» FAQ по Exim MTA

Несколько вопросов по spamassassin

1. Поставил его по методу предложенному в статье Wombat. При попытке создать базы bayes - sa-learn --sync , ничего не происходило . Пришлось создать пустые файлы и уже потом после запуска этой утилиты в них появилось какое то содержимое

2. Выдаются ошибки в следующих строках конфига
May 11 10:36:58 mx spamd[11504]: config: failed to parse line, skipping: auto_learn_threshold_nonspam -2
May 11 10:36:58 mx spamd[11504]: config: failed to parse line, skipping: auto_learn_threshold_spam 8
May 11 10:36:58 mx spamd[11504]: config: failed to parse, now a plugin, skipping: ok_languages ru en

И еще такой вопрос, можно ли Микрософт Аутлук и Аутлук Експресс научить не ругаться постоянно на сертификат при проверке почты по SSL?

darkomen
да - нужно сертификат установить в операционку. Нажимаешь подробности и потом установить. Как-то так кажись - вобщем прояви фантазию.

tankistua
Чтото пока фантазия успехом не увенчалась. При обработке сертификата нет кнопки подробности как в IE есть принять отклонить. Никуда его установить не получается...Потомучто IE вообще не хочет признавать файлы *.pem

Приветы.

Есть вот такой конфиг, его нужно изменить таким образом, чтобы Exim стал поддерживать аккаунты MySQL. Помогите ПЛЗ, если бы мне надо было просто для себя поставить Exim с поддержкой MySQL, я бы сделал всё как написано в мануале, но мне надо сохранить все настройки и вобщем-то я просто не знаю, какие именно параметры нужно дописывать в конфиг чтобы Exim мог работать с базой. И ещё я думаю, что и пересобирать его надо с такими же ключами, с которыми он был установлен + ключи для MySQL... Короче говоря мне надо переустановить Exim так, чтобы все старые параметры работали + появилась работа с базой.

Вот конфиг.

[more]#!!# cPanel Exim 4 Config




#!!# These options specify the Access Control Lists (ACLs) that
#!!# are used for incoming SMTP messages - after the RCPT and DATA
#!!# commands, respectively.

acl_smtp_rcpt = check_recipient
acl_smtp_data = check_message

#!!# This setting defines a named domain list called
#!!# local_domains, created from the old options that
#!!# referred to local domains. It will be referenced
#!!# later on by the syntax "+local_domains".
#!!# Other domain and host lists may follow.

domainlist local_domains = lsearch;/etc/localdomains

domainlist relay_domains = lsearch;/etc/localdomains : \
lsearch;/etc/secondarymx
hostlist relay_hosts = lsearch;/etc/relayhosts : \
localhost
hostlist auth_relay_hosts = *

######################################################################
# Runtime configuration file for Exim #
######################################################################


# This is a default configuration file which will operate correctly in
# uncomplicated installations. Please see the manual for a complete list
# of all the runtime configuration options that can be included in a
# configuration file. There are many more than are mentioned here. The
# manual is in the file doc/spec.txt in the Exim distribution as a plain
# ASCII file. Other formats (PostScript, Texinfo, HTML) are available from
# the Exim ftp sites. The manual is also online via the Exim web sites.


# This file is divided into several parts, all but the last of which are
# terminated by a line containing the word "end". The parts must appear
# in the correct order, and all must be present (even if some of them are
# in fact empty). Blank lines, and lines starting with # are ignored.



######################################################################
# MAIN CONFIGURATION SETTINGS #
######################################################################

perl_startup = do '/etc/exim.pl'

#dns_retry = 1
#dns_retrans = 1s

# Specify your host's canonical name here. This should normally be the fully
# qualified "official" name of your host. If this option is not set, the
# uname() function is called to obtain the name.

smtp_banner = "${primary_hostname} ESMTP Exim ${version_number} \
\#${compile_number} ${tod_full} \n\
We do not authorize the use of this system to transport unsolicited, \n\
and/or bulk e-mail."


#nobody as the sender seems to annoy people
untrusted_set_sender = *
local_from_check = false

rfc1413_query_timeout = 2s

split_spool_directory = yes

smtp_connect_backlog = 50
smtp_accept_max = 100

# primary_hostname =
deliver_queue_load_max = 3
auto_thaw = 6d
ignore_bounce_errors_after = 7d
timeout_frozen_after = 8d

# Specify the domain you want to be added to all unqualified addresses
# here. An unqualified address is one that does not contain an "@" character
# followed by a domain. For example, "caesar@rome.ex" is a fully qualified
# address, but the string "caesar" (i.e. just a login name) is an unqualified
# email address. Unqualified addresses are accepted only from local callers by
# default. See the receiver_unqualified_{hosts,nets} options if you want
# to permit unqualified addresses from remote sources. If this option is
# not set, the primary_hostname value is used for qualification.

