SC/01 Use a glob alias rather than an array ref in eximstats generated
parser. This improves both readability and performance.
SC/02 Collect SpamAssassin and rejection statistics in eximstats.
Don't display local sender or destination tables in eximstats unless
there is data to show.
Added average volumes into the eximstats top table text output.
SC/03 Collect data on the number of addresses (recipients) as well
as the number of messages in eximstats.
TF/01 Correct an error in the documentation for the redirect router. Exim
does (usually) call initgroups() when daemonizing.
TF/02 Call initgroups() when dropping privilege in exim.c, so that Exim runs
with consistent privilege compared to when running as a daemon.
TF/03 Note in the spec that $authenticated_id is not set for local
submissions from trusted users.
TF/04 The ratelimit per_rcpt option now works correctly in acl_not_smtp.
Thanks to Dean Brooks for the patch.
TF/05 Make it easier to get SMTP authentication and TLS/SSL support working
by adding some example configuration directives to the default
configuration file. A little bit of work is required to uncomment the
directives and define how usernames and passwords are checked, but
there is now a framework to start from.
PH/01 Added #define LDAP_DEPRECATED 1 to ldap.c because some of the "old"
functions that Exim currently uses aren't defined in ldap.h for OpenLDAP
without this. I don't know how relevant this is to other LDAP libraries.
PH/02 Add the verb name to the "unknown ACL verb" error.
PH/03 Magnus Holmgren's patch for filter_prepend_home.
PH/03 Fixed Bugzilla #101: macro definition between ACLs doesn't work.
PH/04 Applied Magnus Holmgren's patch to fix Bugzilla #98: transport's home
directory not expanded when it should be if an expanded home directory
was set for the address (which is overridden by the transport).
PH/05 Applied Alex Kiernan's patch to fix Bugzilla #99: a problem with
libradius.
PH/06 Added acl_not_smtp_start, based on Johannes Berg's patch, and set the
bit to forbid control=suppress_local_fixups in the acl_not_smtp ACL,
because it is too late at that time, and has no effect.
PH/07 Changed ${quote_pgsql to quote ' as '' instead of \' because of a
security issue with \' (bugzilla #107). I could not use the
PQescapeStringConn() function, because it needs a PGconn value as one of
its arguments.
PH/08 When testing addresses using -bt, indicate those final addresses that
are duplicates that would not cause an additional delivery. At least one
person was confused, thinking that -bt output corresponded to deliveries.
(Suppressing duplicates isn't a good idea as you lose the information
about possibly different redirections that led to the duplicates.)
PH/09 Applied patch from Erik to use select() instead of poll() in spam.c on
systems where poll() doesn't work, in particular OS X.
PH/10 Added more information to debugging output for retry time not reached.
PH/11 Applied patch from Arkadiusz Miskiewicz to apply a timeout to read
operations in malware.c.
PH/12 Applied patch from Magnus Holmgren to include the "h" tag in Domain Keys
signatures.
PH/13 If write_rejectlog was set false when logging was sent to syslog with
syslog_duplication set false, log lines that would normally be written
both the the main log and to the reject log were not written to syslog at
all.
PH/14 In the default configuration, change the use of "message" in ACL warn
statements to "add_header".
PH/15 Diagnose a filter syntax error for "seen", "unseen", or "noerror" if not
not followed by a command (e.g. "seen endif").
PH/16 Recognize SMTP codes at the start of "message" in ACLs and after :fail:
and :defer: in a redirect router. Add forbid_smtp_code to suppress the
latter.
PH/17 Added extra conditions to the default value of delay_warning_condition
so that it is now:
${if or { \
{ !eq{$h_list-id:$h_list-post:$h_list-subscribe:}{} } \
{ match{$h_precedence:}{(?i)bulk|list|junk} } \
{ match{$h_auto-submitted:}{(?i)auto-generated|auto-replied} } \
}{no}{yes}}
The Auto-Submitted: and various List- headers are standardised, whereas I
don't think Precedence: ever was.
PH/18 Refactored debugging code in route_finduser() to show more information,
in particular, the error code if getpwnam() issues one.
PH/19 Added PQsetClientEncoding(conn, "SQL_ASCII") to the pgsql code module.
This is apparently needed in addition to the PH/07 change above to avoid
any possible encoding problems.
PH/20 Perl can change the locale. Exim was resetting it after a ${perl call,
but not after initializing Perl.
PH/21 Added a call to PQsetNoticeProcessor() to catch pgsql "notices" and
output them only if debugging. By default they are written stderr,
apparently, which is not desirable.
PH/22 Added Alain Williams' LDAP patch to support setting REFERRALS=off on
queries.
JJ/01 exipick: added --reverse (and -R synonym), --random, --size, --sort and
--not options
JJ/02 exipick: rewrote --help documentation to hopefully make more clear.
PH/23 Made -oMaa and -oMt work with -bh and -bs to pretend the connection is
authenticated or an ident call has been made. Suppress the default
values for $authenticated_id and $authenticated_sender (but permit -oMai
and -oMas) when testing with -bh.
PH/24 Re-jigged the order of the tests in the default configuration so that the
tests for valid domains and recipients precede the DNS black list and CSA
tests, on the grounds that those ones are more expensive.
PH/25 Exim was not testing for a space following SMTP commands such as EHLO
that require one. Thus, EHLORHUBARB was interpreted as a valid command.
This bug exists in every version of Exim that I still have, right back to
0.12.
PH/26 (n)wildlsearch lookups are documented as being done case-insensitively.
However, an attempt to turn on case-sensitivity in a regex key by
including (?-i) didn't work because the subject string was already
lowercased, and the effects were non-intuitive. It turns out that a
one-line patch can be used to allow (?-i) to work as expected.
Exim version 4.62
-----------------
TF/01 Fix the add_header change below (4.61 PH/55) which had a bug that (amongst
other effects) broke the use of negated acl sub-conditions.
PH/01 ${readsocket now supports Internet domain sockets (modified John Jetmore
patch).
PH/02 When tcp-wrappers is called from Exim, it returns only "deny" or "allow".
"Deny" causes Exim to reject the incoming connection with a 554 error.
Unfortunately, if there is a major crisis, such as a disk failure,
tcp-wrappers gives "deny", whereas what one would like would be some
kind of temporary error. A kludge has been added to help with this.
Before calling hosts_ctl(), errno is set zero. If the result is "deny", a
554 error is used if errno is still zero or contains ENOENT (which occurs
if either of the /etc/hosts.{allow,deny} files is missing). Otherwise, a
451 error is used.
PH/03 Add -lutil to the default FreeBSD LIBS setting.
PH/04 Change PH/19 for 4.61 was too wide. It should not be applied to host
errors. Otherwise a message that provokes a temporary error (when other
messages do not) can cause a whole host to time out.
PH/05 Batch deliveries by appendfile and pipe transports did not work when the
addresses were routed directly to files or pipes from a redirect router.
File deliveries just didn't batch; pipe deliveries might have suffered
odd errors.
PH/06 A failure to get a lock for a hints database would erroneously always say
"Failed to get write lock", even when it was really a read lock.
PH/07 The appendfile transport was creating MBX lock files with a fixed mode
of 0600. This has been changed to use the value of the lockfile_mode
option (which defaults to 0600).
PH/08 Applied small patch from the Sieve maintainer.
PH/09 If maildir_quota_directory_regex was set to exclude (say) the .Trash
folder from quota calculations, a direct delivery into this folder messed
up the contents of the maildirsize file. This was because the regex was
used only to exclude .Trash (or whatever) when the size of the mailbox
was calculated. There was no check that a delivery was happening into an
excluded directory. This bug has been fixed by ignoring all quota
processing for deliveries into excluded directories.
PH/10 Added the maildirfolder_create_regex option to appendfile.
