- Users - KICTANet

What certificate filename should I choose for MY_IP var in MULTI_IP = YES setup in case of IPv6?
by Seidel, Michael 03 Jun '15

03 Jun '15

Hi List! Could somebody please clarify which filename I should choose for certificates in MULTI_IP = YES setup in case of IPv6? ⇒ /etc/pki/tls/exim_tls/exim.MY_IP.key What’s $MY_IP in the case of this example: 1) FE80:0000:0000:0000:0202:B3FF:FE1E:8329 2) FE80::0202:B3FF:FE1E:8329 3) FE80::202:B3FF:FE1E:8329 Is it always 1) because computer do not short it, EVER? /etc/pki/tls/exim_tls/exim.FE80:0000:0000:0000:0202:B3FF:FE1E:8329.key ? Kind Regards, Michael Seidel System Administrator FAI rent-a-jet AG http://www.fai.ag

2 1

Exim4U Version 3.0.0 Released`
by Gordon Dickens 20 May '15

20 May '15

1 0

Web Portal Login w/ MD5
by Torry Crass 15 Mar '15

15 Mar '15

Hello, I've been successfully using the web portal for quite a while and for the most part, it's been just fine. THE PROBLEMHowever, I've come up with a problem. Any time an account is created with the MD5 hash, e-mail and logging into e-mail directly works fine, but logging into the exim4u web portal does not so people are not able to manage their accounts via the web interface. It simply returns a login failed message. THE SETUPWhen I check the DB, the accounts that don't work have the MD5 with salt format such as: - $salt$hash- The DB field for crypt shows varchar(255) - The ones that do work I've had to manually reencrypt to non-MD5+salt. - I'm running v2.1.1 on Debian 7.8 (wheezy) - I also found some debug code in login.php, authuser.php and authsite.php but I can't figure out how to get that to display, I uncommented it and it's not showing up on the page. Any help or insight would be appreciated Thanks!

4 11

Re: [Exim4U] Web Portal Login w/ MD5
by Seidel, Michael 09 Mar '15

09 Mar '15

Hi Gordon, Hi List, no Problem. Glad I could help and you were able to reproduce it. I guess it happens if you install apache2 and php5 with the default meta packages or something like that. My biggest issue with vexim/exim4u is the clear text password. It's 2015 now and cleartext passwords is a evil thing to have in ANY database. I didn't had time to deeply look into the code and produce a patch to remove it yet. Every modern mail client should be able to handle starttls and ssl tunnels so plain , crypt and other legacy authentications can be called obsolete and should be removed sooner than later, IMHO. Maybe someone could spend a few hours to complety remove it? It would be a huge security improvement. Kind regards Michael Seidel Sysadmin http://www.fai.ag Send via Mobile Phone -------- Ursprüngliche Nachricht -------- Von: Gordon Dickens <gecko(a)exim4u.org> Datum: 09.03.2015 14:52 (GMT+01:00) An: Exim4U General Discussion <users(a)exim4u.org> Betreff: Re: [Exim4U] Web Portal Login w/ MD5 On 03/07/2015 02:46 PM, Torry Crass wrote: THE PROBLEM However, I've come up with a problem. Any time an account is created with the MD5 hash, e-mail and logging into e-mail directly works fine, but logging into the exim4u web portal does not so people are not able to manage their accounts via the web interface. It simply returns a login failed message. Hi Torry, Sorry about your problem and that I have not replied sooner, however, I've been away with limited access to my email since last Wednesday. Also, a big thanks to Rimas Kudelis and Michael Seidel for their posts. Then, on 03/08/2015 04:59 AM, Seidel, Michael wrote: Hi Torry, please have a look at my old post on this list from August 2014: http://exim4u.org/pipermail/users/2014-August/000226.html Hi Michael, Looks like you may have identified the problem and a potential solution. I should have been more proactive back in August, when you first posted your problem/solution, however, I had not yet seen the issue myself in my installations which include two Debian Wheezy installs. Nevertheless, I am now able to reproduce the problem on my Wheezy installs. On the other hand, the problem does not appear in my Debian Squeeze, CentOS and FreeBSD installs. As an aside, this suhosin patch issue was not introduced into Wheezy until sometime in mid 2014 since I know for certain that everything worked fine until then on Wheezy. Then, on 03/08/2015 02:15 PM, Torry Crass wrote: Michael, Your post is spot on to what the problem I'm running into is related to. Even in the newer source off of github that I was looking at it isn't resolved (and several other things are currently broken in that version, like no submit button on editing an existing account). -- though the old one does use MD5 passwords successfully. I've modified the function as you suggested but login is still not functioning properly, tossing a login failure to any SHA512 accounts. I'm still working on it but thought I would send a message thanking you for that guidance. Torry, please let us know your findings. I will spend some time on this myself, however, it will probably be later in the week. Also, I am curious about what wasn't working in the github version. I've got a FreeBSD installation running the current github version and I am not seeing the missing submit button that you reported and I am unaware of any other current issues. However, I am in the middle of porting alot of the recent Vexim mods and, while I have done some situational testing, I have not yet thoroughly tested all of the recent mods. So, please report any bugs that you find and I will work to address them. Thanks, Gordon