# qualify_domain =


# If you want unqualified recipient addresses to be qualified with a different
# domain to unqualified sender addresses, specify the recipient domain here.
# If this option is not set, the qualify_domain value is used.

# qualify_recipient =


# Specify your local domains as a colon-separated list here. If this option
# is not set (i.e. not mentioned in the configuration file), the
# qualify_recipient value is used as the only local domain. If you do not want
# to do any local deliveries, uncomment the following line, but do not supply
# any data for it. This sets local_domains to an empty string, which is not
# the same as not mentioning it at all. An empty string specifies that there
# are no local domains; not setting it at all causes the default value (the
# setting of qualify_recipient) to be used.



#!!# message_filter renamed system_filter
system_filter = /etc/antivirus.exim
message_body_visible = 5000






# If you want to accept mail addressed to your host's literal IP address, for
# example, mail addressed to "user@[111.111.111.111]", then uncomment the
# following line, or supply the literal domain(s) as part of "local_domains"
# above.

# local_domains_include_host_literals


# No local deliveries will ever be run under the uids of these users (a colon-
# separated list). An attempt to do so gets changed so that it runs under the
# uid of "nobody" instead. This is a paranoic safety catch. Note the default
# setting means you cannot deliver mail addressed to root as if it were a
# normal user. This isn't usually a problem, as most sites have an alias for
# root that redirects such mail to a human administrator.

never_users = root


# The use of your host as a mail relay by any host, including the local host
# calling its own SMTP port, is locked out by default. If you want to permit
# relaying from the local host, you should set
#
# host_accept_relay = localhost
#
# If you want to permit relaying through your host from certain hosts or IP
# networks, you need to set the option appropriately, for example
#
#
#
# If you are an MX backup or gateway of some kind for some domains, you must
# set relay_domains to match those domains. This will allow any host to
# relay through your host to those domains.
#
# See the section of the manual entitled "Control of relaying" for more
# information.

# The setting below causes Exim to do a reverse DNS lookup on all incoming
# IP calls, in order to get the true host name. If you feel this is too
# expensive, you can specify the networks for which a lookup is done, or
# remove the setting entirely.

#host_lookup = 0.0.0.0/0


# By default, Exim expects all envelope addresses to be fully qualified, that
# is, they must contain both a local part and a domain. If you want to accept
# unqualified addresses (just a local part) from certain hosts, you can specify
# these hosts by setting one or both of
#
# receiver_unqualified_hosts =
# sender_unqualified_hosts =
#
# to control sender and receiver addresses, respectively. When this is done,
# unqualified addresses are qualified using the settings of qualify_domain
# and/or qualify_recipient (see above).


# Exim contains support for the Realtime Blocking List (RBL) that is being
# maintained as part of the DNS. See http://maps.vix.com/rbl/ for background.
# Uncommenting the first line below will make Exim reject mail from any
# host whose IP address is blacklisted in the RBL at maps.vix.com. Some
# others have followed the RBL lead and have produced other lists: DUL is
# a list of dial-up addresses, and ORBS is a list of open relay systems. The
# second line below checks all three lists.

# rbl_domains = rbl.maps.vix.com
# rbl_domains = rbl.maps.vix.com


# If you want Exim to support the "percent hack" for all your local domains,
# uncomment the following line. This is the feature by which mail addressed
# to x%y@z (where z is one of your local domains) is locally rerouted to
# x@y and sent on. Otherwise x%y is treated as an ordinary local part.

# percent_hack_domains = *

#sender_host_accept = +include_unknown:*
#sender_host_reject = +include_unknown:lsearch*;/etc/spammers



tls_certificate = /etc/exim.crt
tls_privatekey = /etc/exim.key
tls_advertise_hosts = *

helo_accept_junk_hosts = *

smtp_enforce_sync = false


#!!#######################################################!!#
#!!# This new section of the configuration contains ACLs #!!#
#!!# (Access Control Lists) derived from the Exim 3 #!!#
#!!# policy control options. #!!#
#!!#######################################################!!#

#!!# These ACLs are crudely constructed from Exim 3 options.
#!!# They are almost certainly not optimal. You should study
#!!# them and rewrite as necessary.

begin acl




#!!# ACL that is used after the RCPT command
check_recipient:
# Exim 3 had no checking on -bs messages, so for compatibility
# we accept if the source is local SMTP (i.e. not over TCP/IP).
# We do this by testing for an empty sending host field.
accept hosts = :


