[exim] Re: smtp_accept_max & DDoS

2023-05-11 Thread Lena--- via Exim-users
> To: exim-users @ lists.exim.org ~ $ dig lists.exim.org mx ;; QUESTION SECTION: ;lists.exim.org.IN MX ;; ANSWER SECTION: lists.exim.org. 294 IN CNAME cumin.exim.org. cumin.exim.org. 300 IN MX 10 cumin.exim.org. In my home com

[exim] Re: smtp_accept_max & DDoS

2023-05-13 Thread Lena--- via Exim-users
Please create DNS records instead of CNAME: lists.exim.org. 300 IN MX 10 lists.exim.org. lists.exim.org. 300 IN A 37.120.190.30 Or accept emails to lists sent to . Else some people trying to post to lists get "unknown user" because sendmail "canonicalises" hostnames. > From: Andrew C Aitchison

[exim] FreeBSD port of Exim 4.96

2023-05-31 Thread Lena--- via Exim-users
I tried to upgrade to Exim 4.96 using recently updated FreeBSD port, but got errors in paniclog: 2023-05-30 11:11:45 +0300 ACL for not-QUIT returned ERROR: failed to expand ACL string "${run{/bin/sh -c 'echo \\\"$sender_host_address${if match{$sender_host_address}{:}{/56}}\\\" >>$spool_directory

[exim] Re: delay not kicking in

2023-06-04 Thread Lena--- via Exim-users
> > BTW, the RBLs are good not only for rejection, but eg. to > > disable PIPELINING for suspicious hosts too... > > I've never used external blacklists (because I don't trust other > people to make my spam decisions for me), but that would be a harmless > use for them. Another not too harmful us

[exim] Re: Tainted search

2023-06-14 Thread Lena--- via Exim-users
> Fixed by adding brackets - etc... > > dkim_domain = ${lookup mysql {select domain from admin WHERE > domain='${quote_mysql:${domain:$h_from:}}' limit 1}} Also, you should use $rh_from: instead of $h_from:, same as with ${address and ${addresses . -- ## subscription configuration (requires

[exim] Re: De-Tainting in a filter-file?

2023-07-25 Thread Lena--- via Exim-users
> test-blacklist%40domain.tld ${quote_ldap:$local_part}@${quote_ldap:$domain} ${quote_ldap:${local_part:$rh_from:}}@${quote_ldap:${domain:$rh_from:}} -- ## subscription configuration (requires account): ## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/ ## unsubscr

[exim] OpenSSL 3 under FreeBSD

2023-09-11 Thread Lena--- via Exim-users
FreeBSD port of openssl 1.1.1 had an update yesterday, it says: Final version of OpenSSL 1.1.1, this port will upgrade to 3.0 (LTS) with a next commit. Does somebody use Exim with openssl 3 under FreeBSD already? Perhaps Exim will need to be recompiled? -- ## subscription configuration (requir

[exim] Re: Exim Zero Day?

2023-10-02 Thread Lena--- via Exim-users
> Every system has been hit with this "test" : > > 2023-10-02 04:48:31 SMTP call from (hello) [152.32.233.30] dropped: too > many syntax or protocol errors (last command was "AUTH NTLM > TlRMTVNTUAABB4IIAAA=", C=EHLO,HELP,AUTH) > > "TlRMTVNTUAABB4IIAA

[exim] Re: Server side PLAIN and LOGIN Auth against PAM

2023-10-21 Thread Lena--- via Exim-users
> | - If you want to use /etc/shadow for Exim's SMTP AUTH you will need to > | run exim as group shadow. [...] We suggest using saslauthd instead. I use PAM and pam_pop3: plain: driver = plaintext public_name = PLAIN server_prompts = : server_condition = ${if pam{$auth2:${sg{$auth3}{:}{::

[exim] Re: Routing based on *recipient* IP address

2023-10-27 Thread Lena--- via Exim-users
> From: Gandalf Corvotempesta > # exim -be '${lookup dnsdb{>; a+=${lookup dnsdb{>; mxh=gmail.com' Must be : instead or ; before mxh. -- ## subscription configuration (requires account): ## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/ ## unsubscribe (doesn't r

[exim] Re: Any changes with retry-rules in exim 4.97?

2023-12-05 Thread Lena--- via Exim-users
> > It is like exim accepts the mail, puts it into the queue > > and then nothing happens. > In the log I see for those messages: no immediate delivery: > more than 10 messages received in one connection > But I would expect that a queue runner (I start exim with -q10m) > in a future run would tak

[exim] Re: Any changes with retry-rules in exim 4.97?