2 1

exim 4.85 patch fix for headers_remove problem
by Gordon Dickens 18 Feb '15

18 Feb '15

2 4

exim 4.84
by Valkanover Harald 23 Jan '15

23 Jan '15

Hi list! Is anyone sucessfully running exim4u with exim 4.84? I made an update to that exim version and had to find out that several transports were broken (around remove_header, failed to expand with some sql statements etc.). I made some customizations but it looks like a general compatibility problem - can anyone confirm? Kind regards, Valki

6 47

Which Webmail? How do users change passwords?
by Odhiambo Washington 31 Dec '14

31 Dec '14

This is my last question this year:-) For all of you who use exim4u/vexim, please tell me which webmail apps you install for the users and if you have managed to get users to be able to change their passwords from the webmail UI. I am not happy with this situation where I have to tell users to access another web UI, different from the webmail, to change their passwords. I know the PHP coders find this easy, but I am not able to, since me is not one:-)) -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 "I can't hear you -- I'm using the scrambler."

2 1

exim4u with Apache24, php55
by Odhiambo Washington 26 Dec '14

26 Dec '14

Is anyone already usinh exim4u with php55 under Apache24? I am getting stuck a little. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 "I can't hear you -- I'm using the scrambler."

4 8

Re: [Exim4U] Blacklisted URL in message
by Terry 07 Oct '14

07 Oct '14

---------------------------------------------------------------------- > Message: 1 > Date: Tue, 07 Oct 2014 11:28:55 +0000 > From: Kebba Foon <kebba.foon(a)qcell.gm> > To: users(a)exim4u.org > Subject: Re: [Exim4U] Blacklisted URL in message > Message-ID: <1412681335.28784.21.camel(a)kfoon-linux.qcell.gm> > Content-Type: text/plain; charset="utf-8" > > Dear List, > > Just recently seems to encounter this same issue, suddently i started > having "rejected during MIME ACL checks: Blacklisted URL in message. > (africell.gm) in. See http://lookup.uribl.com." in my log files but > checking the site for the africell.gm domain reveal that it was not > listed. I went to the exim_surbl.pl and disable the uri checking and yet > to confirm it this solve the problem, but my question is this was > working all the time why just the sudden change? i dont remember doing > and configuration on update on my servers, i must admit my server > process a lot of mails as i am an ISP but how cant i check that my > queries are been rejected by uribl.com. > > Kebba > > On Tue, 2014-09-02 at 06:16 -0400, users-request(a)exim4u.org wrote: Hi Kebba in my case they were blocking my dns server that I used so I swapped to my own and all was fine If you get this host -tTXT 2.0.0.127.multi.uribl.com 2.0.0.127.multi.uribl.com descriptive text "127.0.0.1 -> Query Refused. See http://uribl.com/refused.shtml for more information [Your DNS IP: 217.112.88.90]" Info on the link they provide Then your dns server is blocked Terry

