[exim] Re: DKIM2 - was Re: Re: Oversigning Resent-xxx headers

2025-08-04 Thread Andrew C Aitchison via Exim-users
On Mon, 4 Aug 2025, Mike Pellatt via Exim-users wrote: On 03/08/2025 20:39, Andrew C Aitchison via Exim-users wrote: On Sun, 3 Aug 2025, John Levine via Exim-users wrote: It appears that Andreas Metzler via Exim-users said: On 2025-07-31 Andrew C Aitchison via Exim-users wrote

[exim] Re: DKIM2 - was Re: Re: Oversigning Resent-xxx headers

2025-08-03 Thread Andrew C Aitchison via Exim-users
On Sun, 3 Aug 2025, John Levine via Exim-users wrote: It appears that Andreas Metzler via Exim-users said: On 2025-07-31 Andrew C Aitchison via Exim-users wrote: [...] If it does turn out that DKIM2 verification is based on libraries, given the recent comments about libspf2, please ensure

[exim] DKIM2 - was Re: Re: Oversigning Resent-xxx headers

2025-07-31 Thread Andrew C Aitchison via Exim-users
On Thu, 31 Jul 2025, John Levine via Exim-users wrote: It appears that Jeremy Harris via Exim-users said: + Wondering what do do when DKIM2 eventually arrives Probably look at using libraries since verification will be more complicated. If it does turn out that DKIM2 verification is based

[exim] Re: Oversigning Resent-xxx headers

2025-07-31 Thread Andrew C Aitchison via Exim-users
On Thu, 31 Jul 2025, Mark Hills via Exim-users wrote: On Wed, 23 Jul 2025, Slavko via Exim-users wrote: Ahoj, Dňa 23 Jul 2025 09:57:00 +0200 John Levine via Exim-users napísal: I was tracing down a strange bug in which mail sent to a role account in an IETF working group was forwarded to t

[exim] Re: Log smtp session

2025-07-30 Thread Andrew C Aitchison via Exim-users
On Mon, 28 Jul 2025, Hardy via Exim-users wrote: Is there a way to log the smtp session of a connection? (i.e. in a way swaks shows it from its client view.) There might be something in the test suit. test/runtest uses one of ../../test/bin/client* or test/bin/server in a dialog with the binar

[exim] Re: Oversigning Resent-xxx headers

2025-07-28 Thread Andrew C Aitchison via Exim-users
On Mon, 28 Jul 2025, Andreas Metzler via Exim-users wrote: On 2025-07-28 Jeremy Harris via Exim-users wrote: On 2025/07/27 10:40 AM, Slavko via Exim-users wrote: Jeremy, Heiko, please, are you willing to change this? (copied from IRC) it's a whole bunch of work, more than just replacing a

[exim] Re: stunnel

2025-06-28 Thread Andrew C Aitchison via Exim-users
On Sat, 28 Jun 2025, Martin McCormick via Exim-users wrote: When using stunnel to setup the encrypted link between this box and the smarthost, am I correct in assuming that exim, itself, is only now working with old-school plain text, talking through stunnel's tls translation engines which do

[exim] Re: test Tue, 17 Jun 2025 15:03:44 -0500

2025-06-18 Thread Andrew C Aitchison via Exim-users
On Tue, 17 Jun 2025, Martin McCormick via Exim-users wrote: The information about the certificate being expired was no surprise to me. Persuading this large corporation to part with a few Dollars to renew that certificate is about as likely as Is there a reason you cannot use a free L

[exim] Re: which openssl options are used by exim for a tls connection

2025-06-06 Thread Andrew C Aitchison via Exim-users
On Fri, 6 Jun 2025, Cyborg via Exim-users wrote: Hi, interessting situation: Exim returns: TLS session: (SSL_connect): error:0A00018A:SSL routines::dh key too small when connecting with s_client to that server, a wired connection is established: New, TLSv1.2, Cipher is AES256-GCM-SHA384

[exim] Re: How to disable tls 1 and tls 1.1

2025-05-26 Thread Andrew C Aitchison via Exim-users
On Mon, 26 May 2025, Slavko via Exim-users wrote: I still do not understand one thing: why is as much effort invested to advocate old (deprecated) versions of TLS. I understand, that deprecated doesn't mean disallowed, i understand it as "awoid if possible". And when one decide, that it is possi

[exim] Re: How to disable tls 1 and tls 1.1

2025-05-24 Thread Andrew C Aitchison via Exim-users
On Sat, 24 May 2025, Slawomir Dworaczek via Exim-users wrote: How to disable depracated protocols Tls 1 and tls 1.1 and enable only strong protocols Does your exim use GnuTLS or OpenSSL - exim -bV | grep Support should tell you ? Eugene Berdnikov said: But if you are looking for adventure

[exim] Re: Odd error on local delivery

2025-05-23 Thread Andrew C Aitchison via Exim-users
On Fri, 23 May 2025, Leonardo Boselli via Exim-users wrote: On Thu, 22 May 2025, Ian Z via Exim-users wrote: What is your local_domains option set to? It is those domains, and *only* those, literally spelled, which will, in a normal configuration, bypass any DNS lookup. (…) MAIN_LOCAL_DOMAI

