http://blog.gmane.org/gmane.mail.exim.user hourly 1 1901-01-01T00:00+00:00 http://gmane.org/img/gmane-25t.png http://gmane.org http://comments.gmane.org/gmane.mail.exim.user/80429 Hi there, What are my options to auth against /etc/shadow using PAM without giving exim too much priviledges? I currently have two options: chgrp exim /etc/shadow or write an external authenticator (which is suid root) that returns a true/false which I can evaluate in exim. Any other ideas? - Jaco van der Schyff jaco-spam< at >netgroup.co.za Jaco van der Schyff 2008-08-28T08:48:24 http://comments.gmane.org/gmane.mail.exim.user/80428 Hi, list We are using exim with our own blacklist. Config is: acl_check_connect: ... defer message = rejected because $sender_host_address\ is in black list at $dnslist_domain\n\ $dnslist_text dnslists = my.black.list ... time-to-time under heavy load we looking strange behavior: connection from IP-address A closing with message like as rejected because address B in in blacklist. Address B really in black list. It's correct. But A and B addresses absolutely different and A not blacklisted. Any ideas? We are using exim-4.69 under FreeBSD 7.0 amd64 WBR. Dmitriy Dmitriy Kirhlarov 2008-08-28T19:11:45 http://comments.gmane.org/gmane.mail.exim.user/80422 Hello < at > all! I'm using exim 4.63, spamassassin 3.23 and do not use sa-exim. I'm defining a router which shall catch all the mails, which have been scanned by another router following this one. It works fine without the "{> {${sg{{$h_X-Spam-Score:}..." - comparison. All mails are being scanned and then this router catches the mail where X-Spam-Flag=Yes and user-setting sa_on=1. But when I add the "{> {${ sg{{$h_X-Spam-Score:}..." - comparison, all Mails are being catched by this router, and delivered by the local_spam - transport, without being scanned or anything else. So this always returns 'true'. That's the Router: spampositive_local: users.domain_id=domains.domain_id}}}{1} }} {yes}{no} } condition = ${if and \ { \ {match {$h_X-Spam-Flag:}{YES}} \ {eq {${lookup mysql{select users.on_spamassassin \ from users,domains \ where localpart = '${quote_mysql:$local_part}' \ and domain = '${quote_mysql:$domain}'\ and users.on_spamassassin = '1' \ and users.type = 'local' \ and users.domain_id=domains.domain_id}}}{1} \ } \ {> {${sg{{$h_X-Spam-Score:}{\.}{}}} \ {${lookup mysql{select users.sa_tag * 10 \ from users,domains \ where localpart = '${quote_mysql:$local_part}' \ and domain = '${quote_mysql:$domain}' \ and users.domain_id=domains.domain_id } \ {$value}fail}}} \ } \ } \ {yes}{no}} driver = accept transport = local_spam What is the problem with this? Thanks for any advice! Alexander Stintzing 2008-08-27T21:42:02 http://comments.gmane.org/gmane.mail.exim.user/80421 Hello all, I'm having this pretty weird problem with exim where I can't find a solution for. Similar things popped up a couple of times on the mailing list, but nothing matched the exact symptoms I'm experiencing. I'm doing some general overhaul to a larger mail system, with several smtp in servers, and 5 cyrus pop3/imap backend servers. Up to now, the delivery of mail to the backends was handled by a local "deliver" process, which used a replicated cyrus murder database to determine the backend to deliver to, and sent it via lmtpproxyd to the responsible backends. Due to various reasons, we need to change that and have exim delivering directly to the backends using lmtp, as we want to gradually replace the smtp in servers with new hardware and newer distributions, and the cyrus on the new in server just isn't compatible with the old backend servers. When I switch the exim to delivering directly via lmtp, everything seems to work fine, except some messages get direct bounces without even having tried to deliver it to the backend. Here is a relevant excerpt from the logfile, with some data anonymized: 2008-08-27 01:00:02 1KY7W6-00049z-6S <= root< at >webserver10.xxxxxx H=(webserver10.xxxxxx) [xxx.xxx.174.206] P=esmtp