2 1

Re: [Exim4U] Blacklisted URL in message
by Kebba Foon 07 Oct '14

07 Oct '14

Dear List, Just recently seems to encounter this same issue, suddently i started having "rejected during MIME ACL checks: Blacklisted URL in message. (africell.gm) in. See http://lookup.uribl.com." in my log files but checking the site for the africell.gm domain reveal that it was not listed. I went to the exim_surbl.pl and disable the uri checking and yet to confirm it this solve the problem, but my question is this was working all the time why just the sudden change? i dont remember doing and configuration on update on my servers, i must admit my server process a lot of mails as i am an ISP but how cant i check that my queries are been rejected by uribl.com. Kebba On Tue, 2014-09-02 at 06:16 -0400, users-request(a)exim4u.org wrote: > Send users mailing list submissions to > users(a)exim4u.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://exim4u.org/mailman/listinfo/users > or, via email, send a message with subject or body 'help' to > users-request(a)exim4u.org > > You can reach the person managing the list at > users-owner(a)exim4u.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of users digest..." > > > Today's Topics: > > 1. Blacklisted URL in message (Terry) > 2. Re: Blacklisted URL in message (Gordon Dickens) > 3. Re: Blacklisted URL in message (Terry) > 4. Re: Blacklisted URL in message (Gordon Dickens) > 5. Re: Blacklisted URL in message (Terry) > 6. Re: Blacklisted URL in message (Gordon Dickens) > 7. Fix suggestion for broken login on Linux Distributions with > suhosin patched PHP (e.G. Debian Wheezy) (Seidel, Michael) > 8. exim 4.84 (Valkanover Harald) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Thu, 19 Jun 2014 12:08:23 +0100 > From: Terry <terry(a)firstkmh.co.uk> > To: users(a)exim4u.org > Subject: [Exim4U] Blacklisted URL in message > Message-ID: <53A2C4A7.1070600(a)firstkmh.co.uk> > Content-Type: text/plain; charset=ISO-8859-1 > > Hi one of our customers complained about not receiving some email and it > seems they were blocked due to black listed url but I went and checked > and they are not listed. Unless they recently became unlisted ? > > > +++ 1WxHw9-000PUG-3y has not completed +++ > 2014-06-18 15:38:09 1WxHw9-000PUG-3y H=mail50.scotnet.co.uk > (sys30.scotnet.net) [217.16.223.65] F=<sjones(a)pesol.co.uk> rejected > during MIME ACL checks: Blacklisted URL in message. > (pritchard-edwards.co.uk) in. See http://lookup.uribl.com. > > +++ 1Wwpio-000MvZ-TN has not completed +++ > 2014-06-17 09:30:31 1Wwpio-000MvZ-TN H=smtp.clearstreamgroup.co.uk > (smtp2.clearstreamtechnology.co.uk) [46.17.208.145] > F=<rhys.taylor(a)30parkplace.co.uk> rejected during MIME ACL checks: > Blacklisted URL in message. (familyarbitrator.com) in. See > http://lookup.uribl.com. > > -- > ------------------------------------ > Terry > > > > > > ------------------------------ > > Message: 2 > Date: Thu, 19 Jun 2014 08:01:41 -0400 > From: Gordon Dickens <gecko(a)exim4u.org> > To: Exim4U General Discussion <users(a)exim4u.org> > Subject: Re: [Exim4U] Blacklisted URL in message > Message-ID: <53A2D125.6070201(a)exim4u.org> > Content-Type: text/plain; charset="us-ascii" > > An HTML attachment was scrubbed... > URL: <http://exim4u.org/pipermail/users/attachments/20140619/d09f4d1c/attachment-…> > > ------------------------------ > > Message: 3 > Date: Fri, 20 Jun 2014 09:41:01 +0100 > From: Terry <terry(a)firstkmh.co.uk> > To: users(a)exim4u.org > Subject: Re: [Exim4U] Blacklisted URL in message > Message-ID: <53A3F39D.7020409(a)firstkmh.co.uk> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > They have had there own email blocked yesterday as well when trying to > email from a home address. > But when I check the logs it seems to be catching legitimate emails as > well as it should. > I didn't want to disable it as it does a good job but may have to. > > > > > > > > > -- > ------------------------------------ > Terry > > > > > ------------------------------ > > Message: 4 > Date: Fri, 20 Jun 2014 08:54:23 -0400 > From: Gordon Dickens <gecko(a)exim4u.org> > To: Exim4U General Discussion <users(a)exim4u.org> > Subject: Re: [Exim4U] Blacklisted URL in message > Message-ID: <53A42EFF.2030105(a)exim4u.org> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > Exim4U does not do a