From guillermo.llenas at team.ar.inter.net Thu Jul 1 14:11:19 2004 From: guillermo.llenas at team.ar.inter.net (Guillermo Llenas) Date: Thu Jul 1 09:12:16 2004 Subject: [SA-exim] Weird headers Message-ID: <40E437A7.80907@team.ar.inter.net> Hi All, I have exim latest version (4) and Sa-exim (very good) version 4.0. The strange is that I continue reading message like this in my paniclog: 2004-06-30 14:17:43 1BfiiL-000606-5P string too long in header_add: Content-Type: text/plain; "iso-8859-1"; "iso-8859-1"; "is o-8859-1"; "iso-8859-1"; "iso-8859-1"; "is ... 2004-06-30 14:20:34 1Bfil7-00067Q-FN string too long in header_add: Content-Type: text/plain; "iso-8859-1"; "iso-8859-1"; "is o-8859-1"; "iso-8859-1"; "iso-8859-1"; "is ... 2004-06-30 14:25:40 1Bfiq3-0006Kn-FU string too long in header_add: Content-Type: text/plain; "iso-8859-1"; "iso-8859-1"; "is o-8859-1"; "iso-8859-1"; "iso-8859-1"; "is ... 2004-06-30 14:48:35 1BfjCE-0007ND-P6 string too long in header_add: Content-Type: text/plain; "iso-8859-1"; "iso-8859-1"; "is o-8859-1"; "iso-8859-1"; "iso-8859-1"; "is ... 2004-06-30 14:57:01 1BfjKP-0007lS-8c string too long in header_add: Content-Type: text/plain; "iso-8859-1"; "iso-8859-1"; "is o-8859-1"; "iso-8859-1"; "iso-8859-1"; "is ... 2004-06-30 14:59:02 1BfjML-0007r0-No string_sprintf expansion was longer than 32768 And I don't know why if this is ok: detailed_phrase_score default: 0 and I have SAaddSAEheaderBeforeSA: 0 in sa-exim.conf. Maybe I must recompile exim with STRING_SPRINTF_BUFFER_SIZE in exim/src/config.h.defaults > than 32768 ? -- Guillermo Llenas Tecnolog?a Postmaster Inter.net Argentina ________________________ +0054 11 6328-1500 fax 0054 11 6328-1530 www.ar.inter.net guillermo.llenas@team.ar.inter.net From schimmer at cg.cs.tu-bs.de Sun Jul 4 13:10:59 2004 From: schimmer at cg.cs.tu-bs.de (Lars Schimmer) Date: Sun Jul 4 03:11:14 2004 Subject: [SA-exim] Problems with run-conditions.... Message-ID: <40E7D7B3.7010805@cg.cs.tu-bs.de> Hi! I use Debian testing with SA 2.63, Exim 4.34 and sa-exim 4.0-2 In sa-exim.conf I have these run-conditions: SAEximRunCond: ${if and {{def:sender_host_address} {!eq {$sender_host_address}{127.0.0.1}} {!eq {$h_X-SA-Do-Not-Run:} {Yes}} } {1}{0}} And this teergrube-condition: SAteergrubecond: ${if and { {!eq {$sender_host_address}{127.0.0.1}} {!eq {$sender_host_address}{127.0.0.2}} {!eq {mask :$sender_host_address/24}{134.1.1.0/24}} } {1}{0}} But If I uncomment the run-condition, sa-exim doesn?t run and I teergrub the IPs I set in the teergrubcond NOT to teergrub. Do I have a problem in these condititons? Cya Lars From marc at merlins.org Mon Jul 12 22:10:07 2004 From: marc at merlins.org (Marc MERLIN) Date: Mon Jul 12 15:50:40 2004 Subject: [SA-exim] Installation problems In-Reply-To: <22146.1079661206@apeirogon.org> References: <20040318153330.GB32183@merlins.org> <22146.1079661206@apeirogon.org> Message-ID: <20040712191007.GA31220@merlins.org> On Thu, Mar 18, 2004 at 08:53:26PM -0500, Jeffrey D. Carter wrote: > Mine says index() and rindex() are non-standard, and should be replaced > with strchr() and strrchr() (respectively), as found in . Many > OS'es provide the obsolete forms in , or if you #define/-D > some special macro. But in almost all cases it's just easier to fix it. I know it's been a while, but I just wanted to let you know that I put that in the CVS tree and it'll be in 4.1 Marc -- "A mouse is a device used to point at the xterm you want to type in" - A.S.R. Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking Home page: http://marc.merlins.org/ | Finger marc_f@merlins.org for PGP key From marc at merlins.org Mon Jul 12 12:29:02 2004 From: marc at merlins.org (Marc MERLIN) Date: Mon Jul 12 15:52:33 2004 Subject: [SA-exim] Weird headers In-Reply-To: <40E437A7.80907@team.ar.inter.net> References: <40E437A7.80907@team.ar.inter.net> Message-ID: <20040712092902.GE5534@merlins.org> On Thu, Jul 01, 2004 at 01:11:19PM -0300, Guillermo Llenas wrote: > I have exim latest version (4) and Sa-exim (very good) version 4.0. > > The strange is that I continue reading message like this in my > paniclog: > > > 2004-06-30 14:17:43 1BfiiL-000606-5P string too long in header_add: > Content-Type: text/plain; "iso-8859-1"; "iso-8859-1"; "is > o-8859-1"; > "iso-8859-1"; "iso-8859-1"; "is ... > 2004-06-30 14:20:34 1Bfil7-00067Q-FN string too long in header_add: > Content-Type: text/plain; "iso-8859-1"; "iso-8859-1"; "is > o-8859-1"; > "iso-8859-1"; "iso-8859-1"; "is ... > 2004-06-30 14:25:40 1Bfiq3-0006Kn-FU string too long in header_add: > Content-Type: text/plain; "iso-8859-1"; "iso-8859-1"; "is > o-8859-1"; > "iso-8859-1"; "iso-8859-1"; "is ... > 2004-06-30 