gmane.linux.debian.devel.exim4.devel

Re: exim with 6to4 tunnel

Robert Tasarz — 2011-03-10T19:10:09

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 03/10/2011 04:58 PM, Holger Jeromin wrote:

You can easily provide name servers for your 6to4 reverse zone using:

https://6to4.nro.net/

For more details debian-ipv6< at >lists.debian.org might be a better place.

regards,
  Robert Tasarz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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Re: exim with 6to4 tunnel

Robert Tasarz — 2011-03-10T19:30:04

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Me again,

On 03/10/2011 04:58 PM, Holger Jeromin wrote:
[...]

In previous mail I forgot to add that you may alter those priorities
globally in /etc/gai.conf

regards,
  Robert Tasarz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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exim with 6to4 tunnel

Holger Jeromin — 2011-03-10T15:58:46

Hi,

i have an static ipv4 and configured a 6to4 tunnel.

exim4 uses this connection to deliver an mail to an freenet user.
But my 6to4 adress has no reverse DNS record, so their spamfilter
rejects this connection:

SMTP error from remote mail server after RCPT TO:<xxx< at >freenet.de>:
    host mx.freenet.de [2001:748:100:40::8:110]: 550 inconsistent or no
DNS PTR record for 2002:my:6to4::1 (see RFC 1912 2.1)

Non-authoritative answer:
freenet.de      mail exchanger = 1 mx.freenet.de.

Authoritative answers can be found from:
mx.freenet.de   internet address = 195.4.92.9
mx.freenet.de   internet address = 195.4.92.211
mx.freenet.de   internet address = 195.4.92.212
mx.freenet.de   has AAAA address 2001:748:100:40::8:110
mx.freenet.de   has AAAA address 2001:748:100:40::8:111
mx.freenet.de   has AAAA address 2001:748:100:40::8:112
dns.roka.net    internet address = 194.97.3.1
ns2.roka.net    internet address = 194.97.109.1
ns2.roka.net    has AAAA address 2001:748:100:70::2
ns2.free-net.net        internet addre

Re: syncing with ubuntu - enable hardening

Andreas Metzler — 2011-02-13T17:28:32

[...]
[...]

Seems to work on quick test (info functions works) on i386.

cu andreas

Re: syncing with ubuntu - enable hardening

Florian Weimer — 2011-02-11T21:55:58

* Andreas Metzler:


Please make sure that the -dbg packages still provide useful
information to the GDB version in unstable.  This used to be a
problem.  Allegedly, it's been solved, but I'm not yet certain.

--
Pkg-exim4-devel mailing list
Pkg-exim4-devel< at >lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/pkg-exim4-devel

syncing with ubuntu - enable hardening

Andreas Metzler — 2011-02-11T18:38:22

Hello,

apart from a bugfix (#528625) the Ubuntu package only has one
interesting difference: Add and enable hardened build for PIE:
-------------------------
debian/control:
Build-Depends:  hardening-wrapper

debian/rules
export DEB_BUILD_HARDENING=1
-------------------------

Any thoughts on merging this? I tend to do so, since I do not know of 
strong reasons against.
cu andreas

Re: Uploading fixes

Stefan Fritsch — 2011-01-30T10:54:29

Thanks again for your help. The DSA took some time due to problems 
with the mipsel buildd and me being busy.

Cheers,
Stefan

--
Pkg-exim4-devel mailing list
Pkg-exim4-devel< at >lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/pkg-exim4-devel

Re: Uploading fixes

Andreas Metzler — 2011-01-24T19:03:56

[...]
[...]

[x] Done. :-)

cu and- I only need another upload to bpo.  -reas

--
Pkg-exim4-devel mailing list
Pkg-exim4-devel< at >lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/pkg-exim4-devel

Re: Uploading fixes

Stefan Fritsch — 2011-01-23T21:27:50

OK, let's make a single DSA out of this and CVE-2010-4345. This way 
people won't have to update twice. Please upload to security-master 
and include the logging fix. Thanks.

Cheers,
Stefan


--
Pkg-exim4-devel mailing list
Pkg-exim4-devel< at >lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/pkg-exim4-devel

Re: Uploading fixes

Andreas Metzler — 2011-01-23T17:27:46

[moving back to the list]

On 2011-01-21 Andreas Metzler <ametzler< at >downhill.at.eu.org> wrote:
[...]