S=1249 id=20080826230001.D220E469D70< at >webserver10.xxxxxx 2008-08-27 01:00:02 1KY7W6-00049z-6S ** xx123456< at >lilzmailbe04.liwest.at <user< at >yyyy.at> R=loadbalancer_final T=remote_lmtp_delivery: retry time not reache d for any host after a long failure period 2008-08-27 01:00:02 1KY7W6-00049z-6S ** xx456789< at >lilzmailbe02.liwest.at <user< at >yyyy.at> R=loadbalancer_final T=remote_lmtp_delivery: retry time not reached for any host after a long failure period 2008-08-27 01:00:02 1KY7W6-0004A5-F7 <= <> R=1KY7W6-00049z-6S U=exim P=local S=2363 2008-08-27 01:00:02 1KY7W6-00049z-6S Completed 2008-08-27 01:00:02 1KY7W6-0004A5-F7 => root< at >webserver10.xxxxx R=outgoing_route T=remote_smtp H=smtp.liwest.at [212.33.55.20] X=TLSv1:AES256-SHA:256 2008-08-27 01:00:02 1KY7W6-0004A5-F7 Completed The relevant routers and delivery from the config file: address_data is filled from an ldap query in a router earlier, and is correct loadbalancer: driver = redirect redirect_router = loadbalancer_final local_part_suffix = +* local_part_suffix_optional condition = ${lookup{${extract {mailHost} {$address_data}}}lsearch{/etc/exim/backends}} data = ${extract {uid} {$address_data}}< at >${extract {mailHost} {$address_data}} loadbalancer_final: driver = accept condition = ${if def:address_data{yes}{no} } transport = remote_lmtp_delivery begin transports remote_lmtp_delivery: driver = smtp protocol = lmtp port = 2003 hosts = $domain gethostbyname = true If cut out irrelevant parts from the config which are not used for this example, but there is another router between the two, and more transports, of course. In the backends file there is a line like "lilzmailbe01.liwest.at : OK" for each backend, so the condition matches. I wanted to use ${filter on a list, but some of the exim installations are so old that it isn't implemented there yet, so I had to fall back to the file variant. The real strange thing is, that delivery to both of the mentioned hosts in there worked fine before and after, just that message (and a couple more) got bounced. One thing I noticed, though, is the fact that it only happened to mails which had more than one RCPT TO: (newsletters which got delivered to the mailsystem, mainly) The exim version on that particular host where that happened ist 4.66 I'm really at a loss what happens here, and I can't figure out where the problem is. I hope someone has an idea, any input is greatly appreciated. Thanks to all in advance, Jens Jens Hoffrichter 2008-08-27T16:43:14 http://comments.gmane.org/gmane.mail.exim.user/80415 I have exim running as exim -bdf -d on my server I can connect to this machine telnet server-ip 25 and send mail using SMTP commands . I would like to send mails using exim -t. But it is not connecting to the server ? wat could be the problem ? 91change 2008-08-27T09:54:08 http://comments.gmane.org/gmane.mail.exim.user/80407 Hi all, A few months back, with alot of help from this list, I implimented GREYLISTING (which is working well), with one exception: Some ISPs (mail hosting farms, Spam scanning services etc, sometimes resend from a different MX each retry period, which, obviously, causes some serious email delays - todays for example, was delayed about 8 hours. Question: Is there an expression we can add that will only look at the FQDN or change the FQDN (as opposed to the full MX name? i.e. mx129.emailservice.com to emailservice.com (or *emailservice.com) Thanks in advance, -Grant Here is the GREYLISTING setup (from 'configure'): ... GREYLIST_TEST = SELECT IF(NOW() > block_expires, 2, 1) \ FROM exim_greylist \ WHERE relay_ip = '${quote_mysql:$sender_host_address}' \ AND from_domain = '${quote_mysql:$sender_address_domain}' \ AND record_expires > NOW() GREYLIST_ADD = INSERT INTO exim_greylist \ SET relay_ip = '${quote_mysql:$sender_host_address}', \ from_domain = '${quote_mysql:$sender_address_domain}', \ block_expires = DATE_ADD(NOW(), INTERVAL 1 MINUTE), \ record_expires = DATE_ADD(NOW(), INTERVAL 