# Accept bounces to lists even if callbacks or other checks would fail
warn message = X-WhitelistedRCPT-nohdrfromcallback: Yes
condition = \
${if and {{match{$local_part}{(.*)-bounces\+.*}} \
{exists {/usr/local/cpanel/3rdparty/mailman/lists/${lc:$1}/config.pck}}} \
{yes}{no}}

accept condition = \
${if and {{match{$local_part}{(.*)-bounces\+.*}} \
{exists {/usr/local/cpanel/3rdparty/mailman/lists/${lc:$1}/config.pck}}} \
{yes}{no}}


# Accept bounces to lists even if callbacks or other checks would fail
warn message = X-WhitelistedRCPT-nohdrfromcallback: Yes
condition = \
${if and {{match{$local_part}{(.*)-bounces\+.*}} \
{exists {/usr/local/cpanel/3rdparty/mailman/lists/${lc:$1}_${lc:$domain}/config.pck}}} \
{yes}{no}}

accept condition = \
${if and {{match{$local_part}{(.*)-bounces\+.*}} \
{exists {/usr/local/cpanel/3rdparty/mailman/lists/${lc:$1}_${lc:$domain}/config.pck}}} \
{yes}{no}}

#if it gets here it isn't mailman

#sender verifications are required for all messages that are not sent to lists

require verify = sender
accept domains = +local_domains
endpass

#recipient verifications are required for all messages that are not sent to the local machine
#this was done at multiple users requests

message = "The recipient cannot be verified. Please check all recipients of this message to verify they are valid."
verify = recipient

accept domains = +relay_domains

warn message = ${perl{popbeforesmtpwarn}{$sender_host_name}}
hosts = +relay_hosts
accept hosts = +relay_hosts

warn message = ${perl{popbeforesmtpwarn}{$sender_host_address}}
condition = ${perl{checkrelayhost}{$sender_host_address}}
accept condition = ${perl{checkrelayhost}{$sender_host_address}}

accept hosts = +auth_relay_hosts
endpass
message = $sender_fullhost is currently not permitted to \
relay through this server. Perhaps you \
have not logged into the pop/imap server in the \
last 30 minutes or do not have SMTP Authentication turned on in your email client.
authenticated = *

deny message = $sender_fullhost is currently not permitted to \
relay through this server. Perhaps you \
have not logged into the pop/imap server in the \
last 30 minutes or do not have SMTP Authentication turned on in your email client.


#!!# ACL that is used after the DATA command
check_message:
require verify = header_sender
accept




begin authenticators

fixed_plain:
driver = plaintext
public_name = PLAIN
server_prompts = :
server_condition = "${perl{checkuserpass}{$1}{$2}{$3}}"
server_set_id = $2

fixed_login:
driver = plaintext
public_name = LOGIN
server_prompts = "Username:: : Password::"
server_condition = "${perl{checkuserpass}{$1}{$2}}"
server_set_id = $1





######################################################################
# REWRITE CONFIGURATION #
######################################################################

# There are no rewriting specifications in this default configuration file.

begin rewrite





#!!#######################################################!!#
#!!# Here follow routers created from the old routers, #!!#
#!!# for handling non-local domains. #!!#
#!!#######################################################!!#

begin routers


#!!# If we are trying to deliver to a remote mailman domain that is on the localhost
#!!# let it go though even if its not in /etc/localdomains since mailman will eat
#!!# up 100% of the cpu if we don't

mailman_virtual_router:
driver = accept
require_files = /usr/local/cpanel/3rdparty/mailman/lists/${lc::$local_part}_${lc::$domain}/config.pck
local_part_suffix_optional
local_part_suffix = -admin : \
            -bounces : -bounces+* : \
-confirm : -confirm+* : \
            -join : -leave : \
            -owner     : -request : \
            -subscribe : -unsubscribe
transport = mailman_virtual_transport

mailman_virtual_router_nodns:
driver = accept
require_files = /usr/local/cpanel/3rdparty/mailman/lists/${lc::$local_part}/config.pck
condition = \
${if or {{match{$local_part}{.*_.*}} \
{eq{$local_part}{mailman}}} \
{1}{0}}
local_part_suffix_optional
local_part_suffix = -admin : \
            -bounces : -bounces+* : \
-confirm : -confirm+* : \
            -join : -leave : \
            -owner     : -request : \
            -subscribe : -unsubscribe
domains = +local_domains
transport = mailman_virtual_transport_nodns




######################################################################
# ROUTERS CONFIGURATION #
# Specifies how remote addresses are handled #
######################################################################
# ORDER DOES MATTER #
# A remote address is passed to each in turn until it is accepted. #
######################################################################

# Remote addresses are those with a domain that does not match any item
# in the "local_domains" setting above.

democheck:
driver = redirect
condition = "${perl{democheck}}"
data = :fail: demo accounts are not permitted to relay email




