Mailing List Archive: Debian exim4 SRS forward only how-to

Debian exim4 SRS forward only how-to

Dec 19, 2005, 3:55 AM

Post #1 of 3 (9968 views)

Hi All,

I have a forwarding service running on Debian box and I got into the SRS topic
only because my mail forwarding stopped to work. I suppose I am in a position
of an average admin, who simply wants his server to act as it was set up to do
in the pre SPF days.

I found no how-to about setting up SRS with exim4 under Debian and actually
have no clue how to implement this. I need just SRS, not whole SPF, and only for
forwarded e-mails!

Can anyone answer these questions, however stupid they may be:
0. Can I use just SRS, without SPF?
1. Do I have to compile exim4 to get SRS working or can I just use some pipe
in .forward?
2. What should my .forward file look like?
3. What should the srs.secret file look like?
4. Do I need any other files than I already have (see below)?
5. What changes in exim config are needed?

Thank for you time and support.

Here is some info on what I have right now:
1. I am running the latest debian exim4-daemon-heavy (4.50-8)
2. I apt-got the following packages:
- Package: srs (0.31-1)
- Package: libmail-srs-perl (0.31-1)
- Package: libsrs2-0 (1.0.18-1)
3.The important files seem to be:
usr/bin/srs, usr/bin/srsc, usr/bin/srsd, usr/lib/libsrs2.so.0, usr/lib/libsrs2.so.0.0.0,
usr/share/perl5/Mail/SRS.pm, usr/share/perl5/Mail/SRS/DB.pm,
usr/share/perl5/Mail/SRS/Daemon.pm, usr/share/perl5/Mail/SRS/Guarded.pm,
usr/share/perl5/Mail/SRS/Reversable.pm,
usr/share/perl5/Mail/SRS/Reversible.pm, usr/share/perl5/Mail/SRS/Shortcut.pm

Kind Regards,
Michal

-------
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname=srs-discuss@v2.listbox.com

Re: Debian exim4 SRS forward only how-to [ In reply to ]

dwmw2 at infradead

Dec 19, 2005, 6:05 AM

Post #2 of 3 (9614 views)

Permalink

On Mon, 2005-12-19 at 12:55 +0100, mzochowski@orange.pl wrote:
> I found no how-to about setting up SRS with exim4 under Debian and
> actually have no clue how to implement this. I need just SRS, not
> whole SPF, and only for forwarded e-mails!

It can be done purely within Exim. For an example, see
http://www.infradead.org/rpr.html

You can explicitly list the broken domains which require you to do SRS,
so that you don't have to mangle reverse-paths unconditionally.

My current configuration is in http://david.woodhou.se/eximconf/ which
differs only slightly.

--
dwmw2

-------
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname=srs-discuss@v2.listbox.com

Re: Debian exim4 SRS forward only how-to [ In reply to ]

stuart at bmsi

Dec 19, 2005, 10:36 AM

Post #3 of 3 (9560 views)

Permalink

On Mon, 19 Dec 2005 mzochowski@orange.pl wrote:

> I have a forwarding service running on Debian box and I got into the SRS
> topic only because my mail forwarding stopped to work. I suppose I am in a
> position of an average admin, who simply wants his server to act as it was
> set up to do in the pre SPF days.

Actually, forwarders shouldn't theoretically need to impelement SRS.
Your users should whitelist you as a trusted forwarder before checking
SPF. However, since the little detail of listing forwarders is ignored
for most end-user SPF implementations, SRS is a tool that forwarders
can use to help things "just work" for their users that check SPF.

> Can anyone answer these questions, however stupid they may be:

I can answer some of them.

> 0. Can I use just SRS, without SPF?

Yes.

> 1. Do I have to compile exim4 to get SRS working or can I just use some pipe
> in .forward?

Although I am a sendmail guy, I don't think you need to recompile exim. The
Perl SRS package from which I derived my Python SRS package had an Exim socket
map (which I translated to Python, but haven't tested).

> 2. What should my .forward file look like?

I am assuming that like the sendmail socketmap, Exim doesn't need any
changes to .forward.

> 3. What should the srs.secret file look like?

Anything an attacker won't guess.

> 4. Do I need any other files than I already have (see below)?

No. Unless you prefer Python to Perl scripts.

> 5. What changes in exim config are needed?

Enable the socketmap. Details will need to come from an Exim person.

--
Stuart D. Gathman <stuart@bmsi.com>
Business Management Systems Inc. Phone: 703 591-0911 Fax: 703 591-6154
"Confutatis maledictis, flamis acribus addictis" - background song for
a Microsoft sponsored "Where do you want to go from here?" commercial.

-------
To unsubscribe, change your address, or temporarily deactivate your subscription,
please go to http://v2.listbox.com/member/?listname=srs-discuss@v2.listbox.com