[exim] Re: relay with oAuth

2025-04-08 Thread Andrew C Aitchison via Exim-users
On Mon, 7 Apr 2025, GinoF via Exim-users wrote: I'm looking for solutions to send emails with oAuth authentication to Microsoft SMTP servers, because MS is about to shut down the basic auth. Is oauth supported by exim anyhow? Exim does not support OAuth but there is an OAuth proxy: https:

[exim] Re: rejected after DATA: maximum allowed line length is 998 octets, got 1209

2025-03-16 Thread Andrew C Aitchison via Exim-users
On Sat, 15 Mar 2025, graeme vetterlein via Exim-users wrote: My cronjobs downloaded the mail (fetchmail) then passed it (to me) locally via exim4 (SMTP) ... it fails, and we retry later. With fetchmail feeding messages in, I don't see the point in a local exim rejecting anything. By the ti

[exim] Re: rejected after DATA: maximum allowed line length is 998 octets, got 1209

2025-03-15 Thread Andrew C Aitchison via Exim-users
On Sat, 15 Mar 2025, graeme vetterlein via Exim-users wrote: In the early hours my phone went off, warning me the rejectlog had started filling up. Searching around I see this is a well know issue.  Checking the mail I see the rule triggered was: ## acl/40_exim4-config_check_data   deny

[exim] Re: please check the condition

2025-02-21 Thread Andrew C Aitchison via Exim-users
On Fri, 21 Feb 2025, Slawomir Dworaczek via Exim-users wrote: heloo unfortunately still the same error, chatgpt and deepseek also failed at this and cannot solve the problem :) failed to expand condition "${if or {{!def:h_X-Bogosity:}{{ and {{def:h_X-Bogosity:}{match{$h_X-Bogosity:}{^Spam}}

[exim] Is anyone using Exim with OpenSSL v1.1.1 or earlier ?

2025-01-31 Thread Andrew C Aitchison via Exim-users
Is anyone using Exim with OpenSSL v1.1.1 or earlier ? Context: https://bugs.exim.org/show_bug.cgi?id=3131 and the mailop list message below. (I still have a VM that can build Exim 4.98 with OpenSSL 1.O.2u but would not dare run it in listening mode.) Thanks, -- Andrew C. Aitchison

[exim] Re: Imposing a conditional delay on incoming emails

2025-01-22 Thread Andrew C Aitchison via Exim-users
On Wed, 22 Jan 2025, Odhiambo Washington via Exim-users wrote: Happy New Year to everyone. I have the need to impose a 24-hr delay on emails from john...@johndoe.com to a local recipient. I have found this config snippet: https://github.com/Exim/exim/blob/master/doc/doc-src/FAQ.src#L6892 So I c

[exim] Re: Exim as smtp client. Bad certificate ?

2025-01-09 Thread Andrew C Aitchison via Exim-users
On Fri, 10 Jan 2025, Viktor Dukhovni via Exim-users wrote: On Thu, Jan 09, 2025 at 11:14:38PM +0100, Gandalf Corvotempesta via Exim-users wrote: but i've seen the exact error enabling the debug log, so the real error is available in some way. I don't think I have seen that in the logs you h

[exim] Re: Exim as smtp client. Bad certificate ?

2025-01-07 Thread Andrew C Aitchison via Exim-users
On Tue, 7 Jan 2025, Gandalf Corvotempesta via Exim-users wrote: There is also a side issue: smtp auth is not used even after adding the remote host (and also tried with IP and "*") and it's user/pass in /etc/exim4/passwd.client From `man exim4_passwd_client` on Ubuntu: /etc/exim4/passwd.clie

[exim] Re: Exim and multiple ALPN

2024-12-29 Thread Andrew C Aitchison via Exim-users
On Sun, 29 Dec 2024, Slavko via Exim-users wrote: Hi all, recently i decide to play with ALPN with exim on SubmissonS (SMTPS, 465) port and i noticed strange behavior. I use debian's exim 4.96, with default ALPN settings: hosts_require_alpn = tls_alpn = smtp:esmtp Then i try to connect

[exim] Re: exim migration to different platform

2024-12-23 Thread Andrew C Aitchison via Exim-users
On Sun, 22 Dec 2024, Leonardo Boselli via Exim-users wrote: On Sun, 22 Dec 2024, Jeremy Harris via Exim-users wrote: It is enough after installing exim4 [both have same version 4.96 from bookworm] on server B to copy all configuration files to the new server? The secondary can then be running

[exim] Re: Stopping exim breaks delivery and destroys data file

2024-12-23 Thread Andrew C Aitchison via Exim-users
On Mon, 23 Dec 2024, Kai Bojens via Exim-users wrote: I'll just downgrade everything tomorrow as this will definitely fix the systemd unit issue. After that are you prepared to replace the 4.96 binary with the one from 4.98 to confirm that the binary is not at fault ? -- Andrew C. Aitchison

[exim] Re: Stopping exim breaks delivery and destroys data file

2024-12-23 Thread Andrew C Aitchison via Exim-users
On Mon, 23 Dec 2024, Kai Bojens via Exim-users wrote: System: - Debian 12 - Exim 4.98 - rebuild from Debian Backports with ARC enabled - MX'er for several domains, forwarding to a seperate Dovecot server Action: - systemctl restart exim4 / systemctl stop exim4 Symptom: - Restarting or sto

[exim] Re: "Spool error for" but seems to work ok

2024-12-22 Thread Andrew C Aitchison via Exim-users
On Sun, 22 Dec 2024, Marcin Owsiany via Exim-users wrote: Would it make sense to write a simple /usr/lib/sendmail shim that would simply forward its input to localhost:25 (or to a UNIX socket, if Exim could be taught to listen on one, as that would allow it to discover UID of the invoking proces

[exim] Re: "Regression Tests" for exim config?