Exim version 4.61
-----------------
PH/01 The code for finding all the local interface addresses on a FreeBSD
system running IPv6 was broken. This may well have applied to all BSD
systems, as well as to others that have similar system calls. The broken
code found IPv4 interfaces correctly, but gave incorrect values for the
IPv6 interfaces. In particular, ::1 was not found. The effect in Exim was
that it would not match correctly against @[] and not recognize the IPv6
addresses as local.
PH/02 The ipliteral router was not recognizing addresses of the form user@
[ipv6:....] because it didn't know about the "ipv6:" prefix.
PH/03 Added disable_ipv6.
PH/04 Changed $reply_address to use the raw form of the headers instead of the
decoded form, because it is most often used to construct To: headers
lines in autoreplies, and the decoded form may well be syntactically
invalid. However, $reply_address has leading white space removed, and all
newlines turned into spaces so that the autoreply transport does not
grumble.
PH/05 If group was specified without a user on a router, and no group or user
was specified on a transport, the group from the router was ignored.
PH/06 Increased the number of ACL variables to 20 of each type, and arranged
for visible compile-time settings that can be used to change these
numbers, for those that want even more. Backwards compatibility with old
spool files has been maintained. However, going back to a previous Exim
release will lost any variables that are in spool files.
PH/07 Two small changes when running in the test harness: increase delay when
passing a TCP/IP connection to a new process, in case the original
process has to generate a bounce, and remove special handling of
127.0.0.2 (sic), which is no longer necessary.
PH/08 Changed debug output of dbfn_open() flags from numbers to names, so as to
be the same on different OS.
PH/09 Moved a debug statement in filter processing to avoid a race problem when
testing.
JJ/01 exipick: fixed bug where -b (brief) output option showed "Vars:"
whether --show-vars was specified or not
JJ/02 exipick: Added support for new ACL variable spool format introduced
in 4.61-PH/06
PH/10 Fixed another bug related to PH/04 above: if an incoming message had a
syntactically invalid From: or Reply-to: line, and a filter used this to
generate an autoreply, and therefore failed to obtain an address for the
autoreply, Exim could try to deliver to a non-existent relative file
name, causing unrelated and misleading errors. What now happens is that
it logs this as a hard delivery error, but does not attempt to create a
bounce message.
PH/11 The exinext utility has a -C option for testing purposes, but although
the given file was scanned by exinext itself; it wasn't being passed on
when Exim was called.
PH/12 In the smtp transport, treat an explicit ECONNRESET error the same as
an end-of-file indication when reading a command response.
PH/13 Domain literals for IPv6 were not recognized unless IPv6 support was
compiled. In many other places in Exim, IPv6 addresses are always
recognized, so I have changed this. It also means that IPv4 domain
literals of the form [IPV4:n.n.n.n] are now always recognized.
PH/14 When a uid/gid is specified for the queryprogram router, it cannot be
used if the router is not running as root, for example, when verifying at
ACL time, or when using -bh. The debugging output from this situation was
non-existent - all you got was a failure to exec. I have made two
changes:
(a) Failures to set uid/gid, the current directory, or a process leader
in a subprocess such as that created by queryprogram now generate
suitable debugging ouput when -d is set.
(b) The queryprogram router detects when it is not running as root,
outputs suitable debugging information if -d is set, and then runs
the subprocess without attempting to change uid/gid.
PH/15 Minor change to Makefile for building test_host (undocumented testing
feature).
PH/16 As discussed on the list in Nov/Dec: Exim no longer looks at the
additional section of a DNS packet that returns MX or SRV records.
Instead, it always explicitly searches for A/AAAA records. This avoids
major problems that occur when a DNS server includes only records of one
type (A or AAAA) in an MX/SRV packet. A byproduct of this change has
fixed another bug: if SRV records were looked up and the corresponding
address records were *not* found in the additional section, the port
values from the SRV records were lost.
PH/17 If a delivery to a pipe, file, or autoreply was deferred, Exim was not
using the correct key (the original address) when searching the retry
rules in order to find which one to use for generating the retry hint.
PH/18 If quota_warn_message contains a From: header, Exim now refrains from
adding the default one. Similarly, if it contains a Reply-To: header, the
errors_reply_to option, if set, is not used.
PH/19 When calculating a retry time, Exim used to measure the "time since
failure" by looking at the "first failed" field in the retry record. Now
it does not use this if it is later than than the arrival time of the
message. Instead it uses the arrival time. This makes for better
behaviour in cases where some deliveries succeed, thus re-setting the
"first failed" field. An example is a quota failure for a huge message
when small messages continue to be delivered. Without this change, the
"time since failure" will always be short, possible causing more frequent
delivery attempts for the huge message than are intended.
[Note: This change was subsequently modified - see PH/04 for 4.62.]
PH/20 Added $auth1, $auth2, $auth3 to contain authentication data (as well as
$1, $2, $3) because the numerical variables can be reset during some
expansion items (e.g. "match"), thereby losing the authentication data.
PH/21 Make -bV show the size of off_t variables so that the test suite can
decide whether to run tests for quotas > 2G.
PH/22 Test the values given for quota, quota_filecount, quota_warn_threshold,
mailbox_size, and mailbox_filecount in the appendfile transport. If a
filecount value is greater than 2G or if a quota value is greater than 2G
on a system where the size of off_t is not greater than 4, a panic error
is given.
PH/23 When a malformed item such as 1.2.3/24 appears in a host list, it can
never match. The debug and -bh output now contains an explicit error
message indicating a malformed IPv4 address or mask.
PH/24 An host item such as 1.2.3.4/abc was being treated as the IP address
1.2.3.4 without a mask. Now it is not recognized as an IP address, and
PH/23 above applies.
PH/25 Do not write to syslog when running in the test harness. The only
occasion when this arises is a failure to open the main or panic logs
(for which there is an explicit test).
PH/26 Added the /no_tell option to "control=freeze".
PH/27 If a host name lookup failed very early in a connection, for example, if
the IP address matched host_lookup and the reverse lookup yielded a name
that did not have a forward lookup, an error message of the form "no IP
address found for host xxx.xxx.xxx (during SMTP connection from NULL)"
could be logged. Now it outputs the IP address instead of "NULL".
PH/28 An enabling patch from MH: add new function child_open_exim2() which
allows the sender and the authenticated sender to be set when
submitting a message from within Exim. Since child_open_exim() is
documented for local_scan(), the new function should be too.
PH/29 In GnuTLS, a forced expansion failure for tls_privatekey was not being
ignored. In both GnuTLS and OpenSSL, an expansion of tls_privatekey that
results in an empty string is now treated as unset.
PH/30 Fix eximon buffer overflow bug (Bugzilla #73).
PH/31 Added sender_verify_fail logging option.
PH/32 In November 2003, the code in Exim that added an empty Bcc: header when
needed by RFC 822 but not by RFC 2822 was commented out. I have now
tidied the source and removed it altogether.
PH/33 When a queue run was abandoned because the load average was too high, a
log line was always written; now it is written only if the queue_run log
selector is set. In addition, the log line for abandonment now contains
information about the queue run such as the pid. This is always present
in "start" and "stop" lines but was omitted from the "abandon" line.
PH/34 Omit spaces between a header name and the colon in the error message that
is given when verify = headers_syntax fails (if there are lots of them,
the message gets confusing).
PH/35 Change the default for dns_check_names_pattern to allow slashes within
names, as there are now some PTR records that contain slashes. This check
is only to protect against broken name servers that fall over on strange
characters, so the fact that it applies to all lookups doesn't matter.
PH/36 Now that the new test suite is complete, we can remove some of the
special code in Exim that was needed for the old test suite. For example,
sorting DNS records because real resolvers return them in an arbitrary
order. The new test suite's fake resolver always returns records in the
same order.
PH/37 When running in the test harness, use -odi for submitted messages (e.g.
bounces) except when queue_only is set, to avoid logging races between
the different processes.
