Re: [exim] exim 4.96 stopping because postfix is starting?

[Heiko Schlittermann via Exim-users]

Johnnie W Adams via Exim-users  (Mo 19 Dez 2022 18:22:34 
CET):
> Hi, folks,
> 
>  Twice recently, my outbound SMTP server has stopped working for no
> apparent reason. There's nothing in the logs but this:

Can you, please, provide the unit files for Exim and Postfix?

systemctl cat exim\* postfix\*


-- 
Heiko


signature.asc
Description: PGP signature
-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] exim 4.96 stopping because postfix is starting?

[Jeremy Harris via Exim-users]

On 20/12/2022 20:40, Johnnie W Adams via Exim-users wrote:

In this particular case, the message is not deliverable because the address
no longer exists--but how would I know that if I hadn't seen the bounce
message? I have to learn that at some point in the cycle.


Assuming this "you" with an Exim hat on rather than a sysadmin,
you find out when you try to deliver it.  That probably means
"in the routers chain" specifically.

Routing has to be done for delivery; it's how exim decides where
to deliver to.  But: you can ask for a additional run of the
routing from an ACL which is run earlier, before you agree
to accept the message from the sender and while the SMTP connection
is still open.  Based on that routing failing (here, because the
user account does not exist) you can reject the message.
Since it was never accepted, there is no need to generate a bounce
to tell the alleged sender; you just told the using the SMTP reject.

This is called "recipient verification".  I suggest you look it
up in the Exim documentation.
--
Cheers,
  Jeremy


--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] exim 4.96 stopping because postfix is starting?

[Johnnie W Adams via Exim-users]

In this particular case, the message is not deliverable because the address
no longer exists--but how would I know that if I hadn't seen the bounce
message? I have to learn that at some point in the cycle.

On Tue, Dec 20, 2022 at 2:38 PM Jeremy Harris via Exim-users <
exim-users@exim.org> wrote:

> On 20/12/2022 19:49, Johnnie W Adams via Exim-users wrote:
> > I'm tempted at this point to throw the bounces away rather than go out of
> > my way to process them. That rubs me the wrong way, though. What should I
> > be doing?
>
> As I said before: not accepting the original in the first place.
> Which means you need to work out why these particular messages
> are being bounced (it's generally because they're not deliverable,
> but you need to find out).
> --
> Cheers,
>Jeremy
>
>
> --
> ## List details at https://lists.exim.org/mailman/listinfo/exim-users
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/
>


-- 
John Adams
Senior Linux/Middleware Administrator  | Information Technology Services
+1-501-916-3010 | jxad...@ualr.edu | http://ualr.edu/itservices
*UA Little Rock*

Reminder:  IT Services will never ask for your password over the phone or
in an email. Always be suspicious of requests for personal information that
come via email, even from known contacts.  For more information or to
report suspicious email, visit IT Security
.
-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] exim 4.96 stopping because postfix is starting?

[Jeremy Harris via Exim-users]

On 20/12/2022 19:49, Johnnie W Adams via Exim-users wrote:

I'm tempted at this point to throw the bounces away rather than go out of
my way to process them. That rubs me the wrong way, though. What should I
be doing?


As I said before: not accepting the original in the first place.
Which means you need to work out why these particular messages
are being bounced (it's generally because they're not deliverable,
but you need to find out).
--
Cheers,
  Jeremy


--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] exim 4.96 stopping because postfix is starting?

[Johnnie W Adams via Exim-users]

I'm tempted at this point to throw the bounces away rather than go out of
my way to process them. That rubs me the wrong way, though. What should I
be doing?

