[exim] Re: Best way to split multiline string

2024-10-13 Thread Ian Z via Exim-users
On Sun, Oct 13, 2024 at 11:51:31AM GMT, Evgeniy Berdnikov via Exim-users wrote: > > I need to inspect the output from en external program (run via the > > ${run} expansion). The program outputs multiple lines, only the > > first is relevant to me. What is the least painful way to extract > > it? I

[exim] Best way to split multiline string

2024-10-12 Thread Ian Z via Exim-users
I need to inspect the output from en external program (run via the ${run} expansion). The program outputs multiple lines, only the first is relevant to me. What is the least painful way to extract it? I mean the least number of backslashes and curlies. In the past when I thought I needed this, it

[exim] Re: Filtering on SpamAssassin header fields

2024-09-30 Thread Ian Z via Exim-users
On Mon, Sep 30, 2024 at 11:41:24AM GMT, Jim Fenton via Exim-users wrote: [...] > I’m switching over from procmail to sieve for server-side mail > filtering. Sieve apparently doesn’t see the header fields added in > the router, so it’s not refiling my spam messages properly. Do you have a good re

[exim] Re: Bad file descriptor on logs?

2024-09-26 Thread Ian Z via Exim-users
On Thu, Sep 26, 2024 at 09:15:07AM GMT, Cam Ellison via Exim-users wrote: > > Sep 23 00:00:08 mail exim[1468704]: 2024-09-23 00:00:08 1ssUci-006A4f-Ph > > failed to write to main log: length=91 result=-1 errno=9 (Bad file > > descriptor) > > Sep 23 00:00:08 mail exim[1468704]: write failed o

[exim] Re: Bad file descriptor on logs?

2024-09-23 Thread Ian Z via Exim-users
On Mon, Sep 23, 2024 at 09:02:19AM GMT, Marco Gaiarin via Exim-users wrote: > > exim seems to work properly; seems a problem on log rotation or > > something like that (AFAIK rotation happens at 6.00, not on > > midnigt...). > Uh, oh; no, seems that log rotation was moved to midnight in > bullsey

[exim] Re: sender verification details

2024-08-08 Thread Ian Z via Exim-users
On Wed, Aug 07, 2024 at 09:55:09AM GMT, Jasen Betts via Exim-users wrote: > > Does non-callout sender verification of nonlocal addresses, in the > > case of a dnslookup router, determine the MX host of the sender > > domain? If yes, how can I access and log that information? > So "verify = sende

[exim] Re: sender verification details

2024-08-07 Thread Ian Z via Exim-users
On Wed, Aug 07, 2024 at 09:12:57AM GMT, Jeremy Harris via Exim-users wrote: > > Does non-callout sender verification of nonlocal addresses, in the > > case of a dnslookup router, determine the MX host of the sender > > domain? > No (and there could well be more than one...). > You could do a dns

[exim] sender verification details

2024-08-06 Thread Ian Z via Exim-users
Does non-callout sender verification of nonlocal addresses, in the case of a dnslookup router, determine the MX host of the sender domain? If yes, how can I access and log that information? Thanks. -- Ian -- ## subscription configuration (requires account): ## https://lists.exim.org/mailman

[exim] Re: best practice on checking local virtual users before delivering (dsearch /srv/vmail or mysql lookup)

2024-07-18 Thread Ian Z via Exim-users
On Thu, Jul 18, 2024 at 07:19:22AM GMT, Slavko via Exim-users wrote: > I use LMTP to dovecot over TCP, thus i can do callout to it. By > that, my exim have not to care where user's mailbox is at all. It also removes one of the reasons to make exim setuid root. -- Ian -- ## subscription confi

[exim] Re: "cannot parse spamd" after rspamd 3.8 -> 3.9 upgrade

2024-07-17 Thread Ian Z via Exim-users
On Wed, Jul 17, 2024 at 08:43:00AM GMT, Kai Bojens via Exim-users wrote: > The rspamd developer answered: > "Exim support of Rspamd is just broken I would say. Nobody actually > takes care about legacy SA protocol support and nobody should (as we > have JSON+HTTP or milter protocol being fully su