14:48:35 1BfjCE-0007ND-P6 string too long in header_add: > Content-Type: text/plain; "iso-8859-1"; "iso-8859-1"; "is > o-8859-1"; > "iso-8859-1"; "iso-8859-1"; "is ... > 2004-06-30 14:57:01 1BfjKP-0007lS-8c string too long in header_add: > Content-Type: text/plain; "iso-8859-1"; "iso-8859-1"; "is > o-8859-1"; > "iso-8859-1"; "iso-8859-1"; "is ... > 2004-06-30 14:59:02 1BfjML-0007r0-No string_sprintf expansion was longer > than 32768 There is obviously something wrong with the message being received, and as I asked, we'd need to see the full headers of what was sent to you. Either sa-exim saved it (if it is configured to save errors), or you can disable sa-exim long enough for the message to be accepted and look at it Marc -- "A mouse is a device used to point at the xterm you want to type in" - A.S.R. Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking Home page: http://marc.merlins.org/ | Finger marc_f@merlins.org for PGP key From marc_news at merlins.org Mon Jul 12 22:45:23 2004 From: marc_news at merlins.org (Marc MERLIN) Date: Mon Jul 12 15:52:45 2004 Subject: [Exim] Re: [SA-exim] local_scan is crashing (log_write crash) In-Reply-To: <20040524041137.GQ6482@merlins.org> References: <20040518003652.GH30824@merlins.org> <2B258C7A-A9B4-11D8-B0AF-000A9595347C@enchanter.net> <20040520041200.GD1909@merlins.org> <818037B8-AA69-11D8-BCCB-000A9595347C@enchanter.net> <058501c43e82$b78788c0$eb00010a@andromeda> <1E2E0194-AA86-11D8-9EF9-000A9595347C@enchanter.net> <1085076699.1322.11711.camel@kaa.jungle.aubergine.my-net-space.net> <1085322797.4532.3470.camel@kaa.jungle.aubergine.my-net-space.net> <20040524041137.GQ6482@merlins.org> Message-ID: <20040712194523.GD31220@merlins.org> On Sun, May 23, 2004 at 09:11:37PM -0700, Marc MERLIN wrote: > On Sun, May 23, 2004 at 03:33:17PM +0100, Adam D. Barratt wrote: > > > That did the trick, thank you very much! I changed this line, as well > > > as two debug lines I found which try to print fdsize-18. > > > > It should probably be (double)(fdsize - 18) so that it still works on > > platforms where sizeof(off_t) != 8 (i.e. most of them *g*). > > Adam, thanks for finding all this. > I can't believe I made that stupid mistake, I should know better. > At least, I did define fdstart as an off_t, and not an int, but I completely > forgot that (s)printf (which I'm guessing exim uses internally for > log_write) doesn't actually convert types (I've one way too much perl in the > last years, one gets lazy after that) > > > > Why does this fix work? I figure "%.0f" means a floating-point value > > > with no decimal places, but why does displaying the number as a float > > > instead of a decimal solve the problem? > > > > "%%d" *isn't* (just) "a decimal", it's a synonym for "%i", and thus an > > /int/. On many (probably still most) platforms, sizeof(int) == > > Yeah, that was my mistake. Stuff like that works in higher level languages > were %d really does mean decimal. > > Again, thanks for the analysis, I'll put out a new sa-exim with this and a > few other fixes soon. Just to say that I haven't entirely disappeared, it's in the CVS tree of my laptop. The changes were pretty big to fix all that 64 bit-ness into printf (via log_write). I'll need to test this a bit after the plane lands and I can sync up all this and throw real mail at it. Marc -- "A mouse is a device used to point at the xterm you want to type in" - A.S.R. Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking Home page: http://marc.merlins.org/ | Finger marc_f@merlins.org for PGP key From marc at merlins.org Mon Jul 12 22:40:07 2004 From: marc at merlins.org (Marc MERLIN) Date: Mon Jul 12 15:52:54 2004 Subject: [SA-exim] spamd on remote host - was Feature In-Reply-To: References: Message-ID: <20040712194007.GC31220@merlins.org> On Sun, May 09, 2004 at 05:01:17PM -0400, Danilo Lotina F. wrote: > Hi, > > I've modified a couple of lines adding SAspamcHost option in sa-exim.conf: > Example: > SAspamcHost: 200.14.80.82 I have implemented a slightly improved version in CVS (takes care of the socket path argument, and lets you change the port number too) Thanks, Marc -- "A mouse is a device used to point at the xterm you want to type in" - A.S.R. Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking Home page: http://marc.merlins.org/ | Finger marc_f@merlins.org for PGP key From marc at merlins.org Mon Jul 12 22:13:33 2004 From: marc at merlins.org (Marc MERLIN) Date: Mon Jul 12 15:53:05 2004 Subject: [SA-exim] Whitelisting mailing lists In-Reply-To: <20040616143857.GF8452@shampoo.ca> References: <20040616143857.GF8452@shampoo.ca> Message-ID: <20040712191333.GB31220@merlins.org> On Wed, Jun 16, 2004 at 10:38:58AM -0400, Justin F. Knotzke wrote: > > I tried posting this to spamassassin users but haven't had much luck. > > The problem is I am teergrubing mailing lists like Debian and I don't want > to. What are people using to whitelist mailing lists? > > Currently I am using: > > def_whitelist_from_rcvd *@yahoo.com yahoo.com > def_whitelist_from_rcvd *@*.yahoo.com yahoo.com > def_whitelist_from_rcvd *@*.