> -----Original Message-----
> From: Nico Erfurth [mailto:masta@perlgolf.de]
> Sent: Tuesday, September 10, 2002 2:11 PM
> To: t_tran99@???
> Subject: Re: [Exim] RE: Rejecting specific senders???
>
>
> Thai Tran wrote:
> > Hello,
> > After trying the new condition I still receive the same
> errors. When
> > checking the exim_rejectlog I am still getting LDAP search: no results.
> > I've tried swapping the 0 and 1 with still the same results.
>
> Have you tried to run exim with debugging? send me the log for both
> cases please, and the whole acl-config again.
>
> ciao
>
Hello again,
Sorry for me making it so long but then I didn't want to leave any of the
debug out to be safe.
MY ACL:
---------------------
accept hosts = :
deny local_parts = ^.*[@%!/|] : ^\\.
require verify = recipient
require verify = sender
deny condition = ${lookup ldap
{ldap:///mailSetting=deny_relays,o=mye-znet?mailSettingValue?sub?(sender_add
ress=${quote_ldap:$s
ender_address})}}{1}{0}}
accept domains = +local_domains : +relay_domains
accept hosts = +relay_hosts
deny message = relay not permitted
THE FIRST DEBUG: (1,0)
---------------------
exim -bd -d -v
Exim version 4.10 uid=0 gid=0 pid=10351 L=834cd8 D=fff7577f
Berkeley DB: Sleepycat Software: Berkeley DB 4.0.14: (November 18, 2001)
changed uid/gid: forcing real = effective
uid=0 gid=0
auxiliary group list: <none>
trusted user
admin user
user name "root" extracted from gecos field "root"
originator: uid=0 gid=0 login=root name=root
listening on all interfaces (IPv4) port 25
pid written to /var/lock/exim.pid
changed uid/gid: running as a daemon
uid=99 gid=99
auxiliary group list: <none>
LOG: MAIN
exim 4.10 daemon started: pid=10351, no queue runs, listening for SMTP on
port 25 (IPv4)
set_process_info: 10351 daemon: no queue runs, listening for SMTP
daemon running with uid=99 gid=99 euid=99 egid=99
Listening...
Connection request from 68.113.197.201 port 4455
sender_fullhost = [68.113.197.201]
sender_rcvhost = [68.113.197.201]
Process 10352 is handling incoming connection from [68.113.197.201]
checking for IP options
no IP options found
host in host_lookup? yes (matched "*")
looking up host name for 68.113.197.201
1 SMTP accept process running
Listening...
IP address lookup yielded 68-113-197-201.ftwrth.tx.charter.com
68-113-197-201.ftwrth.tx.charter.com 68.113.197.201
checking addresses for 68-113-197-201.ftwrth.tx.charter.com
68.113.197.201
sender_fullhost = 68-113-197-201.ftwrth.tx.charter.com [68.113.197.201]
sender_rcvhost = 68-113-197-201.ftwrth.tx.charter.com ([68.113.197.201])
set_process_info: 10352 handling incoming connection from
68-113-197-201.ftwrth.tx.charter.com [68.113.197.201]
host in host_reject_connection? no (option unset)
host in sender_unqualified_hosts? no (option unset)
host in recipient_unqualified_hosts? no (option unset)
host in helo_verify_hosts? no (option unset)
host in helo_try_verify_hosts? no (option unset)
host in helo_accept_junk_hosts? no (option unset)
LOG: smtp_connection MAIN
SMTP connection from 68-113-197-201.ftwrth.tx.charter.com [68.113.197.201]
(TCP/IP connection count = 1)
SMTP>> 220 ldap ESMTP Exim 4.10 Tue, 10 Sep 2002 14:19:52 -0500
Process 10352 is ready for new message
smtp_setup_msg entered
SMTP<< HELO peter
sender_fullhost = 68-113-197-201.ftwrth.tx.charter.com (peter)
[68.113.197.201]
sender_rcvhost = 68-113-197-201.ftwrth.tx.charter.com ([68.113.197.201]
helo=peter)
set_process_info: 10352 handling incoming connection from
68-113-197-201.ftwrth.tx.charter.com (peter) [68.113.197.201]
SMTP>> 250 ldap Hello 68-113-197-201.ftwrth.tx.charter.com [68.113.197.201]
SMTP<< MAIL FROM: <t_tran99@???>
SMTP>> 250 OK
SMTP<< RCPT TO: <t_tran99@???>
active address t_tran99@???
local_part=t_tran99 domain=mye-znet.com
using ACL "check_recipient"
processing "accept"
check hosts = :
host in ":"? no (end of list)
accept: condition test failed
processing "deny"
check local_parts = ^.*[@%!/|] : ^\\.
t_tran99 in "^.*[@%!/|] : ^\."? no (end of list)
deny: condition test failed
processing "require"
check verify = recipient
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
Verifying t_tran99@???