[exim] Re: DNS blocklist semantics

2024-07-15 Thread Ian Z via Exim-users
On Mon, Jul 15, 2024 at 09:52:32AM GMT, Andreas Metzler via Exim-users wrote: > > Is the right hand side of a dnslists condition (in ACLs) a true > > domain list in the sense of Section 10.3, or just a generic string > > list? > afaict from looking at the spec it is not a domain list: > dnslist

[exim] DNS blocklist semantics

2024-07-14 Thread Ian Z via Exim-users
Is the right hand side of a dnslists condition (in ACLs) a true domain list in the sense of Section 10.3, or just a generic string list? The reason I ask is, can I use the inline file syntax, like dnslists = /etc/exim/dnslists ? I think the way the documentation covers this would bear some im

[exim] Re: pls help with ACL

2024-07-13 Thread Ian Z via Exim-users
On Sat, Jul 13, 2024 at 01:02:41PM GMT, Grand Master via Exim-users wrote: > goal is blocking spoofing or avoiding wildcard permissions in > whitelist such as *@company.com You probably want verify = sender in one of your ACLs, and a SPF check. Exim has a native SPF condition for ACLs, but due to

[exim] Re: [exim-announce] Exim 4.98 released

2024-07-10 Thread Ian Z via Exim-users
On Wed, Jul 10, 2024 at 07:17:54PM GMT, Odhiambo Washington via Exim-users wrote: > > Security Changes: > > * Fixed CVE-2024-39929 - Incorrect parsing of multiline rfc2231 header > > filename Sorry for following-up in the wrong list, I'm not subscribed to -announce. It looks like the git com

[exim] Re: [exim-announce] Exim 4.98-RC1 released

2024-06-20 Thread Ian Z via Exim-users
On Thu, Jun 20, 2024 at 11:07:20AM GMT, Jim Pazarena via Exim-users wrote: > > gcc -o exim > /usr/local/bin/ld: warning: libssl.so.111, needed by > /usr/local/lib/mysql/libmysqlclient.so, may conflict with libssl.so.12 > /usr/local/bin/ld: warning: libcrypto.so.111, needed by > /usr/local/lib/mys

[exim] Re: [exim-announce] Exim 4.98-RC1 released

2024-06-20 Thread Ian Z via Exim-users
On Thu, Jun 20, 2024 at 06:30:19PM GMT, Andrew C Aitchison via Exim-users wrote: > Did you install the -devel package as well as the user packages ? Andrew, AFAIK this separation doesn't exist in the BSD port system. The devel bits are installed with the library port along with the user bits. --

[exim] Re: [exim-announce] Exim 4.98-RC1 released

2024-06-20 Thread Ian Z via Exim-users
On Thu, Jun 20, 2024 at 10:03:23AM GMT, Jim Pazarena via Exim-users wrote: > # LOOKUP_MYSQL_PC=mariadb > LOOKUP_MYSQL_PC=mysqlclient > > the exim compile error I get is: > > make > /bin/sh scripts/source_checks > ../scripts/Configure-Makefile: pkg-config: not found > *** Missing pkg-config fo

[exim] Re: Blowfish auth

2024-05-17 Thread Ian Z via Exim-users
On Fri, May 17, 2024 at 08:40:49PM GMT, Slavko via Exim-users wrote: > IMO would be great to mention it directly in {crypt} description, > that it will use any hash format supported by system... I find that part of the documentation already confusing enough :-( I'd be perfectly happy if exim *on

[exim] Re: Recipient verification and user .forward files

2024-05-17 Thread Ian Z via Exim-users
On Fri, May 17, 2024 at 09:05:15PM GMT, Jeremy Harris via Exim-users wrote: > > It doesn't look like the address_data way of getting the forwading > > address will work for full sieve / exim filters, does it? Chris already went most of the way to answering this (in the negative). So feel free to

[exim] Re: Recipient verification and user .forward files

2024-05-17 Thread Ian Z via Exim-users
On Fri, May 17, 2024 at 07:50:53PM GMT, Jeremy Harris via Exim-users wrote: > > But what do you mean by "properly"? How does a router do > > verification "improperly"? > A router depends on all the options set for it. Typically, a router > will only depend on things that are already available at

[exim] Re: Recipient verification and user .forward files

2024-05-17 Thread Ian Z via Exim-users
On Fri, May 17, 2024 at 11:22:45AM GMT, Ian Z via Exim-users wrote: > And regardless of the answer to the above, if I do add no_verify to > the redirect router in question, Lena's solution to the problem of > getting the forwarding address into an ACL ceases to be available. To