PH/38 Panic-die if .include specifies a non-absolute path.
PH/39 A tweak to the "H" retry rule from its user.
JJ/03 exipick: Removed parentheses from 'next' and 'last' calls that specified
a label. They prevented compilation on older perls.
JJ/04 exipick: Refactored code to prevent implicit split to @_ which caused
a warning to be raised on newish perls.
JJ/05 exipick: Fixed bug where -bpc always showed a count of all messages
on queue. Changes to match documented behaviour of showing count of
messages matching specified criteria.
PH/40 Changed the default ident timeout from 30s to 5s.
PH/41 Added support for the use of login_cap features, on those BSD systems
that have them, for controlling the resources used by pipe deliveries.
PH/42 The content-scanning code uses fopen() to create files in which to put
message data. Previously it was not paying any attention to the mode of
the files. Exim runs with umask(0) because the rest of the code creates
files with open(), and sets the required mode explicitly. Thus, these
files were ending up world-writeable. This was not a big issue, because,
being within the spool directory, they were not world-accessible. I have
created a function called modefopen, which takes an additional mode
argument. It sets umask(777), creates the file, chmods it to the required
mode, then resets the umask. All the relevant calls to fopen() in the
content scanning code have been changed to use this function.
PH/43 If retry_interval_max is set greater than 24 hours, it is quietly reset
to 24 hours. This avoids potential overflow problems when processing G
and H retry rules. I suspect nobody ever tinkers with this value.
PH/44 Added STRIP_COMMAND=/usr/bin/strip to the FreeBSD Makefile.
PH/45 When the plaintext authenticator is running as a client, the server's
challenges are checked to ensure they are valid base64 strings. By
default, the authentication attempt is cancelled if an invalid string is
received. Setting client_ignore_invalid_base64 true ignores these errors.
The decoded challenge strings are now placed in $auth1, $auth2, etc. as
they are received. Thus, the responses can be made to depend on the
challenges. If an invalid string is ignored, an empty string is placed in
the variable.
PH/46 Messages that are created by the autoreply transport now contains a
References: header, in accordance with RFCs 2822 and 3834.
PH/47 Added authenticated_sender_force to the smtp transport.
PH/48 The ${prvs expansion was broken on systems where time_t was long long.
PH/49 Installed latest patch from the Sieve maintainer.
PH/50 When an Exim quota was set without a file count quota, and mailbox_size
was also set, the appendfile transport was unnecessarily scanning a
directory of message files (e.g. for maildir delivery) to find the count
of files (along with the size), even though it did not need this
information. It now does the scan only if it needs to find either the
size of the count of files.
PH/51 Added ${time_eval: to convert Exim time strings into seconds.
PH/52 Two bugs concerned with error handling when the smtp transport is
used in LMTP mode:
(i) Exim was not creating retry information for temporary errors given
for individual recipients after the DATA command when the smtp transport
was used in LMTP mode. This meant that they could be retried too
frequently, and not timed out correctly.
(ii) Exim was setting the flag that allows error details to be returned
for LMTP errors on RCPT commands, but not for LMTP errors for individual
recipients that were returned after the DATA command.
PH/53 This is related to PH/52, but is more general: for any failing address,
when detailed error information was permitted to be returned to the
sender, but the error was temporary, then after the final timeout, only
"retry timeout exceeded" was returned. Now it returns the full error as
well as "retry timeout exceeded".
PH/54 Added control=allow_auth_unadvertised, as it seems there are clients that
do this, and (what is worse) MTAs that accept it.
PH/55 Added the add_header modified to ACLs. The use of "message" with "warn"
will now be deprecated.
PH/56 New os.c-cygwin from the Cygwin maintainer.
JJ/06 exipick: added --unsorted option to allow unsorted output in all output
formats (previously only available in exim formats via -bpr, -bpru,
and -bpra. Now also available in native and exiqgrep formats)
JJ/07 exipick: added --freeze and --thaw options to allow faster interaction
with very large, slow to parse queues
JJ/08 exipick: added ! as generic prefix to negate any criteria format
JJ/09 exipick: miscellaneous performance enhancements (~24% improvements)
PH/57 Tidies in SMTP dialogue display in debug output: (i) It was not showing
responses to authentication challenges, though it was showing the
challenges; (ii) I've removed the CR characters from the debug output for
SMTP output lines.
PH/58 Allow for the insertion of a newline as well as a space when a string
is turned into more than one encoded-word during RFC 2047 encoding. The
Sieve code now uses this.
PH/59 Added the following errors that can be detected in retry rules: mail_4xx,
data_4xx, lost_connection, tls_required.
PH/60 When a VRFY deferred or FAILED, the log message rather than the user
message was being sent as an SMTP response.
PH/61 Add -l and -k options to exicyclog.
PH/62 When verifying, if an address was redirected to one new address, so that
verification continued, and the new address failed or deferred after
having set something in $address_data, the value of $address_data was not
passed back to the ACL. This was different to the case when no
redirection occurred. The value is now passed back in both cases.
PH/63 Changed the macro HAVE_LOGIN_CAP (see PH/41 for this release above) to
HAVE_SETCLASSRESOURCES because there are different APIs in use that all
use login_cap.h, so on its own it isn't the distinguishing feature. The
new name refers directly to the setclassresources() function.
PH/65 Added configuration files for NetBSD3.
PH/66 Updated OS/Makefile-HP-UX for gcc 4.1.0 with HP-UX 11.
PH/67 Fixed minor infelicity in the sorting of addresses to ensure that IPv6
is preferred over IPv4.
PH/68 The bounce_return_message and bounce_return_body options were not being
honoured for bounces generated during the reception of non-SMTP messages.
In particular, this applied to messages rejected by the ACL. This bug has
been fixed. However, if bounce_return_message is true and bounce_return_
body is false, the headers that are returned for a non-SMTP message
include only those that have been read before the error was detected.
(In the case of an ACL rejection, they have all been read.)
PH/69 The HTML version of the specification is now built in a directory called
spec_html instead of spec.html, because the latter looks like a path with
a MIME-type, and this confuses some software.
PH/70 Catch two compiler warnings in sieve.c.
PH/71 Fixed an obscure and subtle bug (thanks Alexander & Matthias). The
function verify_get_ident() calls ip_connect() to connect a socket, but
if the "connect()" function timed out, ip_connect() used to close the
socket. However, verify_get_ident() also closes the socket later, and in
between Exim writes to the log, which may get opened at this point. When
the socket was closed in ip_connect(), the log could get the same file
descriptor number as the socket. This naturally causes chaos. The fix is
not to close the socket in ip_connect(); the socket should be closed by
the function that creates it. There was only one place in the code where
this was missing, in the iplookup router, which I don't think anybody now
uses, but I've fixed it anyway.
PH/72 Make dns_again_means_nonexist apply to lookups using gethostbyname() as
well as to direct DNS lookups. Otherwise the handling of names in host
lists is inconsistent and therefore confusing.
Exim version 4.60
-----------------
PH/01 Two changes to the default runtime configuration:
(1) Move the checks for relay_from_hosts and authenticated clients from
after to before the (commented out) DNS black list checks.
(2) Add control=submission to the relay_from_hosts and authenticated
clients checks, on the grounds that messages accepted by these
statements are most likely to be submissions.
PH/02 Several tidies to the handling of ${prvs and ${prvscheck:
(1) Generate an error if the third argument for the ${prvs expansion is
not a single digit.
(2) Treat a missing third argument of ${prvscheck as if it were an empty
string.
(3) Reset the variables that are obtained from the first argument of
${prvscheck and used in the second argument before leaving the code,
because their memory is reclaimed, so using them afterwards may do
silly things.
(4) Tidy up the code for expanding the arguments of ${prvscheck one by
one (it's much easier than Tom thought :-).
(5) Because of (4), we can now allow for the use of $prvscheck_result
inside the third argument.
