April 2016 - Users

Best Place for manual blacklisting of senders/sender_domains
by Odhiambo Washington 03 May '16

03 May '16

Right now I am using system filter to deal with some bad senders and sender_domains, but I am wondering if we can have such functionality included in the main exim.conf with the option of adding the sender addresses and sender domains in files in /etc/exim/some-files. I love keeping my exim.conf as close to the one in the distro as possible, but for some reason I don't see the most appropriate place in exim.conf to insert the rules, such as: deny message = Users have complained that you send unsolicited mail.\n\You're therefore blacklisted.\n\ Please contact abuse(a)crownkenya.com senders = ${if exists {/etc/exim/blacklisted_senders}{/etc/exim/blacklisted_senders}{}} Thanks guys and have a great week. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."

3 6

exim startup and runtime error
by Helmut Fritz 21 Apr '16

21 Apr '16

Anyone else getting this: 2016-04-20 11:54:06 WARNING: purging the environment. Suggested action: use keep_environment and add_environment. That was at startup, it also seems I get thrown at during runtime (probably moving an email through the system): 2016-04-20 10:41:38 WARNING: purging the environment. Suggested action: use keep_environment and add_environment. 2016-04-20 10:41:38 Start queue run: pid=23845 2016-04-20 10:41:38 End queue run: pid=23845 It seems it is related to a couple of new variables introduced in 4.84 after a local-to-the-system vulnerability was found, keep_environment and add_environment. But when I find some related lines as suggestions and put them into the exim.conf, exim will not start and throws: option "keep_environment" unknown stating the line in the config file that entry is on. I am definitely running 4.86_2. Thoughts? Ideas to fix? Thx. Helmut

2 2

are these being delivered
by Helmut Fritz 20 Apr '16

20 Apr '16

Or dropped? This is from mainlog: 2016-04-20 12:31:08 1asxpu-0000Is-Dh DKIM: d=reply1.ebay.com s=emarsys2007 c=relaxed/relaxed a=rsa-sha1 i=eBay(a)reply1.ebay.com [verification succeeded] 2016-04-20 12:31:10 1asxpu-0000Is-Dh H=e3uspmta148.emarsys.net [91.194.248.148] Warning: spam-score-int: 27 (++). spamreject: 100. There is nothing corresponding in rejectlog, at least I cannot find anything. searched by the d= address and the H= address and i.p. Since there is no to: address, I cannot ask an end user. I do find this in the /var/logs/maillog with a corresponding time stamp: Apr 20 12:31:08 svr6 spamd[1097]: spamd: connection from localhost [127.0.0.1]:49471 to port 783, fd 6 Apr 20 12:31:08 svr6 spamd[1097]: spamd: setuid to spamd succeeded Apr 20 12:31:08 svr6 spamd[1097]: spamd: checking message <0.0.26.9A4.1D19AFD842264CA.0(a)e3uspmta148.emarsys.net> for spamd:58 Apr 20 12:31:10 svr6 spamd[1097]: spamd: identified spam (2.7/0.0) for spamd:58 in 1.8 seconds, 60322 bytes. Apr 20 12:31:10 svr6 spamd[1097]: spamd: result: Y 2 - DATE_IN_PAST_06_12,DCC_CHECK,HTML_MESSAGE,MONEY_BACK,RCVD_IN_DNSWL_NONE,RCVD _IN_RP_SAFE scantime=1.8,size=60322,user=spamd,u id=58,required_score=0.0,rhost=localhost,raddr=127.0.0.1,rport=49471,mid=<0. 0.26.9A4.1D19AFD842264CA.0(a)e3uspmta148.emarsys.net>,autolearn=no autolearn_force=no but nothing about the disposition of the email? Thx for any help, or pointing me to the right place to research/ask questions.