*.yahoo.com yahoo.com > def_whitelist_from_rcvd *@*.*.*.yahoo.com yahoo.com > def_whitelist_from_rcvd *@*.*.*.*.yahoo.com yahoo.com > def_whitelist_from_rcvd *@lists.debian.org debian.org > def_whitelist_from_rcvd *@.debian.org debian.org > def_whitelist_from_rcvd *@debian.org debian.org > def_whitelist_from_rcvd *@.debian.org murphy.debian.org At this point, this is SA specific. If the SA docs don't help you, you should ask on their list. But to answer your question, try: spamassassin -t -D < /tmp/message Marc -- "A mouse is a device used to point at the xterm you want to type in" - A.S.R. Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking Home page: http://marc.merlins.org/ | Finger marc_f@merlins.org for PGP key From guillermo.llenas at team.ar.inter.net Tue Jul 13 11:12:14 2004 From: guillermo.llenas at team.ar.inter.net (Guillermo Llenas) Date: Tue Jul 13 06:12:39 2004 Subject: [SA-exim] Weird headers In-Reply-To: <20040712092902.GE5534@merlins.org> References: <40E437A7.80907@team.ar.inter.net> <20040712092902.GE5534@merlins.org> Message-ID: <40F3DFAE.1080309@team.ar.inter.net> Marc MERLIN wrote: > On Thu, Jul 01, 2004 at 01:11:19PM -0300, Guillermo Llenas wrote: > >>I have exim latest version (4) and Sa-exim (very good) version 4.0. >> >> The strange is that I continue reading message like this in my >>paniclog: >> >> >>2004-06-30 14:17:43 1BfiiL-000606-5P string too long in header_add: >>Content-Type: text/plain; "iso-8859-1"; "iso-8859-1"; "is >>o-8859-1"; >> "iso-8859-1"; "iso-8859-1"; "is ... >>2004-06-30 14:20:34 1Bfil7-00067Q-FN string too long in header_add: >>Content-Type: text/plain; "iso-8859-1"; "iso-8859-1"; "is >>o-8859-1"; >> "iso-8859-1"; "iso-8859-1"; "is ... >>2004-06-30 14:25:40 1Bfiq3-0006Kn-FU string too long in header_add: >>Content-Type: text/plain; "iso-8859-1"; "iso-8859-1"; "is >>o-8859-1"; >> "iso-8859-1"; "iso-8859-1"; "is ... >>2004-06-30 14:48:35 1BfjCE-0007ND-P6 string too long in header_add: >>Content-Type: text/plain; "iso-8859-1"; "iso-8859-1"; "is >>o-8859-1"; >> "iso-8859-1"; "iso-8859-1"; "is ... >>2004-06-30 14:57:01 1BfjKP-0007lS-8c string too long in header_add: >>Content-Type: text/plain; "iso-8859-1"; "iso-8859-1"; "is >>o-8859-1"; >> "iso-8859-1"; "iso-8859-1"; "is ... >>2004-06-30 14:59:02 1BfjML-0007r0-No string_sprintf expansion was longer >>than 32768 > > > There is obviously something wrong with the message being received, and > as I asked, we'd need to see the full headers of what was sent to you. > Either sa-exim saved it (if it is configured to save errors), or you can > disable sa-exim long enough for the message to be accepted and look at > it > > Marc Ok I have sa-exim configured to save errors and timeouts: SAtimeoutSavCond: 1 SAerrorSavCond: 1 SAtemprejectonerror: 1 but nothing there. Anyway, apparently, the messages are not rejected.I stopped spamassassin, to see if there is something else in mainlog or rejectlog, but the only that I have are these messages, that they agree with which I see in paniclog 2004-07-13 09:50:24 1BkMjl-0005HR-AM string_sprintf expansion was longer than 32768 2004-07-13 09:56:07 1BkMpK-0005Wm-9W string_sprintf expansion was longer than 32768 2004-07-13 10:00:14 1BkMtJ-0005ht-QT string too long in header_add: Content-Type: text/plain; "iso-8859-1"; "iso-8859-1"; "is o-8859-1"; "iso-8859-1"; "iso-8859-1"; "is ... 2004-07-13 10:01:25 1BkMuS-0005m6-Ej string too long in header_add: Content-Type: text/plain; "iso-8859-1"; "iso-8859-1"; "is o-8859-1"; "iso-8859-1"; "iso-8859-1"; "is ... 2004-07-13 10:02:32 1BkMvX-0005pJ-LL string too long in header_add: Content-Type: text/plain; "iso-8859-1"; "iso-8859-1"; "is o-8859-1"; "iso-8859-1"; "iso-8859-1"; "is ... The new news is that by each one of these messages I can find in spool by message-id the "Data", which is a text in spanish of publicity (spam). But I do not have headers by any side. Some idea...thanks in advance This is the data: [root@fes01 exim]# locate 1BkMxp-0005vZ-Ce /var/spool/exim/input/p/1BkMxp-0005vZ-Ce-D [root@fes01 exim]# cat /var/spool/exim/input/p/1BkMxp-0005vZ-Ce-D 1BkMxp-0005vZ-Ce-D JULIO S?bado 17 de Julio, de 17 a 18 hs.: Meditaci?n Grupal. Sede Echeverr?a 2758. Tel.: 4786-6185. Dirige Iana Lifar. Entrada: tres (3) alimentos no perecederos S?bado 24 de Julio de 17 a 18:30 hs. Yoga para J?venes. Sede Guemes 4527. Tel.: 4774-1031. Dirige David Lifar. Entrada: tres (3) alimentos no perecederos Reservar con anticipaci?n S?bado 31 de Julio 15 a 16:30 hs. Yoga para embarazadas con su Pareja. Sede Guemes 4527. TE.4774-1031 Dirige: David Lifar Entrada: tres (3) alimentos no perecederos. Reservar con anticipaci?n S?bado 31 de Julio 15 a 16:30 hs. Shantala, Masaje para el Beb?. Sede Echeverr?a 2758 . TE.4786-6185 Dirige: Claudia Agra Reservar con anticipaci?n Costo: $20. AGOSTO Viernes 6 Agosto de 18 a 19:30 hs: Yoga para principiantes. Se dar? el 1?. 