PH/03 For some reason, the default setting of PATH when running a command from
a pipe transport was just "/usr/bin". I have changed it to
"/bin:/usr/bin".
PH/04 SUPPORT_TRANSLATE_IP_ADDRESS and MOVE_FROZEN_MESSAGES did not cause
anything to be listed in the output from -bV.
PH/05 When a filter generated an autoreply, the entire To: header line was
quoted in the delivery log line, like this:
=> >A.N.Other <ano@some.domain> <original@ddress> ...
This has been changed so that it extracts the operative address. There
may be more than one such address. If so, they are comma-separated, like
this:
=> >ano@some.domain,ona@other.domain <original@ddress> ...
PH/06 When a client host used a correct literal IP address in a HELO or EHLO
command, (for example, EHLO [1.2.3.4]) and the client's IP address was
not being looked up in the rDNS to get a host name, Exim was showing the
IP address twice in Received: lines, even though the IP addresses were
identical. For example:
Received: from [1.2.3.4] (helo=[1.2.3.4])
However, if the real host name was known, it was omitting the HELO data
if it matched the actual IP address. This has been tidied up so that it
doesn't show the same IP address twice.
PH/07 When both +timestamp and +memory debugging was on, the value given by
$tod_xxx expansions could be wrong, because the tod_stamp() function was
called by the debug printing, thereby overwriting the timestamp buffer.
Debugging no longer uses the tod_stamp() function when +timestamp is set.
PH/08 When the original message was included in an autoreply transport, it
always said "this is a copy of the message, including all the headers",
even if body_only or headers_only was set. It now gives an appropriate
message.
PH/09 Applied a patch from the Sieve maintainer which:
o fixes some comments
o adds the (disabled) notify extension core
o adds some debug output for the result of if/elsif tests
o points to the current vacation draft in the documentation
and documents the missing references header update
and most important:
o fixes a bug in processing the envelope test (when testing
multiple envelope elements, the last element determinted the
result)
PH/10 Exim was violating RFC 3834 ("Recommendations for Automatic Responses to
Electronic Mail") by including:
Auto-submitted: auto-generated
in the messages that it generates (bounce messages and others, such as
warnings). In the case of bounce messages for non-SMTP mesages, there was
also a typo: it was using "Auto_submitted" (underscore instead of
hyphen). Since every message generated by Exim is necessarily in response
to another message, thes have all been changed to:
Auto-Submitted: auto-replied
in accordance with these statements in the RFC:
The auto-replied keyword:
- SHOULD be used on messages sent in direct response to another
message by an automatic process,
- MUST NOT be used on manually-generated messages,
- MAY be used on Delivery Status Notifications (DSNs) and Message
Disposition Notifications (MDNs),
- MUST NOT be used on messages generated by automatic or periodic
processes, except for messages which are automatic responses to
other messages.
PH/11 Added "${if def:sender_address {(envelope-from <$sender_address>)\n\t}}"
to the default Received: header definition.
PH/12 Added log selector acl_warn_skipped (default on).
PH/13 After a successful wildlsearch lookup, discard the values of numeric
variables because (a) they are in the wrong storage pool and (b) even if
they were copied, it wouldn't work properly because of the caching.
PH/14 Add check_rfc2047_length to disable enforcement of RFC 2047 length
checking when decoding. Apparently there are clients that generate
overlong encoded strings. Why am I not surprised?
PH/15 If the first argument of "${if match_address" was not empty, but did not
contain an "@" character, Exim crashed. Now it writes a panic log message
and treats the condition as false.
PH/16 In autoreply, treat an empty string for "once" the same as unset.
PH/17 A further patch from the Sieve maintainer: "Introduce the new Sieve
extension "envelope-auth". The code is finished and in agreement with
other implementations, but there is no documentation so far and in fact,
nobody wrote the draft yet. This extension is currently #undef'ed, thus
not changing the active code.
Print executed "if" and "elsif" statements when debugging is used. This
helps a great deal to understand what a filter does.
Document more things not specified clearly in RFC3028. I had all this
sorted out, when out of a sudden new issues came to my mind. Oops."
PH/18 Exim was not recognizing the "net-" search type prefix in match_ip lists
(Bugzilla #53).
PH/19 Exim expands the IPv6 address given to -bh to its full non-abbreviated
canonical form (as documented). However, after a host name lookup from
the IP address, check_host() was doing a simple string comparison with
addresses acquired from the DNS when checking that the found name did
have the original IP as one of its addresses. Since any found IPv6
addresses are likely to be in abbreviated form, the comparison could
fail. Luckily, there already exists a function for doing the comparison
by converting both addresses to binary, so now that is used instead of
the text comparison.
PH/20 There was another similar case to PH/19, when a complete host name was
given in a host list; looking up its IP address could give an abbreviated
form, whereas the current host's name might or might not be abbreviated.
The same fix has been applied.
Exim version 4.54
-----------------
PH/01 The ${base62: operator adjusted itself to base 36 when BASE_62 was
set to 36 (for Darwin and Cygwin), but the ${base62d: operator did not.
It now does.
PH/02 Two minor problems detected in Cygwin: the os.{c,h} files had lost */ on
the CVS lines, and there was a missing #if HAVE_IPV6 in host.c.
PH/03 Typo: missing ".o" in src/pcre/Makefile.
PH/04 Tighten up "personal" tests: Instead of testing for any "List-"
header line, restrict the check to what is listed in RFCs 2369 and 2929.
Also, for "Auto-Submitted", treat anything other than "no" as
non-personal, in accordance with RFC 3834. (Previously it treated
anything starting "auto-" as non-personal.)
TF/01 The control=submission/name=... option had a problem with syntax
errors if the name included a slash character. The /name= option
now slurps the rest of the string, so it can include any characters
but it must come last in the list of options (after /sender_retain
or /domain=).
PH/05 Some modifications to the interface to the fake nameserver for the new
testing suite.
Exim version 4.53
-----------------
TK/01 Added the "success_on_redirect" address verification option. See
NewStuff for rationale and an example.
PH/01 Added support for SQLite, basic code supplied by David Woodhouse.
PH/02 Patch to exigrep to allow it to work on syslog lines.
PH/03 When creating an mbox file for a virus/spam scan, use fseek() instead of
fread() to skip over the body file's header line, because in Cygwin the
header line is locked and is inaccessible.
PH/04 Added $message_exim_id, ultimately to replace $message_id (they will both
co-exist for some time) to make it clear that it is the Exim ID that is
referenced, not the Message-ID: header line.
PH/05 Replaced all Tom's calls to snprintf() with calls to the internal
string_format() function, because snprintf() does not exist on all
operating systems.
PH/06 The use of forbid_filter_existstest now also locks out the use of the
${stat: expansion item.
PH/07 Changed "SMTP protocol violation: synchronization error" into "SMTP
protocol synchronization error", to keep the pedants happy.
PH/08 Arrange for USE_INET_NTOA_FIX to be set in config.h for AIX systems as
well as for IRIX systems, when gcc is being used. See the host.c source
file for comments.
PH/09 Installed latest Cygwin configuration files from the Cygwin maintainer.
PH/10 Named domain lists were not working if used in a queue_smtp_domains
setting.
PH/11 Added support for the IGNOREQUOTA extension to LMTP, both to the lmtp
transport and to the smtp transport in LMTP mode.
TK/02 Remove one case of BASE64 error detection FTTB (undocumented anyway).
PH/12 There was a missing call to search_tidyup() before the fork() in rda.c to
run a filter in a subprocess. This could lead to confusion in subsequent
lookups in the parent process. There should also be a search_tidyup() at
the end of the subprocess.
PH/13 Previously, if "verify = helo" was set in an ACL, the condition was true
only if the host matched helo_try_verify_hosts, which caused the
verification to occur when the EHLO/HELO command was issued. The ACL just
tested the remembered result. Now, if a previous verification attempt has
not happened, "verify = helo" does it there and then.