2024-12-15 Thread Andrew C Aitchison via Exim-users
On Sun, 15 Dec 2024, Andreas Barth via Exim-users wrote: Hi, I'd like to have some kind of regression tests for my exim config (at least the different delivery actions), so that I make sure to not break working configurations. I.e. I want to have some tests defined like "mail to a@b should be

[exim] Re: Ancient release tarballs of exim?

2024-12-07 Thread Andrew C Aitchison via Exim-users
On Fri, 6 Dec 2024, Marc Haber via Exim-users wrote: Hi, For a research topic, I am looking for ancient exim release tarballs from 2002 to 2005, namely the releases 4.10 4.11 4.12 4.14 4.20 4.22 4.24 4.30 4.31 4.32 4.33 4.34 4.43 4.44 Sadly, https://downloads.exim.org/exim4/old only goes back

[exim] Re: failed to write to main log: length=80 result=-1 errno=9 (Bad file descriptor)

2024-12-02 Thread Andrew C Aitchison via Exim-users
On Mon, 2 Dec 2024, Luca Bertoncello via Exim-users wrote: In Log I only see: 2024-12-02 08:49:58 1tI1BX-0001ExL-36db failed to write to main log: length=80 result=-1 errno=9 (Bad file descriptor) nothing else... :( On Mon, 2 Dec 2024, Jeremy Harris via Exim-users wrote: On 02/12/202

[exim] User allow-lists

2024-11-28 Thread Andrew C Aitchison via Exim-users
[ Prompted by a question to the alpine support email list. ] Non-personal correspondents (mailing-lists, corporates etc.) sometimes ask you to to allow-list (aka want-list or white-list) their address when you sign up to receive emails from them. The big players with their webmail and integrat

[exim] Re: Unable to start Exim 4.98

2024-11-15 Thread Andrew C Aitchison via Exim-users
On Fri, 15 Nov 2024, Luca Bertoncello via Exim-users wrote: I always used a start script that started these instances: start-stop-daemon --start --pidfile /var/run/exim1.pid --quiet --exec $DAEMON -- "-bd" echo "exim runner 1" start-stop-daemon --start --pidfile /var/run/exim2.pid -

[exim] Re: Exim attempting retries in rapid succession without delay?

2024-10-10 Thread Andrew C Aitchison via Exim-users
On Mon, 30 Sep 2024, Ivor Durham via Exim-users wrote: I posted this problem as an exim bug, but it was immediately dismissed because the MTA rejection response indicates a temporary problem, so apparently retrying 4 more times inside a second to different IP addresses for the same domain is dee

[exim] Re: Exim logging--how reliable?

2024-10-04 Thread Andrew C Aitchison via Exim-users
On Fri, 4 Oct 2024, Johnnie W Adams via Exim-users wrote: Hi, folks, I'm trying to interpret some results from an SIEM regarding our Exim servers and am having difficulty. The SIEM claims that ports 587 and 465 are generating traffic on a high-numbered port. I think it's seeing artifacts fr

[exim] Re: Bad file descriptor on logs?

2024-09-26 Thread Andrew C Aitchison via Exim-users
On Thu, 26 Sep 2024, Marco Gaiarin via Exim-users wrote: Mandi! Ian Z via Exim-users In chel di` si favelave... More information needed: - what style of logfile naming is in use (just sequence numbers, or dates, or something else?) ?! Sorry but i've not understood the question... - ple

[exim] Re: Problems compiling exim binaries

2024-08-20 Thread Andrew C Aitchison via Exim-users
On Tue, 20 Aug 2024, klabautermann--- via Exim-users wrote: I had no another plan: Compiling an older exim, which gives me warnings about tainted strings, but accept them.  But it looks like, that all the tar-balls or zip-archives available in https://github.com/Exim/exim/tags cannot be compile

[exim] Re: Exim, virtual users, and usernames

2024-08-08 Thread Andrew C Aitchison via Exim-users
On Thu, 8 Aug 2024, Cam Ellison wrote: On 2024-08-08 12:40, Andrew C Aitchison wrote: On Thu, 8 Aug 2024, Cam Ellison via Exim-users wrote: On 2024-08-08 09:47, Cam Ellison via Exim-users wrote: Status update: As is often the case, I spoke too soon. SMTP works for emails between virtual us

[exim] Re: Exim, virtual users, and usernames

2024-08-08 Thread Andrew C Aitchison via Exim-users
On Thu, 8 Aug 2024, Cam Ellison via Exim-users wrote: On 2024-08-08 09:47, Cam Ellison via Exim-users wrote: Status update: As is often the case, I spoke too soon. SMTP works for emails between virtual users, but does not work for outgoing mail. The local_part of the sender name is missing,

[exim] Re: Exim, virtual users, and usernames

2024-08-08 Thread Andrew C Aitchison via Exim-users
On Wed, 7 Aug 2024, Cam Ellison via Exim-users wrote: For my sins, I built and continue to operate a website for a local adult football association. Email services are provided via Exim and Dovecot for a few positions, but most email is sent by the website itself. To regularise access to emai

[exim] Re: Strange issue with Exim-4.96 on Debian-12

2024-08-05 Thread Andrew C Aitchison via Exim-users
On Mon, 5 Aug 2024, Odhiambo Washington via Exim-users wrote: I say strange because I don't see this on FreeBSD and Ubuntu-22.04. I am using the very same config files I usedon FreeBSD, but adapted for use on this Debian box. Strange again, because this is happening with all emails hitting this

[exim] Re: exim don't speak to google any more!