# This router routes to remote hosts over SMTP using a DNS lookup with
# default options.

boxtraper_autowhitelist:
driver = accept
condition = "${perl{checkbx_autowhitelist}{$authenticated_id}}"
require_files = "/usr/local/cpanel/bin/boxtrapper"
transport = boxtrapper_autowhitelist
unseen



lookuphost:
driver = dnslookup
condition = "${perl{checkspam}}"
domains = ! +local_domains
#ignore verisign to prevent waste of bandwidth
ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8 : 64.94.110.0/24
headers_add = "${perl{mailtrapheaders}}"
transport = remote_smtp

# This router routes to remote hosts over SMTP by explicit IP address,
# given as a "domain literal" in the form [nnn.nnn.nnn.nnn]. The RFCs
# require this facility, which is why it is enabled by default in Exim.
# If you want to lock it out, set forbid_domain_literals in the main
# configuration section above.

literal:
driver = ipliteral
condition = "${perl{checkspam}}"
domains = ! +local_domains
headers_add = "${perl{mailtrapheaders}}"
transport = remote_smtp




#!!# This new router is put here to fail all domains that
#!!# were not in local_domains in the Exim 3 configuration.

fail_remote_domains:
driver = redirect
domains = ! +local_domains
allow_fail
data = :fail: unrouteable mail domain "$domain"





#!!#######################################################!!#
#!!# Here follow routers created from the old directors, #!!#
#!!# for handling local domains. #!!#
#!!#######################################################!!#



######################################################################
# DIRECTORS CONFIGURATION #
# Specifies how local addresses are handled #
######################################################################
# ORDER DOES MATTER #
# A local address is passed to each in turn until it is accepted. #
######################################################################

# Local addresses are those with a domain that matches some item in the
# "local_domains" setting above, or those which are passed back from the
# routers because of a "self=local" setting (not used in this configuration).


# This director handles aliasing using a traditional /etc/aliases file.
# If any of your aliases expand to pipes or files, you will need to set
# up a user and a group for these deliveries to run under. You can do
# this by uncommenting the "user" option below (changing the user name
# as appropriate) and adding a "group" option if necessary. Alternatively, you
# can specify "user" on the transports that are used. Note that those
# listed below are the same as are used for .forward files; you might want
# to set up different ones for pipe and file deliveries from aliases.

#spam_filter:
# driver = forwardfile
# file = /etc/spam.filter
# no_check_local_user
# no_verify
# filter
# allow_system_actions






virtual_sa_user:
driver = accept
headers_add="${perl{gensaheader_virtual}{$domain}}"
condition = "${perl{checksa_deliver}{$domain}{$local_part}{$received_protocol}}"
domains = lsearch;/etc/userdomains
retry_use_local_part
transport = virtual_sa_userdelivery

sa_localuser:
driver = accept
check_local_user
headers_add="${perl{gensaheader}{$local_part}}"
condition = "${perl{checkusersa}{$local_part}{$received_protocol}}"
domains = ! lsearch;/etc/userdomains
transport = local_sa_delivery




central_filter:
#!!# filter renamed allow_filter
driver = redirect
allow_filter
no_check_local_user
file = /etc/vfilters/${domain}
file_transport = address_file
pipe_transport = virtual_address_pipe
reply_transport = address_reply
retry_use_local_part
user = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}"
no_verify

central_user_filter:
driver = redirect
allow_filter
check_local_user
domains = ! lsearch;/etc/userdomains
condition = "${perl{hasfilterfile}{$local_part}}"
file = "${perl{getfilterfile}{$local_part}}"
file_transport = address_file
pipe_transport = virtual_address_pipe
reply_transport = address_reply
retry_use_local_part
no_verify

virtual_aliases_nostar:
driver = redirect
allow_defer
allow_fail
data = ${if exists{/etc/valiases/$domain}{${lookup{$local_part@$domain}lsearch{/etc/valiases/$domain}}}}
file_transport = address_file
group = mail
pipe_transport = virtual_address_pipe
retry_use_local_part
domains = lsearch;/etc/localdomains
unseen

virtual_user_spam:
driver = accept
condition = "${perl{check_deliver_spam}{$domain}{$local_part}}"
headers_remove="x-spam-exim"
domains = lsearch;/etc/userdomains
retry_use_local_part
transport = virtual_userdelivery_spam

virtual_boxtraper_user:
driver = accept
condition = "${perl{checkbx_deliver}{$domain}{$local_part}}"
require_files = "/usr/local/cpanel/bin/boxtrapper"
domains = lsearch;/etc/userdomains
retry_use_local_part
transport = virtual_boxtrapper_userdelivery