JJ/01 exipick: added $message_exim_id variable (see 4.53-PH/04)
TK/03 Fix log output including CR from clamd.
PH/14 A reference to $reply_address when Reply-to: was empty and From: did not
exist provoked a memory error which could cause a segfault.
PH/15 Installed PCRE 6.2
PH/17 Defined BIND_8_COMPAT in the Darwin os.h file.
PH/18 Reversed 4.52/PH/17 because the HP-UX user found it wasn't the cause
of the problem. Specifically, suggested +O2 rather than +O1 for the
HP-UX compiler.
PH/19 Added sqlite_lock_timeout option (David Woodhouse's patch).
PH/20 If a delivery was routed to a non-standard port by means of an SRV
record, the port was not correctly logged when the outgoing_port log
selector was set (it logged the transort's default port).
PH/21 Added support for host-specific ports to manualroute, queryprogram,
fallback_hosts, and "hosts" in the smtp transport.
PH/22 If the log selector "outgoing_port" is set, the port is now also given on
host errors such as "Connection refused".
PH/23 Applied a patch to fix problems with exim-4.52 while doing radius
authentication with radiusclient 0.4.9:
- Error returned from rc_read_config was caught wrongly
- Username/password not passed on to radius server due to wrong length.
The presumption is that some radiusclient API changes for 4.51/PH/17
were not taken care of correctly. The code is still untested by me (my
Linux distribution still has 0.3.2 of radiusclient), but it was
contributed by a Radius user.
PH/24 When doing a callout, the value of $domain wasn't set correctly when
expanding the "port" option of the smtp transport.
TK/04 MIME ACL: Fix buffer underrun that occurs when EOF condition is met
while reading a MIME header. Thanks to Tom Hughes for a patch.
PH/24 Include config.h inside local_scan.h so that configuration settings are
available.
PH/25 Make $smtp_command_argument available after all SMTP commands. This means
that in an ACL for RCPT (for example), you can examine exactly what was
received.
PH/26 Exim was recognizing IPv6 addresses of the form [IPv6:....] in EHLO
commands, but it was not correctly comparing the address with the actual
client host address. Thus, it would show the EHLO address in Received:
header lines when this was not necessary.
PH/27 Added the % operator to ${eval:}.
PH/28 Exim tries to create and chdir to its spool directory when it starts;
it should be ignoring failures (because with -C, for example, it has lost
privilege). It wasn't ignoring creation failures other than "already
exists".
PH/29 Added "crypteq" to the list of supported features that Exim outputs when
-bV or -d is used.
PH/30 Fixed (presumably very longstanding) bug in exim_dbmbuild: if it failed
because an input line was too long, either on its own, or by virtue of
too many continuations, the temporary file was not being removed, and the
return code was incorrect.
PH/31 Missing "BOOL" in function definition in filtertest.c.
PH/32 Applied Sieve patches from the maintainer.
TK/05 Domainkeys: Accomodate for a minor API change in libdomainkeys 0.67.
PH/33 Added "verify = not_blind".
PH/34 There are settings for CHOWN_COMMAND and MV_COMMAND that can be used in
Local/Makefile (with some defaults set). These are used in built scripts
such as exicyclog, but they have never been used in the exim_install
script (though there are many overriding facilities there). I have
arranged that the exim_install script now takes note of these two
settings.
PH/35 Installed configuration files for Dragonfly.
PH/36 When a locally submitted message by a trusted user did not contain a
From: header, and the sender address was obtained from -f or from an SMTP
MAIL command, and the trusted user did not use -F to supply a sender
name, $originator_name was incorrectly used when constructing a From:
header. Furthermore, $originator_name was used for submission mode
messages from external hosts without From: headers in a similar way,
which is clearly wrong.
PH/37 Added control=suppress_local_fixups.
PH/38 When log_selector = +received_sender was set, and the addition of the
sender made the log line's construction buffer exactly full, or one byte
less than full, an overflow happened when the terminating "\n" was
subsequently added.
PH/39 Added a new log selector, "unknown_in_list", which provokes a log entry
when the result of a list match is failure because a DNS lookup failed.
PH/40 RM_COMMAND is now used in the building process.
PH/41 Added a "distclean" target to the top-level Makefile; it deletes all
the "build-* directories that it finds.
PH/42 (But a TF fix): In a domain list, Exim incorrectly matched @[] if the IP
address in a domain literal was a prefix of an interface address.
PH/43 (Again a TF fix): In the dnslookup router, do not apply widen_domains
when verifying a sender address, unless rewrite_headers is false.
PH/44 Wrote a long comment about why errors_to addresses are verified as
recipients, not senders.
TF/01 Add missing LIBS=-lm to OS/Makefile-OpenBSD which was overlooked when
the ratelimit ACL was added.
PH/45 Added $smtp_command for the full command (cf $smtp_command_argument).
PH/46 Added extra information about PostgreSQL errors to the error string.
PH/47 Added an interface to a fake DNS resolver for use by the new test suite,
avoiding the need to install special zones in a real server. This is
backwards compatible; if it can't find the fake resolver, it drops back.
Thus, both old and new test suites can be run.
TF/02 Added util/ratelimit.pl
TF/03 Minor fix to the ratelimit code to improve its behaviour in case the
clock is set back in time.
TF/04 Fix the ratelimit support in exim_fixdb. Patch provided by Brian
Candler <B.Candler@pobox.com>.
TF/05 The fix for PH/43 was not completely correct; widen_domains is always
OK for addresses that are the result of redirections.
PH/48 A number of further additions for the benefit of the new test suite,
including a fake gethostbyname() that interfaces to the fake DNS resolver
(see PH/47 above).
TF/06 The fix for widen_domains has also been applied to qualify_single and
search_parents which are the other dnslookup options that can cause
header rewrites.
PH/49 Michael Haardt's randomized retrying, but as a separate retry parameter
type ("H").
PH/50 Make never_users, trusted_users, admin_groups, trusted_groups expandable.
TF/07 Exim produced the error message "an SRV record indicated no SMTP
service" if it encountered an MX record with an empty target hostname.
The message is now "an MX or SRV record indicated no SMTP service".
TF/08 Change PH/13 introduced the possibility that verify=helo may defer,
if the DNS of the sending site is misconfigured. This is quite a
common situation. This change restores the behaviour of treating a
helo verification defer as a failure.
PH/51 If self=fail was set on a router, the bounce message did not include the
actual error message.
- Add rmail, rsmtp, & runq as exim mailer.conf aliases (from Sergey Svishchev)
- Add lookup options for openldap, mysql, eximon and dnsdb (from Sven Hartge
in PR pkg/27242)
- Change 'exim' specific options to be prefixed with exim- (suggsted by
Dieter Baron)
I only tested a little (installed and ran daemon and manually
sent one email via SMTP).
I emailed exim developer list to submit support also.
(PKGREVISION was bumped a couple minutes ago, so use it.)
backslashes anymore. A single backslash is enough. Changed the
definition in all affected packages. For those that are not caught, an
additional check is placed into bsd.pkginstall.mk.
summary of changes since 4.51 (general bug fixes and portability
fixes ommitted for brevity, see the ChangeLog for details):
Exim version 4.52
-----------------
TF/01 Added support for Client SMTP Authorization. See NewStuff for details.
PH/02 Reduce the amount of output that "make" produces by default. Full output
can still be requested.
PH/04 Installed a modified version of Tony Finch's patch to make submission
mode fix the return path as well as the Sender: header line, and to
add a /name= option so that you can make the user's friendly name appear
in the header line.
TF/03 Added the control = fakedefer ACL modifier.
TF/04 Added the ratelimit ACL condition. See NewStuff for details. Thanks to
Mark Lowes for thorough testing.
TK/02 Rewrote SPF support to work with libspf2 versions >1.2.0.