2024-07-30 Thread Andrew C Aitchison via Exim-users
On Mon, 29 Jul 2024, Bernard Quatermass via Exim-users wrote: On 29/07/2024 03:18, Viktor Dukhovni via Exim-users wrote: On Sun, Jul 28, 2024 at 05:56:33PM +0100, Jeremy Harris via Exim-users wrote: BUT in the log, I get the following message:  H=gmail-smtp-in.l.google.com [142.251.16.2

[exim] Re: GnuTLS and Dane-Problem finally solved

2024-07-13 Thread Andrew C Aitchison via Exim-users
On Sat, 13 Jul 2024, Wolfgang via Exim-users wrote: Hello Viktor, Hello Jeremy, and all others helping me, to find the problem with my exim not able to deliver to the https://blog.lindenberg.one/EmailSecurityTest . I tried now a lot of things, and learned a lot about debugging this kind of

[exim] Re: Exim 4.92 to 4.94 upgrade breaking

2024-07-01 Thread Andrew C Aitchison via Exim-users
Jeff Brown via Exim-users wrote: After upgrading this instance of exim I cannot send an email as an authorised user to an outside domain. I get e.g: 2024-06-27 15:26:07 H=([192.168.1.55]) [165.165.192.254] X=TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no F= rejected RCPT : r

[exim] Re: [exim-announce] Exim 4.98-RC1 released

2024-06-20 Thread Andrew C Aitchison via Exim-users
On Thu, 20 Jun 2024, Jim Pazarena via Exim-users wrote: this compiles fine on my FreeBSD 14.0 p6 but I have a failure on an alternate server. I have too many server differences to be able to pin this down. It is to do with my Local/Makefile entries: LOOKUP_MYSQL_INCLUDE=-I/usr/local/include/

[exim] Re: Yet another taint problem.

2024-06-07 Thread Andrew C Aitchison via Exim-users
On Wed, 5 Jun 2024, Thew, Alan via Exim-users wrote: Hi, I have fixed an "easy" issue with file names in the past but have found that the following driver = accept condition = ${if match{$local_part}{-dmarc-}{yes}{no}} retry_use_local_part transport = listserv_pipe no_verify fails with

[exim] Re: releases - betas - testing

2024-05-17 Thread Andrew C Aitchison via Exim-users
On Fri, 17 May 2024, Jim Pazarena via Exim-users wrote: Is there any ftp location where a pre-release or a testing version of exim is available to fetch and try ? Such things are only available when developers have things that are ready to be tested. Not strictly ftp but the Exim Git site

[exim] Re: Blowfish auth

2024-05-16 Thread Andrew C Aitchison via Exim-users
On Thu, 16 May 2024, Gandalf Corvotempesta via Exim-users wrote: Hi guys is possible to use blowfish password scheme in exim? I have some users stored on a DB with a blowfish crypted password, used by Dovecot The dovecot server is on a different server than the exim one so i can't use sockets an

[exim] Re: headers_add :at_start: in routers

2024-05-14 Thread Andrew C Aitchison via Exim-users
On Tue, 14 May 2024, Ian Z via Exim-users wrote: On Tue, May 14, 2024 at 10:32:22AM GMT, Jeremy Harris via Exim-users wrote: One might think so... but they don't actually say so. They do suggest ARC, which supplies essentially the same information (but they don't say "one or the other", whic

[exim] Re: Mailman 2 - Tainted Values

2024-05-08 Thread Andrew C Aitchison via Exim-users
On Wed, 8 May 2024, Jan Ingvoldstad via Exim-users wrote: Google has, for reasons unknown, prioritised Exim 3(!) in search results for *ages*. I don't trust Google for Exim searches without adding very specific additional keywords. Even searching for "exim4" result in Exim 3 docs on occasion.

[exim] Re: Mailman 2 - Tainted Values

2024-05-07 Thread Andrew C Aitchison via Exim-users
On Tue, 7 May 2024, Andrew C Aitchison wrote: On Tue, 7 May 2024, Terry M. Roy via Exim-users wrote: I assume that the Exim documentation has not been updated to reflect the tainted issue for the Mailman information. Would someone please be able to advise how the transport stanza should be rev

[exim] Re: Mailman 2 - Tainted Values

2024-05-07 Thread Andrew C Aitchison via Exim-users
On Tue, 7 May 2024, Terry M. Roy via Exim-users wrote: Hello, Our server is set up for Mailman 2 exactly as outlined in the Exim documentation here: https://dev.exim.org/howto/mailman21.html#exconf (We do not do VERP or personalisation.) We just upgraded the server from Debian Bullseye to Bo

[exim] Re: [postmas...@hazenmanagement.ca: Undeliverable: Cleandry]

2024-05-02 Thread Andrew C Aitchison via Exim-users
On Wed, 1 May 2024, Jeremy Harris via Exim-users wrote: On 01/05/2024 22:42, The Doctor via Exim-users wrote: What is external forwarding? Sound like something scary. My *guess* is: You mailed person A. ... or someone pretending to be you mailed A ... A has their mails configured, at th

[exim] Re: SRS example in spec

2024-04-28 Thread Andrew C Aitchison via Exim-users
On Sun, 28 Apr 2024, Andreas Metzler via Exim-users wrote: On 2024-04-28 Jeremy Harris via Exim-users wrote: On 28/04/2024 06:05, Andreas Metzler via Exim-users wrote: The router fails all bounces where inbound_srs{} fails, not only the ones that "look SRS'd". It assumes that you really ar

[exim] Re: vacation filter option once file expected to be a directory?

