Mailing List Archive: exim: users

Need help with exim.

Index | Next | Previous | View Threaded

mkp_71 at yahoo

Nov 16, 2009, 7:04 AM

Post #1 of 13 (1778 views)
Permalink

Need help with exim.

Hi, i have mail server with exim+spamassassin, some of users start to get
message from MAILER-DAEMON or mail delivery subsystem. What i need to change
in exim to reject them. This is my exim.conf:

domainlist local_domains = domain.com
domainlist relay_to_domains =
hostlist relay_from_hosts = 127.0.0.1: 192.168.0.0/16
log_file_path = syslog
message_size_limit = 30M
smtp_receive_timeout=5m
smtp_accept_queue = 100
smtp_accept_max = 40
smtp_accept_max_per_host = 5
acl_smtp_rcpt = acl_check_rcpt
acl_smtp_data = acl_check_data
av_scanner = clamd:/var/run/clamav/clamd.sock
spamd_address = /var/run/spamd.sock
#spamd_address = 127.0.0.1 783
never_users = root
#host_lookup =
host_lookup = 0.0.0.0/0
host_lookup_order = byaddr
rfc1413_hosts = *
rfc1413_query_timeout = 0s
ignore_bounce_errors_after = 1d
errors_reply_to = postmaster [at] domain
timeout_frozen_after = 3d
timeout_frozen_after = 3d
helo_allow_chars = _
begin acl
acl_check_rcpt:
accept hosts = :
deny hosts =

deny message = Restricted characters in address
domains = +local_domains
local_parts = ^[.] : ^.*[@%!/|]
deny message = Restricted characters in address
domains = !+local_domains
local_parts = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
accept local_parts = postmaster
domains = +local_domains
require verify = sender
accept domains = +local_domains
endpass
verify = recipient
accept hosts = +relay_from_hosts
control = submission
domains = !+local_domains
accept authenticated = *
control = submission
accept domains = +relay_to_domains
endpass
verify = recipient
deny message = relay not permitted
acl_check_data:

deny message = Serious MIME defect detected ($demime_reason)
demime = *
deny message = This message contains a virus ($malware_name) and has
been rejected.
# skip virus check when message is larger than 1MB
condition = ${if <{$message_size}{1m}{1}{0}}
demime = *
malware = *

# warn message = X-SA-Report: $spam_report
# spam = mail:true
# condition = ${if >{$spam_score_int}{0}{1}{0}}
# warn message = X-SA-Status: Yes
# spam = mail:true
# condition = ${if >{$spam_score_int}{40}{1}{0}}
# deny message = This message scored $spam_score spam points.
# spam = mail:true
# condition = ${if >{$spam_score_int}{120}{1}{0}}

warn message = X-Spam_score: $spam_score\n\
X-Spam_score_int: $spam_score_int:\n\
X-Spam_bar: $spam_bar\n\
X-Spam_report: $spam_report
# X-Spam_flag: Yes
# condition = ${if <{$message_size}{100k}{1}{0}}
spam = mail:true
deny message = This message was classified as SPAM
condition = ${if >{$spam_score_int}{55}}
accept
begin routers

spamassassin_router:
driver = accept
transport = spamassassin
condition = ${if eq {$received_protocol}{smtp}{}}
# no_verify
# no_expn

first_liases:
driver = redirect
domains = +local_domains
data = ${lookup{$local_part@$domain}lsearch{/etc/aliases}}
user = mail
file_transport = address_file
pipe_transport = address_pipe
allow_fail
allow_defer

localuser:
driver = accept
domains = +local_domains
check_local_user
address_data = "spam_score=40 use_spam_folder=1 mark_spam_prio=1"
transport = local_delivery
cannot_route_message = Unknown user

dnslookup:
driver = dnslookup
domains = ! +local_domains
transport = remote_smtp
ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8

last_fail:
driver = redirect
allow_fail
data = :fail:No such user $local_part at $domain
no_more
begin transports

# This transport is used for delivering messages over SMTP connections.

remote_smtp:
driver = smtp

local_delivery:
driver = appendfile
user = $local_part
group = mail
maildir_format
delivery_date_add
envelope_to_add
return_path_add
mode = 0660
headers_remove=${if
and{{MARK_SPAM}{or{{IS_SPAM}{IS_LOW_PRIO}}}}{X-MSMail-Priority:X-Priority}{}}
headers_add = ${if and{{MARK_SPAM}{IS_SPAM}}{X-MSMail-Priority: Low}{}}
directory = $home/Maildir${if and{{IS_SPAM}{USE_SPAM_FLDR}}{/.SPAM}{}}
address_pipe:
driver = pipe
return_output

address_file:
driver = appendfile
delivery_date_add
envelope_to_add
return_path_add

address_reply:
driver = autoreply

antivirus:
driver = pipe
batch_max = 200
command = /bin/nice -19 /inet/src/scan/ph ${pipe_addresses}
return_output = false
return_path_add = false
user = mail
group = mail

spamassassin:
driver = pipe
use_bsmtp = true
command = /usr/exim/bin/exim -bS -oMr sa-checked
transport_filter = /usr/bin/spamc -f
home_directory = /tmp
current_directory = /tmp
user = mail
group = mail
log_output = true
begin retry

begin rewrite

begin authenticators

dovecot_plain:
driver = dovecot
public_name = LOGIN
#server_prompts = "Username:: : Password::"
server_socket = /var/run/dovecot/auth-client