On Tue, Dec 20, 2022 at 11:40 AM Jeremy Harris via Exim-users <
exim-users@exim.org> wrote:

> On 20/12/2022 16:55, Johnnie W Adams via Exim-users wrote:
> >   but I don't see where
> > the bounce message has one, so I'm going to say "The failing bounce
> message
> > has an empty MailFrom"
>
> Bounces have an empty envelope from.  Always.
> You don't want the possibility of a bounce from a bounce, is why.
> --
> Cheers,
>Jeremy
>
>
> --
> ## List details at https://lists.exim.org/mailman/listinfo/exim-users
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/
>


-- 
John Adams
Senior Linux/Middleware Administrator  | Information Technology Services
+1-501-916-3010 | jxad...@ualr.edu | http://ualr.edu/itservices
*UA Little Rock*

Reminder:  IT Services will never ask for your password over the phone or
in an email. Always be suspicious of requests for personal information that
come via email, even from known contacts.  For more information or to
report suspicious email, visit IT Security
.
-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] exim 4.96 stopping because postfix is starting?

[Jeremy Harris via Exim-users]

On 20/12/2022 16:55, Johnnie W Adams via Exim-users wrote:

  but I don't see where
the bounce message has one, so I'm going to say "The failing bounce message
has an empty MailFrom"


Bounces have an empty envelope from.  Always.
You don't want the possibility of a bounce from a bounce, is why.
--
Cheers,
  Jeremy


--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] exim 4.96 stopping because postfix is starting?

[Johnnie W Adams via Exim-users]

I believe the original message has a MailFrom value, but I don't see where
the bounce message has one, so I'm going to say "The failing bounce message
has an empty MailFrom" and ask how I would address that.

On Tue, Dec 20, 2022 at 10:39 AM Julian Bradfield via Exim-users <
exim-users@exim.org> wrote:

> On 2022-12-20, Johnnie W Adams via Exim-users  wrote:
> > What puzzles me about that is why this _doesn't_ pass SPF. The outbound
> > node is also mta.ualr.edu, which is right there in the SPF record:
> > "v=spf1 a:mta.ualr.edu include:_spf.google.com redirect=_spf.ualr.edu"
>
> > I also don't quite understand this from the log: What should be in the
> > empty set of brackets?
> >
> > SPF check for [] does not pass with ip: [144.167.8.120].
>
> Are you sending a message with an empty MailFrom ?
> In that case, the SPF check will be done against postmaster@EHLO,
> where EHLO is the name your server gave in EHLO. If that name isn't
> covered by your SPF records, it won't pass.
>
> --
> ## List details at https://lists.exim.org/mailman/listinfo/exim-users
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/
>


-- 
John Adams
Senior Linux/Middleware Administrator  | Information Technology Services
+1-501-916-3010 | jxad...@ualr.edu | http://ualr.edu/itservices
*UA Little Rock*

Reminder:  IT Services will never ask for your password over the phone or
in an email. Always be suspicious of requests for personal information that
come via email, even from known contacts.  For more information or to
report suspicious email, visit IT Security
.
-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] exim 4.96 stopping because postfix is starting?

[Julian Bradfield via Exim-users]

On 2022-12-20, Johnnie W Adams via Exim-users  wrote:
> What puzzles me about that is why this _doesn't_ pass SPF. The outbound
> node is also mta.ualr.edu, which is right there in the SPF record:
> "v=spf1 a:mta.ualr.edu include:_spf.google.com redirect=_spf.ualr.edu"

> I also don't quite understand this from the log: What should be in the
> empty set of brackets?
>
> SPF check for [] does not pass with ip: [144.167.8.120].

Are you sending a message with an empty MailFrom ?
In that case, the SPF check will be done against postmaster@EHLO,
where EHLO is the name your server gave in EHLO. If that name isn't
covered by your SPF records, it won't pass.

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] exim 4.96 stopping because postfix is starting?

[Johnnie W Adams via Exim-users]

What puzzles me about that is why this _doesn't_ pass SPF. The outbound
node is also mta.ualr.edu, which is right there in the SPF record:

"v=spf1 a:mta.ualr.edu include:_spf.google.com redirect=_spf.ualr.edu"

I also don't quite understand this from the log: What should be in the
empty set of brackets?

SPF check for [] does not pass with ip: [144.167.8.120].

