... > > Pasting the full line here again: > message: failed

Re: [exim] README.UPDATING typo?

2020-06-02 Thread Jeremy Harris via Exim-users
On 02/06/2020 14:58, Patrick Boutilier via Exim-users wrote: > https://git.exim.org/exim.git/blob/HEAD:/src/README.UPDATING > > > Line 36 should be "replace $local_part with $local_part_data." instead > of "replace $local_user with $local_part_data." ? Yes. -- Cheers, Jeremy -- ## List

Re: [exim] Exim 4.94 PAM SMTP auth - Taint

2020-06-02 Thread Jeremy Harris via Exim-users
On 02/06/2020 14:43, Patrick Boutilier via Exim-users wrote: >> In src/auths/call_pam.c at about line 158, >> replace "big_buffer" with "NULL" and "big_buffer_size" with "0". >> > > Made the change and got: > > 2020-06-02 10:39:32 Taint mismatch, string_nextinlist: pam_converse 86 > > So I

Re: [exim] Tainted filename for DKIM

2020-06-02 Thread Jeremy Harris via Exim-users
On 02/06/2020 14:22, Jeremy Harris via Exim-users wrote: > On 02/06/2020 13:50, Franz-Werner Gergen via Exim-users wrote: >>   dkim_private_key   = ${if >> exists{/usr/local/dkim/${dkim_domain}.${dkim_selector}.priv.pem}{/usr/local/dkim/${dkim_domain}.${dkim_selector}.

Re: [exim] Tainted filename for DKIM

2020-06-02 Thread Jeremy Harris via Exim-users
On 02/06/2020 13:50, Franz-Werner Gergen via Exim-users wrote: >   dkim_private_key   = ${if > exists{/usr/local/dkim/${dkim_domain}.${dkim_selector}.priv.pem}{/usr/local/dkim/${dkim_domain}.${dkim_selector}.priv.pem}{false}} > Tainted filename '/usr/local/dkim/is.mpg.de.20190121.priv.pem'

Re: [exim] Exim 4.94 PAM SMTP auth - Taint

2020-06-02 Thread Jeremy Harris via Exim-users
On 02/06/2020 13:16, Patrick Boutilier via Exim-users wrote: > On 6/2/20 8:58 AM, Jeremy Harris via Exim-users wrote: >> On 02/06/2020 02:06, Patrick Boutilier via Exim-users wrote: >>> 2020-06-01 21:35:52 Taint mismatch, string_nextinlist: auth_call_pam 158 >>

Re: [exim] Database lookup tainted

2020-06-02 Thread Jeremy Harris via Exim-users
On 02/06/2020 13:20, exim.org--- via Exim-users wrote: > 12:19:39.352 12159 message: failed to expand [...] DEFER: PostgreSQL server > "127.0.0.1/xx/xx/xx" is tainted ^ Unfortunately

Re: [exim] Database lookup tainted

2020-06-02 Thread Jeremy Harris via Exim-users
On 02/06/2020 12:12, exim.org--- via Exim-users wrote: > However after updating to 4.94 I only get errors like this (private details > replaced): > > 2:19:39.350 12159 ╭considering: ${lookup pgsql > {servers=127.0.0.1/mydb/mydbuser/mydbpw; SELECT > string_agg(DISTINCT userid,',') AS target FROM

Re: [exim] Exim 4.94 PAM SMTP auth - Taint

2020-06-02 Thread Jeremy Harris via Exim-users
On 02/06/2020 02:06, Patrick Boutilier via Exim-users wrote: > 2020-06-01 21:35:52 Taint mismatch, string_nextinlist: auth_call_pam 158 Thanks for the report. Is this a self-build, or from a distro? Either way, feels like a bug. If you can build yourself then a possible fix can be tested

Re: [exim] Getting Exim 4.94

2020-06-01 Thread Jeremy Harris via Exim-users
On 01/06/2020 21:46, Mike Brown via Exim-users wrote: > I'm currently running fc27.x86_64. I'm trying to find a Fedora RPM for > version 4.94, but the exim wiki for downloading Fedora binaries is broken, > as it points to fedora.redhat.com, which can't be found. > > Anyone know where I can find

Re: [exim] A decent acl example please!

2020-06-01 Thread Jeremy Harris via Exim-users
On 01/06/2020 17:44, Jacques B. Siboni via Exim-users wrote: > It seems there are many ways to configure the acl part of exim4. Yes; essentially ACL code is a programming language. > I have tried > many options but, so far I can't get rid of spammers using our smtp to send > spam > mails.