2?, 3? y 4? Viernes del mes de Junio. Sede Echeverr?a 2758. TE. 4786-6185 Dirige: David Lifar. Reservar lugar con anticipaci?n. Vacantes Limitadas. Costo $30 S?bado 7, de 9 a 18 hs.: 2? Jornada de Actualizaci?n Docente, 3? Nivel. Sede Azcu?naga 762, Tel.: 4962-3112. Valor: $ 60. Domingo 8 de Agosto 9 a 12 hs. Domingo Antiestr?s R.M.N. (Respiraci?n, Meditaci?n, y Nutrici?n) 2? Parte: "La Actitud frente al Trabajo" incluye desayuno. Sede Echeverr?a 2758. TE 4786-6185 Dirige: David Lifar. Costo: $30.- Vacantes Limitadas.Reservar con anticipaci?n S?bado 14 de Agosto de 11 a 12:30 hs: Charla "La nutrici?n durante el Embarazo y el Post-parto". Sede Echeverr?a 2758. TE. 4786-6185 Dirige: Dra. Paula Lifszyc. Reservar lugar con anticipaci?n. . Entrada: tres (3) alimentos no perecederos S?bado 21 Agosto de 9 a 11 hs: "La respiraci?n en la postura de Yoga" Sede Echeverr?a 2758. Tel.: 4786-6185. Dirige David Lifar. Reservar lugar con anticipaci?n. Vacantes limitadas. Valor: $ 20. S?bado 28 de 15 a 16:30 hs: Shantala, Masaje para el Beb? Echeverr?a 2758. Tel.: 4786-6185. Dirige Claudia Agra. Reservar con anticipaci?n. Valor: $ 20. SETIEMBRE Viernes 3 de 18 a 19:30 hs: "Yoga para principiantes". (te?rico-practico) Se dar? el 1?. 2?, 3? y 4? Viernes del mes de Setiembre. Sede Echeverr?a 2758. TE. 4786-6185 Dirige: David Lifar. Reservar lugar con anticipaci?n. Vacantes Limitadas. Valor $30 S?bado 4 de 9 a 11:30 hs: "Filosof?a para principiantes" El yoga, su visi?n, yama, niyamas, desapego, actitud, etc. Sede Echeverr?a 2758. Tel.: 4786-6185. Dirige David Lifar. Reservar lugar con anticipaci?n. Vacantes limitadas. Valor: $ 20 S?bado 11 de 9 a 18 hs.: 2? Jornada de Actualizaci?n Docente, 1? Nivel. Sede Azcu?naga 762. Tel.: 4962-3112. Valor: $ 60. S?bado 18 : 18:30 hs. Fiesta de la Primavera Sede Echeverr?a 2758. Para alumnos y amigos Entrada libre S?bado 25 de 15 a 16:30 hs: Shantala, Masaje para el Beb? Echeverr?a 2758. Tel.: 4786-6185. Dirige Claudia Agra. Reservar con anticipaci?n. Valor: $ 20 Jueves 30 de Setiembre al 3 de Octubre Fin de Semana Antiestr?s: Los Cocos, C?rdoba, Coordinan: Iana y David Lifar Reservar lugar. http://www.fundacion-indra-devi.org/_sitio/carteles/cordoba_04.shtml PARA TENER EN CUENTA D?a de la Primavera: el 18 de Setiembre festejaremos la llegada de la Primavera a las 18:30 hrs. en Sede Echeverr?a 2758. Invitamos a todos los alumnos, amigos y simpatizantes a participar de dicho festejo. Especialmente a las embarazadas (Desfile de Panzas 2004), para las mam?s invitamos a inscribir a sus bebes en la "Carrera anual de Gateadores 2004" y para aquellos que ya caminan en la de "Grandes Caminadores 2004". Estas son algunas de las propuestas para dicha fecha. Los esperamos. ?Visito nuestro ?lbum de Fotos? http://www.fundacion-indra-devi.org/_sitio/albumdefotos/albumdefotos.shtm l Revista Yoga Arte y Ciencia de Vida. Junio-Julio-Agosto 2004 http://www.fundacion-indra-devi.org/_sitio/rev_junio04/1_junio04.html visite nuestra p?gina: http://www.fundacion-indra-devi.org info@fundacion-indra-devi.org remover@fundacion-indra-devi.org -- Guillermo Llenas From marc at merlins.org Tue Jul 13 07:20:29 2004 From: marc at merlins.org (Marc MERLIN) Date: Tue Jul 13 06:20:30 2004 Subject: [SA-exim] Weird headers In-Reply-To: <40F3DFAE.1080309@team.ar.inter.net> References: <40E437A7.80907@team.ar.inter.net> <20040712092902.GE5534@merlins.org> <40F3DFAE.1080309@team.ar.inter.net> Message-ID: <20040713132029.GD1380@merlins.org> On Tue, Jul 13, 2004 at 10:12:14AM -0300, Guillermo Llenas wrote: > The new news is that by each one of these messages I can find in > spool by message-id the "Data", which is a text in spanish of publicity > (spam). But I do not have headers by any side. You are looking at the wrong file > /var/spool/exim/input/p/1BkMxp-0005vZ-Ce-D Can you cat the -H file instead Marc -- "A mouse is a device used to point at the xterm you want to type in" - A.S.R. Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking Home page: http://marc.merlins.org/ | Finger marc_f@merlins.org for PGP key From guillermo.llenas at team.ar.inter.net Tue Jul 13 11:27:28 2004 From: guillermo.llenas at team.ar.inter.net (Guillermo Llenas) Date: Tue Jul 13 06:27:49 2004 Subject: [SA-exim] Weird headers In-Reply-To: <20040713132029.GD1380@merlins.org> References: <40E437A7.80907@team.ar.inter.net> <20040712092902.GE5534@merlins.org> <40F3DFAE.1080309@team.ar.inter.net> <20040713132029.GD1380@merlins.org> Message-ID: <40F3E340.1010800@team.ar.inter.net> Marc MERLIN wrote: > >>/var/spool/exim/input/p/1BkMxp-0005vZ-Ce-D > > > Can you cat the -H file instead > > Marc > You are looking at the wrong file Yes, I know. But that is the problem. I don't have (is like that doesn't exist ) the -H file, Only the -D file. -- Guillermo Llenas From marc at merlins.org Tue Jul 13 08:11:30 2004 From: marc at merlins.org (Marc MERLIN) Date: Tue Jul 13 07:11:35 2004 Subject: [SA-exim] Weird headers In-Reply-To: <40F3E340.1010800@team.ar.inter.net> References: <40E437A7.80907@team.ar.inter.net> <20040712092902.GE5534@merlins.org> <40F3DFAE.1080309@team.ar.inter.net> <20040713132029.GD1380@merlins.org> <40F3E340.1010800@team.ar.inter.net> Message-ID: <20040713141130.GE13583@merlins.org> On Tue, Jul 13, 2004 at 10:27:28AM -0300, Guillermo Llenas wrote: > > You are looking at the wrong file > > Yes, I know. But that is the problem. I don't have (is like that > doesn't exist ) the -H file, Only the -D file. That's probably because you caused the error to happen before exim wrote the headers to disk too. There are multiple ways to get the full message: 1) disable sa-exim and get the message that way 2) if sa-exim fails (timeout or error) it can be configured to spool the message with headers on disk, you can get that too (/var/spool/sa-exim/SAtimeoutsave/ or SAerror or something) Marc -- "A mouse is a device used to point at the xterm you want to type in" - A.S.R. Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking Home page: http://marc.merlins.org/ | Finger marc_f@merlins.org for PGP key From guillermo.llenas at team.ar.inter.net Tue Jul 13 16:12:55 2004 From: guillermo.llenas at team.ar.inter.net (Guillermo Llenas) Date: Tue Jul 13 11:13:20 2004 Subject: [SA-exim] Weird headers In-Reply-To: <20040713141130.GE13583@merlins.org> References: <40E437A7.80907@team.ar.inter.net> <20040712092902.GE5534@merlins.org> <40F3DFAE.1080309@team.ar.inter.net> <20040713132029.GD1380@merlins.org> <40F3E340.1010800@team.ar.inter.net> <20040713141130.GE13583@merlins.org> Message-ID: <40F42627.8080304@team.ar.inter.net> > > There are multiple ways to get the full message: > 1) disable sa-exim and get the message that way > 2) if sa-exim fails (timeout or error) it can be configured to spool the > message with headers on disk, you can get that too > (/var/spool/sa-exim/SAtimeoutsave/ or SAerror or something) Point 2 is done and nothing yet. About the point 1, if I disable sa-exim and the message come into the mailbox, how I Know witch is the one? :) Anyway I'll try to track it. Regards. -- Guillermo Llenas From marc at merlins.org Tue Jul 13 12:46:11 2004 From: marc at merlins.org (Marc MERLIN) Date: Tue Jul 13 11:46:22 2004 Subject: [SA-exim] Weird headers In-Reply-To: <40F42627.8080304@team.ar.inter.net> References: <40E437A7.80907@team.ar.inter.net> <20040712092902.GE5534@merlins.org> <40F3DFAE.1080309@team.ar.inter.net> <20040713132029.GD1380@merlins.org> <40F3E340.1010800@team.ar.inter.net> <20040713141130.GE13583@merlins.org> <40F42627.8080304@team.ar.inter.net> Message-ID: <20040713184611.GB22900@merlins.org> On Tue, Jul 13, 2004 at 03:12:55PM -0300, Guillermo Llenas wrote: > > > > > >There are multiple ways to get the full message: > >1) disable sa-exim and get the message that way > >2) if sa-exim fails (timeout or error) it can be configured to spool the > > message with headers on disk, you can get that too > > (/var/spool/sa-exim/SAtimeoutsave/ or SAerror or something) > > > Point 2 is done and nothing yet. About the point 1, if I disable > sa-exim and the message come into the mailbox, how I Know witch is the > one? :) Just post all the headers of the message you received Marc -- "A mouse is a device used to point at the xterm you want to type in" - A.S.R. Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking Home page: http://marc.merlins.org/ | Finger marc_f@merlins.org for PGP key From guillermo.llenas at team.ar.inter.net Tue Jul 13 16:59:21 2004 From: guillermo.llenas at team.ar.inter.net (Guillermo Llenas) Date: Tue Jul 13 11:59:34 2004 Subject: [SA-exim] Weird headers In-Reply-To: <20040713184611.GB22900@merlins.org> References: <40E437A7.80907@team.ar.inter.net> <20040712092902.GE5534@merlins.org> <40F3DFAE.1080309@team.ar.inter.net> <20040713132029.GD1380@merlins.org> <40F3E340.1010800@team.ar.inter.net> <20040713141130.GE13583@merlins.org> <40F42627.8080304@team.ar.inter.net> <20040713184611.GB22900@merlins.org> Message-ID: <40F43109.1080207@team.ar.inter.net> >> Point 2 is done and nothing yet. About the point 1, if I disable >>sa-exim and the message come into the mailbox, how I Know witch is the >>one? :) > > > Just post all the headers of the message you received > > Marc Sorry Marc. I didn?t tell you that we have more than 10.000 accounts. If I could know who mailbox is receiving that mail, believe me I will. :( -- Guillermo Llenas From marc at merlins.org Wed Jul 14 17:20:35 2004 From: marc at merlins.org (Marc MERLIN) Date: Wed Jul 14 16:20:44 2004 Subject: [SA-exim] Weird headers In-Reply-To: <40F591CC.2030905@team.ar.inter.net> References: <20040713141130.GE13583@merlins.org> <40F42627.8080304@team.ar.inter.net> <20040713184611.GB22900@merlins.org> <40F43109.1080207@team.ar.inter.net> <20040713203604.GE22900@merlins.org> <40F454C2.7020004@team.ar.inter.net> <20040713213647.GF22900@merlins.org> <40F45971.8060107@team.ar.inter.net> <20040713232740.GH22900@merlins.org> <40F591CC.2030905@team.ar.inter.net> Message-ID: <20040714232035.GR22900@merlins.org> Ok, so if you are really receiving a mail like this, things are really fucked up :) Admittedly sa-exim should deal with it. In the meantime, you can tell exim to refuse mails with such long headers: header_line_maxsize = 7k should do it On Wed, Jul 14, 2004 at 05:04:28PM -0300, Guillermo Llenas wrote: > From: =?ISO-8859-1?Q?Asociaci=F3n?= de =?ISO-8859-1?Q?V=EDctimas?= del > Aborto > =?ISO-8859-1?Q?=28AVA=29?= > Subject: =?ISO-8859-1?Q?Informaci=F3n?= al servicio de la libertad y la vida > To: "integral" > Content-Type: text/plain; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; "iso-8859-1"; > "iso-8859-1"; "iso-8859-1"; "iso-8859-1" > Reply-To: vozvictimas@eresmas.com > Date: Sat, 15 May 2004 05:27:20 +0200 > X-Priority: 3 > X-Library: Indy 8.0.22 > Message-Id: <20040515032721.ZKAC1219.smtp06.retemail.es@nombre-vsvtj3nx> -- "A mouse is a device used to point at the xterm you want to type in" - A.S.R. Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking Home page: http://marc.merlins.org/ | Finger marc_f@merlins.org for PGP key From andre.correa at pobox.com Thu Jul 15 16:56:16 2004 From: andre.correa at pobox.com (Andre Correa) Date: Thu Jul 15 11:56:40 2004 Subject: [SA-exim] SA-Exim on Sparc crash Message-ID: <40F6D350.3090605@pobox.com> Hi Marc and list members, this is my first message here. I found on list archives a thread called: "local_scan is crashing (log_write crash)" that helped me solve a problem on my exim running on a SuSe 7.3 for Sparc. I kept getting on logs: local_scan() function crashed with signal 11 - message temporarily rejected (size XXXXXX) on logs. I found that on Sparc sizeof(off_t)_ = 4, not 8 like in i386, so i breaks log_write as in explained in that thread. I couldn't find its the first message to know if the discussion started with a SPARC user, so I am reporting it again. Using (double)(fdsize - 18) on local_scan.c seens to solve the problem temporarilly, untill a new version of sa-exim comes out with a fix. that is it! cheers... Andre From marc at merlins.org Thu Jul 15 13:08:54 2004 From: marc at merlins.org (Marc MERLIN) Date: Thu Jul 15 12:08:57 2004 Subject: [SA-exim] SA-Exim on Sparc crash In-Reply-To: <40F6D350.3090605@pobox.com> References: <40F6D350.3090605@pobox.com> Message-ID: <20040715190854.GA3301@merlins.org> On Thu, Jul 15, 2004 at 03:56:16PM -0300, Andre Correa wrote: > > Hi Marc and list members, this is my first message here. I found on list > archives a thread called: "local_scan is crashing (log_write crash)" > that helped me solve a problem on my exim running on a SuSe 7.3 for Sparc. > > I kept getting on logs: > > local_scan() function crashed with signal 11 - message temporarily > rejected (size XXXXXX) > > > on logs. I found that on Sparc sizeof(off_t)_ = 4, not 8 like in i386, > so i breaks log_write as in explained in that thread. I couldn't find > its the first message to know if the discussion started with a SPARC > user, so I am reporting it again. > > Using (double)(fdsize - 18) on local_scan.c seens to solve the problem > temporarilly, untill a new version of sa-exim comes out with a fix. Get the CVS version, the fix should already be in there http://marc.merlins.org/linux/exim/files/sa-exim-cvs.tar.gz Confirmation that it works would be appreciated though Thanks Marc -- "A mouse is a device used to point at the xterm you want to type in" - A.S.R. Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking Home page: http://marc.merlins.org/ | Finger marc_f@merlins.org for PGP key From lista_exim at jornada.com.mx Mon Jul 19 00:41:08 2004 From: lista_exim at jornada.com.mx (Armando Andrade) Date: Sun Jul 18 21:41:19 2004 Subject: [SA-exim] help about whitelist Message-ID: <40FB50E4.5080607@jornada.com.mx> Regards I send one spam test from a foreign mail account and it works well but then all messages that i send from there are marked as spam and even they are rejected without being scanned i allready put the address in the withelist file as: whitelist_from acconut@address.com etc and the mail is still rejeced, the only way to remove from there is erasing the .spamassasin db and remove the files from SAteergrube, wich is the rigth way to prevent a address to be rejected, the configuration in my exim conf even contains the followin lines localpartlist noenvfromcheck = /etc/exim/whitelist localpartlist noenvfromcallback = /etc/exim/whitelist localpartlist nosarej = /etc/exim/whitelist localpartlist nohdrsyncheck = /etc/exim/whitelist localpartlist nohdrfromcallback = /etc/exim/whitelist and the withelist file has the entries as mencioned above any hints to erase an entry from the db the configuration I used is from openna thank you in advance From marc at merlins.org Mon Jul 26 17:40:20 2004 From: marc at merlins.org (Marc MERLIN) Date: Mon Jul 26 23:34:59 2004 Subject: [SA-exim] Re: sa-exim and junk bounces In-Reply-To: <20040725195846.GA4428@hank.shelbyville.oz> References: <20040725195846.GA4428@hank.shelbyville.oz> Message-ID: <20040726204020.GE30713@merlins.org> On Mon, Jul 26, 2004 at 05:28:46AM +0930, Ron wrote: > Hey Marc, Try the sa-exim list if you can, you'll get more (and better) help than just mine. > I have a wish for sa-exim... I get a lot of junk bounces courtesy of > people who forge their spam from my addresses. I want to bounce as > much spam as I can at smtp time, but I don't want to contribute to > this problem. Yep. > That means I can't reject anything that comes from a trusted forwarder > which already accepted the mail in good faith for me, since the bounce > address is likely to be bogus (if it's spammy) and the real originator > is long gone. True, although there isn't a perfect solution to this. I do reject mail from some forwarders (not MXes since I recommend that you run sa-exim on all your MXes or only publish one, I was referring to .forward). I guess I look at it like smtp callbacks: if they accepted the mail, that's not reason for me to be as loose as they are and accept it too. Sure, it fills up their queue, but eh, maybe that's an incentive for them to get better filtering :) > This seems easy enough, I have a bunch of rules in exim to > discriminate the messages that are no longer safe to bounce in > good conscience, from the hosts that I'm free to be as mean as > I please to if they are caught in the act. What I was hoping > to do was get sa-exim to /dev/null the really spammy stuff from > both groups, but never reject a message that might spam someone > (who likely didn't send it) with its bounce. > > Since there is no separate condition for this, I thought I > would be able to kludge its equivalent with: > > SApermreject: ${if eq{$acl_m0}{dont-bounce}{14285.7}{12.0}} Mmmmh, I think that wouldn't be too hard to do. I'll see what I can do about this. Marc -- "A mouse is a device used to point at the xterm you want to type in" - A.S.R. Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking Home page: http://marc.merlins.org/ | Finger marc_f@merlins.org for PGP key -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 307 bytes Desc: Digital signature Url : http://lists.merlins.org/archives/sa-exim/attachments/20040726/6b678d1a/attachment.bin From simon at nuit.ca Thu Jul 29 20:08:26 2004 From: simon at nuit.ca (simon@nuit.ca) Date: Thu Jul 29 12:08:53 2004 Subject: [SA-exim] SA 3 and sa-exim 4.x Message-ID: <20040729190822.GC29989@nuit.ca> hi, i've the SA from debian experimental installed, and sa-exim 4.0-2 installed too. i recently re-enabled sa-exim - running sa 2, 3 times was getting expensive resource-wise... anyway i'm getting nothing but panics from sa-exim when it runs: SA: Action: SA didn't successfully run against message, accepting (time: 1/1 secs | Message-Id: XXXXXXXXXXXXXXXXXXX). From (host=XXXXXXXXX [XXXXXXXX]) for XXXXX@XXXX.XX 1BqFlt-XXXXXX-XX SA: PANIC: SA: could not parse X-Spam-Status: to extract hits and required. Bad!. Got: 'X-Spam-Status: No, score=-2.4 required=5.5 tests=BAYES_00,NO_REAL_NAME autolearn=no version=3.0.0-pre2' (but message was accepted) the SADebug(?) set to 10 is not any more helpful (i'm going to re-enable it to test / check some