[exim] Re: Recipient verification and user .forward files

2024-05-17 Thread Ian Z via Exim-users
On Fri, May 17, 2024 at 10:39:19AM GMT, Chris Siebenmann via Exim-users wrote: Again sorry to persist in my obtuseness, but ... > > > But my question is about verification, and in particular about > > > the situation where a RCPT stage ACL will have verify = > > > recipient. The filter can't be e

[exim] Re: Recipient verification and user .forward files

2024-05-16 Thread Ian Z via Exim-users
On Thu, May 16, 2024 at 10:16:42PM GMT, Jeremy Harris via Exim-users wrote: > > But what about forwarding resulting from rules in user .forward > > files in either exim filter or sieve format? > It will be a redirect router acessing those files or filters. I understand that a redirect router wil

[exim] Recipient verification and user .forward files

2024-05-16 Thread Ian Z via Exim-users
The thread about adding forwarding headers makes me think about how verification is done in the context of forwarding. I'm looking at section 44.25 of the spec where it talks about "generated child addresses" and how it is decided if these are also recursively verified. It doesn't say but it sounds

[exim] Re: headers_add :at_start: in routers

2024-05-15 Thread Ian Z via Exim-users
On Tue, May 14, 2024 at 10:32:22AM GMT, Jeremy Harris via Exim-users wrote: > In the meantime, you could use headers_add at ACL time, perhaps in > combination with a recipient verify and use of $address_data to tell > that the message is actually being forwarded rather than delivered > locally. Y

[exim] Re: headers_add :at_start: in routers

2024-05-14 Thread Ian Z via Exim-users
On Tue, May 14, 2024 at 10:39:26PM GMT, Anton wrote: > you have two ACL rules, first one (verify recipient) "fills" the > $address_data, the second rule (above) just checks if there is any > data in the variable. I forgot that routers can be separately run for verification only, as Jeremy points

[exim] Re: headers_add :at_start: in routers

2024-05-14 Thread Ian Z via Exim-users
On Tue, May 14, 2024 at 10:32:22AM GMT, Jeremy Harris via Exim-users wrote: > One might think so... but they don't actually say so. They do > suggest ARC, which supplies essentially the same information (but > they don't say "one or the other", which feels like half-baked > guidance to me). I'd

[exim] Re: headers_add :at_start: in routers

2024-05-14 Thread Ian Z via Exim-users
On Tue, May 14, 2024 at 01:41:28PM GMT, Lena--- via Exim-users wrote: > > My problem is that I'm aware a message is forwarded only at the > > routers level (the final destination e-address is taken from > > /etc/aliases or ~/.forward) and :at_start: option does not seems > > to work in transports

[exim] Re: After upgrade, no more DKIM signature

2024-05-13 Thread Ian Z via Exim-users
On Mon, May 13, 2024 at 06:32:43PM GMT, francois via Exim-users wrote: > during a change of server, I have just made a double migration of > version of debian and thus of version of exim. > debian 11 => debian 12 > Exim version 4.94.2 => Exim version 4.96 > But since then, there's been no dkim s

[exim] Re: Unable to deliver mail to localuser: local_delivery defer (-1) Frozen

2024-05-10 Thread Ian Z via Exim-users
On Thu, May 09, 2024 at 04:58:19PM GMT, Zacchaeus Scheffer via Exim-users wrote: > Seems like when running as root, exim refuses to keep root > permissions, but when running as exim, it has insufficient > privileges? Is your exim binary setuid root? I have very recently had a similar problem, an

[exim] Re: Mailman 2 - Tainted Values

2024-05-07 Thread Ian Z via Exim-users
On Tue, May 07, 2024 at 02:53:25PM GMT, Terry M. Roy via Exim-users wrote: > Our server is set up for Mailman 2 exactly as outlined in the Exim > documentation here: https://dev.exim.org/howto/mailman21.html#exconf > (We do not do VERP or personalisation.) > 2024-05-07 08:29:16 1s3Wmx-00A3UG-0N *