Re: [exim] Exim 4.93 published - actually 4.94

2020-06-01 Thread Jeremy Harris via Exim-users
On 01/06/2020 16:24, Jeremy Harris via Exim-users wrote: > Today we released Exim 4.94. > > There are no significant changes since RC2. > > > For changes in 4.94 that ARE LIKELY TO AFFECT existing runtime > configurations please see: > https://git.exim.org

[exim] Exim 4.93 published

2020-06-01 Thread Jeremy Harris via Exim-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Today we released Exim 4.94. There are no significant changes since RC2. For changes in 4.94 that ARE LIKELY TO AFFECT existing runtime configurations please see: https://git.exim.org/exim.git/blob/HEAD:/src/README.UPDATING For new features

Re: [exim] Includecontent not updated

2020-06-01 Thread Jeremy Harris via Exim-users
On 31/05/2020 00:34, Cyborg via Exim-users wrote: > .include_if_exists /etc/exim/forwarder_dl.conf > > it contains a domainlist : > > domainlist local_domains = @ : localhost : localhost.localdomain : QUERY > > > Is there any particular reason, why the content of domainlist is only > loaded

Re: [exim] how to make use of custom variables in a router

2020-05-29 Thread Jeremy Harris via Exim-users
On 29/05/2020 17:08, Jürgen Edner via Exim-users wrote: > -> Result: "DEBUG: local_part=my-pub-folder r_1= r_2=" Let's see the entire debug output, from the start of the router being run to that point. -- Cheers, Jeremy -- ## List details at

Re: [exim] Remote SMTP server TLS certificate verification against given domain name

2020-05-29 Thread Jeremy Harris via Exim-users
On 28/05/2020 11:40, IB Development Team via Exim-users wrote: > Exim configured with TLS forced to such recipient domanin should use MX > to find servers but verify server cert against domain name from exim's > config (i.e. file/db lookup). tls_verify_cert_hostnames ? -- Cheers, Jeremy --

Re: [exim] how to make use of custom variables in a router

2020-05-28 Thread Jeremy Harris via Exim-users
On 28/05/2020 11:54, Jürgen Edner via Exim-users wrote: > set = r_dir = ${extract{folder}{${lookup{$local_part} > lsearch{/etc/pubfolders}}}{$value}} > condition = ${if exists{/home/imappublic/.$r_dir/cur}} > condition = ${if exists{/home/imappublic/.$r_dir/new}} > ... >

Re: [exim] IPv6 in route_data and route_list

2020-05-28 Thread Jeremy Harris via Exim-users
On 28/05/2020 10:38, Hendrik Meyburgh via Exim-users wrote: > finding IP address for ::0:107:4::583 > calling host_find_byname > gethostbyname2(af=inet6) returned 2 (TRY_AGAIN) > gethostbyname2(af=inet) returned 2 (TRY_AGAIN) > no IP address found for host ::0:107:4::583 >

Re: [exim] IPv6 in route_data and route_list

2020-05-28 Thread Jeremy Harris via Exim-users
On 28/05/2020 10:09, Hendrik Meyburgh via Exim-users wrote: > route_item = * <+ ::0:107:4::583 > gmail.com in "*"? yes (matched "*") > original list of hosts = '<+' options = '::0:107:4::583' >> route_list = * <+ ::0:107:4::583 We're getting closer. Lose the space after

Re: [exim] IPv6 in route_data and route_list

2020-05-28 Thread Jeremy Harris via Exim-users
On 28/05/2020 07:25, Hendrik Meyburgh via Exim-users wrote: > Hi. > > Thanks, but still not working. >> route_list = * <; ::0:107:4::583 Wups, my mistake. We can't use ; here, either. route_list = * <+ ::0:107:4::583 -- Cheers, Jeremy -- ## List details at

Re: [exim] Testing sender and recipient domains in MIME ACL

2020-05-27 Thread Jeremy Harris via Exim-users
On 26/05/2020 07:53, Mike Tubby via Exim-users wrote: > I need to make business logic decisions in the MIME ACL on how to screen > MIME content based on the sender domain and recipient domain The message could have multiple recipients, having different domains. Therefore, in general, the

Re: [exim] IPv6 in route_data and route_list

2020-05-24 Thread Jeremy Harris via Exim-users
On 24/05/2020 14:54, Hendrik Meyburgh via Exim-users wrote: >>> example with route_list =<; * ::0:107:4::583 >> >> route_list, per Ch 20 section 2, goes: >> >> >> You are wanting the list-of-hosts to be the single ipv6 address. >> The list needs the <; rather than the

[exim] exim 4.94 RC2 published

2020-05-23 Thread Jeremy Harris via Exim-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I have built, and placed on the FTP site, Release Candidate 2 for exim release 4.94 ftp://ftp.exim.org/pub/exim/exim4/test/ The commit for RC2 is ef546e7882, at git://git.exim.org/exim.git No further new features will be accepted for 4.94;