virtual_user:
driver = accept
condition = "${perl{check_deliver}{$domain}{$local_part}}"
headers_remove="x-spam-exim"
domains = lsearch;/etc/userdomains
retry_use_local_part
transport = virtual_userdelivery


has_alias_but_no_mailbox_discarded_to_prevent_loop:
    driver = redirect
condition = "${perl{checkvalias}{$domain}{$local_part}}"
    domains = lsearch;/etc/localdomains
    data="#Exim Filter\nseen finish"
    group = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}"
    user = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}"
    allow_filter
    disable_logging = true

valias_domain_file:
driver = redirect
allow_defer
allow_fail
condition = ${lookup {$domain} lsearch {/etc/vdomainaliases/$domain}{yes}{no} }
require_files = /etc/vdomainaliases/$domain
data = $local_part@${lookup {$domain} lsearch {/etc/vdomainaliases/$domain} }



virtual_aliases:
driver = redirect
allow_defer
allow_fail
data = ${if exists{/etc/valiases/$domain}{${lookup{*}lsearch{/etc/valiases/$domain}}}}
file_transport = address_file
group = mail
pipe_transport = virtual_address_pipe
domains = lsearch;/etc/localdomains
retry_use_local_part






# This director handles forwarding using traditional .forward files.
# If you want it also to allow mail filtering when a forward file
# starts with the string "# Exim filter", uncomment the "filter" option.
# The check_ancestor option means that if the forward file generates an
# address that is an ancestor of the current one, the current one gets
# passed on instead. This covers the case where A is aliased to B and B
# has a .forward file pointing to A. The three transports specified at the
# end are those that are used when forwarding generates a direct delivery
# to a file, or to a pipe, or sets up an auto-reply, respectively.

system_aliases:
driver = redirect
allow_defer
allow_fail
data = ${lookup{$local_part}lsearch{/etc/aliases}}
file_transport = address_file
pipe_transport = address_pipe
retry_use_local_part
# user = exim


local_aliases:
driver = redirect
allow_defer
allow_fail
data = ${lookup{$local_part}lsearch{/etc/localaliases}}
file_transport = address_file
pipe_transport = address_pipe
check_local_user



userforward:
#!!# filter renamed allow_filter
driver = redirect
allow_filter
check_ancestor
check_local_user
domains = ! lsearch;/etc/userdomains
no_expn
file = $home/.forward
file_transport = address_file
pipe_transport = address_pipe
reply_transport = address_reply
no_verify

localuser_spam:
driver = accept
headers_remove="x-spam-exim"
condition = "${perl{checkuserspambox}{$local_part}}"
check_local_user
domains = ! lsearch;/etc/userdomains
transport = local_delivery_spam

boxtrapper_localuser:
driver = accept
condition = "${perl{checkuserbx}{$local_part}}"
require_files = "/usr/local/cpanel/bin/boxtrapper"
check_local_user
domains = ! lsearch;/etc/userdomains
transport = local_boxtrapper_delivery


localuser:
driver = accept
headers_remove="x-spam-exim"
check_local_user
domains = ! lsearch;/etc/userdomains
transport = local_delivery



# This director matches local user mailboxes.







######################################################################
# TRANSPORTS CONFIGURATION #
######################################################################
# ORDER DOES NOT MATTER #
# Only one appropriate transport is called for each delivery. #
######################################################################

# A transport is used only when referenced from a director or a router that
# successfully handles an address.


# This transport is used for delivering messages over SMTP connections.

begin transports





remote_smtp:
driver = smtp


# This transport is used for local delivery to user mailboxes. By default
# it will be run under the uid and gid of the local user, and requires
# the sticky bit to be set on the /var/mail directory. Some systems use
# the alternative approach of running mail deliveries under a particular
# group instead of using the sticky bit. The commented options below show
# how this can be done.

local_delivery:
driver = appendfile
delivery_date_add
envelope_to_add
file = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/passwd}{$value}}}}/mail/inbox"
group = mail
mode = 0660
return_path_add
user = $local_part

local_delivery_spam:
driver = appendfile
delivery_date_add
envelope_to_add
file = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/passwd}{$value}}}}/mail/spam"
group = mail
mode = 0660
return_path_add
user = $local_part

local_sa_delivery:
driver = pipe
command = /usr/sbin/sendmail -bS
use_bsmtp = true
transport_filter = "/usr/bin/spamc"
user = $local_part
group = mail
log_output = true
current_directory = "/tmp"
home_directory = "/tmp"
return_fail_output = true
return_path_add = false
message_prefix =
message_suffix =
timeout_defer = true
transport_filter_timeout = 5m
temp_errors = 2