[exim] Re: Question about Exim macro language

2024-05-02 Thread Ian Z via Exim-users
On Wed, May 01, 2024 at 04:52:04PM GMT, halbtaxabo-jnq--- via Exim-users wrote: > /etc/exim4/dkim/domainslist , readable by Debian-exim , and in the > /etc/exim4/exim4.conf.localmacros file the first nontrivial line is: > DKIM_DOMAIN = ${lookup{$domain:$h_from:}lsearch{/etc/exim4/dkim/domainslist

[exim] Re: missing message-id flow

2024-04-10 Thread Ian Z via Exim-users
On Wed, Apr 10, 2024 at 09:28:50AM +0300, Evgeniy Berdnikov via Exim-users wrote: > > > Why do you want to do it? What is bad with MUA's message-id? > > You can look at this message's headers :-) > I've looked, but found no answer what's bad. Probably domain is > hashed. Maybe you want an e

[exim] Re: missing message-id flow

2024-04-10 Thread Ian Z via Exim-users
On Wed, Apr 10, 2024 at 09:29:51AM +0200, Slavko via Exim-users wrote: > I have similar problem with not appropriate Message-ID domain part, > i do it in MAIL ACL: > warn conditions = ... > remove_header = Reply-To : Message-ID > set acl_m_mid = gen_new_MID

[exim] Re: missing message-id flow

2024-04-09 Thread Ian Z via Exim-users
On Tue, Apr 09, 2024 at 11:04:14PM +0300, Evgeniy Berdnikov via Exim-users wrote: > > At what point in the "life of the message" is the check for a > > message-id header made, and at what point is one generated if > > missing? > MUA should do it, and MTA may if message-id is missing. My questio

[exim] missing message-id flow

2024-04-09 Thread Ian Z via Exim-users
At what point in the "life of the message" is the check for a message-id header made, and at what point is one generated if missing? I have a client MUA which generates nontraditional, even if formally valid, message-ids, and apparently cannot be configured not to do this. I'd like to replace them

[exim] Re: Exim 4.97-RC1 released

2024-04-04 Thread Ian Z via Exim-users
While I remember dealing with this, I struggle to refocus on the details due to IRL interference. I'll tick this thread and revisit it when I can but I can't estimate the time. -- Ian -- ## subscription configuration (requires account): ## https://lists.exim.org/mailman3/postorius/lists/exim-

[exim] Re: Untainting data and Vacation configuration

2024-03-22 Thread Ian Z via Exim-users
On Fri, Mar 22, 2024 at 11:51:05AM -0700, Glenn Gregorec via Exim-users wrote: > emailUser in "emailu...@emaildomain.com"? > list element: emailu...@emaildomain.com > emailUser in "emailu...@emaildomain.com"? no (end of list) > Is this not trying to lookup the string "emailUser" in the string > "

[exim] Re: SSL Certificates

2024-03-19 Thread Ian Z via Exim-users
On Tue, Mar 19, 2024 at 11:40:05PM -0400, Jerry Stuckle via Exim-users wrote: > I got a free SSL certificate but am having problems implementing it. > It came as certificate.crt and private.key. It also contained > ca_bundle.crt. > I point tls_certificate and tls_privatekey to the appropriate fi

[exim] Re: restricted characters in address

2024-03-10 Thread Ian Z via Exim-users
On Sun, Mar 10, 2024 at 09:53:09AM +, Julian Bradfield via Exim-users wrote: > > Simple: on multiuser systems you never know who got hacked, has > > malicouse intents or uses faulty webapps. X > On a multiuser system, anybody can pipe a message into exim, can't > they? Not necessarily, in pa

[exim] Re: Reduce & inlist

2024-03-01 Thread Ian Z via Exim-users
On Fri, Mar 01, 2024 at 11:39:57AM +, Slavko via Exim-users wrote: > I am not very familiar with perl, but i will guess, that it is more > heavy than built in (simple) regex. There is definitely some overhead with the embedded perl approach, but if you just mean the regexps themselves, they a

[exim] Re: Reduce & inlist

2024-02-28 Thread Ian Z via Exim-users
On Wed, Feb 28, 2024 at 05:30:35PM +, Slavko via Exim-users wrote: > Please, is here better way to remove duplicates than use regex > in condition? I have no real solution, but as tricky as it seems to be, I think a new built-in expansion operator to uniquify a list would be a good thing. If