more). exim's paniclog says the same as the SA: PANIC: thing i pasted above. i'm aware that SA changed it's output - or at least seems to have done so, which is maybe why sa-exim is panicking, but is there any confirmation of this? i was going to to downgrade if need be, but sa 3.x i found (for here anyway) is a little less resource hungry. also, if anyone has had experience with sa 3.x and sa-exim, and maybe how to get them to "like each other", please speak up :). s/ -- ,''`. http://www.debian.org/ http://www.nuit.ca/ : :' : Debian GNU/Linux http://simonraven.nuit.ca/ ' `- GPG Print: 7C49 FD9C 1054 7300 3B7B 8BF4 6A88 7AE2 711D F097 -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 652 bytes Desc: Digital signature Url : http://lists.merlins.org/archives/sa-exim/attachments/20040729/8756cd22/attachment.bin From marc at merlins.org Thu Jul 29 13:16:16 2004 From: marc at merlins.org (Marc MERLIN) Date: Thu Jul 29 12:16:18 2004 Subject: [SA-exim] SA 3 and sa-exim 4.x In-Reply-To: <20040729190822.GC29989@nuit.ca> References: <20040729190822.GC29989@nuit.ca> Message-ID: <20040729191616.GZ20117@merlins.org> On Thu, Jul 29, 2004 at 07:08:26PM +0000, simon@nuit.ca wrote: > 1BqFlt-XXXXXX-XX SA: PANIC: SA: could not parse X-Spam-Status: to extract hits and required. Bad!. Got: 'X-Spam-Status: No, score=-2.4 required=5.5 tests=BAYES_00,NO_REAL_NAME autolearn=no version=3.0.0-pre2' (but message was accepted) Mmmh, it used to be hits= instead of score= I'll have to change that in the next sa-exim to support both. In the meantime, feel free to change it in the source: s/hits/score/ Marc -- "A mouse is a device used to point at the xterm you want to type in" - A.S.R. Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking Home page: http://marc.merlins.org/ | Finger marc_f@merlins.org for PGP key -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 307 bytes Desc: not available Url : http://lists.merlins.org/archives/sa-exim/attachments/20040729/6232ffeb/attachment.bin From simon at nuit.ca Thu Jul 29 22:20:14 2004 From: simon at nuit.ca (simon@nuit.ca) Date: Thu Jul 29 14:20:47 2004 Subject: [SA-exim] SA 3 and sa-exim 4.x In-Reply-To: <20040729191616.GZ20117@merlins.org> References: <20040729190822.GC29989@nuit.ca> <20040729191616.GZ20117@merlins.org> Message-ID: <20040729212010.GD29989@nuit.ca> Ce jour Thu, 29 Jul 2004, Marc MERLIN a dit: > On Thu, Jul 29, 2004 at 07:08:26PM +0000, simon@nuit.ca wrote: > > 1BqFlt-XXXXXX-XX SA: PANIC: SA: could not parse X-Spam-Status: to extract hits and required. Bad!. Got: 'X-Spam-Status: No, score=-2.4 required=5.5 tests=BAYES_00,NO_REAL_NAME autolearn=no version=3.0.0-pre2' (but message was accepted) > > Mmmh, it used to be hits= instead of score= > > I'll have to change that in the next sa-exim to support both. > In the meantime, feel free to change it in the source: s/hits/score/ oh cool, good to know there's an easy fix. thanks a lot for a great application, BTW thanks s/ > Marc > -- > "A mouse is a device used to point at the xterm you want to type in" - A.S.R. > Microsoft is to operating systems & security .... > .... what McDonalds is to gourmet cooking > Home page: http://marc.merlins.org/ | Finger marc_f@merlins.org for PGP key may i include the McCrap quote in my .signify file? :) -- Puritanism: The haunting fear that someone, somewhere may be happy. -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 652 bytes Desc: Digital signature Url : http://lists.merlins.org/archives/sa-exim/attachments/20040729/beb3194f/attachment.bin From ada at jornada.com.mx Mon Jul 19 05:23:52 2004 From: ada at jornada.com.mx (ada4u) Date: Mon Oct 25 08:20:13 2004 Subject: [SA-exim] Help about whitelist Message-ID: <40FB4CCB.4020608@jornada.com.mx> Regards I send one spam test from a foreign mail account and it works well but then all messages that i send from there are marked as spam and even they are rejected without being scanned i allready put the address in the withelist file as: whitelist_from acconut@address.com etc and the mail is still rejeced, the only way to remove from there is erasing the .spamassasin db and remove the files from SAteergrube, wich is the rigth way to prevent a address to be rejected, the configuration in my exim conf even contains the followin lines localpartlist noenvfromcheck = /etc/exim/whitelist localpartlist noenvfromcallback = /etc/exim/whitelist localpartlist nosarej = /etc/exim/whitelist localpartlist nohdrsyncheck = /etc/exim/whitelist localpartlist nohdrfromcallback = /etc/exim/whitelist and the withelist file has the entries as mencioned above any hints to erase an entry from the db the configuration I used is from openna thank you in advance