On Mon, Dec 19, 2022 at 7:29 PM Jasen Betts via Exim-users <
exim-users@exim.org> wrote:


> it might be better to give exim the information it needs to pass SPF and
> do the DKIM signing.
>
> --
>   Jasen.
>
> --
> ## List details at https://lists.exim.org/mailman/listinfo/exim-users
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/
>


-- 
John Adams
Senior Linux/Middleware Administrator  | Information Technology Services
+1-501-916-3010 | jxad...@ualr.edu | http://ualr.edu/itservices
*UA Little Rock*

Reminder:  IT Services will never ask for your password over the phone or
in an email. Always be suspicious of requests for personal information that
come via email, even from known contacts.  For more information or to
report suspicious email, visit IT Security
.
-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] exim 4.96 stopping because postfix is starting?

[Jasen Betts via Exim-users]

On 2022-12-19, Johnnie W Adams via Exim-users  wrote:
> Sigh. I am slower than usual today. Without the R=, that message ID does
> come from a hard bounce failing dnslookup. What I am left not understanding
> is how to route such messages to our inbound node rather than out to the
> internet.
>
> On Mon, Dec 19, 2022 at 4:13 PM Jeremy Harris via Exim-users <
> exim-users@exim.org> wrote:
>

Exim thinks that the return path is "redac...@redact.edu" and that that
address is on the internet.  If you need special handling for locally
generated messages (like bounces and cron jobs) you can start that in
the "NOT_SMTP" acl  by setting an "acl_m_" variable  and then do the 
special handling with a custom router (probably using the manualroute
mechanism) that checks for the variable. 

A few more layers of this and you end up with something resembling a
tuba; many gates, and pipes and heading every which way. This type of
convoluted email plimbing can easily make mail loops and software lasers,
it might be better to give exim the information it needs to pass SPF and
do the DKIM signing.

-- 
  Jasen.

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] exim 4.96 stopping because postfix is starting?

[Johnnie W Adams via Exim-users]

I've unmunged this mostly--I can't remember the name of the email account,
but all else is as it was, in the hopes that'll be useful. 144.167.8.120 is
the outbound node:

# exigrep R=1p7Hiz-00010h-3B main.log

2022-12-19 09:08:49 1p7Hl3-00015O-1S <= <> R=1p7Hiz-00010h-3B U=exim
P=local S=3157

2022-12-19 09:08:49 1p7Hl3-00015O-1S H=ASPMX.L.GOOGLE.COM[142.250.114.27]:
SMTP error from remote mail server after pipelined end of data: 421-4.7.0
This message does not pass authentication checks (SPF and DKIM both
do\n421-4.7.0 not pass). SPF check for [] does not pass with ip:
[144.167.8.120].To\n421-4.7.0 best protect our users from spam, the message
has been blocked.\n421-4.7.0 Please visit\n421-4.7.0
https://support.google.com/mail/answer/81126#authentication for more\n421
4.7.0 information. i124-20020acab88200b00355785aa693si7304080oif.43 -
gsmtp

2022-12-19 09:08:50 1p7Hl3-00015O-1S => someth...@ualr.edu
R=dnslookup T=remote_smtp
H=ALT1.ASPMX.L.GOOGLE.COM [142.250.152.27]
X=TLS1.2:ECDHE-ECDSA-AES128-GCM-SHA256:128 CV=yes K C="250 2.0.0 OK
l5-20020a0566022dc500b006ceacbe1851si8859449iow.64 - gsmtp"

2022-12-19 09:08:50 1p7Hl3-00015O-1S Completed


On Mon, Dec 19, 2022 at 6:29 PM Johnnie W Adams  wrote:

> The way our routing is set up (which I interited), everything which passes
> out of the data center should at some point enter the inbound node, where
> it gets a DKIM signature, and be passed to the outbound node. Sending this
> directly out via the outbound node is resulting in DMARC failure due to no
> signature.
>
> On Mon, Dec 19, 2022 at 5:38 PM Jeremy Harris via Exim-users <
> exim-users@exim.org> wrote:
>
> Also, why would sending a bounce to your *inbound* have been the right
> thing?
> --
> Cheers,
>Jeremy
>
>
> --
> ## List details at https://lists.exim.org/mailman/listinfo/exim-users
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/
>
>
> --
> John Adams
> Senior Linux/Middleware Administrator  | Information Technology Services
> +1-501-916-3010 | jxad...@ualr.edu | http://ualr.edu/itservices
> *UA Little Rock*
>
> Reminder:  IT Services will never ask for your password over the phone or
> in an email. Always be suspicious of requests for personal information that
> come via email, even from known contacts.  For more information or to
> report suspicious email, visit IT Security
> .
>


-- 
John Adams
Senior Linux/Middleware Administrator  | Information Technology Services
+1-501-916-3010 | jxad...@ualr.edu | http://ualr.edu/itservices
*UA Little Rock*

Reminder:  IT Services will never ask for your password over the phone or
in an email. Always be suspicious of requests for personal information that
come via email, even from known contacts.  For more information or to
report suspicious email, visit IT Security
.
-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] exim 4.96 stopping because postfix is starting?

[Johnnie W Adams via Exim-users]

The way our routing is set up (which I interited), everything which passes
out of the data center should at some point enter the inbound node, where
it gets a DKIM signature, and be passed to the outbound node. Sending this
directly out via the outbound node is resulting in DMARC failure due to no
signature.

On Mon, Dec 19, 2022 at 5:38 PM Jeremy Harris via Exim-users <
exim-users@exim.org> wrote:

Also, why would sending a bounce to your *inbound* have been the right
thing?
-- 
Cheers,
   Jeremy


-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


-- 
John Adams
Senior Linux/Middleware Administrator  | Information Technology Services
+1-501-916-3010 | jxad...@ualr.edu | http://ualr.edu/itservices
*UA Little Rock*

Reminder:  IT Services will never ask for your password over the phone or
in an email. Always be suspicious of requests for personal information that
come via email, even from known contacts.  For more information or to
report suspicious email, visit IT Security
.
-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] exim 4.96 stopping because postfix is starting?

[Jeremy Harris via Exim-users]

On 19/12/2022 22:18, Johnnie W Adams via Exim-users wrote:

What I am left not understanding
is how to route such messages to our inbound node rather than out to the
internet.


We'd need to know what the env-from on the original was.  You seem to have
munged it, which makes it tricky to help.

If you think that the original lied about it's env-from, then you need
to think about rejecting such at SMTP time, rather than generating a bounce
after accepting them from the sender.

Also, why would sending a bounce to your *inbound* have been the right thing?
--
Cheers,
  Jeremy


--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] exim 4.96 stopping because postfix is starting?

[Johnnie W Adams via Exim-users]

Sigh. I am slower than usual today. Without the R=, that message ID does
come from a hard bounce failing dnslookup. What I am left not understanding
is how to route such messages to our inbound node rather than out to the
internet.

On Mon, Dec 19, 2022 at 4:13 PM Jeremy Harris via Exim-users <
exim-users@exim.org> wrote:

> On 19/12/2022 21:33, Johnnie W Adams via Exim-users wrote:
> > # exigrep R=1p7Hiz-00010h-3B main.log
>
> Without the "R=".
> --
> Cheers,
>Jeremy
>
>
> --
> ## List details at https://lists.exim.org/mailman/listinfo/exim-users
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/
>


-- 
John Adams
Senior Linux/Middleware Administrator  | Information Technology Services
+1-501-916-3010 | jxad...@ualr.edu | http://ualr.edu/itservices
*UA Little Rock*

Reminder:  IT Services will never ask for your password over the phone or
in an email. Always be suspicious of requests for personal information that
come via email, even from known contacts.  For more information or to
report suspicious email, visit IT Security
.
-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] exim 4.96 stopping because postfix is starting?