[exim] Re: debugging et al

2024-02-27 Thread Ian Z via Exim-users
On Tue, Feb 27, 2024 at 12:36:23PM +, graeme vetterlein via Exim-users wrote: > Incoming: (which incudes the .forward case I'm considering) > fetchamil(1) pulls the mail down and "passes" to sendmail (how? > localhost, exec a separate sendmail ...I really need to check) I haven't used fetchm

[exim] Re: Exim 4.97 issues - NetBSD 9.3

2024-02-23 Thread Ian Z via Exim-users
On Thu, Feb 22, 2024 at 12:53:21PM -0500, Kazuo Kuroi via Exim-users wrote: > 60% of guides out there are referencing a custom Debian patched version This is a bit sideways. Debian patches exim just like any GNU/Linux distro patches most upstream packages, but that's not the point. Rather, what's

[exim] Re: Exim4 smarthost troubles

2024-02-23 Thread Ian Z via Exim-users
On Thu, Feb 22, 2024 at 07:15:48PM -0700, Eric Kingston via Exim-users wrote: > It looks like the authentication methods are CRAM-MD5 PLAIN > LOGIN. Any ideas? I'll only be able to help further if you provide the native Exim configuration file, which (IIRC) Debian generates somewhere under /var.

[exim] Re: Exim4 smarthost troubles

2024-02-21 Thread Ian Z via Exim-users
I should have asked what auth mechanisms you see in the relay EHLO response? A good way to test this (or any issue with SMTP communication in fact) is with the swaks tool. -- Ian -- ## subscription configuration (requires account): ## https://lists.exim.org/mailman3/postorius/lists/exim-users

[exim] Re: Exim4 smarthost troubles

2024-02-21 Thread Ian Z via Exim-users
On Mon, Feb 19, 2024 at 04:51:30PM -0700, Eric Kingston via Exim-users wrote: > I am having trouble getting exim to authenticate to a SMTP relay. I > have made the appropriate entry in passwd.client as per the manual, > but am using the wildcard (*) considering the reverse DN lookup > implication

[exim] Re: locking et al.

2024-02-06 Thread Ian Z via Exim-users
On Mon, Feb 05, 2024 at 04:20:19PM +, Andrew C Aitchison via Exim-users wrote: > *If* maildrop has problems working exim's way, there is exim_lock > which will lock a given mailbox and then call whatever shell or > script you wish to work on the mailbox ... > https://www.exim.org/exim-html-c

[exim] Re: another transport filter question

2024-01-04 Thread Ian Z via Exim-users
On Thu, Jan 04, 2024 at 11:41:47AM +, Jeremy Harris via Exim-users wrote: > >some_transport: > > transport_filter = /usr/local/bin/frobnicate_thing ${thing} > > What happens when ${thing} expands to the empty string? Is it > > passed as an empty argument to the program, does the prog

[exim] Re: SMTP smuggling and Exim

2023-12-23 Thread Ian Z via Exim-users
On Sat, Dec 23, 2023 at 10:27:02AM +, Jeremy Harris via Exim-users wrote: > As is commonly the case, the major issue is compatibility with > non-standards-conforming systems which *was* needed in the past. > Tightening the screws may break existing installations. > Some changes in that direct

[exim] Re: undefined reference to `SSL_get0_chain_certs' error on compile

2023-12-14 Thread Ian Z via Exim-users
On Thu, Dec 14, 2023 at 02:03:30PM +, Ian B via Exim-users wrote: > Thanks, default was OpenSSL 1.0.1e-fips however, I've just tried > compiling a new OpenSSL 1.1.1w, (output below), but weirdly I get an > error when testing sending a message with it... > exim: malformed message id 1rDlww-000

[exim] Preprocessing in filter files

2023-12-10 Thread Ian Z via Exim-users
Does it work? Right now I mostly want .include but I am curious about macros too. -- Ian -- ## subscription configuration (requires account): ## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/ ## unsubscribe (doesn't require an account): ## exim-users-unsubscr...@

[exim] Re: Any changes with retry-rules in exim 4.97?