--
View this message in context: http://old.nabble.com/Need-help-with-exim.-tp26373475p26373475.html
Sent from the Exim Users mailing list archive at Nabble.com.

--
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

exim-users at spodhuis

Nov 16, 2009, 11:06 AM

Post #2 of 13 (1721 views)
Permalink

Re: Need help with exim. [In reply to]

On 2009-11-16 at 07:04 -0800, mkp_71 wrote:
> Hi, i have mail server with exim+spamassassin, some of users start to get
> message from MAILER-DAEMON or mail delivery subsystem. What i need to change
> in exim to reject them. This is my exim.conf:

> begin routers
>
>
> spamassassin_router:
> driver = accept
> transport = spamassassin
> condition = ${if eq {$received_protocol}{smtp}{}}
> # no_verify
> # no_expn

Uncomment no_verify.

Currently, this Router accepts all mail. So all addresses verify. For
the purposes of verification, you want to pretend this step is not
present.

-Phil

--
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

h at rdyl

Nov 17, 2009, 4:17 AM

Post #3 of 13 (1718 views)
Permalink

Re: Need help with exim. [In reply to]

Am Montag, den 16.11.2009, 07:04 -0800 schrieb mkp_71:
> Hi, i have mail server with exim+spamassassin, some of users start to get
> message from MAILER-DAEMON or mail delivery subsystem. What i need to change
> in exim to reject them. This is my exim.conf:
>
> domainlist local_domains = domain.com
> ...

Please respect the supporter and reader of the list.
Read http://www.catb.org/~esr/faqs/smart-questions.html#bespecific
The whole document is recommended.
rgds Hardy

--
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

mkp_71 at yahoo

Nov 18, 2009, 2:53 AM

Post #4 of 13 (1703 views)
Permalink

Re: Need help with exim. [In reply to]

Anyone? How to reject empty return path, it's look like this:

Return-path: <>
Envelope-to: user [at] domain
Delivery-date: Fri, 13 Nov 2009 18:29:08 +0200
Received: from nvkbank.ru ([88.147.255.114] helo=mailsrv2.nvk.int)
by mail.domain.com with esmtp (Exim 4.68)
id 1N8z1G-0000Pj-Pz
for user [at] domain; Fri, 13 Nov 2009 18:29:08 +0200
From: postmaster [at] nvk
To: user [at] domain
Date: Fri, 13 Nov 2009 19:27:58 +0300
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="9B095B5ADSN=_01CA639C022DF13600006D5Cmailsrv2.nvk.int"
X-DSNContext: 7ce717b1 - 1391 - 00000002 - C00402D1
Message-ID: <hO06wLJkI000032ce [at] mailsrv2>
Subject: Delivery Status Notification (Failure)
--
View this message in context: http://old.nabble.com/Need-help-with-exim.-tp26373475p26405793.html
Sent from the Exim Users mailing list archive at Nabble.com.

--
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

renaud at allard

Nov 18, 2009, 3:08 AM

Post #5 of 13 (1714 views)
Permalink

Re: Need help with exim. [In reply to]

mkp_71 wrote:
> Anyone? How to reject empty return path, it's look like this:
>
> Return-path: <>

I think nobody sane will answer you. Empty return paths are mandatory
for any well behaving MTA.
Read http://www.rfc-ignorant.org/policy-dsn.php for a summary

Attachments:

smime.p7s (5.01 KB)

nigel.metheringham at dev

Nov 18, 2009, 3:12 AM

Post #6 of 13 (1708 views)
Permalink

Re: Need help with exim. [In reply to]

On 18 Nov 2009, at 10:53, mkp_71 wrote:

> Anyone? How to reject empty return path, it's look like this:

You really do not want to reject an empty return path - that is a documented part of the SMTP spec and except in very specialised circumstances rejecting on this is a really bad idea.

Earlier queries on the mailing list can be found here:-
http://lists.exim.org/lurker/message/20080412.043718.680ed059.en.html

If you really want to do this (and if its a publically accessible mail system then you should expect to get listed on http://rfc-ignorant.org/policy-dsn.php ) - then you need to use the sender ACL condition - see its description within
http://docs.exim.org/current/spec_html/ch40.html#SECTaclconditions

Nigel.

