[exim] Re: anyone using SRS with cutthrough_delivery?

2024-03-13 Thread Kirill Miazine via Exim-users 
*ping*

anyone?

• Kirill Miazine via Exim-users [2024-02-16 21:15]:
> I'm very interested if anyone is using Exim SRS facility 
> (https://www.exim.org/exim-html-current/doc/html/spec_html/ch-dkim_spf_srs_and_dmarc.html#SECTSRS)
> together with control = cutthrough_delivery 
> (https://www.exim.org/exim-html-current/doc/html/spec_html/ch-access_control_lists.html#vi494)
> 
> A specific questions to those who might be using SRS with
> cutthrough_delivery: does the remote server see original envelope sender, or
> SRS encoded envelope sender?
> 
> The reason for asking is that my own tests _so far_ indicate that
> return_path option of the smtp transport seem to be ignored with
> cutthrough_delivery.
> 
> So if you're using SRS with cutthrough_delivery, please check whether return
> path is really getting rewritten.
> 
> The question is closely related to https://bugs.exim.org/3071
> 
> -- 
> ## subscription configuration (requires account):
> ##   
> https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
> ## unsubscribe (doesn't require an account):
> ##   exim-users-unsubscr...@lists.exim.org
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/

-- 
-- Kirill Miazine 

-- 
## subscription configuration (requires account):
##   https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
##   exim-users-unsubscr...@lists.exim.org
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

[exim] Strange messages related to TLS

2024-03-13 Thread mhbeyle--- via Exim-users 

Hi,

I have several servers configured with exim4 and only on one of them I 
have error messages related to TLS.
When I use the adjective "strange", I do it because I have no idea why 
sometimes the error occurs and sometimes not (sorry).


The server where the errors appear has exim4 4.96 installed with debian 
12 and gnutls 3.7.9. In the rest of the servers (no errors here) is 
exim4 4.94.2 with debian 11 and gnutls 3.7.1.


All messages are delivered correctly.

Examples of this behavior are shown below:

- Sending to gmail: H=gmail-smtp-in.l.google.com [142.250.27.26] TLS 
error on connection (recv): The TLS connection was non-properly terminated.

- Sending to yahoo: no error
- Sending through an external relay: 
H=email-smtp.eu-north-1.amazonaws.com [13.48.208.88] TLS error on 
connection (recv): A TLS fatal alert has been received: User canceled.


And so on with some others ...

I have read several messages on this mailing list that don't give 
importance to these errors, but I don't understand very well why the 
error appears with some servers (gmail, relay aws) and not with others 
(yahoo and others).
Does it have to do with the new versions of exim4 software, gnutls or 
debian? I would like to have some more information, if anyone has it.

Are we sure that there is no problem with these errors?

Thanks for everything

--
Marie H.

--
## subscription configuration (requires account):
##   https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
##   exim-users-unsubscr...@lists.exim.org
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

[exim] Re: Strange messages related to TLS

2024-03-13 Thread Jeremy Harris via Exim-users 

On 13/03/2024 19:23, mhbeyle--- via Exim-users wrote:

I have several servers configured with exim4


That name is the Debian binary for Exim.  Nobody else calls it that.
Version 3 of Exim went obsolete TWENTY YEARS ago.



- Sending to gmail: H=gmail-smtp-in.l.google.com [142.250.27.26] TLS error on 
connection (recv): The TLS connection was non-properly terminated.


Gmail cannot be bothered to properly close down a TLS session; they just drop 
the TCP
connection.  The GnuTLS library reports this.


- Sending to yahoo: no error


I assume you are not concerned by this.


- Sending through an external relay: H=email-smtp.eu-north-1.amazonaws.com 
[13.48.208.88] TLS error on connection (recv): A TLS fatal alert has been 
received: User canceled.


That one I have not seen ("User canceled").
You could get a packet capture and decode the actual TLS record this external
relay sent, possibly.  Or you could enquire of the operators of that relay what 
they are doing.



And so on with some others ...


If you do not give details, it is hard to comment.


Are we sure that there is no problem with these errors?


You said "All messages are delivered correctly."
Do you have some other criterion for there being a problem?
--
Cheers,
  Jeremy


--
## subscription configuration (requires account):
##   https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
##   exim-users-unsubscr...@lists.exim.org
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/