2023-12-06 Thread Ian Z via Exim-users
On Wed, Dec 06, 2023 at 05:03:47AM +0100, Niels Kobschätzki via Exim-users wrote: > > Do you see "Start queue run", "End queue run" in the mainlog? > > https://bugs.exim.org/show_bug.cgi?id=3046 > Rarely. I think that might be it. Thanks. > I just tried setting queue_fast_ramp to false (which

[exim] Re: TLS resumption fix

2023-11-28 Thread Ian Z via Exim-users
On Sun, Nov 26, 2023 at 08:31:01PM +, Jeremy Harris via Exim-users wrote: > Thanks for spotting; please try 5d0d124a8b49 Yes, works ok now. Thanks for the fix. -- Ian -- ## subscription configuration (requires account): ## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists

[exim] TLS resumption fix

2023-11-26 Thread Ian Z via Exim-users
First, forgive me for writing this here! I am not subscribed to -dev. The commit 346ccb3 , which purports to fix TLS resumption, uses the constant HNE_DEFAULT in transports/smtp.c. This constant is defined in transports/smtp.h , however the definition is conditional on DISABLE_TLS_RESUME, and the

[exim] Re: SASL not built-in despite Makefile configured

2023-11-24 Thread Ian Z via Exim-users
On Fri, Nov 24, 2023 at 02:06:30PM +0300, Mihamina RKTMB via Exim-users wrote: > My exim installation is saying supprt for saslauthd is not compiled, despite > the fact I uncommented it. You need to edit the Makefile (nee EDITME) to define the location of the saslauthd socket. The build system wi

[exim] Re: Handle sender on forwarding

2023-11-05 Thread Ian Z via Exim-users
On Sun, Nov 05, 2023 at 08:45:25PM +0300, Mihamina RKTMB via Exim-users wrote: > GMail rejects the message because my Exim server sends a message > with a "From:" set to miham...@atscom.io but atscom.io's SPF does > not allow this server to send such messages. > I have no authority on senders dom

[exim] Re: List headers [Was: DKIM does not work]

2023-11-03 Thread Ian Z via Exim-users
On Fri, Nov 03, 2023 at 12:18:05PM -0400, Chris Siebenmann wrote: > > The modification to List-Id also leaves me wondering about > > "Sender". I was previously under the impression mailing lists > > used/modified this, but apparently not. > My impression is that Sender is relatively obscure now.

[exim] Re: Exim 4.97-RC0 released

2023-10-31 Thread Ian Z via Exim-users
On Fri, Sep 08, 2023 at 02:49:03PM -0700, Ian Z via Exim-users wrote: > > tag exim-4.97-RC0 > I'll give it a spin ASAP, thanks for announcement. After disabling SPF due to the more recent uproar, it runs flawlessly here. -- Ian -- ## subscription

[exim] Re: Destination address in a transport

2023-10-25 Thread Ian Z via Exim-users
On Tue, Oct 24, 2023 at 08:48:30PM +0200, Thomas Andrews via Exim-users wrote: > I need to find out how to put the destination email address into the > my transport. How do I do that? Is that available in a ready-made > variable? Funny, I was just thinking about this too, in the context of the D

[exim] Re: List headers [Was: DKIM does not work]

2023-10-23 Thread Ian Z via Exim-users
On Mon, Oct 23, 2023 at 07:23:23PM +0200, Markus Reschke via Exim-users wrote: > When you check out the h tag of the DKIM signature header of the > large email services you'll see that they usually have only a few > signed headers (less processing load) and some oversign specific > headers. E.g. g

[exim] Re: List headers [Was: DKIM does not work]

2023-10-23 Thread Ian Z via Exim-users
On Mon, Oct 23, 2023 at 11:51:21AM +0200, Andreas Metzler via Exim-users wrote: > > It's also as per RFC 6376 Section 5.4.1. "Recommended Signature > > Content" (at least wrt. the List- headers; I didn't check them > > all). So Exim takes the opinion of the working group that defined > > DKIM, he

[exim] Re: List headers [Was: DKIM does not work]

2023-10-22 Thread Ian Z via Exim-users
On Sun, Oct 22, 2023 at 08:51:37PM +0100, Ray O'Donnell via Exim-users wrote: > On 22/10/2023 20:04, Jeremy Harris via Exim-users wrote: > > > dkim-signing with the full set of headers as per the exim > > > default set above is broken > > I'll take issue with "broken". > > If (and there's the q

[exim] List headers [Was: DKIM does not work]

2023-10-22 Thread Ian Z via Exim-users
On Sun, Oct 22, 2023 at 07:03:19PM +0200, brunoc68 via Exim-users wrote: > h=Content-Type:Message-ID:Subject:Date:MIME-Version:To:From:Sender:\ > Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description:\ > Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:\ > Resent-Message-ID