Re: [exim] IPv6 in route_data and route_list

2020-05-22 Thread Jeremy Harris via Exim-users
On 22/05/2020 11:25, Hendrik Meyburgh via Exim-users wrote: > I did test it an provided some samples in the original mail, here it is again. > > example with route_list =<; * ::0:107:4::583 route_list, per Ch 20 section 2, goes: You are wanting the list-of-hosts to be the single

Re: [exim] IPv6 in route_data and route_list

2020-05-21 Thread Jeremy Harris via Exim-users
On 20/05/2020 17:01, Hendrik Meyburgh via Exim-users wrote: > routing e...@testing.com > > backscatter router < > local_part=echo domain=testing.com > checking "condition" "${if and{{bool_lax{${if def:sender_address > {0}{1{bool_lax{${lookup ldap {USE"... > backscatter router

Re: [exim] exim & mysql-connector-c

2020-05-21 Thread Jeremy Harris via Exim-users
On 21/05/2020 16:50, Mark Elkins via Exim-users wrote: > 2020-05-21 15:48:03 PLAIN authenticator failed for (DESKTOP1OI0BHK) > [41.1.2.3]:54719 I=[192.96.24.71]:587: 435 Unable to authenticate at > present (set_id=u...@domain.co.za): lookup of "SELECT despass FROM admin > WHERE

Re: [exim] What process are changing the rights of all files to Debian-exim?

2020-05-20 Thread Jeremy Harris via Exim-users
On 20/05/2020 09:15, Sebastian Nielsen via Exim-users wrote: > Which script or file is causing these changes? And how can I prevent them? Possibly better asked on a Debian forum than here? It doesn't sound like Exim's fault. -- Cheers, Jeremy -- ## List details at

Re: [exim] need fully-qualified hostname

2020-05-18 Thread Jeremy Harris via Exim-users
On 18/05/2020 23:13, Leonardo Boselli via Exim-users wrote: > After an update senfing to certain domains i get this DFN: > > 504 5.5.2 : Helo command rejected: need fully-qualified hostname > but exim on helo say just 'w' not the FQDN . > Where is the problem ? a) you'll need to look at the

Re: [exim] Local and remote names in same domain

2020-05-18 Thread Jeremy Harris via Exim-users
On 18/05/2020 15:59, Mike Clarke via Exim-users wrote: > In addition to my normal email address, I collect mail for an address at > another domain which for the purpose of this post I'll call > other.m...@my.example.com. I have the following router defined for this > domain in the Exim

Re: [exim] cutthrough deliver/mode

2020-05-14 Thread Jeremy Harris via Exim-users
On 14/05/2020 10:08, kevin shell via Exim-users wrote: > I read through the exim spec and came cross cutthrough deliver/mode, > Can someone explains what is cutthrough deliver mode? > I can't find a definition in the exim spec doc. Cutthrough delivery sets up and uses an SMTP connection for

Re: [exim] spec.txt, NFS and file locking

2020-05-14 Thread Jeremy Harris via Exim-users
On 13/05/2020 13:56, Vincent Lefevre via Exim-users wrote: > I've reported the following bug in the Debian BTS[*], as I think that > spec.txt (from exim 4.93) is incorrect. > > In /usr/share/doc/exim4-base/spec.txt.gz : > > > In order to append to an NFS file safely from more than one

[exim] exim 4.94 RC1 published

2020-05-14 Thread Jeremy Harris via Exim-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I have built, and placed on the FTP site, Release Candidate 1 for exim release 4.94 ftp://ftp.exim.org/pub/exim/exim4/test/ The commit for RC1 is 632b9f8daa, at git://git.exim.org/exim.git -

Re: [exim] dnslists ACL condition

2020-05-11 Thread Jeremy Harris via Exim-users
On 11/05/2020 19:34, Andrew C Aitchison via Exim-users wrote: > Put another way, how would the new default  "&127.0.0.0" > interact with an ACL condition like > deny dnslists = spamhaus.example/<|192.168.1.2|192.168.6.7|... > (from spec.txt 44.32) ? > Answer: I'd rather not think about that.