2024-04-13 Thread Andrew C Aitchison via Exim-users
This looks like https://bugs.exim.org/show_bug.cgi?id=2593 On Thu, 11 Apr 2024, Raphael Haas via Exim-users wrote: Dear list, I am running an exim4-daemon-heavy (4.90.1-1ubuntu1.10) and in the context of a userforward "~/.forward" filter file using the vacation command if personal a

[exim] Re: SSL Certificates

2024-03-20 Thread Andrew C Aitchison via Exim-users
On Wed, 20 Mar 2024, Jerry Stuckle via Exim-users wrote: Thanks, I know Exim doesn't have POP3 ports. However, it does handle emails differently depending on if you're using POP3 or IMAP. The former places emails for a user in /var/mail while the latter places emails in the user's home direct

[exim] Re: Select a router per recipient on incoming messages

2024-03-20 Thread Andrew C Aitchison via Exim-users
On Wed, 20 Mar 2024, Marco van Tol via Exim-users wrote: Hi there, I apologise if this has been handled before. I wasn’t sure what a quick path in the FAQ would be to the answer for this. I have a domain for which different local_parts need to be delivered to different SMTP servers. The dec

[exim] Re: seen condition

2024-03-19 Thread Andrew C Aitchison via Exim-users
On Mon, 18 Mar 2024, Evgeniy Berdnikov via Exim-users wrote: Package exim4-daemon-light should be built with same set of generic options. It gives me _ACL_COND_SEEN=y for package version 4.97-5. Is 4.97-5 on Debian or Ubuntu - my Ubuntu 23.10 is still on 4.96-17ubuntu2.2 ?8 exim-light does gi

[exim] Re: Send mail via fallback interface

2024-03-07 Thread Andrew C Aitchison via Exim-users
On Thu, 7 Mar 2024, Patrik Peng via Exim-users wrote: For situations where an IP is blocked or rate limited, we would like to automatically try to send the mail via an alternate interface. The following configuration achieves the desired result. If a mail is queued for more than 5 minutes, it

[exim] Python - was Re: Re: redirect router that calls a script that generates a .forward

2024-03-04 Thread Andrew C Aitchison via Exim-users
On Mon, 4 Mar 2024, Cyborg via Exim-users wrote: Am 04.03.24 um 15:50 schrieb Fabien LUCE via Exim-users: Thanks! Yes I will take care of it as much as I can. In that case, you would use a database connection, which simplifys the entire task and saves a lot of cpu cycles. Starting a python

[exim] Re: tracing SMTP conversations

2024-02-24 Thread Andrew C Aitchison via Exim-users
On Sat, 24 Feb 2024, graeme vetterlein via Exim-users wrote: Starting in mid February 2024, gmail tightened up its policies and I for one started getting bounced email. After about 4 lots of 12 hour days I figured out I was not setting errors_to= in my userforward so my "RCPT TO" envelope hea

[exim] Re: SIGSEGV in panic log

2024-02-22 Thread Andrew C Aitchison via Exim-users
On Thu, 22 Feb 2024, Jim Pazarena via Exim-users wrote: I really assumed that the response would have been "run a memtest on your chassis". On 22/02/2024 15:11, Jim Pazarena via Exim-users wrote: is there anything on exim that could -possibly- be triggering this ? That question sort of rul

[exim] Re: SIGSEGV in panic log

2024-02-22 Thread Andrew C Aitchison via Exim-users
On Thu, 22 Feb 2024, Jim Pazarena via Exim-users wrote: I created a new VM for exim . I've loaded many VMs .. this chassis has several active VMs actually. vmWare. I have never seen the following .. it seems like a chassis memory error .. however the other two active VMs on this chassis run wit

[exim] Re: Not staying enabled over reboot

2024-02-16 Thread Andrew C Aitchison via Exim-users
On Fri, 16 Feb 2024, Johnnie W Adams via Exim-users wrote: Hi, folks, EPEL's exim 4.96|7 is not staying enabled through a reboot on my RHEL 7 servers. Has anyone else seen this? Have you found a way to cope with it? It's very strange. I'm a big fan of systemd and not used to it acting

[exim] Re: locking et al.

2024-02-10 Thread Andrew C Aitchison via Exim-users
On Sat, 10 Feb 2024, graeme vetterlein via Exim-users wrote: ... I'm probably worrying about nothing, this is a standard Debian install and this same issue exists for Thunderbird, pine, mutt etc If you are being paranoid, I'll mention that if you are mounting the file system over the network

[exim] Re: locking et al.