2023-12-05 Thread Lena--- via Exim-users
> >> But I would expect that a queue runner (I start exim with -q10m) > >> in a future run would take these messages but it doesn't seem to happen. > > > > Do you see "Start queue run", "End queue run" in the mainlog? > > https://bugs.exim.org/show_bug.cgi?id=3046 > > Rarely. I think that might b

[exim] Re: Fwd: undefined reference to `SSL_get0_chain_certs' error on compile

2023-12-14 Thread Lena--- via Exim-users
> I'm trying to compile Exim 4.97 on a couple of older Centos > servers with TLS (fine on older versions of exim without TLS). > > However, I get an error > > tls.o: In function `tls_client_stapling_cb': > tls.c:(.text+0x3315): undefined reference to `SSL_get0_chain_certs' man SSL_get0_chain_cer

[exim] Re: How to restrict client login through IP whitelist

2024-03-26 Thread Lena--- via Exim-users
> Is there a way to solve a scenario here? The IP whitelist restricts > forwarding after logging in with user name and password, but does not > restrict the acceptance of emails sent by third parties. > and the `acl_smtp_auth` can resolve it ? No, you add a condition into the paragraph with "acce

[exim] Re: SIGSEGV in panic log

2024-04-07 Thread Lena--- via Exim-users
> - can you set up for a core dump, Under FreeBSD: sysctl kern.sugid_coredump=1 > and get a stack trace? One of ways: pkg install gdb Add to /etc/make.conf : .if ${.CURDIR} == ${PORTSDIR}/mail/exim CFLAGS+= -g -O0 -ggdb .endif > - are you able to compile from source? One of ways to compile

[exim] Re: headers_add :at_start: in routers

2024-05-14 Thread Lena--- via Exim-users
> My problem is that I'm aware a message is forwarded only at the routers level > (the final destination e-address is taken from /etc/aliases or ~/.forward) > and :at_start: option does not seems to work in transports I'm not sure, but you can try: In routers place the content you need into addre

[exim] Re: Exim 4.98-RC0 released

2024-06-08 Thread Lena--- via Exim-users
> FreeBSD 14.1-RELEASE here. > Using my Makefile for 4.97.1, the compile fails too early with: Under FreeBSD 13.2 I used port for Exim 4.97.1 to compile 4.98-RC0: cd /usr/ports/mail/exim rm files/patch-periodic-queue-runs files/patch-src-lookups-dnsdb.c files/patch-src_tls-openssl.c make extract

[exim] Re: filter issue with Japanese characters

2024-07-23 Thread Lena--- via Exim-users
> From: Vaibhav Chauhan > headers charset "UTF-8" > if > $header_subject: contains "??" > The issue is when I send an email from something like google or outlook the > filter is not detecting because of this mail agents send base64 encoded > content and exim not decoding it. Likely you need to

[exim] Re: exim don't speak to google any more!

2024-07-29 Thread Lena--- via Exim-users
> From: Francois Sauterey > the TLS part of my configuration: > tls_require_ciphers = "SECURE256" Did you try to comment out this line and restart Exim? > From: Thomas Krichel > It's a significant pollutant of logs. My logs aren't polluted like that. I have in transport: driver = smtp ho

[exim] Re: Exim attempting retries in rapid succession without delay?

2024-09-28 Thread Lena--- via Exim-users
> I discovered an anomaly in our exim_mainlog which appears to be > exim sending retries for a failed message with no delay in between. > H=mta6.am0.yahoodns.net [98.136.96.75]:25: > H=mta6.am0.yahoodns.net [67.195.204.73]:25: > H=mta6.am0.yahoodns.net [67.195.228.106]:25: > H=mta6.am0.yahoodns

[exim] Re: Exim keeps adding primary hostname for authenticated users

2025-04-13 Thread Lena--- via Exim-users
> when I try to send an email from u...@example.com it works > without a problem, but as soon as I try the same using Thunderbird as an MTA > it changes the from to "u...@examle.com"@primary_hostname.com There are at least two solutions, the one I use: control = submission/domain= (with

[exim] Re: Oversigning Resent-xxx headers

2025-07-23 Thread Lena--- via Exim-users
> i would use = prefix only for > Resent-* and List-* headers begin transports remote_smtp: driver = smtp dkim_sign_headers = ${map{_DKIM_SIGN_HEADERS}\ {${if match{$item}{^(List|Resent)-}{=$item}{$item dkim_domain = ... -- ## subscription configuration (requires account): ## ht