[Jeremy Harris via Exim-users]

On 19/12/2022 21:33, Johnnie W Adams via Exim-users wrote:

# exigrep R=1p7Hiz-00010h-3B main.log


Without the "R=".
--
Cheers,
  Jeremy


--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] exim 4.96 stopping because postfix is starting?

[Johnnie W Adams via Exim-users]

What I am now realizing is the issue is that my Exim configuration is not
handling bounces correctly. They are being routed out to the internet
instead of back to our inbound node. Postfix is (now) running (only) on our
non-mail nodes as an MUA to submit mail to our inbound Exim node. It's the
solved part of the problem.

I'm puzzled, though, why the R=1p7Hiz-00010h-3B message ID doesn't match
anything else in the logs. When I exigrep it, I get the same result as when
I exigrep the other ID. No other message shows up:

# exigrep R=1p7Hiz-00010h-3B main.log

2022-12-19 09:08:49 1p7Hl3-00015O-1S <= <> R=1p7Hiz-00010h-3B U=exim
P=local S=3157

2022-12-19 09:08:49 1p7Hl3-00015O-1S H=ASPMX.L.GOOGLE.COM [142.250.114.27]:
SMTP error from remote mail server after pipelined end of data: 421-4.7.0
This message does not pass authentication checks (SPF and DKIM both
do\n421-4.7.0 not pass). SPF check for [] does not pass with ip:
[redacted].To\n421-4.7.0 best protect our users from spam, the message has
been blocked.\n421-4.7.0 Please visit\n421-4.7.0
https://support.google.com/mail/answer/81126#authentication for more\n421
4.7.0 information. i124-20020acab88200b00355785aa693si7304080oif.43 -
gsmtp

2022-12-19 09:08:50 1p7Hl3-00015O-1S => redac...@redact.edu R=dnslookup
T=remote_smtp H=ALT1.ASPMX.L.GOOGLE.COM [142.250.152.27]
X=TLS1.2:ECDHE-ECDSA-AES128-GCM-SHA256:128 CV=yes K C="250 2.0.0 OK
l5-20020a0566022dc500b006ceacbe1851si8859449iow.64 - gsmtp"

2022-12-19 09:08:50 1p7Hl3-00015O-1S Completed

On Mon, Dec 19, 2022 at 3:02 PM Jeremy Harris via Exim-users <
exim-users@exim.org> wrote:

> On 19/12/2022 19:55, Johnnie W Adams via Exim-users wrote:
>
> > 2022-12-19 09:08:49 1p7Hl3-00015O-1S <= <> R=1p7Hiz-00010h-3B U=exim
> P=local S=3157
>
> That's an Exim log line, recording a bounce having been generated
> and "received" by that Exim for input processing.  Follow the R=
> message ID to see what message was being bounced.
>
> There no special reason for Postfix to have gotten involved with that.
> --
> Cheers,
>Jeremy
>
>
> --
> ## List details at https://lists.exim.org/mailman/listinfo/exim-users
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/
>


-- 
John Adams
Senior Linux/Middleware Administrator  | Information Technology Services
+1-501-916-3010 | jxad...@ualr.edu | http://ualr.edu/itservices
*UA Little Rock*

Reminder:  IT Services will never ask for your password over the phone or
in an email. Always be suspicious of requests for personal information that
come via email, even from known contacts.  For more information or to
report suspicious email, visit IT Security
.
-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] exim 4.96 stopping because postfix is starting?

[Jeremy Harris via Exim-users]

On 19/12/2022 19:55, Johnnie W Adams via Exim-users wrote:

I shouldn't be, and I believe in fact I am not (except briefly in error).
What still puzzles me, though, is what my MUA is and why it's routing to
the wrong destination. I'd drawn the tentative conclusion the problem was
postfix, but I see now that was a red herring.


The problem is whatever or whoever is causing systemd to start postfix.
I can think of three causes... obviously, there could be more.