14 DAY), \ origin_type = 'AUTO', \ create_time = NOW() GREYLIST_UPDATE = UPDATE exim_greylist \ SET record_expires = DATE_ADD(now(), INTERVAL 14 DAY) \ WHERE relay_ip = '${quote_mysql:$sender_host_address}' \ AND from_domain = '${quote_mysql:$sender_address_domain}' \ AND record_expires > NOW() ... warn set acl_m2 = ${lookup mysql{GREYLIST_TEST}{$value}{0}} defer ! hosts = +whitelist ! hosts = +relay_from_hosts ! authenticated = * condition = ${if eq{$acl_m2}{0}{yes}} condition = ${lookup mysql{GREYLIST_ADD}{yes}{no}} message = Now greylisted - please try again in 1 minute. log_message = ADDING TO GREYLIST defer ! hosts = +whitelist ! hosts = +relay_from_hosts ! authenticated = * condition = ${if eq{$acl_m2}{1}{yes}} message = Still greylisted - please try again in 1 minute. log_message = STILL GREYLISTED defer ! hosts = +whitelist ! hosts = +relay_from_hosts ! authenticated = * condition = ${lookup mysql{GREYLIST_UPDATE}{no}{no}} message = Greylist update failed log_message = GREYLIST UPDATE FAILED ... Grant Peel 2008-08-26T21:17:14 http://comments.gmane.org/gmane.mail.exim.user/80396 Hi guys, I've been Exim 4.69 (and previous releases of 4.x) for about a year now but have recently (since last week Saturday) encountered some very strange behaviour from Exim. After having a fairly massive queue dumped on my two servers (around 12,000 messages each totalling around 45GB) they seem to be completely unable to recover from these large queues. Even though my retry statement is "F,2h,15m; G,16h,1h,1.5; F,4d,6h" I have mails in the queue that are older than 7 days. The oldest mails in the queue do not seem to be getting hit by the queue runners and therefore the queue size is not decreasing nor are old mails being expired from the queue. If I manually instruct Exim to flush these messages (exim -v -M <msgID>) the messages flush, but a manual queue run just never seems to get there. In contrast, new mails are pumping through the server without error and the two are collectively pushing out 170GB of mail per 24 hour period (limited by bandwidth entirely), so it seems Exim is not entirely broken. I'm stumped. I can't find anything in the log file that points to a problem but it's clear something is wrong. I've attached my config file in case anyone needs more information. I would appreciate any help or feedback you guys could give me. Thanks in advance, Marc Marc Silver 2008-08-26T16:57:05 http://comments.gmane.org/gmane.mail.exim.user/80394 I am trying to force my users to use TLS when sending out any emails. They must authenticate against my MySQL tables also. I think I have the authentication stuff down, but I am having issues with the TLS part of it. I created a .crt and .key file with the following command: openssl req -x509 -newkey rsa:1024 -keyout mycert.key -out mycert.crt -days 365 -nodes I then put the .key/.crt file in my /etc/exim4 directory and made sure that they where both owned by root, but readable by the user used to run the exim4 process. in my .conf file for exim here is what I have for the tls options: tls_advertise_hosts = * tls_certificate = /etc/exim4/mycert.crt tls_privatekey = /etc/exim4/mycert.key tls_verifycertificates = /etc/exim4/mycert.crt tls_verify_hosts = * tls_try_verify_hosts = * In my acl_check_rcpt I have the following: require message = relay not permitted domains = +local_domains : +relay_to_domains I am not sure what else I should give in order to make this be complete. When I telnet into the port and then issue a ehlo example.com command I get the following: 250-SIZE 52428800 250-PIPELINING 250-STARTTLS 250 HELP When I try to send an email from Thunderbird using one of the domains I am hosting I get the following error: Sending of message failed. The message could not be sent because connection to SMTP server mail.example.com failed. The server may be unavailable or is refusing SMTP connections. Please verify that your SMTP server setting is correct and try again, or else contact your network