TK/03 Merged latest SRS patch from Miles Wilton.
TK/04 Added simple SPF lookup method in EXPERIMENTAL_SPF. See NewStuff for
details. Thanks to Chris Webb <chris@arachsys.com> for the patch!
PH/07 Added "fullpostmaster" verify option, which does a check to <postmaster>
without a domain if the check to <postmaster@domain> fails.
SC/01 Eximstats: added -xls and the ability to specify output files
(patch written by Frank Heydlauf).
SC/02 Eximstats: use FileHandles for outputing results.
SC/03 Eximstats: allow any combination of xls, txt, and html output.
SC/06 Eximstats: added the -include_original_destination flag
TK/06 MBOX spool code: Add real "From " MBOX separator line
so the .eml file is really in mbox format (even though
most programs do not really care). Patch from Alex Miller.
TK/07 MBOX spool code: Add X-Envelope-From: and X-Envelope-To: headers.
The latter is generated from $received_to and is only set if the
message has one envelope recipient. SA can use these headers,
obviously out-of-the-box. Patch from Alex Miller.
PH/11 Upgraded appendfile so that quotas larger than 2G are now supported.
This involved changing a lot of size variables from int to off_t. It
should work with maildirs and everything.
PH/12 Applied Alex Kiernan's patch for the API change for the error callback
function for BDB 4.3.
PH/13 Changed auto_thaw such that it does not apply to bounce messages.
PH/14 Imported PCRE 6.0; this was more than just a trivial operation because
the sources for PCRE have been re-arranged and more files are now
involved.
PH/16 Applied Matthew Newton's patch to exicyclog: "If log_file_path is set in
the configuration file to be ":syslog", then the script "guesses" where
the logs files are, rather than using the compiled in default. In our
case the guess is not the same as the compiled default, so the script
suddenly stopped working when I started to use syslog. The patch checks
to see if log_file_path is "". If so, it attempts to read it from exim
with no configuration file to get the compiled in version, before it
falls back to the previous guessing code."
TK/09 Added "prvs" and "prvscheck" expansion items. These help a lot with
implementing BATV in an Exim configuration. See NewStuff for the gory
details.
PH/18 If the "use_postmaster" option was set for a recipient callout together
with the "random" option, the postmaster address was used as the MAIL
FROM address for the random test, but not for the subsequent recipient
test. It is now used for both.
PH/19 Applied Michael Haardt's patch to update Sieve to RFC3028bis. "The
patch removes a few documentation additions to RFC 3028, because the
latest draft now contains them. It adds the new en;ascii-case comparator
and a new error check for 8bit text in MIME parts. Comparator and
require names are now matched exactly. I enabled the subaddress
extension, but it is not well tested yet (read: it works for me)."
PH/23 Added daemon_startup_retries and daemon_startup_sleep.
PH/24 Added ${if match_ip condition.
PH/28 Changed -d+all to exclude +memory, because that information is very
rarely of interest, but it makes the output a lot bigger. People tend to
do -d+all out of habit.
PH/30 Exim's DNS code uses the original T_xxx names for DNS record times. These
aren't the modern standard, and it seems that some systems' include files
don't always have them. Exim was already checking for some of the newer
ones like T_AAAA, and defining it itself. I've added checks for all the
record types that Exim uses.
TK/11 Domainkeys: Change the logic how the "testing" policy flag is retrieved
from DNS. If the selector record carries the flag, it now has
precedence over the domain-wide flag.
SC/09 Eximstats: added the -show_rt<list> and the -show_dt<list> flags
as requested by Marc Sherman.
SC/10 Eximstats: added histograms for user specified patterns as requested
by Marc Sherman.
around at either build-time or at run-time is:
USE_TOOLS+= perl # build-time
USE_TOOLS+= perl:run # run-time
Also remove some places where perl5/buildlink3.mk was being included
by a package Makefile, but all that the package wanted was the Perl
executable.
The main change is the incorporation of the content scanning from
the exiscan patch. (There are over 650 lines of Changes)
Retire exim-exiscan
Update exim-html from 4.40 to 4.50
And always is defined as share/examples/rc.d
which was the default before.
This rc.d scripts are not automatically added to PLISTs now also.
So add to each corresponding PLIST as required.
This was discussed on tech-pkg in late January and late April.
Todo: remove the RCD_SCRIPTS_EXAMPLEDIR uses in MESSAGES and elsewhere
and remove the RCD_SCRIPTS_EXAMPLEDIR itself.
Need smmsp=NO. Must stop smmsp and sendmail before editing rc.conf!
XXX: The version I built used /etc/aliases, not /usr/pkg/etc/exim/aliases
which is what this file output - but I wasn't installing the current version.
Changes in Exim version 4.44
1. Change 4.43/35 introduced a bug that caused file counts to be
incorrectly computed when quota_filecount was set in an appendfile
transport
2. Closing a stable door: arrange to panic-die if setitimer() ever fails. The
bug fixed in 4.43/37 would have been diagnosed quickly if this had been in
place.
3. Give more explanation in the error message when the command for a transport
filter fails to execute.
4. There are several places where Exim runs a non-Exim command in a
subprocess. The SIGUSR1 signal should be disabled for these processes. This
was being done only for the command run by the queryprogram router. It is
now done for all such subprocesses. The other cases are: ${run, transport
filters, and the commands run by the lmtp and pipe transports.
5. Some older OS have a limit of 256 on the maximum number of file
descriptors. Exim was using setrlimit() to set 1000 as a large value
unlikely to be exceeded. Change 4.43/17 caused a lot of logging on these
systems. I've change it so that if it can't get 1000, it tries for 256.
6. "control=submission" was allowed, but had no effect, in a DATA ACL. This
was an oversight, and furthermore, ever since the addition of extra
controls (e.g. 4.43/32), the checks on when to allow different forms of
"control" were broken. There should now be diagnostics for all cases when a
control that does not make sense is encountered.
7. $recipients is now available in the predata ACL (oversight).
8. Tidy the search cache before the fork to do a delivery from a message
received from the command line. Otherwise the child will trigger a lookup
failure and thereby defer the delivery if it tries to use (for example) a
cached ldap connection that the parent has called unbind on.
9. If verify=recipient was followed by verify=sender in a RCPT ACL, the value
of $address_data from the recipient verification was clobbered by the
sender verification.
10. If FIXED_NEVER_USERS was defined, but empty, Exim was assuming the uid 0
was its contents. (It was OK if the option was not defined at all.)
11. A "Completed" log line is now written for messages that are removed from
the spool by the -Mrm option.
12. $host_address is now set to the target address during the checking of
ignore_target_hosts.
13. When checking ignore_target_hosts for an ipliteral router, no host name was
being passed; this would have caused $sender_host_name to have been used if
matching the list had actually called for a host name (not very likely,
since this list is usually IP addresses). A host name is now passed as
"[x.x.x.x]".
14. Changed the calls that set up the SIGCHLD handler in the daemon to use the
code that specifies a non-restarting handler (typically sigaction() in
modern systems) in an attempt to fix a rare and obscure crash bug.
15. Narrowed the window for a race in the daemon that could cause it to ignore
SIGCHLD signals. This is not a major problem, because they are used only to
wake it up if nothing else does.
16. A malformed maildirsize file could cause Exim to calculate negative values
for the mailbox size or file count. Odd effects could occur as a result.
The maildirsize information is now recalculated if the size or filecount
end up negative.
17. Added HAVE_SYS_STATVFS_H to the os.h file for Linux, as it has had this
support for a long time. Removed HAVE_SYS_VFS_H.
18. Updated exipick to current release from John Jetmore.
19. Allow an empty sender to be matched against a lookup in an address list.
Previously the only cases considered were a regular expression, or an
empty pattern.
20. Exim went into a mad DNS lookup loop when doing a callout where the
host was specified on the transport, if the DNS lookup yielded more than
one IP address.