2024-02-05 Thread Andrew C Aitchison via Exim-users
On Mon, 5 Feb 2024, Jeremy Harris via Exim-users wrote: On 2/5/24 15:01, graeme vetterlein via Exim-users wrote: But it occurs to me I'm rather "living on the edge" here I have multiple cronjobs an I guess with a single edit I could end up with multiple writers. So I guess I need to ensure mai

[exim] Re: Dynamic local_domains

2024-01-29 Thread Andrew C Aitchison via Exim-users
On Mon, 29 Jan 2024, Odhiambo Washington via Exim-users wrote: exim - bt johndoe@local.domain, where johndoe can be a valid or invalid local_part exim -bt johndoe@local.domain - no space after the dash. On Mon, Jan 29, 2024, 06:44 Jerry Stuckle via Exim-users < exim-users@lists.exim.

[exim] Re: RES: Re: Received and read time report

2024-01-22 Thread Andrew C Aitchison via Exim-users
On Sun, 21 Jan 2024, Ronaldo Luiz de Carvalho via Exim-users wrote: Yes, I want to know the time that the message is in the mail server. The time between received and read. This time will show me the delay time of the mail server. These times are not the same thing. I am not really sure what

[exim] Re: Received and read time report

2024-01-21 Thread Andrew C Aitchison via Exim-users
On Sun, 21 Jan 2024, Ronaldo Luiz via Exim-users wrote: How can I know the time when an email was read by the recipient? EXIM receives an email and validates the receipt, the time of this receipt is recorded at EXIM_MAINLOG file. Where is the time to read by the recipient? How can I generate a

[exim] Re: excess dkim header?

2024-01-05 Thread Andrew C Aitchison via Exim-users
On Fri, 5 Jan 2024, Randy Bush via Exim-users wrote: iphone -> mail.rg.net:465 mail.rg.net -> psg.com:25+tls psg.com -> ran.opsg.com:25+tls ran.psg.com -> laptop:imap should psg.com have recognized that it was already properly DKIMmed and not added the second? Not strictly relevant for DKIM

[exim] Re: Difficulty getting Exim Address rewriting working on Ubuntu Linux

2023-12-28 Thread Andrew C Aitchison via Exim-users
On Thu, 28 Dec 2023, Michael Lueck via Exim-users wrote: Note: "start with". It does not say you can use an asterisk somewhere else. The last "note" in your response above: No, the Exim Address Rewriting page listed this as an example: Right here is a similar example rewrite rule: 7. Rewr

[exim] Packaging - was Re: ARC

2023-12-19 Thread Andrew C Aitchison via Exim-users
On Tue, 19 Dec 2023, Odhiambo Washington via Exim-users wrote: Does this imply that Debian-ists are scared of running anything outside the aegis of Debian pages? When I was on Red Hat, I found it trivial to build an exim rpm (package) from exim source that integrated nicely with the OS and was

[exim] Re: Any changes with retry-rules in exim 4.97?

2023-12-05 Thread Andrew C Aitchison via Exim-users
On Tue, 5 Dec 2023, Niels Kobschätzki via Exim-users wrote: Niels Kobschätzki hat am 23.11.2023 17:32 CET geschrieben: I don't see anything in the change log but something feels off when I look at the behavior of my mail-servers. I see mails in the queue that are lying there for 8 hours and

[exim] Re: Exim hates CNAMEs, not IPv6

2023-12-01 Thread Andrew C Aitchison via Exim-users
On Fri, 1 Dec 2023, John Levine via Exim-users wrote: It appears that Viktor Dukhovni via Exim-users said: That text is obsolete. There is no such text in RFC5321, and CNAME-valued mail domains have long been OK. The sending MTA (its DNS resolver) is expected to restart the MX lookup at the

[exim] Re: What does exim do with malformed messages?

2023-11-30 Thread Andrew C Aitchison via Exim-users
On Wed, 29 Nov 2023, John R Levine via Exim-users wrote: If a malformed mail message shows up by SMTP (not local sendmail or submission), will exim generally try to clean it up or just pass it along? I see the discussion of submission mode in chapter 48 of the manual and all the options about

[exim] Re: dnsdb loses characters (exim 4.96.2, 4.97)

2023-11-17 Thread Andrew C Aitchison via Exim-users
On Fri, 17 Nov 2023, Jeremy Harris via Exim-users wrote: On 17/11/2023 20:15, Andrew C Aitchison wrote: ./runtest 2200 -continue -keep reports: The following tests require: lookup dnsdb dnsdb/2200 dnsdb lookup in string expansions ** Comparison of test-stdout-munged with stdout/2200 fai

[exim] Re: dnsdb loses characters (exim 4.96.2, 4.97)

2023-11-17 Thread Andrew C Aitchison via Exim-users
On Fri, 17 Nov 2023, Jeremy Harris via Exim-users wrote: Just pushed 79670d3c32cc - anybody building from git may wish to test. # echo '${lookup dnsdb{>\n; defer_never,txt=perrigo.com}}' | exim -be |\ grep -a v=spf1 | tr ' ' '\n' | grep 65.221.12.128 ip4:65.221.12.128/32 # echo '${loo

[exim] Re: dnsdb loses characters (exim 4.96.2, 4.97)

2023-11-17 Thread Andrew C Aitchison via Exim-users
On Fri, 17 Nov 2023, Victor Ustugov via Exim-users wrote: dnsdb is failing to properly handle even single-element TXT record: # host -t txt exim.org exim.org descriptive text "v=spf1 a ip4:37.221.193.62 ip6:2a03:4000:8:637::2 a:hh.schlittermann.de mx ?all" exim.org descriptive text "cumin"