Re: [exim] dnslists ACL condition

2020-05-11 Thread Jeremy Harris via Exim-users
On 11/05/2020 14:19, Jeremy Harris via Exim-users wrote: > be changed to default to "=127.0.0.0&127.0.0.0" ? Oops, just "&127.0.0.0". After the dnsbl name. -- Cheers, Jeremy -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim

[exim] dnslists ACL condition

2020-05-11 Thread Jeremy Harris via Exim-users
Question for the list: Should the behaviour of the "dnslist" condition be changed to default to "=127.0.0.0&127.0.0.0" ? The existing behaviour is to return true if any value is retrieved. The rationale would be that most operational DNSBLs return values in the 127.0.0.0/8 range, but that dead

Re: [exim] Add a whitelist for senders to skip auth check

2020-05-08 Thread Jeremy Harris via Exim-users
On 08/05/2020 13:03, Damon Hill via Exim-users wrote: > My server, say SERVER A, hosts e-mail for coolstore.com domain, but the > web is hosted by SERVER B (which uses several servers for mailing). I > need to exclude from Exim SMTP auth checking in Server A: > smtp1.serverb.com,

Re: [exim] Weird SPF rejection - what can be the cause of it? (buiilt-in SPF handler in exim)

2020-05-07 Thread Jeremy Harris via Exim-users
On 08/05/2020 01:42, Sebastian Nielsen via Exim-users wrote: > Do you have some link to a diff or changes, so I could have a look for > myself what was fixed? https://git.exim.org/exim.git/shortlog/refs/heads/exim-4.93+fixes -- Cheers, Jeremy -- ## List details at

Re: [exim] Weird SPF rejection - what can be the cause of it? (buiilt-in SPF handler in exim)

2020-05-07 Thread Jeremy Harris via Exim-users
On 08/05/2020 00:52, Sebastian Nielsen via Exim-users wrote: > Now I did that, and STRAIGHT AFTER, the first SPF debug query you gave me. > They give different results about MX for lansforsakringar.se, apparently > dnsdb and spf isn't in agreement of whats MX for lansforsakringar.se There have

Re: [exim] Weird SPF rejection - what can be the cause of it? (buiilt-in SPF handler in exim)

2020-05-07 Thread Jeremy Harris via Exim-users
On 08/05/2020 00:40, Sebastian Nielsen via Exim-users wrote: > How does exim handle DNSSEC when traversing SPF? > Does it simply trust the ad flag from the local stub resolver, or does exim > walk DNSSEC itself? Exim trusts your local resolver library interface. -- Cheers, Jeremy -- ##

Re: [exim] Weird SPF rejection - what can be the cause of it? (buiilt-in SPF handler in exim)

2020-05-07 Thread Jeremy Harris via Exim-users
On 08/05/2020 00:18, Sebastian Nielsen via Exim-users wrote: > spf_interpret.c:823 Debug: found 0 MX records for lansforsakringar.se > (herrno: 1) It got that and stopped. Yet when you used "dig" it worked... Try the debug for exim doing an MX lookup: '${lookup dnsdb

Re: [exim] Weird SPF rejection - what can be the cause of it? (buiilt-in SPF handler in exim)

2020-05-07 Thread Jeremy Harris via Exim-users
On 07/05/2020 23:34, Sebastian Nielsen via Exim-users wrote: > I got the following weird SPF rejection in my logs (im using the built-in > SPF handler in exim): > > 2020-05-07 11:14:35 H=mxcluster2.lansforsakringar.se [194.16.160.133] > X=TLS1.2:ECDHE_SECP521R1__RSA_SHA512__AES_256_GCM:256 CV=no

Re: [exim] trace from console

2020-05-07 Thread Jeremy Harris via Exim-users
On 07/05/2020 12:33, Emanuel Gonzalez via Exim-users wrote: > Good morning, I am having reception problems, I am not receiving emails from > a certain domain. > > I would like to know if there is some way from the console to perform a > traceroute through exim to a domain. Exim doesn't do

Re: [exim] Aliases in LDAP - good idea?

2020-05-06 Thread Jeremy Harris via Exim-users
On 06/05/2020 21:50, Rigu Cucu via Exim-users wrote: > When a lookup cannot be completed in a router or transport, delivery of the > message (to the relevant address) is deferred, as for any other temporary > error. In other circumstances Exim may assume the lookup has failed, or may > give up

Re: [exim] Verify recipient with mailbox quota at ACL time

2020-05-01 Thread Jeremy Harris via Exim-users
On 01/05/2020 20:32, Yves Goergen via Exim-users wrote: > So I need a Perl script that runs permanently in the background and > opens a network socket that any local user can query to get information > about mail quotas? Either that or do a manual job in ACL coding that evaluates a maildirsize

Re: [exim] Verify recipient with mailbox quota at ACL time

2020-05-01 Thread Jeremy Harris via Exim-users
On 01/05/2020 16:12, Yves Goergen via Exim-users wrote:> When an e-mail is received for a user but the mailbox is full, this> results in a bounce message which ultimately gets me on DNS blacklists.> (And it causes backscatter spam which is to be prevented.)