- An auto-update on your system in installing, or updating, postfix -
  and the install script is telling systemd to enable it and start it.
  Look for an association with system update times.

- An administrator thinks postscript is needed, and keeps installing
  and/or enabing it.  Cluebat time.

- Your system has been compromised.  Wipe and start over.




2022-12-19 09:08:49 1p7Hl3-00015O-1S <= <> R=1p7Hiz-00010h-3B U=exim P=local 
S=3157


That's an Exim log line, recording a bounce having been generated
and "received" by that Exim for input processing.  Follow the R=
message ID to see what message was being bounced.

There no special reason for Postfix to have gotten involved with that.
--
Cheers,
  Jeremy


--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] exim 4.96 stopping because postfix is starting?

[Johnnie W Adams via Exim-users]

This being one of the messages:

2022-12-19 09:08:49 1p7Hl3-00015O-1S <= <> R=1p7Hiz-00010h-3B U=exim
P=local S=3157

The P=local is, I suppose, because this is a notify message about a bounce.
It shouldn't be routing directly to the internet; it should be routing to
our inbound server.

On Mon, Dec 19, 2022 at 1:55 PM Johnnie W Adams  wrote:

> I shouldn't be, and I believe in fact I am not (except briefly in error).
> What still puzzles me, though, is what my MUA is and why it's routing to
> the wrong destination. I'd drawn the tentative conclusion the problem was
> postfix, but I see now that was a red herring.
>
> On Mon, Dec 19, 2022 at 1:23 PM Jeremy Harris via Exim-users <
> exim-users@exim.org> wrote:
>
>> On 19/12/2022 18:56, Johnnie W Adams via Exim-users wrote:
>> > That's the thing. We have an inbound and an outbound server, each
>> running
>> > Exim as an MTA. DKIM signing happens at the inbound server, so all mail
>> is
>> > to pass through it. Local mail generated on the outbound server (the
>> client
>> > in this transaction) is supposed to route to the inbound server, not
>> out to
>> > the world at large, which is what's happening.
>>
>> So why are you running Postfix?
>> --
>> Cheers,
>>Jeremy
>>
>>
>> --
>> ## List details at https://lists.exim.org/mailman/listinfo/exim-users
>> ## Exim details at http://www.exim.org/
>> ## Please use the Wiki with this list - http://wiki.exim.org/
>>
>
>
> --
> John Adams
> Senior Linux/Middleware Administrator  | Information Technology Services
> +1-501-916-3010 | jxad...@ualr.edu | http://ualr.edu/itservices
> *UA Little Rock*
>
> Reminder:  IT Services will never ask for your password over the phone or
> in an email. Always be suspicious of requests for personal information that
> come via email, even from known contacts.  For more information or to
> report suspicious email, visit IT Security
> .
>


-- 
John Adams
Senior Linux/Middleware Administrator  | Information Technology Services
+1-501-916-3010 | jxad...@ualr.edu | http://ualr.edu/itservices
*UA Little Rock*

Reminder:  IT Services will never ask for your password over the phone or
in an email. Always be suspicious of requests for personal information that
come via email, even from known contacts.  For more information or to
report suspicious email, visit IT Security
.
-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] exim 4.96 stopping because postfix is starting?

[Johnnie W Adams via Exim-users]

I shouldn't be, and I believe in fact I am not (except briefly in error).
What still puzzles me, though, is what my MUA is and why it's routing to
the wrong destination. I'd drawn the tentative conclusion the problem was
postfix, but I see now that was a red herring.

On Mon, Dec 19, 2022 at 1:23 PM Jeremy Harris via Exim-users <
exim-users@exim.org> wrote:

> On 19/12/2022 18:56, Johnnie W Adams via Exim-users wrote:
> > That's the thing. We have an inbound and an outbound server, each running
> > Exim as an MTA. DKIM signing happens at the inbound server, so all mail
> is
> > to pass through it. Local mail generated on the outbound server (the
> client
> > in this transaction) is supposed to route to the inbound server, not out
> to
> > the world at large, which is what's happening.
>
> So why are you running Postfix?
> --
> Cheers,
>Jeremy
>
>
> --
> ## List details at https://lists.exim.org/mailman/listinfo/exim-users
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/
>


-- 
John Adams
Senior Linux/Middleware Administrator  | Information Technology Services
+1-501-916-3010 | jxad...@ualr.edu | http://ualr.edu/itservices
*UA Little Rock*

Reminder:  IT Services will never ask for your password over the phone or
in an email. Always be suspicious of requests for personal information that
come via email, even from known contacts.  For more information or to
report suspicious email, visit IT Security
.
-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] exim 4.96 stopping because postfix is starting?

[Jeremy Harris via Exim-users]

On 19/12/2022 18:56, Johnnie W Adams via Exim-users wrote:

That's the thing. We have an inbound and an outbound server, each running
Exim as an MTA. DKIM signing happens at the inbound server, so all mail is
to pass through it. Local mail generated on the outbound server (the client
in this transaction) is supposed to route to the inbound server, not out to
the world at large, which is what's happening.


So why are you running Postfix?
--
Cheers,
  Jeremy


--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] exim 4.96 stopping because postfix is starting?

[Johnnie W Adams via Exim-users]

That's the thing. We have an inbound and an outbound server, each running
Exim as an MTA. DKIM signing happens at the inbound server, so all mail is
to pass through it. Local mail generated on the outbound server (the client
in this transaction) is supposed to route to the inbound server, not out to
the world at large, which is what's happening.

On Mon, Dec 19, 2022 at 12:31 PM Odhiambo Washington 
wrote:

>
>
> On Mon, Dec 19, 2022 at 9:30 PM Johnnie W Adams via Exim-users <
> exim-users@exim.org> wrote:
>
>> My guess is that you're right and postfix shouldn't both be running on
>> here, but that leaves me puzzled as to what was acting as the MUA. I'm on
>> RHEL 7.
>>
>
> MuA or MTA
>
>
> --
> Best regards,
> Odhiambo WASHINGTON,
> Nairobi,KE
> +254 7 3200 0004/+254 7 2274 3223
> "Oh, the cruft.", egrep -v '^$|^.*#' ¯\_(ツ)_/¯ :-)
>


-- 
John Adams
Senior Linux/Middleware Administrator  | Information Technology Services
+1-501-916-3010 | jxad...@ualr.edu | http://ualr.edu/itservices
*UA Little Rock*

Reminder:  IT Services will never ask for your password over the phone or
in an email. Always be suspicious of requests for personal information that
come via email, even from known contacts.  For more information or to
report suspicious email, visit IT Security
.
-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] exim 4.96 stopping because postfix is starting?

[Odhiambo Washington via Exim-users]

On Mon, Dec 19, 2022 at 9:30 PM Johnnie W Adams via Exim-users <
exim-users@exim.org> wrote:

> My guess is that you're right and postfix shouldn't both be running on
> here, but that leaves me puzzled as to what was acting as the MUA. I'm on
> RHEL 7.
>

MuA or MTA


-- 
Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254 7 3200 0004/+254 7 2274 3223
"Oh, the cruft.", egrep -v '^$|^.*#' ¯\_(ツ)_/¯ :-)
-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] exim 4.96 stopping because postfix is starting?

[Andrew C Aitchison via Exim-users]

On Mon, 19 Dec 2022, Johnnie W Adams via Exim-users wrote:


Hi, folks,

Twice recently, my outbound SMTP server has stopped working for no
apparent reason. There's nothing in the logs but this:

Dec 19 10:02:22 mailserver2 systemd: Starting Postfix Mail Transport
Agent...

Dec 19 10:02:22 mailserver2 systemd: Stopping Exim Mail Transport Agent...

Dec 19 10:02:22 mailserver2 systemd: Stopped Exim Mail Transport Agent.

Dec 19 10:02:22 mailserver2 systemd: Started Postfix Mail Transport Agent.

This is new behavior. Postfix had (I thought) been happily passing
mail off to Exim until just recently. What's up?


Exim knows nothing about systemd.

What OS is this ?
My guess is that systemd "knows" that you can't have two mail servers 
running at the same time.


--
Andrew C. Aitchison  Kendal, UK
   and...@aitchison.me.uk

--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] exim 4.96 stopping because postfix is starting?

[Johnnie W Adams via Exim-users]

My guess is that you're right and postfix shouldn't both be running on
here, but that leaves me puzzled as to what was acting as the MUA. I'm on
RHEL 7.

On Mon, Dec 19, 2022 at 11:50 AM Andrew C Aitchison 
wrote:

> On Mon, 19 Dec 2022, Johnnie W Adams via Exim-users wrote:
>
> > Hi, folks,
> >
> > Twice recently, my outbound SMTP server has stopped working for no
> > apparent reason. There's nothing in the logs but this:
> >
> > Dec 19 10:02:22 mailserver2 systemd: Starting Postfix Mail Transport
> > Agent...
> >
> > Dec 19 10:02:22 mailserver2 systemd: Stopping Exim Mail Transport
> Agent...
> >
> > Dec 19 10:02:22 mailserver2 systemd: Stopped Exim Mail Transport Agent.
> >
> > Dec 19 10:02:22 mailserver2 systemd: Started Postfix Mail Transport
> Agent.
> >
> > This is new behavior. Postfix had (I thought) been happily passing
> > mail off to Exim until just recently. What's up?
>
> Exim knows nothing about systemd.
>
> What OS is this ?
> My guess is that systemd "knows" that you can't have two mail servers
> running at the same time.
>
> --
> Andrew C. Aitchison  Kendal, UK
> and...@aitchison.me.uk
>


-- 
John Adams
Senior Linux/Middleware Administrator  | Information Technology Services
+1-501-916-3010 | jxad...@ualr.edu | http://ualr.edu/itservices
*UA Little Rock*

Reminder:  IT Services will never ask for your password over the phone or
in an email. Always be suspicious of requests for personal information that
come via email, even from known contacts.  For more information or to
report suspicious email, visit IT Security
.
-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Re: [exim] exim 4.96 stopping because postfix is starting?

[Jeremy Harris via Exim-users]

On 19/12/2022 17:22, Johnnie W Adams via Exim-users wrote:

Dec 19 10:02:22 mailserver2 systemd: Stopping Exim Mail Transport Agent...


It's not Exim taking action, deciding to stop; it's systemd.
Perhaps systemd has decided that the two are exclusive?

I'm unsure why you'd ever want both, anyway.
Both are perfectly good MSAs, MTAs and MDAs - without
the need of some other component.
--
Cheers,
  Jeremy


--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

[exim] exim 4.96 stopping because postfix is starting?

[Johnnie W Adams via Exim-users]

Hi, folks,

 Twice recently, my outbound SMTP server has stopped working for no
apparent reason. There's nothing in the logs but this:

Dec 19 10:02:22 mailserver2 systemd: Starting Postfix Mail Transport
Agent...

Dec 19 10:02:22 mailserver2 systemd: Stopping Exim Mail Transport Agent...

Dec 19 10:02:22 mailserver2 systemd: Stopped Exim Mail Transport Agent.

Dec 19 10:02:22 mailserver2 systemd: Started Postfix Mail Transport Agent.

 This is new behavior. Postfix had (I thought) been happily passing
mail off to Exim until just recently. What's up?

Thanks,

 John A
-- 
John Adams
Senior Linux/Middleware Administrator  | Information Technology Services
+1-501-916-3010 | jxad...@ualr.edu | http://ualr.edu/itservices
*UA Little Rock*

Reminder:  IT Services will never ask for your password over the phone or
in an email. Always be suspicious of requests for personal information that
come via email, even from known contacts.  For more information or to
report suspicious email, visit IT Security
.
-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/