# This transport is used for handling pipe deliveries generated by alias
# or .forward files. If the pipe generates any standard output, it is returned
# to the sender of the message as a delivery error. Set return_fail_output
# instead of return_output if you want this to happen only when the pipe fails
# to complete normally. You can set different transports for aliases and
# forwards if you want to - see the references to address_pipe below.

address_pipe:
driver = pipe
return_output

virtual_address_pipe:
driver = pipe
group = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}"
return_output
user = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}"

# This transport is used for handling deliveries directly to files that are
# generated by aliassing or forwarding.

address_file:
driver = appendfile
delivery_date_add
envelope_to_add
return_path_add


# This transport is used for handling autoreplies generated by the filtering
# option of the forwardfile director.

virtual_sa_userdelivery:
driver = pipe
command = /usr/sbin/sendmail -bS
use_bsmtp = true
transport_filter = "/usr/bin/spamc"
user = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}"
group = mail
log_output = true
current_directory = "/tmp"
home_directory = "/tmp"
return_fail_output = true
return_path_add = false
message_prefix =
message_suffix =
timeout_defer = true
transport_filter_timeout = 5m
temp_errors = 2

virtual_userdelivery_spam:
driver = appendfile
delivery_date_add
envelope_to_add
file = "${extract{5}{:}{${lookup{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}lsearch{/etc/passwd}{$value}}}}/mail/${domain}/${local_part}/spam"
group = mail
mode = 0660
quota = "${if exists{${extract{5}{:}{${lookup{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}lsearch{/etc/passwd}{$value}}}}/etc/${domain}/quota} {${lookup{$local_part}lsearch*{${extract{5}{:}{${lookup{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}lsearch{/etc/passwd}{$value}}}}/etc/${domain}/quota}{$value}}} {}}"
quota_directory = "${extract{5}{:}{${lookup{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}lsearch{/etc/passwd}{$value}}}}/mail/${domain}/${local_part}"
return_path_add
user = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}"

boxtrapper_autowhitelist:
driver = pipe
command = /usr/local/cpanel/bin/boxtrapper --autowhitelist "${authenticated_id}"
user = ${perl{getemailuser}{$authenticated_id}}
group = mail
log_output = true
current_directory = "/tmp"
return_fail_output = true
return_path_add = false

local_boxtrapper_delivery:
driver = pipe
command = /usr/local/cpanel/bin/boxtrapper "${local_part}"
user = $local_part
group = mail
log_output = true
current_directory = "/tmp"
return_fail_output = true
return_path_add = false

virtual_boxtrapper_userdelivery:
driver = pipe
command = /usr/local/cpanel/bin/boxtrapper "${local_part}@${domain}"
user = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}"
group = mail
log_output = true
current_directory = "/tmp"
return_fail_output = true
return_path_add = false



virtual_userdelivery:
driver = appendfile
delivery_date_add
envelope_to_add
file = "${extract{5}{:}{${lookup{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}lsearch{/etc/passwd}{$value}}}}/mail/${domain}/${local_part}/inbox"
group = mail
mode = 0660
quota = "${if exists{${extract{5}{:}{${lookup{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}lsearch{/etc/passwd}{$value}}}}/etc/${domain}/quota} {${lookup{$local_part}lsearch*{${extract{5}{:}{${lookup{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}lsearch{/etc/passwd}{$value}}}}/etc/${domain}/quota}{$value}}} {}}"
quota_directory = "${extract{5}{:}{${lookup{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}lsearch{/etc/passwd}{$value}}}}/mail/${domain}/${local_part}"
return_path_add
user = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}"


address_reply:
driver = autoreply


mailman_virtual_transport:
driver = pipe
command = /usr/local/cpanel/3rdparty/mailman/mail/mailman \
'${if def:local_part_suffix \
{${sg{$local_part_suffix}{-(\\w+)(\\+.*)?}{\$1}}} \
{post}}' \
${lc:$local_part}_${lc:$domain}
current_directory = /usr/local/cpanel/3rdparty/mailman
home_directory = /usr/local/cpanel/3rdparty/mailman
user = mailman
group = mailman


mailman_virtual_transport_nodns:
driver = pipe
command = /usr/local/cpanel/3rdparty/mailman/mail/mailman \
'${if def:local_part_suffix \
{${sg{$local_part_suffix}{-(\\w+)(\\+.*)?}{\$1}}} \
{post}}' \
${lc:$local_part}
current_directory = /usr/local/cpanel/3rdparty/mailman
home_directory = /usr/local/cpanel/3rdparty/mailman
user = mailman
group = mailman









######################################################################
# RETRY CONFIGURATION #
######################################################################

# This single retry rule applies to all domains and all errors. It specifies
# retries every 15 minutes for 2 hours, then increasing retry intervals,
# starting at 1 hour and increasing each time by a factor of 1.5, up to 16
# hours, then retries every 8 hours until 4 days have passed since the first
# failed delivery.