Re: [exim] [taint] $local_part in require files

2020-05-01 Thread Jeremy Harris via Exim-users
On 01/05/2020 12:39, Andreas Metzler via Exim-users wrote: > Somehow related, I have stumbled upon this paragraph in > 26.1 The file and directory options [of the appendfile transport] Yup, one of several. I'll run a sweep. -- Cheers, Jeremy -- ## List details at

Re: [exim] [taint] $local_part in require files

2020-05-01 Thread Jeremy Harris via Exim-users
On 01/05/2020 07:01, Andreas Metzler via Exim-users wrote: > Afaict practically it does not make a difference but shouldn't it better > read > > "require_files = $local_part_verified:$home/.procmailrc" > > for consistency's sake. (To get in the right mindset and avoid using > "$local_part" for

[exim] Next release starting; will be 4.94; RC 0 published

2020-04-30 Thread Jeremy Harris via Exim-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 It's time for another release. This will be mostly bugfixes content; for details please read the ChangeLog file. As far as features go: There is a major introduction of parallel-operations in 2-phase queue runs. This is expected to help a) sites

Re: [exim] Spurious permission denied error

2020-04-28 Thread Jeremy Harris via Exim-users
On 28/04/2020 11:32, Russell King via Exim-users wrote: > I notice you set a Reply-to: header on your messages, were you > expecting me to reply to that address, or to the list? I've > chosen the list. I blame Thunderbird. List is preferred, as far as I'm concerned. > When exim chooses to

Re: [exim] Spurious permission denied error

2020-04-28 Thread Jeremy Harris via Exim-users
On 28/04/2020 11:17, Andrew C Aitchison via Exim-users wrote: > > On 27/04/2020 20:52, Russell King via Exim-users wrote: >> 2020-04-27 20:36:15 1jT9Y7-0003B4-Mf <= pat...@.armlinux.org.uk > U=patchd P=local S=1535 >> 2020-04-27 20:36:15 1jT9Y7-0003B4-Mf H=pandora.armlinux.org.uk >

Re: [exim] Spurious permission denied error

2020-04-28 Thread Jeremy Harris via Exim-users
On 28/04/2020 08:12, Russell King via Exim-users wrote: > On Mon, Apr 27, 2020 at 09:11:18PM +0100, Jeremy Harris via Exim-users wrote: >> On 27/04/2020 20:52, Russell King via Exim-users wrote: >>> I'm running debian stable on my machines, and I've noticed that when >>&

Re: [exim] Spurious permission denied error

2020-04-27 Thread Jeremy Harris via Exim-users
On 27/04/2020 20:52, Russell King via Exim-users wrote: > I'm running debian stable on my machines, and I've noticed that when > one of my scripts sends email, I'm hoping that means you can trigger it on demsnd? > I get a spurious and unexplained > "Permission denied" error: > > 2020-04-27

Re: [exim] Spurious DNS lookups during inbound mail processing ?

2020-04-27 Thread Jeremy Harris via Exim-users
On 27/04/2020 20:09, Mike Tubby via Exim-users wrote: > 2020-04-27 19:05:46 1jT88X-0003Qr-G5 DKIM START: > domain=bounce.wowcher.co.uk possible_signer=e.wowcher.co.uk status=pass > 2020-04-27 19:05:46 1jT88X-0003Qr-G5 no IP address found for host > localhost.localdomain > 2020-04-27 19:05:46

Re: [exim] ARC signing and verification

2020-04-27 Thread Jeremy Harris via Exim-users
On 27/04/2020 15:46, Tom Crane via Exim-users wrote: > ARC_state: condition = true logwrite = reason: miscompare> > > I don't have access to the emails in question to examine their headers > but I am assuming that, in contrast with all the others, they were ARC > signed Yes > and that my ARC

Re: [exim] Rewrite Rcpt in copied mail

2020-04-27 Thread Jeremy Harris via Exim-users
On 27/04/2020 14:12, Kai Bojens via Exim-users wrote: > I want to archive every outgoing mail for customer "foobar". This would > be easily achieved by using a manualroute and "unseen" which sends all > mails to the archive server. > > The archiving software on the other hand expects all mails to

Re: [exim] how to discard return emails when they are spams?

