Mailing List Archive: exim: users

Testing Exim 4.70 prerelease

1 2 3

View All

Index | Next | Previous | View Threaded

v.tolstov at selfip

Oct 28, 2009, 1:16 AM

Post #51 of 53 (147 views)
Permalink

Re: Testing Exim 4.70 prerelease [In reply to]

В Пнд, 19/10/2009 в 16:18 +0200, Tom Kistner пишет:
> Vasiliy G Tolstov wrote:
>
> > Do You have some ideas of this behaviour?
>
> I have now added the bits that allow add_header in the DKIM ACL.
>
> /tom
>
>
>

Hello again.

I have this acl to protect from mail forgery:

deny message = X-ACL-DKIM: Possible mail
forgery
!dkim_status = pass
dkim_signers = SYS_DOMAINS_LOCAL
condition = ${if {match_domain{${domain:
$h_From:}}{SYS_DOMAINS_LOCAL}}{yes}{no}}
!hosts = +SYS_HOSTS_WHITE

Why i get now in exim logs this message:

Oct 22 10:15:21 selfip exim[22391]: [1\17] [22391] 1N0qxF-0005p9-7l
H=[UNAVAILABLE] (62-47-210-44.adsl.highway.telekom.at)
[62.47.210.44]:40428 I=[127.0.0.1]:25 temporarily rejected DKIM : failed
to expand ACL string "${if {match_domain{${domain:
$h_From:}}{SYS_DOMAINS_LOCAL}}{yes}{no}}": condition name expected, but
found "{match_domain{${"
Oct 22 10:15:21 selfip exim[22391]: [2\17] Envelope-from:
<v.tolstov[at]selfip.ru>
Oct 22 10:15:21 selfip exim[22391]: [3\17] Envelope-to:
<v.tolstov[at]selfip.ru>
Oct 22 10:15:21 selfip exim[22391]: [4\17] X-ACL-DKIM: none
Oct 22 10:15:21 selfip exim[22391]: [5\17] P Received: from
[UNAVAILABLE] ([62.47.210.44]:40428
helo=62-47-210-44.adsl.highway.telekom.at)
Oct 22 10:15:21 selfip exim[22391]: [6\17] by mxs.selfmail.ru with
esmtp (Exim 4.70)
Oct 22 10:15:21 selfip exim[22391]: [7\17] (envelope-from
<v.tolstov[at]selfip.ru>)
Oct 22 10:15:21 selfip exim[22391]: [8\17] id 1N0qxF-0005p9-7l
Oct 22 10:15:21 selfip exim[22391]: [9\17] for v.tolstov[at]selfip.ru;
Thu, 22 Oct 2009 10:15:21 +0400
Oct 22 10:15:21 selfip exim[22391]: [10\17] Date: Thu, 22 Oct 2009
08:15:00 +0200
Oct 22 10:15:21 selfip exim[22391]: [11\17] T To: v.tolstov[at]selfip.ru
Oct 22 10:15:21 selfip exim[22391]: [12\17] F From: "Virgie Trebil"
<v.tolstov[at]selfip.ru>
Oct 22 10:15:21 selfip exim[22391]: [13\17] Subject: Events lately
Oct 22 10:15:21 selfip exim[22391]: [14\17] I Message-ID:
<9E62G9329W6382C67.UPBNQLDDKL.4EF5FE61EAA0F[at]NBJAKOB>
Oct 22 10:15:21 selfip exim[22391]: [15\17] X-Priority: 3
Oct 22 10:15:21 selfip exim[22391]: [16\17] MIME-Version: 1.0
Oct 22 10:15:21 selfip exim[22391]: [17/17] Content-Type: text/html;
charset="UTF-8"

--
Vasiliy G Tolstov <v.tolstov[at]selfip.ru>
Selfip.Ru

--
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

graeme at graemef

Oct 28, 2009, 1:22 AM

Post #52 of 53 (147 views)
Permalink

Re: Testing Exim 4.70 prerelease [In reply to]

On Wed, 2009-10-28 at 11:16 +0300, Vasiliy G Tolstov wrote:
> I have this acl to protect from mail forgery:
>
> deny message = X-ACL-DKIM: Possible mail
> forgery
> !dkim_status = pass
> dkim_signers = SYS_DOMAINS_LOCAL
> condition = ${if {match_domain{${domain:
> $h_From:}}{SYS_DOMAINS_LOCAL}}{yes}{no}}
> !hosts = +SYS_HOSTS_WHITE
>
> Why i get now in exim logs this message:
>
> Oct 22 10:15:21 selfip exim[22391]: [1\17] [22391] 1N0qxF-0005p9-7l
> H=[UNAVAILABLE] (62-47-210-44.adsl.highway.telekom.at)
> [62.47.210.44]:40428 I=[127.0.0.1]:25 temporarily rejected DKIM : failed
> to expand ACL string "${if {match_domain{${domain:
> $h_From:}}{SYS_DOMAINS_LOCAL}}{yes}{no}}": condition name expected, but
> found "{match_domain{${"

You need:

${if match_domain{${domain:$h_From:}}{SYS_DOMAINS_LOCAL}{yes}{no}}

Your second opening brace is superfluous and separates the condition
from the "if".

Graeme

--
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

toddr at cpanel

Oct 29, 2009, 12:09 PM

Post #53 of 53 (137 views)
Permalink

Re: Testing Exim 4.70 prerelease [In reply to]

Tom Kistner, 2009-10-13 17:38:

> The release of Exim 4.70 is on the horizon. A lot of stuff has

Concerning PCRE, We generate exim RPMs for many platforms. We made a
decision to compile PCRE in staticly due to the fact that PCRE just
isn't going to be consistently available on some of the older platforms.

I had to use the --disable-cpp option with PCRE's configure in order
to prevent a linker hang on Redhat AS 2.1, which uses gcc 2.96. This
doesn't seem to be an across the board problem for gcc 2.96, but I
thought I'd let everyone know in the event someone else is banging
their head against that paticular wall.

Exim 4.70 is now compiling for us on:
32bit:
caos/2
centos/3.1
centos/4.0
centos/5.0
debian/3.0-r2
debian/3.1
fedora/1
fedora/10
fedora/11
fedora/2
fedora/3
fedora/4
fedora/5
fedora/6
fedora/7
fedora/8
fedora/9
mandrake/10.0
mandrake/2006
mandrake/8.2
mandrake/9.0
mandrake/9.2
mandrake/9.2.1
redhat/7.3
redhat/9
redhat/AS-2.1
redhat/AS-3
redhat/AS-5
redhat/ES-4
suse/10.0
suse/11.0
suse/9.0
suse/9.1
suse/9.3
trustix/2
trustix/2.2
whitebox/3.0
whitebox/3-fixed
whitebox/3-respin-1

64bit:
centos/4.0
centos/5.0
fedora/1
fedora/10
fedora/11
fedora/2
fedora/3
fedora/4
fedora/5
fedora/6
fedora/7
fedora/8
fedora/9
mandrake/2006
redhat/AS-3
redhat/AS-5
redhat/ES-4
suse/10.0
suse/11.0
suse/9.1
suse/9.3
whitebox/3.0

--
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

1 2 3

View All

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact lists@gossamer-threads.com