--
[ Nigel Metheringham Nigel.Metheringham [at] InTechnology ]
[. - Comments in this message are my own and not ITO opinion/policy - ]

--
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

iane at sussex

Nov 18, 2009, 4:46 AM

Post #7 of 13 (1713 views)
Permalink

Re: Need help with exim. [In reply to]

--On 18 November 2009 02:53:30 -0800 mkp_71 <mkp_71 [at] yahoo> wrote:

>
> Anyone? How to reject empty return path, it's look like this:
>

If you're having problems with spam blowback, then there are better things
that you can do. As others have said, you shouldn't reject on an empty
return-path.

However, you read
<http://en.wikipedia.org/wiki/Bounce_Address_Tag_Validation> for an
alternative solution. Beware, it doesn't play well with Exim vacation
messages, for example.

Also, you might like to rate limit the number of bounce messages per
recipient. Make sure your limits correspond to the amount of outbound mail,
though.

Finally, if you reject on an empty return path before the DATA command, you
may find yourself unable to send messages to sites that use sender
verification callouts.

You may be able to reduce the amount of bounces you get by publishing SPF
records.

--
Ian Eiloart
IT Services, University of Sussex
01273-873148 x3148
For new support requests, see http://www.sussex.ac.uk/its/help/

--
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

mkp_71 at yahoo

Nov 23, 2009, 1:37 AM

Post #8 of 13 (1606 views)
Permalink

Re: Need help with exim. [In reply to]

Thanks to Nigel Metheringham, Renaud Allard, Ian Eiloart for your help.
I'll try all your suggestions.

--
View this message in context: http://old.nabble.com/Need-help-with-exim.-tp26373475p26474934.html
Sent from the Exim Users mailing list archive at Nabble.com.

--
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

mkp_71 at yahoo

Nov 30, 2009, 1:54 AM

Post #9 of 13 (1471 views)
Permalink

Re: Need help with exim. [In reply to]

Thanks to Phil Pennock. :)
--
View this message in context: http://old.nabble.com/Need-help-with-exim.-tp26373475p26571894.html
Sent from the Exim Users mailing list archive at Nabble.com.

--
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

randy at psg

Nov 30, 2009, 4:31 AM

Post #10 of 13 (1472 views)
Permalink

Re: Need help with exim. [In reply to]

> Thanks to Phil Pennock. :)

phil and warren have bailed me out innumberable times

--
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

mkp_71 at yahoo

Dec 14, 2009, 3:49 AM

Post #11 of 13 (1309 views)
Permalink

Re: Need help with exim. [In reply to]

I still have trouble with mail delivery failed spam. My exim.conf now is:

primary_hostname = mail.domain.com
domainlist local_domains = domain.com
domainlist domains_we_reject = *.*.*.ru:*.*.ru:*.ru:*.br:*.in:*.cn:*.rus
domainlist relay_to_domains =
hostlist relay_from_hosts = 127.0.0.1: 192.168.0.0/16
log_file_path = syslog
message_size_limit = 30M
smtp_receive_timeout=5m
smtp_accept_queue = 100
smtp_accept_max = 40
smtp_accept_max_per_host = 5
acl_smtp_rcpt = acl_check_rcpt
acl_smtp_data = acl_check_data
av_scanner = clamd:/var/run/clamav/clamd.sock
spamd_address = /var/run/spamd.sock
#spamd_address = 127.0.0.1 783
never_users = root
#host_lookup =
host_lookup = 0.0.0.0/0
host_lookup_order = byaddr
rfc1413_hosts = *
rfc1413_query_timeout = 0s
ignore_bounce_errors_after = 1d
errors_reply_to = postmaster [at] domain
timeout_frozen_after = 3d
helo_try_verify_hosts = !+relay_from_hosts
helo_allow_chars =
begin acl
acl_check_rcpt:
check_recipient:
# stop bounce from us, lets do it by sender's server
accept domains = +local_domains
endpass
message = unknown user
verify = recipient

accept hosts = :

deny
log_message = match in spam list
dnslists = bl.spamcop.net:sbl.spamhaus.org
deny sender_domains = +domains_we_reject
message = Unknown users
deny message = Restricted characters in address
domains = +local_domains
local_parts = ^[.] : ^.*[@%!/|]
deny message = Restricted characters in address
domains = !+local_domains
local_parts = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
accept local_parts = postmaster
domains = +local_domains
require verify = sender
accept domains = +local_domains
endpass
verify = recipient
accept hosts = +relay_from_hosts
control = submission
domains = !+local_domains
accept authenticated = *
control = submission
accept domains = +relay_to_domains
endpass
verify = recipient
deny message = relay not permitted

acl_check_data:

deny message = Serious MIME defect detected ($demime_reason)
demime = *
deny message = This message contains a virus ($malware_name) and has
been rejected.
# skip virus check when message is larger than 1MB
condition = ${if <{$message_size}{1m}{1}{0}}
demime = *
malware = *