# Domain Error Retries
# ------ ----- -------


begin retry




* * F,2h,15m; G,16h,1h,1.5; F,4d,8h




# End of Exim 4 configuration
[/more]

DexizeR
а конфиг тут причем ? надо просто перекомпилить exim с поддержкой мускуля.

Цитата:

/usr/local/cpanel/

хе хе .... и после этого править cPnel на предмет моздания аккаунтов в мускуле.

Добавлено:
И еще, DexizeR, спрячь свой конфиг под тег more

Цитата:

DexizeR
а конфиг тут причем ? надо просто перекомпилить exim с поддержкой мускуля.

Ах вот оно как всё просто оказывается .)) Надо всего лишь Exim перекомпилить с поддержкой MySQL и он сам догадается как обращаться к базе, какие использовать транспорты и маршрутизаторы... Всё понятно .))


Добавлено:
2 Pleshkov,
Нафига его править ? Он будет работать с Exim'ом так как раньше и работал.

DexizeR

Фея , сделай мне пожалуйста член до пола. Ну она взяла и отрубила ноги. Так выпьем же за грамотно поставленые технические задания. Ты просил поддержку - так перекомпиль, а настраивать - так это уж будь любезен сам, никто за тебя твою работу делать не будет. Время людей стоит денег.


Цитата:

Нафига его править ? Он будет работать с Exim'ом так как раньше и работал.

ню-ню. И как ? заработало ?

DexizeR

Цитата:

Нафига его править ? Он будет работать с Exim'ом так как раньше и работал.

ню ню ... ты это cPanel скажи .... когда у тя юзвери начнут орать матом ... А ты им будешь доказывать что это панель такая плохая, что сама ничего не делает.

Так значит, нельзя сделать так чтобы cpanel мог работать с Exim'ом по старому при том, чтобы у Exim'a появилась ДОПОЛНИТЕЛЬНАЯ возможность работать с аккаунтами из БД ?

Аналогичная ситуация у меня была с ProFTPd - нужно было сделать так, чтобы старая схема работы с аккаунтами работала + появилась новая схема. Всё нормально получилось - профтпд работал и с аккаунтами к-рые хранятся в системе(т.е. просто системные пользователи) и пользователи информация о которых хранится в БД. Я понимаю, что здесь аккаунты виртуальные, а не системные как в proftpd, но это не должно иметь особого значения иначе это даёт слишком узкие возможности.

DexizeR
попробуй добавь роутеры и посмотри что будет в логах.

Здравствуйте
У меня вопрос
Я настроил Exim 4.62 по интрукции ginger "Установка почтового сервера на базе Exim с поддержкой виртуальный аккаунтов (MySQL)"
Потом я решил сделать более продвинутый конфиг по инструкции "Улучшенный вариант части 1: Exim-4.50 + MySQL"
Все настроил, при запуске exim-а ни каких ошибок не выдается.
Но авторизации нет, ни PLAIN, ни LOGIN, ни CRAM-MD5.
Недоступен ни один метод авторизации.

Код: node# telnet localhost 25
Trying 127.0.0.1...
Connected to localhost.example.ru.
Escape character is '^]'.
220 node.example.ru ESMTP Exim 4.62 Mon, 15 May 2006 10:43:22 +0900
ehlo localhost
250-node.example.ru Hello localhost [127.0.0.1]
250-SIZE 20971520
250-PIPELINING
250 HELP
auth plain
503 AUTH command used when not advertised
quit

OlmerSU
Покажи, что показывает
Код: exim -bV|grep Auth

hoochie

Цитата:

Покажи, что показывает
Код:
exim -bV|grep Auth

получается что все нормально:

Код: Authenticators: cram_md5 plaintext

Попробуй с хоста, с которого не разрешен рилэй.
Возможно причина в этом auth_advertise_hosts = !+relay_from_hosts : +auth_relay_hosts или еще где-то. Отталкивайся от дефолтового конфига Exim и добавляй только то, что понимаешь (или постарайся понять, что добавляешь). Сравни со своим рабочим. Это руководство к действию, а не указание к выполнению ( я про мануал Ginger).

Дамы и господа? а как реализуется поддержка файла virtualtables? он читает этот файл в /etc/mail?

Как мне реализовать структуру приема почты для определенного домена и перекладывание её в определенный ящик?

username@a.sample.hostname localuser
username@a.sample.hostname specificuser@a.possibly.different.hostname
@another.sample.hostname specificuser@a.possibly.different.hostname
@yet.another.sample.hostname %1@a.possibly.different.hostname

где делать записи?