21. The RFC2047 encoding function was originally intended for short strings
such as real names; it was not keeping to the 75-character limit for
encoded words that the RFC imposes. It now respects the limit, and
generates multiple encoded words if necessary. To be on the safe side, I
have increased the buffer size for the ${rfc2047: expansion operator from
1024 to 2048 bytes.
22. Failure to deliver a bounce message always caused it to be frozen, even if
there was an errors_to setting on the router. The errors_to setting is now
respected.
23. If an IPv6 address is given for -bh or -bhc, it is now converted to the
canonical form (fully expanded) before being placed in
$sender_host_address.
24. Updated eximstats to version 1.33
25. Include certificate and key file names in error message when GnuTLS fails
to set them up, because the GnuTLS error message doesn't include the name
of the failing file when there is a problem reading it.
26. Expand error message when OpenSSL has problems setting up cert/key files.
As per change 25.
27. Reset the locale to "C" after calling embedded Perl, in case it was changed
(this can affect the format of dates).
28. exim_tidydb, when checking for the continued existence of a message for
which it has found a message-specific retry record, was not finding
messages that were in split spool directories. Consequently, it was
deleting retry records that should have stayed in existence.
29. eximstats updated to version 1.35
1.34 - allow eximstats to parse syslog lines as well as mainlog lines
1.35 - bugfix such that pie charts by volume are generated correctly
30. The SPA authentication driver was not abandoning authentication and moving
on to the next authenticator when an expansion was forced to fail,
contradicting the general specification for all authenticators. Instead it
was generating a temporary error. It now behaves as specified.
31. The default ordering of permitted cipher suites for GnuTLS was pessimal
(the order specifies the preference for clients). The order is now AES256,
AES128, 3DES, ARCFOUR128.
31. Small patch to Sieve code - explicitly set From: when generating an
autoreply.
32. Exim crashed if a remote delivery caused a very long error message to be
recorded - for instance if somebody sent an entire SpamAssassin report back
as a large number of 550 error lines. This bug was coincidentally fixed by
increasing the size of one of Exim's internal buffers (big_buffer) that
happened as part of the Exiscan merge. However, to be on the safe side, I
have made the code more robust (and fixed the comments that describe what
is going on).
33. Some experimental protocols are using DNS PTR records for new purposes. The
keys for these records are domain names, not reversed IP addresses. The
dnsdb PTR lookup now tests whether its key is an IP address. If not, it
leaves it alone. Component reversal etc. now happens only for IP addresses.
CAN-2005-0021
34. The host_aton() function is supposed to be passed a string that is known
to be a valid IP address. However, in the case of IPv6 addresses, it was
not checking this. This is a hostage to fortune. Exim now panics and dies
if the condition is not met. A case was found where this could be provoked
from a dnsdb PTR lookup with an IPv6 address that had more than 8
components; fortuitously, this particular loophole had already been fixed
by change 4.50/55 or 4.44/33 above.
If there are any other similar loopholes, the new check in host_aton()
itself should stop them being exploited. The report I received stated that
data on the command line could provoke the exploit when Exim was running as
exim, but did not say which command line option was involved. All I could
find was the use of -be with a bad dnsdb PTR lookup, and in that case it is
running as the user.
CAN-2005-0021
35. There was a buffer overflow vulnerability in the SPA authentication code
(which came originally from the Samba project). I have added a test to the
spa_base64_to_bits() function which I hope fixes it.
CAN-2005-0022
36. The daemon start-up calls getloadavg() while still root for those OS that
need the first call to be done as root, but it missed one case: when
deliver_queue_load_max is set with deliver_drop_privilege. This is
necessary for the benefit of the queue runner, because there is no re-exec
when deliver_drop_privilege is set.
37. Caching of lookup data for "hosts =" ACL conditions, when a named host list
was in use, was not putting the data itself into the right store pool;
consequently, it could be overwritten for a subsequent message in the same
SMTP connection. (Fix 4.40/11 dealt with the non-cache case, but overlooked
the caching.)
38. Sometimes the final signoff response after QUIT could fail to get
transmitted in the non-TLS case. Testing !tls_active instead of tls_active
< 0 before doing a fflush(). This bug looks as though it goes back to the
introduction of TLS in release 3.20, but "sometimes" must have been rare
because the tests only now provoked it.
under share/examples/rc.d. The variable name already was named
RCD_SCRIPTS_EXAMPLEDIR.
This is from ideas from Greg Woods and others.
Also bumped PKGREVISION for all packages using RCD_SCRIPTS mechanism
(as requested by wiz).
Update exim-exiscan to 4.43_28 from 4.42_27
Update exim-html to 4.40 from 4.30
exim-exiscan:
28 - Added F-Secure support, thanks to Johan Thelmen <jth@home.se>.
- Upgraded SRS support to libsrs_alt 0.5 via Miles
Wilton's patch.
- REMOVED exiscan-acl implementation of custom header
placement in favor of Philip Hazel's native implementation.
However, a new option option was added for it to
mimic the behaviour of the old header_pos_middle option.
Read section 10 of exiscan-acl-spec.txt.
exim:
1. Fixed a longstanding but relatively impotent bug: a long time ago, before
PIPELINING, the function smtp_write_command() used to return TRUE or FALSE.
Now it returns an integer. A number of calls were still expecting a T/F
return. Fortuitously, in all cases, the tests worked in OK situations,
which is the norm. However, things would have gone wrong on any write
failures on the smtp file descriptor. This function is used when sending
messages over SMTP and also when doing verify callouts.
2. When Exim is called to do synchronous delivery of a locally submitted
message (the -odf or -odi options), it no longer closes stderr before doing
the delivery.
3. Implemented the mua_wrapper option.
4. Implemented mx_fail_domains and srv_fail_domains for the dnslookup router.
5. Implemented the functions header_remove(), header_testname(),
header_add_at_position(), and receive_remove_recipient(), and exported them
to local_scan().
6. If an ACL "warn" statement specified the addition of headers, Exim already
inserted X-ACL-Warn: at the start if there was no header name. However, it
was not making this test for the second and subsequent header lines if
there were newlines in the string. This meant that an invalid header could
be inserted if Exim was badly configured.
7. Allow an ACL "warn" statement to add header lines at the start or after all
the Received: headers, as well as at the end.
8. Added the rcpt_4xx retry error code.
9. Added postmaster_mailfrom=xxx to callout verification option.
10. Added mailfrom=xxxx to the callout verification option, for verify=
header_sender only.
11. ${substr_1_:xxxx} and ${substr__3:xxxx} are now diagnosed as syntax errors
(they previously behaved as ${substr_1_0:xxxx} and ${substr:_0_3:xxxx}).
12. Inserted some casts to stop certain compilers warning when using pointer
differences as field lengths or precisions in printf-type calls (mostly
affecting debugging statements).
13. Added optional readline() support for -be (dynamically loaded).
14. Obscure bug fix: if a message error (e.g. 4xx to MAIL) happened within the
same clock tick as a message's arrival, so that its received time was the
same as the "first fail" time on the retry record, and that message
remained on the queue past the ultimate address timeout, every queue runner
would try a delivery (because it was past the ultimate address timeout) but
after another failure, the ultimate address timeout, which should have then
bounced the address, did not kick in. This was a "< instead of <=" error;
in most cases the first failure would have been in the next clock tick
after the received time, and all would be well.
15. The special items beginning with @ in domain lists (e.g. @mx_any) were not
being recognized when the domain list was tested by the match_domain
condition in an expansion string.
16. Added the ${str2b64: operator.
17. Exim was always calling setrlimit() to set a large limit for the number of
processes, without checking whether the existing limit was already
adequate. (It did check for the limit on file descriptors.) Furthermore,
18. Imported PCRE 5.0.
19. Trivial typo in log message " temporarily refused connection" (the leading
space).