1 0

pleased so far
by Helmut Fritz 19 Apr '16

19 Apr '16

Gordon, So far I am REALLY liking the exim4u setup. SPAM has become non-existent on the domain I have moved over to the exim4u server. This work is very much appreciated, and a big thanks to the vexim people too as well and anyone else that has contributed Anyone (if you get to this before Gordon!), A couple emails have come in (I see them in the logs) that my wife wants ( ugh ) that the rest fo the world, including myself, would consider spam. How to ensure these come through? Can she add to whitelist herself through her account management? I logged in as her but only saw a block filter customization? Is this something only to be done through webmail? 2016-04-15 23:21:18 H=outbound-191-242.usw2.aws.post.pinterest.com [54.149.191.242] X=TLSv1.2:ECDHE-RS A-AES256-GCM-SHA384:256 CV=no F=<bounces-457326674569107362(a)explore.pinterest.com> rejected RCPT <mywife(a)fritz.us.com>: Spammer rejected. DNSBL listed at bl.spamcop.net at Blocked - see http://www.spamcop.net/bl.shtml?54.149.191.242. Ratelimit incremented. Also, is there a spam/ham training facility either for the server as a whole, per domain, or per user? i.e. ham@ and spam@ to which emails can be sent to for training? Am I missing a portion of documentation to read? I am fine with someone stating to RTFM, please tell me where the M is. J Thx. Helmut

4 20

issues with php-extesions install
by Helmut Fritz 16 Apr '16

16 Apr '16

OK, first issue, probably minor. I get this installing the default php: "This port is deprecated; you may wish to reconsider installing it: PHP 5.4 is End of Life http://php.net/supported-versions.php. It is scheduled to be removed on or after 2016-01-15." Figuring I should go to the latest version then, I installed php56 and then progressed to php56-extensions. All good except that I found two of the extensions listed as required in the appendix for BSD are not present in the extensions setup to select. Those two are: php-spl php-pcre unfortunately the same issue is present in the base/default php-extensions as I went back there to see if they were present. I also get a STOP when php-mbstring comes up, saying it has vulnerabilities in the latest php56. I get a deprecated in the base/default php-extensions build. While compiling the default/base php5-extensions I get a STOP on building php5-phar. This is not in the list of required extensions but is listed as a dependency for php5-pdo (during its make). "===> php5-phar-5.4.45 has known vulnerabilities: php5-phar-5.4.45 is vulnerable: php -- multiple vulnerabilities CVE: CVE-2015-7804 CVE: CVE-2015-7803 WWW: https://vuxml.FreeBSD.org/freebsd/c1da8b75-6aef-11e5-9909-002590263bf5.html" So maybe three questions: 1. Should I use the deprecated (but seemingly default/base) php5 (5.4.x) or the newer php56? 2. Do the two missing extensions matter? if so, where do I get them? (see 2.a below!) 3. For the default php5-phar, am I safe setting 'DISABLE_VULNERABILITIES=yes' for make? I could do the same for the newer version and ignore the mbstring vulnerability. 2.a. Interestingly enough when I run php -m, it shows both SPL and pcre as loaded - I think they are actually in core for quite a long while now? perhaps they should be removed from the required list (unless it is assumed people are smarter than I and know they are part of core?)? So this whole thing is probably OK except for the issues with mbstring and phar vulnerabilities?

4 17

CentOS7/systemd
by Helmut Fritz 06 Apr '16

06 Apr '16

Hello, First message here. I am looking to get off of qmailtoaster (been running it for many, many years) since even it is not well maintained any more. I am looking at either postfix or exim, and an easy tool to manage them (limited free time=hobby business). I ran across exim4u and it looks like it might fit the bill. Other platforms I am looking at are ISPConfig and BlueOnyx (yes, I know, sendmail), Xeams, Virtualmin. I know all of those are not email only, but I hope I can just ignore the other portions of those application stacks. I do like that exim4U is first for email, exactly what I want/need. I do have a couple questions: 1. Is it maintained and being further developed? I am not concerned if it is slow development, but what exists should be relatively solid. 2. Will it run on CentOS7 or other systemd platforms? Seems they are all pretty much going that way unfortunately. Thx! Helmut

6 16