Добавлено:
И еще вопрос, если у меня 2 виртуальных домена, мне нужно пользователей отдельно заводить для каждого? А если я хочу чтобы пользователь получал почту с двух доменов в 1 почтовый ящик под одним логином и паролем, что мне сделать?

hoochie
auth_advertise_hosts = !+relay_from_hosts : +auth_relay_hosts
исправил на
auth_advertise_hosts = +auth_relay_hosts
потому как auth_relay_hosts - это *, и все заработало
спасибо...буду дальше разбиратся

Может кто нибудь дать пример настройки этого транспорта?
address_reply:
driver = autorep

есть задача:

в ответ на письма, пришедшие на определенный домен - ответить
"такой домен прекращает работу, пишите на домен такой-то"

Народ помогите!!! после некоторой серии попыток получилось вот что :
auto_reply:
driver = autoreply
from = Autoreply System <mailer-daemon@domain.ru>
to = "$sender_address"
text = "\
Dear $h_from\n\n\
This is an automatic reply. PlEASE send your e-mail to @domain.ru \n\
====================================================\n\n\

domainforward:
driver = accept
allow_fail
allow_defer
condition = ${if eq {${domain}} {mydomain.ru} {no} {yes}}
transport = auto_reply


но вроде получилось что проверяются письма пришедшии с mydomain а нужно чтобы проверялись пришедшии на mydomain!

ПОМОГИТЕ ПОЖАЛУЙСТА ОЧЕНЬ НАДО

Подскажите ламеру.

Есть поточвый сервис провайдера, похоже на нём заведены ящики (тока заступил на новое место и всего не знаю). На сервере настроен exim. MySQL нету. Почтовые ящики сконфигурированы на домен фирмы т.е. физически %user@corp.prov.zone и а реально %user@corp.zone. Запущен Exim с параметрами 'exim -bd -q10m'


Как оно настроено и где добавлять/удалять ящики и что при этом конфигурировать?

Цитата:

2) Хотелка: Webmail работающий напрямую с maildir без Imap. Точнее говоря хотелось бы чтобы при входе пользователя висела табличка с занятым местом в Maildire (считывался файлик Maildirsize) По моему через Imap это нельзя реализовать. Эта фича есть в курьеровской SqWebmail, но уж больно интерфейс у нее убогий.

Всех приветствую. Реализовал я свою хотелку. Оказывается, по крайней мере для Exim начиная с 4.60, есть такая опция maildir_use_size_file = yes При использовании этой опции Exim берет значение квоты из мускуля и пишет его в файл. А затем исправляет файлик при получении каждого нового письма.

Ну а соотвтетствеенно все кто умеет его читать и редактировать ... У меня например courier-imap - он умеет.

В качестве webmaila взял squirrelmail с патчем для считывания квоты через imap.

Абсолютно всё брал из портов FreeBSD.

В общем всё зашуршало достаточно прилично.

Uncle Vova
так может предоставишь конфиги да кое-какое описание ?

Я могу у себя выложить на хостинге.

Цитата:

Uncle Vova
так может предоставишь конфиги да кое-какое описание ?

Я могу у себя выложить на хостинге.

Хорошо. Соберу всё и пришлю. Постараюсь сегодня - завтра.

Привет.
Може у кого реализовано следующее или подобное.
Есть Exim + MySOL + SpamAssassin + squirrelmail.
Надо дать возможность пользователям самостоятельно фильтровать почту
по персанальным правилам для SpamAssassin. Правила ложить в MySOL.
(не просто помечать X-Spam-Flag: YES , а именно фильтровать)
Спасибо.

глупости это - чем меньше могут делать пользователи, тем меньше проблем у тебя. А если какй-то ежик нарисует неверное правило от которого будет валиться sa ? что тогда делать ?

Вас ис дас?


deny message = This message contains malware ($malware_name)
malware = *

Цитата:

А если какй-то ежик нарисует неверное правило от которого будет валиться sa ? что тогда делать ?

Почему это? Если дать возможность использовать индивидуальные rewrite_header subject, required_score, use_razor2, use_dcc, ok_locales, whitelist_from, blacklist_from. Что тут нереального?


Добавлено:

Цитата:

Вас ис дас?

Антивирусная проверка

У вас асасин такие ошибки выдает?

May 17 18:49:41 mx spamd[23786]: config: failed to parse line, skipping: auto_learn_threshold_nonspam -2
May 17 18:49:41 mx spamd[23786]: config: failed to parse line, skipping: auto_learn_threshold_spam 8
May 17 18:49:41 mx spamd[23786]: config: failed to parse, now a plugin, skipping: ok_languages en ru

Цитата:

У вас асасин такие ошибки выдает?

нет, не выдает. роверьте конфиг.
одна из ошибок ... ok_languages en ru оже надо ok_locales ru en прописать и т.д.