administrator. Lastly, the error that is recorded in the logs is as follows: TLS error on connection from ([xxx.xxx.x.xxx]) [xxx.xxx.x.xxx] (gnutls_handshake): A TLS warning alert has been received. Sorry for the long email, but I wanted to try and get as much information as I currently have to the list. Any help is appreciated and if there is anything else that I can provide, please just ask. Thanks, -Eric Eric A. Bonney 2008-08-26T15:23:50 http://comments.gmane.org/gmane.mail.exim.user/80393 Hello exim users, Well... everything is working right now... It was something stupid… :-P I'll try to post as soon as I can a tutorial that will help others to configure it and overcome all the error messages. Sorry for the earlier post - pls forget about it. Thanks and keep up the good work. Elad Shapira 2008-08-26T15:00:35 http://comments.gmane.org/gmane.mail.exim.user/80391 Hello, I've installed Nagios (3.0.3) on a Debian machine and I have some problems with the email notifications (using exim). Right now I have no success with sending those email notifications. Let's assume my smtp server can be found in x1.x2.x3.x4. I can ping that machine and I can send mails using telnet later received in my inbox. In export environment variables the smtp server is declared. I tried to send mail with mailx command from the shell – below you can find the log of my commands. ossim:~# mailx -v myuseraccount< at >company.com Subject: this is a test . Cc: . Null message body; hope that's ok LOG: MAIN <= root< at >dev.private U=root P=local S=346 ossim:~# delivering 1K7WRQ-0002UQ-BT R: system_aliases for myuseraccount< at >company.com LOG: MAIN ** myuseraccount< at > company.com: Unrouteable address R: system_aliases for .< at >dev.private LOG: MAIN ** .< at >dev.private: Unrouteable address LOG: MAIN <= <> R=1K7WRQ-0002UQ-BT U=Debian-exim P=local S=1214 delivering 1K7WRQ-0002US-HE R: system_aliases for root< at >dev.private R: system_aliases for myuseraccount< at >company.com LOG: MAIN ** myuseraccount < at > company.com <root< at >dev.private>: Unrouteable address LOG: MAIN Frozen (delivery error message) LOG: MAIN Completed pkidev-ossim:~# dev.private it's my SMTP server. company.com and dev.private are 2 different domains. ossim:~# hostname --fqdn ossim.dev.private ossim:~# If you have any ideas what I have to do to proceed and overcome the "unroutable address" problem pls let me know. Thanks for your time and efforts. Elad Shapira 2008-08-26T12:50:10 http://comments.gmane.org/gmane.mail.exim.user/80387 Eugeny N Dzhurinsky 2008-08-26T09:39:53 http://comments.gmane.org/gmane.mail.exim.user/80384 Sorry about this post. Please remove from list. Thanks. Craig Jackson 2008-08-25T21:05:36 http://comments.gmane.org/gmane.mail.exim.user/80378 i try to get 2 Virusscanners running at the same time therefore i tried the following #Main Settings av_scanner = $acl_m0 acl_smtp_data = acl_check_data #ACL Conf acl_check_data: deny message = This message contains malware $malware_name (clamd) set acl_m0 = clamd:/tmp/clamd.socket malware = * deny message = This message contains malware $malware_name (Kaspersky) set acl_m0 = aveserver:/var/run/kav4lms/kavmd.sock malware = */defer_ok accept It works fine for clamav, but alway hangs when i try to test against kaspersky ( v5 ) with eicar. Does anybody have two scanners running on his smtp Server ? regards Ralf ralf< at >gcomm.ch 2008-08-25T14:34:45 http://comments.gmane.org/gmane.mail.exim.user/80377 In a redirect router R that sometimes fans out address A to addresses A, B, and C, I'm using address_data to keep track of various things. I'd like to end up with different things for the incoming address A versus the fanout addresses B and C (for the purposes of making it concrete, imagine a thing like "rValue=incoming" or "rValue=fanout", depending). So far, the only technique I have figured out is to have other routers before and after R to do different kinds of fix-ups. That's a bit cluttery. Is there a more direct