Mailing List Archive

[Bug 2736] failure in greylisting ACL after update to Exim v 4.94.2 #2 built 30-Apr-2021 11:34:38
https://bugs.exim.org/show_bug.cgi?id=2736

Lena <Lena@lena.kiev.ua> changed:

What |Removed |Added
----------------------------------------------------------------------------
CC| |Lena@lena.kiev.ua

--- Comment #1 from Lena <Lena@lena.kiev.ua> ---
> I don't know enough about exim or ACLs to work out where this is happening.

Please quote paragraphs from your config containing "readsocket".

--
You are receiving this mail because:
You are on the CC list for the bug.
--
## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##
[Bug 2736] failure in greylisting ACL after update to Exim v 4.94.2 #2 built 30-Apr-2021 11:34:38 [ In reply to ]
https://bugs.exim.org/show_bug.cgi?id=2736

--- Comment #2 from Alan <alan@loopbiz.com> ---
Thank you, Lena
- I see embedded newlines - are they supposed to be there?


exim.conf: condition = ${sg{${readsocket{/var/run/cpgreylistd.sock}\
exim.conf: forbid_filter_readsocket
exim.conf: forbid_filter_readsocket
exim.conf: forbid_filter_readsocket
exim.conf: forbid_filter_readsocket
exim.conf: condition = "${if match
{${readsocket{/var/run/dovecot/quota-status}{request=smtpd_access_policy\nrecipient=${quote:$local_part}@${quote:$domain_data}\nsize=$message_size\n\n}{3s}{\n}{SOCKETFAIL}}}{action=5}{true}{false}}"
exim.conf: forbid_filter_readsocket
exim.conf: condition = "${if match
{${readsocket{/var/run/dovecot/quota-status}{request=smtpd_access_policy\nrecipient=${quote:$local_part}\nsize=$message_size\n\n}{3s}{\n}{SOCKETFAIL}}}{action=5}{true}{false}}"
exim.pl.local: return eval { Exim::expand_string(
'${readsocket{/usr/local/cpanel/var/cpwrapd.sock}{' .
Cpanel::Encoder::Exim::unquoted_encode_string_literal($json_template) .
'}{10s}}' ); };

--
You are receiving this mail because:
You are on the CC list for the bug.
--
## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##
[Bug 2736] failure in greylisting ACL after update to Exim v 4.94.2 #2 built 30-Apr-2021 11:34:38 [ In reply to ]
https://bugs.exim.org/show_bug.cgi?id=2736

--- Comment #3 from Lena <Lena@lena.kiev.ua> ---
I asked for entire paragraphs, not just grepped lines. I suspect that the
problem is with the paragraph with the first line grep found.

--
You are receiving this mail because:
You are on the CC list for the bug.
--
## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##
[Bug 2736] failure in greylisting ACL after update to Exim v 4.94.2 #2 built 30-Apr-2021 11:34:38 [ In reply to ]
https://bugs.exim.org/show_bug.cgi?id=2736

--- Comment #4 from Alan <alan@loopbiz.com> ---
# BEGIN INSERT greylisting

# Greylisting
defer message = Temporarily unable to process your email. Please try again
later.
# skip if authenticated (with SMTP AUTH ...)
!authenticated = *
!hosts = +recent_recipient_mail_server_ips :
+greylist_trusted_netblocks : +greylist_common_mail_providers :
+cpanel_mail_netblocks
domains = +local_domains : +relay_domains
condition = ${sg{${readsocket{/var/run/cpgreylistd.sock}\
{should_defer ${sg{$sender_host_address}{ }{\x01}}
${sg{$sender_address}{ }{\x01}} ${sg{$local_part@$domain}{ }{\x01}}\n}\
{5s}{\n}{no}}}{\n}{}}
log_message = Deferred due to greylisting. Host:
'$sender_host_address' From: '$sender_address' To: '$local_part@$domain' SPF:
'${if def:spf_result {$spf_result}{unchecked}}'


# END INSERT greylisting

---------------------------------------
#
# User Level Filtering for virtual users
#

...

virtual_user_overquota:
driver = redirect
domains = !$primary_hostname :
${lookup{$domain}lsearch{/etc/userdomains}{${perl{untaint}{$domain}}}}
require_files = "+$home/etc/$domain_data"
user = "${lookup{$domain_data}lsearch{/etc/userdomains}{$value}}"
router_home_directory = ${extract{5}{::}{${lookup
passwd{${lookup{$domain_data}lsearch{/etc/userdomains}{$value}}}{$value}}}}
condition = "${if match
{${readsocket{/var/run/dovecot/quota-status}{request=smtpd_access_policy\nrecipient=${quote:$local_part}@${quote:$domain_data}\nsize=$message_size\n\n}{3s}{\n}{SOCKETFAIL}}}{action=5}{true}{false}}"
data = ":fail:Mailbox is full / Blocks limit exceeded / Inode limit exceeded"
verify_only
allow_fail
--------------------------------------
# srs is disabled


...

localuser_overquota:
driver = redirect
domains = $primary_hostname
check_local_user
condition = "${if match
{${readsocket{/var/run/dovecot/quota-status}{request=smtpd_access_policy\nrecipient=${quote:$local_part}\nsize=$message_size\n\n}{3s}{\n}{SOCKETFAIL}}}{action=5}{true}{false}}"
data = ":fail:Mailbox is full / Blocks limit exceeded / Inode limit exceeded"
verify_only
allow_fail

---------------------------------------

--
You are receiving this mail because:
You are on the CC list for the bug.
--
## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##
[Bug 2736] failure in greylisting ACL after update to Exim v 4.94.2 #2 built 30-Apr-2021 11:34:38 [ In reply to ]
https://bugs.exim.org/show_bug.cgi?id=2736

--- Comment #5 from Simon Arlott <bugzilla.exim.simon@arlott.org> ---
This is probably a duplicate of https://bugs.exim.org/show_bug.cgi?id=2735
which describes a change in behaviour of readsocket in cPanel that causes this
specific problem with "yes\n" and "no\n" responses.

--
You are receiving this mail because:
You are on the CC list for the bug.
--
## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##
[Bug 2736] failure in greylisting ACL after update to Exim v 4.94.2 #2 built 30-Apr-2021 11:34:38 [ In reply to ]
https://bugs.exim.org/show_bug.cgi?id=2736

Todd Rinaldo <toddr@cpanel.net> changed:

What |Removed |Added
----------------------------------------------------------------------------
CC| |toddr@cpanel.net

--- Comment #6 from Todd Rinaldo <toddr@cpanel.net> ---
I can confirm that's the case. cPanel has provided an updated release already
that addresses this in configuration.

--
You are receiving this mail because:
You are on the CC list for the bug.
--
## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##
[Bug 2736] failure in greylisting ACL after update to Exim v 4.94.2 #2 built 30-Apr-2021 11:34:38 [ In reply to ]
https://bugs.exim.org/show_bug.cgi?id=2736

--- Comment #7 from Lena <Lena@lena.kiev.ua> ---
(In reply to Todd Rinaldo from comment #6)

> cPanel has provided an updated release
> already that addresses this in configuration.

The posted config excerpt seems for me already with the fix: ${sg{...}{\n}{}}

--
You are receiving this mail because:
You are on the CC list for the bug.
--
## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##
[Bug 2736] failure in greylisting ACL after update to Exim v 4.94.2 #2 built 30-Apr-2021 11:34:38 [ In reply to ]
https://bugs.exim.org/show_bug.cgi?id=2736

--- Comment #8 from Alan <alan@loopbiz.com> ---
Thank you for taking the time to investigate, I appreciate it, Lena, Simon and
Todd.
I can confirm it is no longer doing that in the log.

Alan.

--
You are receiving this mail because:
You are on the CC list for the bug.
--
## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##