[exim] Re: Fixing or disabling TLS for internal network hosts

2023-10-07 Thread Ian Z via Exim-users
On Sat, Oct 07, 2023 at 04:10:24PM -0700, AC via Exim-users wrote: > The internal hosts are running self-signed certificates. So is there > a way to either make the self-signed certificates acceptable to the > main Exim server or otherwise disable the use of TLS by either the > internal servers or

[exim] Re: Mitigation statement for CVE-2023-42119

2023-10-06 Thread Ian Z via Exim-users
On Fri, Oct 06, 2023 at 06:24:27PM +0200, Andreas Metzler via Exim-users wrote: > The person (?) sending mails from ZDI does not answer any questions but > sends out unrelated canned responses. :-( That's how it seems to me too -- thanks for helping me regain some self-confidence :-P Does anyone

[exim] Re: Mitigation statement for CVE-2023-42119

2023-10-04 Thread Ian Z via Exim-users
On Wed, Oct 04, 2023 at 10:45:25AM +0200, Slavko via Exim-users wrote: > > responses--however, if that recursive resolver is on a different > > machine than exim itself, which probably is a common setup, then > > an attacker with access to the same local network can just send > > exim faked DNS re

[exim] Re: Exim 4.97-RC1 released

2023-09-28 Thread Ian Z via Exim-users
On Thu, Sep 28, 2023 at 01:08:11AM +0100, Jeremy Harris via Exim-users wrote: > On 28/09/2023 00:10, Ian Z via Exim-users wrote: > > Third, there is still the question why that code in lmtp.c is getting > > compiled at all (without MACRO_PREDEF) when lmtp is disabled. > A r

[exim] Re: Exim 4.97-RC1 released

2023-09-27 Thread Ian Z via Exim-users
On Wed, Sep 27, 2023 at 10:30:27PM +0100, Andrew C Aitchison via Exim-users wrote: > Ian's Local/Makfile end with: > CFLAGS = -O2 -fstack-protector-strong $(WARNINGS) $(DEFS) > ... ... > EXTRALIBS_EXIM = -lspf2 > DEFS = -D_FILE_OFFSET_BITS=64 -D_LARGEF

[exim] Re: Exim 4.97-RC1 released

2023-09-27 Thread Ian Z via Exim-users
On Wed, Sep 27, 2023 at 08:56:42AM +0100, Jeremy Harris via Exim-users wrote: > On 27/09/2023 07:32, Ian Z via Exim-users wrote: > > I see a couple of things in the build output that make me even wonder > > if my src/Local/Makefile ends up being used. > "make distclean &

[exim] Re: Exim 4.97-RC1 released

2023-09-26 Thread Ian Z via Exim-users
So far I've not been able to build it. I see a couple of things in the build output that make me even wonder if my src/Local/Makefile ends up being used. First, there's a message about preparing for dynamic lookups ... but these are disabled per my Makefile. And then, even though the lmtp transp

[exim] Re: No immediate delivery for emails locally submitted in systemd unit

2023-09-13 Thread Ian Z via Exim-users
On Tue, Sep 12, 2023 at 10:24:30AM +0200, Charles Leclerc via Exim-users wrote: > > Kinda pointless having to use a different mailer if your system > > already has Exim (which can use -odf to get around this systemd > > stupidity). > I agree, it's a litlle sad to use a different mailer (but effic

[exim] Re: Exim 4.97-RC0 released

2023-09-08 Thread Ian Z via Exim-users
On Thu, Sep 07, 2023 at 10:41:45PM +0100, Jeremy Harris via Exim-users wrote: > tag exim-4.97-RC0 I'll give it a spin ASAP, thanks for announcement. -- Ian -- ## subscription configuration (requires account): ## https://lists.exim.org/mailman3/postorius/lists/exim-user

[exim] Re: Exim 4.97-RC0 released

2023-09-08 Thread Ian Z via Exim-users
On Sat, Sep 09, 2023 at 05:28:36AM +0800, Gedalya via Exim-users wrote: > https://tracker.debian.org/pkg/libfile-fcntllock-perl Oh. It was already installed, and I looked only in the Not Installed section of aptitude :-P -- Ian -- ## subscription configuration (requires account): ## https:/