way to do it? WJCarpenter 2008-08-23T17:41:24 http://comments.gmane.org/gmane.mail.exim.user/80376 Suppose a key occurs more than once in string. Can I count on the extract operator pulling out the first (leftmost) value? That's what I've been getting in my experiments, but the spec doesn't say it explicitly. I just want to know if it's an accident of implementation or if it could conceivably change in the future. WJCarpenter 2008-08-23T17:36:46 http://comments.gmane.org/gmane.mail.exim.user/80375 The various list operators introduced a few releases ago (map, reduce, forany, forall, etc) are very handy. Is there any syntax that quotes or escapes the separator character in the list? For example, ${map{a:b:c:d:e}{[$item]}} I'd like to construct a list where one of the items in the list is the 3-character string "b:c". Is there a way to do it? I've tried various things like ${quote:b:c}, etc, with no joy. Obviously, if I were dealing with these literals, it would be easy to figure out. I'm talking in general terms here, though. I want to make a list that contains some arbitrary strings, so I can't predict a good separator in advance. WJCarpenter 2008-08-23T17:33:54 http://comments.gmane.org/gmane.mail.exim.user/80372 Hi I would like to look into adding mail routing handling to LDAP for my Exim MTA. Does anyone know of any links or, even better, is prepared to share their schema. Ive looked at Postfix and Qmails docs, but I would like too a Exim real world / working example. If anyone can help, thank you in advance. Kind Regards Brent Clark Brent Clark 2008-08-23T08:22:44 http://comments.gmane.org/gmane.mail.exim.user/80359 Hi all , How can I prevent Sender Forgery for my server. Alot of people in my company are getting e-mails from themselves. Any Ideas will be greatly appreciated. Best Regards, Jeremy JDavila< at >languageworks.com 2008-08-22T17:18:58 http://comments.gmane.org/gmane.mail.exim.user/80354 Hi Guys We are trying to get file restrictions working for outbound mail on a per user basis. Below is a copy of the from our acl_check_data we. Perhaps someone could help? There error we get in the log file is: -------------------------------------------------- temporarily rejected after DATA: invalid "condition" value ""100M"" This an extract from the Exim config file: ---------------------------------------------------------- acl_check_data: deny message = Message is larger than the recipient is allowed to receive. If this is work related, please contact the recipient telephonically condition = "${lookup{$recipients}lsearch{/etc/mail/limits}{$value}{100M}}" senders = *< at >domain.com <*< at >frame.co.za> Contents of the limits file: ------------------------------------- <*< at >frame.co.za> victor.hermelin : 15M vijayj : 10M vijay.jagannath : 10M walters : 20M walter.simeoni : 20M Any help would be greatly appreciated :) Thanks c Craig 2008-08-22T12:43:19 http://comments.gmane.org/gmane.mail.exim.user/80351 Hi, For tracking email, I'd like to log the message-id generated by Exim for mail submitted by a local process. How could I achieve this? Ferenc Wagner 2008-08-22T10:59:54 http://comments.gmane.org/gmane.mail.exim.user/80348 Hello to all.. I'm having an issue with people DOSing my server.. here is the thing.. I can't get an answer to see if I can block ip's like as the way Denyhosts works with ssh.. I mean.. I have rbls and spammassasin setup with my exim.. and that all works.. but I want to know.. is there a way to block people trying to relay through me.. or just allow authenticated users (valid email addresses on my server) to relay..? I mean.. this is becoming a pain.. they are sending spam.. and it is slowing down my smtp which makes my clients mad when they try to send a 200k file and it takes 3 minutes because my server is being nailed to the wall by these DOS's.. thanks in advance.. John Carlson 2008-08-21T18:23:46 Search the mailing list at Gmane query http://search.gmane.org/?group=$group=gmane.mail.exim.user