[exim] Re: dnsdb loses characters (exim 4.96.2, 4.97)

2023-11-15 Thread Andrew C Aitchison via Exim-users
On Wed, 15 Nov 2023, Victor Ustugov via Exim-users wrote: Hello This is a real case. Let's resolve the TXT record of the perrigo.com domain. # pkg info -E exim exim-4.96.2 # echo '${lookup dnsdb{>\n; defer_never,txt=perrigo.com}}' | exim -be | grep v=spf1 v=spf1 include:spf-00157e01.pphosted

[exim] Re: Compiling issues with 4.97

2023-11-09 Thread Andrew C Aitchison via Exim-users
On Wed, 8 Nov 2023, dean--- via Exim-users wrote: Hi, Two compiling issues Exim 4.97 on a couple of our servers: 1. On CentOS 7 (one of our older systems), perl-File-FcntlLock is not part of the distribution, so compiling fails when building exim_id_update. CPAN is always an option, but this i

[exim] Re: Handle sender on forwarding

2023-11-06 Thread Andrew C Aitchison via Exim-users
On Mon, 6 Nov 2023, Sebastian Nielsen via Exim-users wrote: Yes you can do this: In acl_rcpt: warn domains = remove_header = dkim-signature remove_header = arc-seal remove_header = arc-authentication-results remove_header = arc-message-signature It will also dump any DKIM

[exim] Re: verifying errors_to

2023-11-04 Thread Andrew C Aitchison via Exim-users
On Sat, 4 Nov 2023, Julian Bradfield via Exim-users wrote: When I implement a simple mailing list by an example as in chap 51.2 of the docs, why does the errors_to address have to be verifiable by a router that comes *before* the list router? How would exim avoid infinite recursion if it reach

[exim] Re: disclaimer + DKIM does not work (reopened)

2023-10-24 Thread Andrew C Aitchison via Exim-users
Please ignore my previous messagee. I was thinking of a different sort of alignment. On Tue, 24 Oct 2023, Andrew C Aitchison wrote: On Tue, 24 Oct 2023, brunoc68 via Exim-users wrote: Le 24/10/2023 à 05:30, Jasen Betts via Exim-users a écrit : Be aware that exim filter wants line endings as

[exim] Re: disclaimer + DKIM does not work (reopened)

2023-10-24 Thread Andrew C Aitchison via Exim-users
On Tue, 24 Oct 2023, brunoc68 via Exim-users wrote: Le 24/10/2023 à 05:30, Jasen Betts via Exim-users a écrit : On 2023-10-19, brunoc68 via Exim-users wrote: Dear all, In my organization I must configure Exim to add a disclaimer for every outgoing email, both text and html. Please do not ar

[exim] Re: List headers [Was: DKIM does not work]

2023-10-23 Thread Andrew C Aitchison via Exim-users
On Mon, 23 Oct 2023, Markus Reschke via Exim-users wrote: I'm also looking into optimizing my DKIM configuration, especially which headers to sign. Unfortunately, DMARC reports tell you only that the DKIM verification failed but not why. The default for dkim_sign_headers doesn't work well for

[exim] Re: New Exim Security Release 4.96.2

2023-10-15 Thread Andrew C Aitchison via Exim-users
On Sun, 15 Oct 2023, Cyborg via Exim-users wrote: Am 15.10.23 um 18:17 schrieb Heiko Schlittermann via Exim-users: - The remaining issue with `libspf2`, raised as CVE against Exim, can't be addressed by us, as it seems to happen inside the library's code. Library fixes are available. Hi

[exim] Re: Is sender verification possible on a server that is used as a smarthost?

2023-10-04 Thread Andrew C Aitchison via Exim-users
On Wed, 4 Oct 2023, Mario Emmenlauer via Exim-users wrote: I have a dedicated server running exim. It works great, except I can not get a smarthost setup to work in combination with sender verification. On the server, I have sender verification enabled, as a means to reduce spam. It generally

[exim] Re: Exim Zero Day?

2023-09-30 Thread Andrew C Aitchison via Exim-users
On Sat, 30 Sep 2023, Randy Bush via Exim-users wrote: https://seclists.org/oss-sec/2023/q3/254 i tried putting that in my exim config and it threw errors :-) I am not surprised. I've seen some second hand reports (eg on the mailop list, which 1) has a closed archive, and 2) seems unreachabl

[exim] Re: Exim Zero Day?

2023-09-30 Thread Andrew C Aitchison via Exim-users
On Fri, 29 Sep 2023, Some Guy via Exim-users wrote: Hi, I'm running an appliance which includes an Exim MTA and now I'm wondering, if I should be worried because of the RCE with CVSS 9.8 described at the Zero Day Initiative homepage here: https://www.zerodayinitiative.com/advisories/ZDI-23-1469

[exim] Re: Exim 4.97-RC1 released

2023-09-27 Thread Andrew C Aitchison via Exim-users
On Wed, 27 Sep 2023, Ian Z via Exim-users wrote: On Wed, Sep 27, 2023 at 08:56:42AM +0100, Jeremy Harris via Exim-users wrote: On 27/09/2023 07:32, Ian Z via Exim-users wrote: I see a couple of things in the build output that make me even wonder if my src/Local/Makefile ends up being used.