URIBL check for authenticated mail. So, assuming > that they use authentication for local mail, something very weird is > going on for their own mail to be blocked. That should not be > possible. Otherwise, their exim4u configuration must have somehow > gotten mangled. > > It sounds like they may be having a DNS problem with the URIBL lookups. > Do they use their own caching DNS server or are they using a public DNS > server? I strongly recommend that they use their own DNS server with > bind/named. Otherwise, the use of public DNS servers can cause > unpredictable results such as refused queries and false positive > results. Note that URIBL may refuse queries from any high volume DNS > server. So, if they are using a public DNS server then I recommend that > they setup their own caching name server with bind/named. > > FYI, > > Gordon > > > > > On 06/20/2014 04:41 AM, Terry wrote: > > They have had there own email blocked yesterday as well when trying to > > email from a home address. > > But when I check the logs it seems to be catching legitimate emails as > > well as it should. > > I didn't want to disable it as it does a good job but may have to. > > > > > > > > > > > > > > > > > > > > > ------------------------------ > > Message: 5 > Date: Tue, 24 Jun 2014 14:12:58 +0100 > From: Terry <terry(a)firstkmh.co.uk> > To: users(a)exim4u.org > Subject: Re: [Exim4U] Blacklisted URL in message > Message-ID: <53A9795A.6000509(a)firstkmh.co.uk> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > Hi by there own address I meant a gmail one so they noticed the block. > They do have there own caching dns server and every thing seems in order. > I have disabled the check for them so things are fine now. But it was a > bit puzzling > > -- > ------------------------------------ > Terry > > > > > ------------------------------ > > Message: 6 > Date: Thu, 26 Jun 2014 08:55:44 -0400 > From: Gordon Dickens <gecko(a)exim4u.org> > To: Exim4U General Discussion <users(a)exim4u.org> > Subject: Re: [Exim4U] Blacklisted URL in message > Message-ID: <53AC1850.4010305(a)exim4u.org> > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > > Hi Terry, > > I thought of another thing to look at. The uribl lookups are done in a > script that is included in the Exim4U installation here: > > /etc/exim/exim.pl/exim_surbl.pl > > This script checks three URL blacklists: SURBL, URIBL and DBL. The exim > log entries that you sent in your first email were all only URIBL > lookups. So, you may consider re-enabling the lookups in > /etc/exim/exim.conf and disabling only the URIBL blacklist directly in > /etc/exim/exim.pl/exim_surbl.pl to determine if the problem is only with > the URIBL blacklist or with all three blacklists. > > Look at lines 61 through 65 in exim_surbl.pl: > > # The following ariables enable or disable the SURBL, URIBL and DBL > # lookups. Set to 1 to enable and 0 to disable. > my $surbl_enable = 1; > my $uribl_enable = 1; > my $dbl_enable = 1; > > Here, you can disable/enable each blacklist individually. If, for some > reason, you find that the problem only exists with the URIBL blacklist > then you can keep the script running and benefit from the other two > blacklists. > > This script was written by Erik Mugele and you can read more about it here: > > http://www.teuton.org/~ejm/exim_surbl/ > > If you find that all three lists generate false positives, then I would > suggest that the problem probably is directly related to this > installation's DNS lookups. Whereas, if the problem only occurs with > the URIBL then I'm not sure what to say. In any event, Erik Mugele's > script is well known and popular within the exim community and this is > the first time that I have ever heard of this type of problem that was > not caused by the use of a public or large ISP's DNS servers. So, if > you make any progress diagnosing this problem please let me know what > you find. > > Thanks, > > Gordon > > > > On 06/24/2014 09:12 AM, Terry wrote: > > Hi by there own address I meant a gmail one so they noticed the block. > > They do have there own caching dns server and every thing seems in order. > > I have disabled the check for them so things are fine now. But it was > > a bit puzzling > > > > > > > ------------------------------ > > Message: 7 > Date: Tue, 5 Aug 2014 07:09:13 +0000 > From: "Seidel, Michael" <michael.seidel(a)fai.ag> > To: "'users(a)exim4u.org'" <users(a)exim4u.org> > Subject: [Exim4U] Fix suggestion for broken login on Linux > Distributions with suhosin patched PHP (e.G. Debian Wheezy) > Message-ID: > <FE5645E4AC03CE42B529FA5B277580590178A5FC9F(a)FAI-EX01.fai.ag> > Content-Type: text/plain; charset="us-ascii" > > Hi List, > > I ran into a problem lately and I thought it was best to report my findings. I was upgrading a system Debian Lenny to Wheezy (yeah, I know, it took some time, but it was for internal use anyway) and therefor from vexim to exim4u. > > So far so good, but after changing the password from CHANGE to something else failed my login. A quick look in the database revealed the issue: > > The password encryption scheme changed from md5 to sha512, as you can easily see on the encrypted passwords itself: > > Old: CHANGE : $1$12345678$2lQK5REWxaFyGz.p/dos3/ > New: CHANGE : $6$P0s1h8hgqT/K$qGoe/zSh6crG/MsDTlnxmnGGufEVftsB2sPCgfopV6TmoT2XBVgGQ6cAu00GJUY9GHaTO1RsNDJUNwY1MZqQa/ > > See http://php.net/manual/en/function.crypt.php for those without crypto basic knowledge with additional information on this. > > The old one was plain MD5 (starting with $1$SALT$...), which you should not use anymore, but better than plain, right guys? ;-))) A real patch for this incoming? I'll be looking at http://axel.sjostedt.no/misc/dev/vexim-customizations/ next. > The new one is SHA-512 (Starting with $6$SALT$...), which is way longer (so it needed the - already implemented - var(255) mysql patch mentioned on this list before) and it has a 16 character salt. > > But login was broken at that point. I found out, that a suhosin patch was added to Debian PHP - to promote more secure passwords, but it broke some older scripts. > > After some fiddling with the function crypt_password code in ./config/functions.php I'd suggest a code change to: > > --------------------------- > > function crypt_password($clear, $salt = '') > { > global $cryptscheme; > > if ($cryptscheme == 'sha') > { > $hash = sha1($clear); > $cryptedpass = '{SHA}' . base64_encode(pack('H*', $hash)); > } > else > { > if ($salt != '') > { > if ($cryptscheme == 'sha512') > { > $salt = substr($salt, 0, 16); > } > else > if ($cryptscheme == 'des') > { > $salt = substr($salt, 0, 2); > } > else > if ($cryptscheme == 'md5') > { > $salt = substr($salt, 0, 12); > } > else > { > $salt = ''; > } > $cryptedpass = crypt($clear, $salt); > } > else { > $cryptedpass = crypt($clear); > > } > } > > return $cryptedpass; > } > > --------------------------- > > So if somebody ran into that problem again they just have to set > > /* Set to either "sha", "sha512", "des" or "md5" depending on your crypt() libraries */ > $cryptscheme = "sha512"; > > in > > ./config/variables.php > > --------------------------- > > Some real class to check which encoding to use would be more cool but not necessary IMHO. You need to configure your backend with certain encoding anyways, just think about IMAP/POP services which require a set crypt scheme. > > BUG: My code piece will result in first login failures if somebody just did not login first to have the password converted from md5 to sha-512 to find out their system changed their encoding but already changed the var in variables.php to sha512. > They eventually come here to read about this: So please change it back to default: md5 , login and than change it back to sha512 or copy that sha512 crypt password from above to database. > > So what does the List say about this? Is this the correct solution? > > Regards, > > Michael Seidel > System Administrator > FAI rent-a-jet AG > http://www.fai.ag > > > > > ------------------------------ > > Message: 8 > Date: Tue, 2 Sep 2014 09:22:12 +0200 > From: "Valkanover Harald" <valki(a)valki.com> > To: <users(a)exim4u.org> > Subject: [Exim4U] exim 4.84 > Message-ID: <000001cfc67e$9db8d9f0$d92a8dd0$(a)valki.com> > Content-Type: text/plain; charset="us-ascii" > > Hi list! > > > > Is anyone sucessfully running exim4u with exim 4.84? I made an update to > that exim version and had to find out that several transports were broken > (around remove_header, failed to expand with some sql statements etc.). > > I made some customizations but it looks like a general compatibility problem > - can anyone confirm? > > > > Kind regards, > > Valki > >

1 0