# Messages larger than 150k are accepted without spam scanning to reduce
spamd load

accept condition = ${if >{$message_size}{150k}{true}}

warn message = X-SA-Report: $spam_report
spam = mail:true
condition = ${if >{$spam_score_int}{0}{1}{0}}
warn message = X-SA-Status: Yes
spam = mail:true
condition = ${if >{$spam_score_int}{40}{1}{0}}
deny message = This message scored $spam_score spam points.
spam = mail:true
condition = ${if >{$spam_score_int}{120}{1}{0}}

# warn message = X-Spam_score: $spam_score\n\
# X-Spam_score_int: $spam_score_int:\n\
# X-Spam_bar: $spam_bar\n\
# X-Spam_report: $spam_report
# X-Spam_flag: Yes
# condition = ${if <{$message_size}{500k}{1}{0}}
# spam = mail:true
# deny message = This message was classified as SPAM
# condition = ${if >{$spam_score_int}{55}}

accept

begin routers

spamassassin_router:
driver = accept
transport = spamassassin
condition = ${if eq {$received_protocol}{smtp}{}}
no_verify
no_more

first_liases:
driver = redirect
domains = +local_domains
data = ${lookup{$local_part@$domain}lsearch{/etc/aliases}}
user = mail
file_transport = address_file
pipe_transport = address_pipe
allow_fail
allow_defer

localuser:
driver = accept
domains = +local_domains
check_local_user
address_data = "spam_score=40 use_spam_folder=1 mark_spam_prio=1"
transport = local_delivery
cannot_route_message = Unknown user
no_more

dnslookup:
driver = dnslookup
domains = ! +local_domains
transport = remote_smtp
ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8
no_more

last_fail:
driver = redirect
allow_fail
data = :fail:No such user $local_part at $domain
no_more

begin transports

# This transport is used for delivering messages over SMTP connections.

remote_smtp:
driver = smtp

local_delivery:
driver = appendfile
user = $local_part
group = mail
maildir_format
delivery_date_add
envelope_to_add
return_path_add
mode = 0660
headers_remove=${if
and{{MARK_SPAM}{or{{IS_SPAM}{IS_LOW_PRIO}}}}{X-MSMail-Priority:X-Priority}{}}
headers_add = ${if and{{MARK_SPAM}{IS_SPAM}}{X-MSMail-Priority: Low}{}}
directory = $home/Maildir${if and{{IS_SPAM}{USE_SPAM_FLDR}}{/.SPAM}{}}
address_pipe:
driver = pipe
return_output

address_file:
driver = appendfile
delivery_date_add
envelope_to_add
return_path_add

address_reply:
driver = autoreply

antivirus:
driver = pipe
batch_max = 200
command = /bin/nice -19 /inet/src/scan/ph ${pipe_addresses}
return_output = false
return_path_add = false
user = mail
group = mail

spamassassin:
driver = pipe
use_bsmtp = true
command = /usr/exim/bin/exim -bS -oMr sa-checked
transport_filter = /usr/bin/spamc -f
home_directory = /tmp
current_directory = /tmp
user = mail
group = mail
log_output = true
return_fail_output = true

begin retry

begin rewrite

begin authenticators

dovecot_plain:
driver = dovecot
public_name = LOGIN
#server_prompts = "Username:: : Password::"
server_socket = /var/run/dovecot/auth-client
--
View this message in context: http://old.nabble.com/Need-help-with-exim.-tp26373475p26776563.html
Sent from the Exim Users mailing list archive at Nabble.com.

--
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

mkp_71 at yahoo

Dec 16, 2009, 12:50 AM

Post #12 of 13 (1289 views)
Permalink

Re: Need help with exim. [In reply to]

nigel.metheringham at dev

Dec 16, 2009, 1:24 AM

Post #13 of 13 (1292 views)
Permalink

Re: Need help with exim. [In reply to]

On 16 Dec 2009, at 08:50, mkp_71 wrote:
>
> I still have trouble with mail delivery failed spam. My exim.conf now is:

I have not a clue as to what your problem is, let alone any solution.
You may get more useful results from the mailing list if you at least
give us a hint as to what exim is doing outside your expectations
rather than expect people to deduce this just from a config.

Nigel.
--
[ Nigel Metheringham Nigel.Metheringham [at] InTechnology ]
[. - Comments in this message are my own and not ITO opinion/policy - ]

--
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads