- Users - KICTANet

Exim4U UI revamp
by mk＠singular.de 11 Feb '13

11 Feb '13

Hey there, I just switched from vexim to Exim4U on my dedi and took the opportunity to tidy up the markup in the public_html files. So if you are interested in customizing the look of your Exim4U installation you might want to try this github repo: https://github.com/mkay/Exim4UI Styling is kept to a minimum and is done with a stock bootstrap* 2.2.2 .css which can easily be removed/replaced/extended with your own styles. Also included the BS .js for some basic tabbing and a dropdown menu. It should be a good starting point if you want to build a custom Exim4U layout. If you use a stock Exim4U 2.1.1 installation you should be fine just replacing the files in your /exim4u directory. All included PHP code and other exim4u files remain untouched. *http://twitter.github.com/bootstrap/ Mika

3 2

Problems with upgrade to 2.1.1
by kenny＠kennysplace.com 16 Nov '12

16 Nov '12

after bringing my install of Exim4U to 2.1.1 from 1.2.5, I have been unable to SMTP auth against my server. It will allow local relays of mail but any attempts from outside when trying to auth ends up with a "03 AUTH command used when not advertised". Has anyone else run into this issue or did I miss something that was not mentioned in the release note? - Kenny

1 1

Exim 4.80.1 Critical Security Release
by Gordon Dickens 26 Oct '12

26 Oct '12

As an FYI, the Exim developers released Exim 4.80.1 today which is a critical security release addressing a remote code execution flaw in Exim versions between 4.70 and 4.80 inclusive. The release announcement is here: https://lists.exim.org/lurker/message/20121026.080330.74b9147b.en.html Basically, this vulnerability can be triggered by anyone who can send you email from a domain for which they control the DNS, and thereby provides them access to the Exim run-time user. Quoting another post by Exim developer, Phil Pennock: "Thanks to a certain Wired article, I decided this area of the codebase (of many MTAs) would be likely to be reviewed by more than just me, so it would be sheer hubris to hope that this remained undiscovered by blackhats." If your Exim version was compiled using the default options then your installation is vulnerable. Hence, the Exim versions provided in by most Linux and Unix distributions are most certainly vulnerable until updated. So, make sure that you update your Exim version immediately when the next Exim update becomes available for your distribution. As per the above link, you can protect your installation from this vulnerability if you put this at the start of your ACLs plumbed into acl_smtp_connect or acl_smtp_rcpt: warn control = dkim_disable_verify Thus, to protect your Exim4U installation until your Exim version is updated, modify your /etc/exim/exim.conf file as follows: After the line: acl_connect: add: warn control = dkim_disable_verify And, after the line: acl_check_rcpt: add: warn control = dkim_disable_verify You can remove these modifications after your Exim version is updated to protect against this vulnerability. FYI, Gordon

1 0

Exim4U Version 2.1.1 Released
by Gordon Dickens 12 Oct '12

12 Oct '12

Hello Everybody, Exim4U version 2.1.1 was released today. A detailed summary of the changes and enhancements in version 2.1.1 may be reviewed here: http://exim4u.org/svn/exim4u_src/tags/2.1.1/VERSION Exim4U version 2.1.1 may be downloaded from here: http://exim4u.org/html/download.html Instructions for upgrading Exim4U version 2.0.1 to 2.1.1 are included in the changelog here: http://exim4u.org/svn/exim4u_src/tags/2.1.1/CHANGELOG FYI, Gordon Dickens

1 0

group character minus
by plus＠libero.it 20 Sep '12

20 Sep '12

yesssss your suggestion fix the problem Thanks a lot

2 1

group character minus
by plus＠libero.it 07 Sep '12

07 Sep '12

Hello I use your exim4u 2.01 on ubuntu 12.04 lts. Everything works except the email to a group that the name contains the character "-" my-office(a)mydomain.info The server responds "no such person at this address". If I send a mail to an address name-surname(a)mydomain.info work. My workaround is to create the address my-office(a)mydomain.info and enable forwarding to multiple addresses. Where is the problem with the "-" character in the groups. Thank you

2 2

Re: [Exim4U] Unable to change password without breaking login
by Mark Shearar 25 Jul '12

25 Jul '12

Hi Gordon, Debian squeeze is correct yes although I had to set wheezy in the sources in order to install Exim 4.80. To be honest I'm very new to Debian having used FreeBSD exclusively for the last 7 years and Gentoo before that. Mark -----Original Message----- From: users-bounces(a)exim4u.org [mailto:users-bounces(a)exim4u.org] On Behalf Of gecko(a)exim4u.org Sent: 14 July 2012 01:11 AM To: Exim4U General Discussion Subject: Re: [Exim4U] Unable to change password without breaking login Hi Mark, Please reply to confirm what operating system that you are using. I think that you are using Debian Squeeze but I am not sure. Please let me know what OS and the version. I want to try to duplicate your problem with the exact same configuration. Gordon On 07/09/2012 01:58 PM, Mark Shearar wrote: > Thanks Gordon, > > Crypt is definitely varchar(255) yet any new user I create definitely > only has 102 characters in that field. I assume then that varchar(255) doesn't define the maximum number of characters allowed in a particular field but rather defines how many characters should always be in that field? Ie any value therein should always be 256 characters? To be honest, I've no idea where to go from here nor how to check why it's populating that field with only 102 characters. > > Mark > > -----Original Message----- > From: users-bounces(a)exim4u.org [mailto:users-bounces(a)exim4u.org] On > Behalf Of gecko(a)exim4u.org > Sent: 03 July 2012 08:30 PM > To: Exim4U General Discussion > Subject: Re: [Exim4U] Unable to change password without breaking login > > The crypt field should be 256 characters in length since it is defined > as varchar(255) in the file that you referenced in your first email: > > http://exim4u.org/svn/exim4u_src/trunk/mysql_setup/mysql.sql > > The crypt field use to be defined as varchar(48) and was changed to > varchar(255) because of problems discovered with the Debian > implementation of PHP 5.3 with a 48 character crypt field. > > I would investigate why your crypt field is 102 characters in length instead of 256. Refer to: > > http://users.exim4u.org/debian-ubuntu-php-5-3-crypt-problem-td3601265. > html > > where nightkid stated: > > "A short dig into the code shows that crypt_password('any string') > with the default MD5 method returns a 200 symbol line instead of the old 48 symbols, probably due to the new MD5 code in PHP 5.3." > > FYI, > > Gordon > > > > On 07/03/2012 06:52 AM, Mark Shearar wrote: >> Hi Gordon, >> >> When I look in the users table I can see the new user I created with >> the > correct localpart, the correct username (email address) and the > correct password in "clear". The crypt table contains 102 characters so I assume that's correct, the uid and gid are the same as my exim4u user and group. >> I remember from the previous two installations that when I changed >> the > siteadmin password the correct password would show in the clear > table, just not sure if the "crypt" changed at all. >> I'm not sure if this is relevant but looking in apache2/error.log I >> see > the following: >> PHP Notice: Undefined index: realname in > /var/www/exim4u/config/variables.php on line 106, referer: > http://domain.tld/exim4u/index.php >> PHP Notice: Undefined index: realname in > /var/www/exim4u/config/variables.php on line 106, referer: > http://domain.tld/exim4u/index.php >> PHP Notice: Undefined index: localpart in > /var/www/exim4u/config/variables.php on line 108, referer: > http://domain.tld/exim4u/index.php >> PHP Notice: Undefined index: domain in > /var/www/exim4u/config/variables.php on line 116, referer: > http://domain.tld/exim4u/index.php >> >> Mark >> >> -----Original Message----- >> From: users-bounces(a)exim4u.org [mailto:users-bounces(a)exim4u.org] On >> Behalf > Of gecko(a)exim4u.org >> Sent: 02 July 2012 11:47 PM >> To: Exim4U General Discussion >> Subject: Re: [Exim4U] Unable to change password without breaking >> login >> >> A good starting point would be to use mysql or phpmyadmin to verify >> the > database's variables after you change the siteadmin password or > setup a new > local domain. That is, verify with mysql or phpmyadmin that the siteadmin > password was changed appropriately and/or that the new account credentials are correct. >> The siteadmin password is not stored in variables.php. There is an > erroneous reference to this in the INSTALL doc but that has been > fixed in the trunk. >> Gordon >> >> >> >> On 07/02/2012 03:35 PM, Mark Shearar wrote: >>> Hi all, >>> >>> I'm having problems logging in to a fresh exim4u installation. >>> If I leave the default siteadmin password as CHANGE then I can log >>> in no problem but as soon as I change the password I cannot log in >>> anymore. If I create a local domain and try log in as that >>> administrator I can't log in either. On my latest attempt I used >>> http://exim4u.org/svn/exim4u_src/trunk/mysql_setup/mysql.sql so >>> that crypt was set to varchar(255) and to make sure I didn't miss >>> anything else. >>> >>> Is there anything else I can look at? And, btw, I can't seem to find >>> the siteadmin password in variables.php? >>> >>> My environment is as follows: >>> >>> Exim version 4.80 >>> >>> PHP 5.4.4-2 >>> >>> MySQL 5.5.24-4 >>> >>> Apache 2.2.16 >>> >>> Thanks >>> >>> Mark >>> >>> >>> >>> _______________________________________________ >>> users mailing list >>> users(a)exim4u.org >>> https://exim4u.org/mailman/listinfo/users >> >> _______________________________________________ >> users mailing list >> users(a)exim4u.org >> https://exim4u.org/mailman/listinfo/users >> >> _______________________________________________ >> users mailing list >> users(a)exim4u.org >> https://exim4u.org/mailman/listinfo/users > > > _______________________________________________ > users mailing list > users(a)exim4u.org > https://exim4u.org/mailman/listinfo/users > > _______________________________________________ > users mailing list > users(a)exim4u.org > https://exim4u.org/mailman/listinfo/users _______________________________________________ users mailing list users(a)exim4u.org https://exim4u.org/mailman/listinfo/users

2 3

Unable to change password without breaking login
by Mark Shearar 14 Jul '12

14 Jul '12

Hi all, I'm having problems logging in to a fresh exim4u installation. If I leave the default siteadmin password as CHANGE then I can log in no problem but as soon as I change the password I cannot log in anymore. If I create a local domain and try log in as that administrator I can't log in either. On my latest attempt I used http://exim4u.org/svn/exim4u_src/trunk/mysql_setup/mysql.sql so that crypt was set to varchar(255) and to make sure I didn't miss anything else. Is there anything else I can look at? And, btw, I can't seem to find the siteadmin password in variables.php? My environment is as follows: Exim version 4.80 PHP 5.4.4-2 MySQL 5.5.24-4 Apache 2.2.16 Thanks Mark

3 6

debian/ubuntu php 5.3 crypt problem
by Nick Keefen 24 Dec '11

24 Dec '11

hi list! probably encountered by many, and mentioned a few times on this mailing list, but AFAIK never actually fixed - i just downloaded the latest stable release 2.0.1 and tried it with PHP 5.3.6-13ubuntu3.3 in Ubuntu 11.10. Create the default DB, log in with siteadmin/CHANGE, change the password. It fails right away and won't let you in any more. The below thread mentions a hack to disable salt. Doesn't seem like the right thing to do, and didn't help me either. http://users.exim4u.org/Fwd-Re-crypt-field-not-been-populated-during-user-c… A short dig into the code shows that crypt_password('any string') with the default MD5 method returns a 200 symbol line instead of the old 48 symbols, probably due to the new MD5 code in PHP 5.3. The problem here is the default exim4u database schema: crypt varchar(48) default NULL, The default field size is simply too short - the new encrypted password was not saved properly, which killed it. Increase crypt to varchar(255) and it'll work right away. No code hacking necessary. I believe this should be updated in the installation SQL file as well. Regards, Nick Keefen, NK Support http://www.nksupport.com/

2 2

Mail Filters configuration at Exim,
by William Marcelo Piovezan 14 Oct '11

14 Oct '11

Hi, I was thinking to setup server based mail rules to forward messages to specific IMAP folders and so on. Apparently the easiest way to do this is configuring the Mail Filtering at Exim. So I’ve configured the Ingo Frontend from Horde Webmail to use the Sieve filtering and Dovecot/ManageSieve to upload the script to the server. Now I know that would need to configure some Router/Transport at exim.conf to use that Sieve files. Anyone has configured some similar environment? I’m not an expert at Exim configuration and since Exim4u has customized a lot the exim.conf, I’m afraid to make some mistake at configuration. Anyway, I did the following router configuration and placed it just before the virtual_domains_SA_off router virtual_filters: driver = redirect allow_fail file = HOME_VIRTUAL/.dovecot.sieve check_ancestor allow_filter data = ${lookup mysql{select smtp from users,domains \ where localpart = '${quote_mysql:$local_part}' \ and domain = '${quote_mysql:$domain}' \ and domains.enabled = '1' \ and users.enabled = '1' \ and users.domain_id = domains.domain_id}} condition = ${if exists{HOME_VIRTUAL/.dovecot.sieve} {yes} {no} } # local_part_suffix = -* # local_part_suffix_optional retry_use_local_part file_transport = virtual_delivery reply_transport = address_reply pipe_transport = address_pipe no_verify no_expn The HOME_VIRTUAL has been defined as: HOME_VIRTUAL = ${lookup mysql{select pop from users,domains \ where localpart = '${quote_mysql:$local_part}' \ and domain = '${quote_mysql:$domain}' \ and domains.enabled = '1' \ and users.enabled = '1' \ and users.domain_id = domains.domain_id}} I would like to know if anyone has configured some server based mail rules and could share information with me. Best Regards, William.

1 0