- Users - KICTANet

email
by MWANGANGI NZAU 10 Dec '24

10 Dec '24

mwanganginzau(a)gmail.com

1 0

Email
by Onesmus Ekatuda 23 Oct '24

23 Oct '24

ekatudaonesmus(a)gmail.com

1 0

Forwarding to Gmail no longer works because of SPF
by Odhiambo Washington 22 Nov '23

22 Nov '23

Hello everyone, Hope you are keeping well. I have an issue with email forwarding that I am trying to figure out. Exim-4.97 here, with Exim4U if that matters. I have a setting where emails sent to ALIAS@domain are forwarded to USER1ACCOUNT(a)gmail.com and USER2ACCOUNT(a)gmail.com For domains with strict SPF, this definitely fails as shown below. <CUT> This message was created automatically by mail delivery software. A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed: USER1ACCOUNT(a)gmail.com (ultimately generated from COMMON_ADDR@domain) host gmail-smtp-in.l.google.com [142.250.27.26] SMTP error from remote mail server after end of data: 550-5.7.26 The MAIL FROM domain [alexanna.co.ke] has an SPF record with a hard 550-5.7.26 fail policy (-all) but it fails to pass SPF checks with the ip: 550-5.7.26 [41.212.32.14]. To best protect our users from spam and phishing, 550-5.7.26 the message has been blocked. Please visit 550-5.7.26 https://support.google.com/mail/answer/81126#authentication for more 550 5.7.26 information. mm11-20020a170906cc4b00b009c74e4ffa08si671339ejb.279 - gsmtp USER2(a)gmail.com (ultimately generated from COMMON_ADDR@domain) host gmail-smtp-in.l.google.com [142.250.27.26] SMTP error from remote mail server after end of data: 550-5.7.26 The MAIL FROM domain [alexanna.co.ke] has an SPF record with a hard 550-5.7.26 fail policy (-all) but it fails to pass SPF checks with the ip: 550-5.7.26 [41.212.32.14]. To best protect our users from spam and phishing, 550-5.7.26 the message has been blocked. Please visit 550-5.7.26 https://support.google.com/mail/answer/81126#authentication for more 550 5.7.26 information. mm11-20020a170906cc4b00b009c74e4ffa08si671339ejb.279 - gsmtp </CUT> It looks like during the forwarding, I should rewrite the From: address to COMMON_ADDR@domain instead of letting the original sender address stay in the Envelope sender? This case is similar to https://lists.exim.org/lurker/thread/20231106.101434.4a28c7c1.en.html except that I do not use the redirect router. The forwarded email is handled by the remote_smtp transport Has anyone else faced this issue with Gmail and other providers? How do you mitigate this? -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft.", egrep -v '^$|^.*#' ¯\_(ツ)_/¯ :-) [How to ask smart questions: http://www.catb.org/~esr/faqs/smart-questions.html]

1 0

Permission denied+tainted?
by Odhiambo Washington 02 Sep '23

02 Sep '23

Hello, I am losing my hair trying to figure this out: virtual_vacation_delivery: driver = autoreply once = /var/log/exim/autoreply_${local_part}_${domain}.db once_repeat = 1d from = "${local_part}@${domain}" to = ${sender_address} subject = Autoreply from ${local_part}@${domain} headers = "Content-Type: text/plain; charset=UTF-8\nContent-Transfer-Encoding: quoted-printable" text = ${lookup mysql{select vacation from users,domains \ where domain='${quote_mysql:$domain}' \ and localpart='${quote_mysql:$local_part}' \ and users.domain_id=domains.domain_id}} 2023-09-02 11:31:30 1qcM2T-00025I-1E => /var/spool/virtual/ domain.net/testuser/Maildir (testuser(a)domain.net) <testuser(a)domain.net> R=virtual_domains T=dovecot_virtual_delivery S=4653 2023-09-02 11:31:30 1qcM2T-00025I-1E == testuser(a)domain.net R=virtual_vacation T=virtual_vacation_delivery defer (13): Permission denied: Tainted '/var/log/exim/autoreply_testuser_domain.net.db' (once file for virtual_vacation_delivery transport) not permitted -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft.", egrep -v '^$|^.*#' ¯\_(ツ)_/¯ :-) [How to ask smart questions: http://www.catb.org/~esr/faqs/smart-questions.html]

1 0

PHP8.x
by Odhiambo Washington 25 Jun '23

25 Jun '23

Hey, Anyone updated exim4u webUI to work with PHP8.x ? -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft.", egrep -v '^$|^.*#' ¯\_(ツ)_/¯ :-) [How to ask smart questions: http://www.catb.org/~esr/faqs/smart-questions.html]