[exim] Re: Exim 4.97-RC0 released

2023-09-08 Thread Ian Z via Exim-users
On Fri, Sep 08, 2023 at 12:39:57PM +0100, Jeremy Harris via Exim-users wrote: > Yup. On FreeBSD it seems to be called p5-File-FcntlLock, OpenSDB > likewise (I think). On debian & derived, including ubuntu, the pattern would be libfile-fcntllock-perl ... which doesn't seem to exist. I haven't

[exim] once in a user filter mail command

2023-08-21 Thread Ian Z via Exim-users
The filter doc contains the following language: Commonly, the file name specified for *once* is used as the base name for direct-access (DBM) file operations. There are a number of different DBM libraries in existence. Some operating systems provide one as a default, but even in this case

[exim] Re: Return key from db lookup

2023-08-19 Thread Ian Z via Exim-users
On Sat, Aug 19, 2023 at 03:47:50PM +, Slavko via Exim-users wrote: > > Could you use one lookup to map (sub) domains to the signing > > domain, and then a second to get the selector (from a different > > file)? > I can, or at least, i think that i can. But that is what i want to > avoid. You

[exim] Re: exim systemd service: Type=exec or Type=simple

2023-07-25 Thread Ian Z via Exim-users
On Mon, Jul 24, 2023 at 10:50:53PM +0200, Heiko Schlittermann via Exim-users wrote: > > Offlist and maybe very slightly off-topic. Please also support > > sysvinit or whatever non-systemd options as well... > Support for all the "init systems" is quite impossible, I believe, > with all the flavo

[exim] Re: Tackling Bot Blasts

2023-05-29 Thread Ian Z via Exim-users
On Mon, May 29, 2023 at 10:01:56AM +0100, Pete Long via Exim-users wrote: > After trying several ACLs and even inviting IPTables to the party at > one stage, I still seemed powerless to prevent mainlog filling up > with an inordinate amount of crap; that is until this morning. Once I tried iptabl

[exim] Re: Completely remove any name in From: header for inbound email?

2023-05-26 Thread Ian Z via Exim-users
On Fri, May 26, 2023 at 10:20:32AM +0100, Sebastian Arcus via Exim-users wrote: .. snip .. > next step would be to just strip all names in the From: field altogether and > just leave the email address? Can Exim do that, and has anyone considered > it? This is the kind of transform I prefer to do

[exim] Re: How to test my userforward ie. forward?

2023-05-15 Thread Ian Z via Exim-users
On Mon, May 15, 2023 at 05:45:33PM +0100, Graeme Fowler via Exim-users wrote: > > Have secrets in a separate file? > That can be done already, in a variety of different ways. I suggest > you have a read of the documentation. If that was meant for me, it's a misunderstanding. I am very well aware

[exim] Re: How to test my userforward ie. forward?

2023-05-15 Thread Ian Z via Exim-users
On Mon, May 15, 2023 at 12:14:03PM +0100, Martin A. Brooks wrote: > > But that's quite beside the point. exim.conf should be world readable > > for the sake of users reading it with cat, less or emacs, to figure > > out what the configuration is. Anything else amounts to security by > > obscurity.

[exim] Will there be an exim 4.97?

2023-05-14 Thread Ian Z via Exim-users
Please do not interpret it as pressure or anything. I am just trying to decide if I should really start tracking the git master instead of waiting for a release announcement (or a CVE patch). -- Ian -- ## subscription configuration (requires account): ## https://lists.exim.org/mailman3/posto

[exim] Re: How to test my userforward ie. forward?

2023-05-14 Thread Ian Z via Exim-users
On Sun, May 14, 2023 at 11:51:35AM +0100, Martin A. Brooks wrote: > > If exim.conf is not readable by normal users, I'd consider it a > > serious misconfiguration. Talk to the admin about that. > The exim binary is usually setuid root, so there's no need for the config > file to be readable by re

[exim] Re: How to test my userforward ie. forward?

2023-05-12 Thread Ian Z via Exim-users
On Fri, May 12, 2023 at 07:46:54AM -0500, Robert Nicholson via Exim-users wrote: > How can I test my userforward .forward script with exim? > > I’m not the administrator. > > Where 1.txt has the contents of the email. > > /usr/sbin/exim -bf $HOME/.forward < /tmp/1.txt > 2023-05-12 05:43:38 faile