20. If the log selector return_path_on_delivery was set and an address was
redirected to /dev/null, the delivery process crashed because it assumed
that a return path would always be set for a "successful" delivery. In this
case, the whole delivery is bypassed as an optimization, and therefore no
return path is set.
21. Internal re-arrangement: the function for sending a challenge and reading
a response while authentication was assuming a zero-terminated challenge
string. It's now changed to take a pointer and a length, to allow for
binary data in such strings.
22. Added the cyrus_sasl authenticator (code supplied by MBM).
23. Exim was not respecting finduser_retries when seeking the login of the
uid under which it was called; it was always trying 10 times. (The default
setting of finduser_retries is zero.) Also, it was sleeping after the final
failure, which is pointless.
24. Implemented tls_on_connect_ports.
25. Implemented acl_smtp_predata.
26. If the domain in control=submission is set empty, Exim assumes that the
authenticated id is a complete email address when it generates From: or
Sender: header lines.
27. Added "#define SOCKLEN_T int" to OS/os.h-SCO and OS/os.h-SCO_SV. Also added
definitions to OS/Makefile-SCO and OS/Makefile-SCO_SV that put basename,
chown and chgrp in /bin and hostname in /usr/bin.
28. Exim was keeping the "process log" file open after each use, just as it
does for the main log. This opens the possibility of it remaining open for
long periods when the USR1 signal hits a daemon. Occasional processlog
errors were reported, that could have been caused by this. Anyway, it seems
much more sensible not to leave this file open at all, so that is what now
happens.
29. The long-running daemon process does not normally write to the log once it
has entered its main loop, and it closes the log before doing so. This is
so that log files can straightforwardly be renamed and moved. However,
there are a couple of unusual error situations where the daemon does write
log entries, and I had neglected to close the log afterwards.
30. The text of an SMTP error response that was received during a remote
delivery was being truncated at 512 bytes. This is too short for some of
the long messages that one sometimes sees. I've increased the limit to
1024.
31. It is now possible to make retry rules that apply only when a message has a
specific sender, in particular, an empty sender.
32. Added "control = enforce_sync" and "control = no_enforce_sync". This makes
it possible to be selective about when SMTP synchronization is enforced.
33. Added "control = caseful_local_part" and "control = "caselower_local_part".
32. Implemented hosts_connection_nolog.
33. Added an ACL for QUIT.
34. Setting "delay_warning=" to disable warnings was not working; it gave a
syntax error.
35. Added mailbox_size and mailbox_filecount to appendfile.
36. Added control = no_multiline_responses to ACLs.
37. There was a bug in the logic of the code that waits for the clock to tick
in the case where the clock went backwards by a substantial amount such
that the microsecond fraction of "now" was more than the microsecond
fraction of "then" (but the whole seconds number was less).
38. Added support for the libradius Radius client library this is found on
FreeBSD (previously only the radiusclient library was supported).
Feature changes in exim since 4.34 (bugfixes not listed):
Version 4.42
------------
1. The "personal" filter test is brought up-to-date with
recommendations from the Sieve specification: (a) The list
of non-personal From: addresses now includes "listserv",
"majordomo", and "*-request"; (b) If the message contains
any header line starting with "List=-" it is treated as
non-personal.
2. The Sieve functionality has been extended to support the
"copy" and "vacation" extensions, and comparison tests.
3. There is now an overall timeout for performing a callout
verification. It defaults to 4 times the callout timeout,
which applies to individual SMTP commands during the callout.
The overall timeout applies when there is more than one
host that can be tried. The timeout is checked before trying
the next host. This prevents very long delays if there are
a large number of hosts and all are timing out (e.g. when
the network connections are timing out). The value of the
overall timeout can be changed by specifying an additional
sub-option for "callout", called "maxwait". For example:
verify = sender/callout=5s,maxwait=20s
4. Changes to the "personal" filter test:
(1) The list of non-personal local parts in From: addresses
has been extended to include "listserv", "majordomo",
"*-request", and "owner-*", taken from the Sieve specification
recommendations.
(2) If the message contains any header line starting with
"List-" it is treated as non-personal.
(3) The test for "circular" in the Subject: header line
has been removed because it now seems ill-conceived.
5. The autoreply transport has a new option called never_mail.
This is an address list. If any run of the transport
creates a message with a recipient that matches any item
in the list, that recipient is quietly discarded. If all
recipients are discarded, no message is created.
Version 4.40
------------
The documentation is up-to-date for the 4.40 release. What
follows here is a brief list of the new features that have been
added since 4.30.
1. log_incoming_interface affects more log lines.
2. New ACL modifier "control = submission".
3. CONFIGURE_OWNER can be set at build time to define an
alternative owner for the configuration file, in addition
to root and exim.
4. Added expansion variables $body_zerocount, $recipient_data,
and $sender_data.
5. The time of last modification of the "new" subdirectory is
now used as the "mailbox time last read" when there is a
quota error for a maildir delivery.
6. The special item "+ignore_unknown" may now appear in host
lists.
7. The special domain-matching patterns @mx_any, @mx_primary,
and @mx_secondary can now be followed by "/ignore=<ip list>".
8. New expansion conditions: match_domain, match_address,
match_local_part, lt, lti, le, lei, gt, gti, ge, and new
expansion operators time_interval, eval10, and base62d.
9. New lookup type called "iplsearch".
10. New log selectors ident_timeout, tls_certificate_verified,
queue_time, deliver_time, outgoing_port, return_path_on_delivery.
11. New global options smtp_active_hostname and tls_require_ciphers.
12. Exinext has -C and -D options.
13. "domainlist_cache" forces caching of an apparently variable
list.
14. For compatibility with Sendmail, the command line option
-prval:sval is equivalent to -oMr rval -oMs sval.
15. New callout options use_sender and use_postmaster for use
when verifying recipients.
16. John Jetmore's "exipick" utility has been added to the
distribution.
17. The TLS code now supports CRLs.
18. The dnslookup router and the dnsdb lookup type now support
the use of SRV records.
19. The redirect router has a new option called qualify_domain.
20. exigrep's output now also includes lines that are not
related to any particular message, but which do match the
pattern.
21. New global option write_rejectlog. If it is set false, Exim
no longer writes anything to the reject log.
Changes in exim-exiscan since 4.34_22
27 - Changed algorithm of header_pos_middle to add headers
before the first header which is NOT Received: or
Resent-*:.
exim 4.42 ---------------------------------------------------
26 - Fixed header corruption when using header_pos_top.
(Thanks to Michael Deutschmann).
- Fixed headers being added before any Received-SPF:
header when using header_pos_middle (Thanks to
Michael Deutschmann).
- DrWeb malware support: Add flag to treat .eml file
as plain mail (Thanks to Alex Miller).
25 - Fixed include location of libspf2 headers.
- Added support for Kaspersky AV Version 5 (aveserver).
- Added expansion of av_scanner global variable
when it starts with a dollar sign. This is useful
for implementing multiple malware scanners.
- Added support for adding ACL headers at the beginning
and in the "middle" of the message header block.
(This is a preliminary solution, see comment in SPF
section of exiscan-acl-spec).
24 - Changed documentation to reflect libspf_alt->libspf2
name change.
- Upgraded included SRS patch to 0.3 (author Miles Wilton).
Also added a small doc chapter for SRS.
- Brightmail: put notes for users of new 6.x version in the
docs (search for "BMI6.x").
BMI Version 6 should work OK, an upgraded SDK is now on
Brightmail's download site.
exim 4.41 ----------------------------------------------------
23 - Added patch to support SRS in the redirect router, done
by Miles Wilton. Please check http://srs.mirtol.com/
for more information.
- Fixed the negation operator for SPF support. Thanks
to Michael Haardt for sending a patch.
- Increased buffer size for large SA reports (when using
custom SA rulesets).
- Increased buffer size for large BMI verdicts. Should now
handle large number of recipients gracefully.