3 6

SQL Errors since update to exim 4.95 mysql8
by Holger Glaess 17 Apr '23

17 Apr '23

hi i get the error bellow since the update to exim 4.95 and mysql8. i remove just the orginal names and ips from log. everthing was fine befor the update ( i had to move to mysql 8 due the old mysql version was outdated. ) any hint for me to fix this ? Holger 2023-04-13 05:17:16 failed to expand "${if eq{Y}{${lookup mysql{select g.is_public from groups g, domains d where d.enabled = '1' and d.domain = '${quote_mysql:$domain}' and d.domain_id = g.domain_id and g.enabled = '1' and g.name = '${quote_mysql:$local_part}'}}} {$sender_address} {${lookup mysql{select u.username from domains d, groups g, group_contents c, users u where d.enabled = '1' and d.domain = '${quote_mysql:$domain}' and d.domain_id = g.domain_id and g.name = '${quote_mysql:$local_part}' and g.enabled = '1' and g.is_public = 'N' and c.member_id = u.user_id and d.domain_id = u.domain_id and u.enabled = '1' and u.username = '${quote_mysql:$sender_address}' }}}}" while checking a list: lookup of "select g.is_public from groups g, domains d where d.enabled = '1' and d.domain = 'oneworlddapp.de' and d.domain_id = g.domain_id and g.enabled = '1' and g.name = 'r.maehnhoefer'" gave DEFER: MYSQL: query failed: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'groups g, domains d where d.enabled = '1' and d.domain = 'xxxxxx.de' and d' at line 1 2023-04-13 05:17:16 H=xx-xx.xx.de [xx.xx.xx.xx] X=TLS1.3:TLS_AES_256_GCM_SHA384:256 CV=no F=<> temporarily rejected RCPT <yyyyy(a)xxxxxxx.de>: MYSQL: query failed: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'groups g, domains d where d.enabled = '1' and d.domain = 'xxxxxxxxx.de' and d' at line 1

4 9

Tainted search query is not properly quoted
by Odhiambo Washington 24 Mar '23

24 Mar '23

Hello everyone, Happy 2023! I have encountered this on my mainlog today and wondering if anyone else has seen it with Exim 4.96 and has a solution. 2023-02-17 00:37:20 1pSlw1-0001PT-02 tainted search query is not properly quoted (ACL warn, /etc/exim/exim-greylist.conf.inc 124): INSERT INTO greylist VALUES ( 'adxz8uCZUAwum6TLfg4b', '1676583740', '40.107.237.54', ' NAM12-BN8-obe.outbound.protection.outlook.com' ); -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft.", egrep -v '^$|^.*#' ¯\_(ツ)_/¯ :-)

3 7

calendar
by Helmut Fritz 26 Sep '22

26 Sep '22

Hello List! I hope everyone is well. Has any endeavored to add calendar services into an Exim4U installation? If so, can I ask for any details you might share? Thx! Helmut

2 1

ARC
by Odhiambo Washington 28 Sep '21

28 Sep '21

Has anyone implemented ARC already and willing to share the configuration? -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft.", egrep -v '^$|^.*#' :-)

1 0

Unencrypted and Encrypted ASMTP in parallel - posssible?
by Odhiambo Washington 27 Jul '21

27 Jul '21

I am trying to wrap my head around the following config options: # Port 25 or local is MTA IS_MTA_PORT = or{ \ {eq{$interface_port}{25}} \ {eq{$interface_port}{-1}} \ } # advertise SMTP AUTH on all ports except the inbound MTA one, which of course is 25. # Auth on ports not used for MTA (=> MUAs) auth_advertise_hosts = ${if IS_MTA_PORT {}{*}} So our MuAs are set to use port 587 with ASMTP because we are advertising auth on ports other than 25. However, now I'd like to still use TLS encryption, but only as an option: 1. If the MuA is not set to use TLS/SSL, then do not use it 2. If it is set to use TLS/SSL, then use it. The following line requires TLS encryption for all authenticated connections: auth_advertise_hosts = ${if eq{$tls_cipher}{}{}{*}} How do I combine the two auth_advertise_hosts - one with encryption and one without? Both on ports other than 25 (e.g 587 or 465) Or maybe advertise encrypted ASMTP on 465 and unencrypted on 587? Thanks in advance -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft.", egrep -v '^$|^.*#' :-)

1 0