4.72-4 uploaded and unblocked for squeeze. Do you want me to prepare a
-lenny3 (probably with an added
http://git.exim.org/exim.git/commitdiff/b7487bcec431809cb7fc3c2b42fcd607e43d37e7
?
cu andreas

Re: Uploading fixes

Stefan Fritsch — 2011-01-09T18:43:08

Thanks. The alpha build hasn't arrived, yet, and I probably won't have 
time in the next few days. Expect a DSA next week-end.

Cheers,
Stefan

--
Pkg-exim4-devel mailing list
Pkg-exim4-devel< at >lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/pkg-exim4-devel

Re: Uploading fixes

Andreas Metzler — 2011-01-06T12:59:12

[...]

Hello,

I have just uploaded 4.69-9+lenny2 to security-master-unembargoed.


4.72-3 has propagatetd to testing today in the morning or yesterday. I
have also updated the lenny bvckport. (4.72-3~bpo50+1).

cu andreas

Re: [exim-dev] Exim 4.73 RC1 uploaded

Andreas Metzler — 2010-12-27T18:59:02

[...]



Thanks for the heads up, done.

cu andreas

--
Pkg-exim4-devel mailing list
Pkg-exim4-devel< at >lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/pkg-exim4-devel

Re: Uploading fixes

Andreas Metzler — 2010-12-27T18:37:01

[...]



Hello,
I would like to wait a little bit on both counts. If you or somebody
else uploads 4.69-9+lenny2 before either Marc or me does I would
appreciate a short mail, since afaik I do not have the means to check.

thanks, cu andreas

Re: Uploading fixes

Stefan Fritsch — 2010-12-27T18:26:05

Hi Andreas,

On Sunday 26 December 2010, Andreas Metzler wrote:

if you have time, please upload 4.69-9+lenny2 to security-master (with 
dist=stable-security). If you want to wait some more for potential bug 
reports in unstable, that's fine with me, too. 

If you haven't done so already, you should probably file an unblock 
request for 4.72-3.

Cheers,
Stefan

--
Pkg-exim4-devel mailing list
Pkg-exim4-devel< at >lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/pkg-exim4-devel

Re: [exim-dev] Exim 4.73 RC1 uploaded

Marc Haber — 2010-12-26T16:07:17

by all means, go ahead with that, this will at least get the new code
some compile testing.

Greetings
Marc

Re: Uploading fixes

Andreas Metzler — 2010-12-26T14:33:30

[...]

Hello,

I have now uploaded 4.72-3 to unstable.

* There was no (negative or positive) feedback on the call for
  testers.

* Worked for me.

* Upstream has released rc1 with this code.

* Having this tested in unstable is preferable to a straight security
  upload.

* While my holiday will end today I still might have more free time
  now than start of next year. 

cu andreas

Re: Uploading fixes

Andreas Metzler — 2010-12-24T10:20:02

I have copied the changes to trunk and deleted the branch.

cu andreas

Re: [exim-dev] Exim 4.73 RC1 uploaded

Andreas Metzler — 2010-12-23T18:02:28

[...]

I might have some time to make a upload to experimental, unless there
are strong feelings against.

cu andreas

--
Pkg-exim4-devel mailing list
Pkg-exim4-devel< at >lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/pkg-exim4-devel

Re: Uploading fixes

Andreas Metzler — 2010-12-20T16:11:40

[...] 




Fourth way: I do not think either of these utilities are going to
(need to) re-exec exim to regain root privileges.

Anyway there is no pain in choosing #1, to be safe. I have copied over 
67_unnecessaryCopt.dpatch from trunk.

[...]

Applied.

Marc, what do you think about uploading 4.72+fixes and merging it to
trunk?

cu andreas

Re: Uploading fixes

Stefan Fritsch — 2010-12-20T11:30:20

The utilities exinext, exicyclog, ... always set -C explicitly. There 
are three ways to solve that:
- the utilities are patched to not always set -C
- exim implicitly trusts those paths, even if they are set with -C 
(AFAIR this is not yet the case, but I could be wrong)
- they are explicitly listed in the trusted configs file

Of course, I don't know how many people use those utilities as Debian-
exim user instead of as root. But since fixing the problem is 
straightforward, I don't see any reason not to fix it.


OK, fine with me.


Perfect. Thank you.

Cheers,
Stefan

--
Pkg-exim4-devel mailing list
Pkg-exim4-devel< at >lists.alioth.debian.org
http://lists.alioth.debian.org/mailman/listinfo/pkg-exim4-devel