2020-04-27 Thread Jeremy Harris via Exim-users
On 27/04/2020 11:45, Jacques B. Siboni via Exim-users wrote: > When a spammer sends an email to any address of our domain and that the > mailer daemon detects it is a spam, it returns the mail to the From address > telling it won't be delivered. You are better off refusing such messages at SMTP

Re: [exim] ARC signing and verification

2020-04-25 Thread Jeremy Harris via Exim-users
On 25/04/2020 04:20, Tom Crane via Exim-users wrote: >> You could have done the same edit using native Exim factilities, >> and not needing the system-filter, but no matter. > > Out of interest how? in data acl :- warn hosts = remove_header = Subject add_header =

Re: [exim] ARC signing and verification

2020-04-24 Thread Jeremy Harris via Exim-users
On 24/04/2020 19:52, Tom Crane via Exim-users wrote: > Done but I am not much the wiser. I get (slightly obfuscated) eg., > > 16:56:30 16565 using ACL "acl_check_data" > 16:56:30 16565 processing "warn" > 16:56:30 16565 check verify = arc/pass:none:fail > 16:56:30 16565 ARC: collecting arc sets >

Re: [exim] ARC signing and verification

2020-04-24 Thread Jeremy Harris via Exim-users
On 24/04/2020 03:19, Tom Crane via Exim-users wrote: > I wondered about this but DKIM verification is already turned on, and is > on by default (eg. section 58.1 of the Exim Book).  My college's Central > IT email service (O365), which I mainly use for testing my exim server > does not DKIM sign

Re: [exim] ARC signing and verification

2020-04-23 Thread Jeremy Harris via Exim-users
On 23/04/2020 19:49, Tom Crane via Exim-users wrote: > now getting an Authentication-Results: header > added to the top of the message containing the server's FQDN and > "arc=none". So, one step forward at least. Did the incoming message have any ARC headers to be verified? If not, the

Re: [exim] ARC signing and verification

2020-04-22 Thread Jeremy Harris via Exim-users
On 22/04/2020 20:10, Tom Crane via Exim-users wrote: > Now I get "ARC: no Authentication-Results header for signing" logs for > each email processed in /var/log/exim/main.log and no emails get any > ARC-* header fields added or an added "Authentication-Results:" field. > > From the

Re: [exim] Replace From with To for forwarded mails and also encapsulate email.

2020-04-20 Thread Jeremy Harris via Exim-users
On 20/04/2020 16:27, Sebastian Nielsen via Exim-users wrote: > How would you solve the problem with a domain owner having set > identity-aligment = STRICT Sounds like they don't want their messages being forwarded. > to a adress that checks for this? Sounds like they don't want to receive

Re: [exim] Replace From with To for forwarded mails and also encapsulate email.

2020-04-20 Thread Jeremy Harris via Exim-users
On 20/04/2020 15:53, Sebastian Nielsen wrote: > Now when forwarding emails, I want to encapsulate them in a new container, That constitutes either an edit, or the creation of a new message. Not an MTA's job. -- Cheers, Jeremy -- ## List details at

Re: [exim] Replace From with To for forwarded mails and also encapsulate email.

2020-04-20 Thread Jeremy Harris via Exim-users
On 18/04/2020 06:03, Sebastian Nielsen via Exim-users wrote: > Any ideas to accomplish both of these in Exim4? You can't. Exim takes the view that an MTA should edit message bodies. -- Cheers, Jeremy -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at

Re: [exim] Replace From with To for forwarded mails and also encapsulate email.

2020-04-20 Thread Jeremy Harris via Exim-users
On 20/04/2020 15:32, Jeremy Harris via Exim-users wrote: > On 18/04/2020 06:03, Sebastian Nielsen via Exim-users wrote: >> Any ideas to accomplish both of these in Exim4? > > You can't. Exim takes the view that an MTA should edit > message bodies. > Wups. "Shoul

Re: [exim] How to add item to whitelist stored in LDAP every time local user sends mail to extermal address

2020-04-20 Thread Jeremy Harris via Exim-users
On 20/04/2020 11:32, Орлов Олег via Exim-users wrote: > The task is to append item to the whitelist of addresses every time a > local user sends an email out. > The whitelist is stored in LDAP. I wrote a perl script for writing > e-mail to properly branch of LDAP tree. > How to run a script when a

Re: [exim] ARC signing and verification

2020-04-20 Thread Jeremy Harris via Exim-users
On 20/04/2020 14:33, Tom Crane via Exim-users wrote: > I am attempting to configure my server (exim-4.92.3) to ARC > (Authenticated Received Chain) sign and possibly also verify messages. There's been several ARC-related fixes since then; I suggest you consider moving closer to the

Re: [exim] Upcoming Glibc changes and DANE support in Exim, Postfix, and perhaps other MTAs

2020-04-16 Thread Jeremy Harris via Exim-users
On 15/04/2020 18:46, Viktor Dukhovni via Exim-users wrote: > I read this to mean that the new "trust-ad" option, if set, causes the > Glibc stub resolver to set AD=1 in queries, but *otherwise*, causes it > to strip the AD bit from replies. So much for back-compatibility, eh? They broke it for