[exim] Re: [exim-announce] Exim 4.97-RC0 released

2023-09-08 Thread Andrew C Aitchison via Exim-users
On Thu, 7 Sep 2023, Jeremy Harris via Exim-users wrote: Hi all, Enough changes have accumulated since 4.96 for it to be worth spinning another release. The first Release Candidate is available - as tarball:https://ftp.exim.org/pub/exim/exim4/test - directly from Git: https://git.exim.

[exim] Re: Problem with exim_tidydb after upgrading to 4.96

2023-09-08 Thread Andrew C Aitchison via Exim-users
On Fri, 8 Sep 2023, Mike Clarke via Exim-users wrote: I've just upgraded from 4.95 to 4.96 and have started to have problems with exim_tidydb curlew:/tmp# exim_tidydb /var/spool/exim wait-remote_auth_smtp Tidying Exim hints database /var/spool/exim/db/wait-remote_auth_smtp ** Failed to open DB

[exim] Re: Pipe transport and script (shebang)

2023-08-28 Thread Andrew C Aitchison via Exim-users
On Mon, 28 Aug 2023, Andrew C Aitchison wrote: On Mon, 28 Aug 2023, Slavko via Exim-users wrote: Hi all, recently i decide to improve my pipe transport for reports processing to allow relative commands and i go into problems. It was worked without problems with absolute script path for long t

[exim] Re: Pipe transport and script (shebang)

2023-08-28 Thread Andrew C Aitchison via Exim-users
On Mon, 28 Aug 2023, Slavko via Exim-users wrote: Hi all, recently i decide to improve my pipe transport for reports processing to allow relative commands and i go into problems. It was worked without problems with absolute script path for long time. I solved it, but i want to know why that hap

[exim] Re: Blocking Empty Return-Paths

2023-07-14 Thread Andrew C Aitchison via Exim-users
On Fri, 14 Jul 2023, Brian Spraker via Exim-users wrote: Having a lot of new spam get through to the servers over the past few weeks. I am noticing in the Exim logs and also in the email headers that the "Return-Path" is empty. Is there a suitable way to block any emails that have empty return

[exim] Re: delay not kicking in

2023-06-03 Thread Andrew C Aitchison via Exim-users
On Sat, 3 Jun 2023, Julian Bradfield via Exim-users wrote: Here's what's in the main log. (The actual domain is redacted because it's an address leakage detector which I don't want appearing on the web.) 2023-06-03 17:23:55 SMTP connection from [58.53.131.26] (TCP/IP connection count = 1) 202

[exim] Re: failure to transfer data from subprocess

2023-06-03 Thread Andrew C Aitchison via Exim-users
On Fri, 2 Jun 2023, Robert Nicholson via Exim-users wrote: I’ve shrunk the .forward now and some of the problematic emails started getting delivered. Still I don’t have root cause. But I’m told that the backup that you see me saving things into it’s immediate but rather delayed hence the messa

[exim] Re: failure to transfer data from subprocess

2023-06-01 Thread Andrew C Aitchison via Exim-users
ws it. Is this supposed to be running as user robert or elastica ? without a sandbox to play in this is considerably difficult to resolve. On May 14, 2023, at 3:35 AM, Andrew C Aitchison via Exim-users wrote: On Sat, 13 May 2023, Robert Nicholson via Exim-users wrote: What would a basic .forward fi

[exim] Re: Excessive "bad recipient" messages in syslog

2023-05-31 Thread Andrew C Aitchison via Exim-users
On Sun, 28 May 2023, Jim Fenton via Exim-users wrote: I can easily change the configuration to make this happen silently, but I would like some visibility that this is happening, for example, in my daily logwatch output. Has anyone devised a way to cut down on the number of messages without eli

[exim] Re: Unexpected 're-routed to' in require verify = recipient?

2023-05-24 Thread Andrew C Aitchison via Exim-users
On Tue, 23 May 2023, Tim Jackson via Exim-users wrote: On 23/05/2023 13:21, Sander Smeenk via Exim-users wrote: I try to send a message to 'i...@email.postcodeloterij.nl', but Exim unexpectedly changes that to 'i...@postcodeloterij.slgnt.eu', based on some DNS queries it seems? | $ exim -f

[exim] Re: Show regex capture group in logs?

2023-05-17 Thread Andrew C Aitchison via Exim-users
On Tue, 16 May 2023, MRob via Exim-users wrote: On 2023-05-16 20:08, Andrew C Aitchison via Exim-users wrote: On Tue, 16 May 2023, MRob via Exim-users wrote: Hi, I want to capture part of a regex match (capture group) to put in logs. This example using subject header works but is there a

[exim] Re: Show regex capture group in logs?

2023-05-16 Thread Andrew C Aitchison via Exim-users
On Tue, 16 May 2023, MRob via Exim-users wrote: Hi, I want to capture part of a regex match (capture group) to put in logs. This example using subject header works but is there a better way? warn set acl_c_temp = ${if match{$h_Subject:}{group>}{$1}{none}} !condition = ${if eq{$acl_c_temp}

[exim] Re: failure to transfer data from subprocess

2023-05-14 Thread Andrew C Aitchison via Exim-users
On Sat, 13 May 2023, Robert Nicholson via Exim-users wrote: What would a basic .forward file look like if all I wanted to do is to have a .forward file in place but for everything to go it’s default places? The single line: # Exim filter <<== Do not edit or remove this line ! -- Andrew C.

  1   2   >