Re: [exim] DSN for locally submitted messages

2020-04-16 Thread Jeremy Harris via Exim-users
On 16/04/2020 17:51, David Saez Padros via Exim-users wrote: > is there any way to activate DSN for locally submitted messages ? If you mean the ESMTP DSN extension, no there is not. Raise a request at bugs.exim.com if you have a use-case. If you're just asking about bounces and warnings for

Re: [exim] Limit messages sent to smarthost per hour

2020-04-16 Thread Jeremy Harris via Exim-users
On 15/04/2020 23:16, Emilio Augusto Lazo Zaia via Exim-users wrote: > I would like to queue all messages to be delivered through a smarthost based > upon some criteria, for instance the number of messages the smarthost can > transport without blocking us for security reasons. > > Some user in

Re: [exim] Catching malformed headers in bounce mail

2020-04-14 Thread Jeremy Harris via Exim-users
On 14/04/2020 11:45, Axel Rau via Exim-users wrote: > To: Recipients@ > From: "Mr.David Ash "@ > ___ > My IMAP server doesn't like such From:, if no envelop sender exists. Like verify = header_syntax perhaps? -- Cheers, Jeremy -- ## List details at

Re: [exim] How to check all options can be set?

2020-04-11 Thread Jeremy Harris via Exim-users
On 10/04/2020 01:48, Otávio Nogueira via Exim-users wrote: > How can I find all directives/options can be set in one section? (Link for > MAIN instruction ...) > > For example, here can I use: helo_data, interface, event_action... In the documentation: http://exim.org/docs.html > > begin

Re: [exim] Ip whitelist per domain

2020-04-11 Thread Jeremy Harris via Exim-users
On 09/04/2020 14:58, Pascal Rolle via Exim-users wrote: >   warn    hosts = <; ${expand:${if exists {PATH/ip_wl/$domain} \ > {PATH/ip_wl/$domain}{}}} >   add_header    = X-wh_IP_: Yes You didn't say which ACL you're doing this in. I hope it is the

Re: [exim] aliases to local user

2020-04-09 Thread Jeremy Harris via Exim-users
On 09/04/2020 12:16, Rainer Dorsch via Exim-users wrote: > I am wondering, can I send a copy of email to a local user also to other > local > users? Yes > E.g. does an entry in /etc/aliases like > > joe: foo,bar,joe > > work? Yes, assuming your config does aliases-handling using that file.

Re: [exim] message_size_limit

2020-04-08 Thread Jeremy Harris via Exim-users
On 08/04/2020 12:27, Mark Elkins via Exim-users wrote: > When an e-mail bounces back to the sender - it does not appear to have > any "Message too big" message in the bounced e-mail. How do I fix that? bounce_message_file

Re: [exim] Exim as a backup MX server

2020-04-07 Thread Jeremy Harris via Exim-users
On 07/04/2020 21:33, Andrew C Aitchison via Exim-users wrote: >> Getting that knowlege depends on your existing setup. >> Possibly it's a case of pointing Exim at your AD server, >> and hoping it really does talk LDAP sanely. > > Exim does recipient callouts and cutthrough delivery. > Are either

Re: [exim] Exim as a backup MX server

2020-04-07 Thread Jeremy Harris via Exim-users
On 07/04/2020 19:43, Linda Pagillo via Exim-users wrote: > set up Exim as a backup MX server for the > Windows servers. Preferably you need to have the backup know what the legitimate email accounts are - both local-part and domain - so that it can reject bad ones at SMTP time. Otherwise it

Re: [exim] socket bind() to port 25 for address (any IPv4) failed (#76)

2020-04-05 Thread Jeremy Harris via Exim-users
On 05/04/2020 12:49, Heiko Schlittermann via Exim-users wrote: > Maybe we're talking about the same, bot I didn't get your point. > That's what I think: > > systemd Type=forking > t0 `-- exim -bd > fork() exim daemon > t1 <--' - read

Re: [exim] socket bind() to port 25 for address (any IPv4) failed (#76)

2020-04-05 Thread Jeremy Harris via Exim-users
On 05/04/2020 11:13, Heiko Schlittermann via Exim-users wrote: [systemd forking mode] > For what I understood - the main advantage is, that systemd doesn't have > to guess the PID if the main process. And can do a better job in > supervising (and restarting) the main process. > >> I've seen one

Re: [exim] socket bind() to port 25 for address (any IPv4) failed (#76)

2020-04-05 Thread Jeremy Harris via Exim-users
On 04/04/2020 14:10, Heiko Schlittermann via Exim-users wrote: > Jeremy Harris via Exim-users (Sa 04 Apr 2020 12:13:36 > CEST): >> On 04/04/2020 10:08, Ian Zimmerman via Exim-users wrote: >>> AFAIK running exim under systemd (as the OP clearly does) requires -f in >&g

Re: [exim] socket bind() to port 25 for address (any IPv4) failed (#76)

2020-04-04 Thread Jeremy Harris via Exim-users
On 04/04/2020 10:08, Ian Zimmerman via Exim-users wrote: > AFAIK running exim under systemd (as the OP clearly does) requires -f in > any case. I don't think so. Here's a unit file I'm using (though I have no idea if it is optimal) :- =%cut here% #

Re: [exim] Exim 4.92 local address qualification problem

2020-04-03 Thread Jeremy Harris via Exim-users
On 03/04/2020 21:06, Ivor Durham via Exim-users wrote: > I must not be using "exim -d+all -bdf" right; I'm not seeing any output > after "Listening..." when I send test messages. Are the tests sent as SMTP to the daemon, or are they command-line nonsmtp mail? For the latter, it's the sending

Re: [exim] Are there any good tutorials on setting up Exim MTA/SMTP Server?

2020-03-31 Thread Jeremy Harris via Exim-users
On 30/03/2020 14:01, Turritopsis Dohrnii Teo En Ming via Exim-users wrote: > If I want to install Exim as a standalone MTA/SMTP server, are there any > good tutorials which I can follow? Just read the manual. http://exim.org/exim-html-current/doc/html/spec_html/ -- Cheers, Jeremy -- ## List

Re: [exim] DANE ERROR: TLSA LOOKUP DEFER

2020-03-31 Thread Jeremy Harris via Exim-users
On 30/03/2020 07:50, daniel via Exim-users wrote: > And is exim > by default will try DANE on all hosts or not? Because i dont found  > these two configs in the exim config currently. http://exim.org/exim-html-current/doc/html/spec_html/ch-concept_index.html#index_concept_D -- Cheers, Jeremy

Re: [exim] Saving Recipient when rewriting

2020-03-26 Thread Jeremy Harris via Exim-users
On 26/03/2020 13:20, Neal Blount via Exim-users wrote: > This is the rewrite I am using: > > begin rewrite > *@* "${lookup mysql{select destination from rewrite where > source='${quote_mysql:$1@$2}'}{$value}fail}" Tbct OK. That sort of rewrite happens just at/after message acceptance :-

Re: [exim] Saving Recipient when rewriting

2020-03-25 Thread Jeremy Harris via Exim-users
On 23/03/2020 13:30, Neal Blount via Exim-users wrote: > Is it possible to save the original recipient in a header when we are > rewriting the reciepient? What variant of "rewriting"? Beware: the term has specific meaning in Exim. -- Cheers, Jeremy -- ## List details at

Re: [exim] Return-path: and Sender: rewriten?

2020-03-22 Thread Jeremy Harris via Exim-users
On 21/03/2020 20:01, randyd via Exim-users wrote: > Using version 4.93 > I have several trusted_users = user, they are denied from receiving messages > under their unix username > instead they can only send and receive mail under one of several aliases, > thunderbird sets their identity. > I'm

Re: [exim] Exim4 keeps mails with multiple recipients infinitely in queue

2020-03-20 Thread Jeremy Harris via Exim-users
On 20/03/2020 17:09, Lukas Haase via Exim-users wrote: > 1.) Exim received a message to be delivered externally on a port != 10029 and > router dkimproxy processes which uses transport dkimproxy_smtp to pass the > message to localhost:10028 I assume you mean "received, on port != 10029, a

Re: [exim] Disable PRDR for specific router/transport (was: Exim4 keeps mails with multiple recipients infinitely in queue)

2020-03-20 Thread Jeremy Harris via Exim-users
On 18/03/2020 04:31, Lukas Haase via Exim-users wrote: > However, for PRDR the info is pretty sparse and all I can find is a simple > global option "prdr_enable = true". The "Concept index" in the docs has several listings for PRDR. -- Cheers, Jeremy -- ## List details at

Re: [exim] Exim4 keeps mails with multiple recipients infinitely in queue

2020-03-20 Thread Jeremy Harris via Exim-users
On 17/03/2020 21:30, Lukas Haase via Exim-users wrote: > Example: User lu...@example.net on my system sends an email to > recipie...@gmail.com and recipie...@gmail.com. From the logs below, it can be > seen that the message (1jEJOC-0001UM-Td) is successfully accepted and then > passed on to

Re: [exim] Dovecot style Authentication Policy Server for Exim?

2020-03-17 Thread Jeremy Harris via Exim-users
On 17/03/2020 19:49, Andrew C Aitchison via Exim-users wrote: > There is a Dovecot Authenticator for Exim (spec.txt chapter 37) > I'm not sure whether $sender_host_address is passed to Dovecot, > so it may or may not be possible to enforce the GEOIP policy There are dnsbls providing geographical

<    5   6   7   8   9   10   11   12   13   14   >