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
Considering t_tran99@???
active address t_tran99@???
local_part=t_tran99 domain=mye-znet.com
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
routing t_tran99@???
--------> lookuphost router <--------
local_part=t_tran99 domain=mye-znet.com
checking domains
mye-znet.com in "localhost : mye-znet.com"? yes (matched "mye-znet.com")
mye-znet.com in "! +local_domains"? no (matched "! +local_domains")
cached lookup data = NULL
lookuphost router skipped: domains mismatch
--------> literal router <--------
local_part=t_tran99 domain=mye-znet.com
checking domains
cached yes match for +local_domains
mye-znet.com in "! +local_domains"? no (matched "! +local_domains" - cached)
cached lookup data = NULL
literal router skipped: domains mismatch
--------> ldap_user router <--------
local_part=t_tran99 domain=mye-znet.com
calling ldap_user router
rda_interpret (string): ${lookup ldap
{ldap:///dc=${domain},o=mye-znet?mailMessageStore?sub?(&(uid=${local_part}))
}}
search_open: ldap "NULL"
search_find: file="NULL"
key="ldap:///dc=mye-znet.com,o=mye-znet?mailMessageStore?sub?(&(uid=t_tran99
))" partial=-1
LRU list:
internal_search_find: file="NULL"
type=ldap
key="ldap:///dc=mye-znet.com,o=mye-znet?mailMessageStore?sub?(&(uid=t_tran99
))"
database lookup required for
ldap:///dc=mye-znet.com,o=mye-znet?mailMessageStore?sub?(&(uid=t_tran99))
LDAP parameters: user=NULL pass=NULL size=0 time=0
perform_ldap_search: ldap URL
="ldap:///dc=mye-znet.com,o=mye-znet?mailMessageStore?sub?(&(uid=t_tran99))"
server=NULL port=0 sizelimit=0 timelimit=0
Initialized connection with LDAP server NULL:389
LDAP_OPT_X_TLS_TRY set
Binding with user=NULL password=NULL
Start search
ldap_result loop
LDAP entry loop
LDAP attr loop mailMessageStore:/home/mailspool/mye-znet.com/t_tran99
search ended by ldap_result yielding 101
LDAP search: returning: /home/mailspool/mye-znet.com/t_tran99
lookup yielded: /home/mailspool/mye-znet.com/t_tran99
expanded: /home/mailspool/mye-znet.com/t_tran99
file is not a filter file
parse_forward_list: /home/mailspool/mye-znet.com/t_tran99
extract item: /home/mailspool/mye-znet.com/t_tran99
set transport address_file_ldap
ldap_user router generated /home/mailspool/mye-znet.com/t_tran99
pipe, file, or autoreply
errors_to=NULL transport=address_file_ldap
uid=unset gid=unset home=NULL
routed by ldap_user router
envelope to: t_tran99@???
transport: <none>
----------- end verify ------------
require: condition test succeeded
processing "require"
check verify = sender
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
Verifying t_tran99@???
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
Considering t_tran99@???
active address t_tran99@???
local_part=t_tran99 domain=yahoo.com
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
routing t_tran99@???
--------> lookuphost router <--------
local_part=t_tran99 domain=yahoo.com
checking domains
yahoo.com in "localhost : mye-znet.com"? no (end of list)
yahoo.com in "! +local_domains"? yes (end of list)
cached lookup data = NULL
calling lookuphost router
lookuphost router called for t_tran99@???
domain = yahoo.com
DNS lookup of yahoo.com (MX) succeeded
fully qualified name = yahoo.com
host_find_bydns yield = HOST_FOUND (2); returned hosts:
mx1.mail.yahoo.com 64.157.4.83 1
mx1.mail.yahoo.com 64.157.4.81 1
mx2.mail.yahoo.com 64.157.4.82 1
mx2.mail.yahoo.com 64.157.4.84 1
mx4.mail.yahoo.com 216.136.129.15 5
mx4.mail.yahoo.com 216.136.129.16 5
mx4.mail.yahoo.com 216.136.129.18 5
mx4.mail.yahoo.com 216.136.129.17 5
set transport remote_smtp
queued for remote_smtp transport: local_part = t_tran99
domain = yahoo.com
errors_to=NULL
domain_data=NULL localpart_data=NULL
routed by lookuphost router
envelope to: t_tran99@???
transport: remote_smtp
host mx1.mail.yahoo.com [64.157.4.83] MX=1
host mx1.mail.yahoo.com [64.157.4.81] MX=1
host mx2.mail.yahoo.com [64.157.4.82] MX=1
host mx2.mail.yahoo.com [64.157.4.84] MX=1
host mx4.mail.yahoo.com [216.136.129.15] MX=5
host mx4.mail.yahoo.com [216.136.129.16] MX=5
host mx4.mail.yahoo.com [216.136.129.18] MX=5
host mx4.mail.yahoo.com [216.136.129.17] MX=5
----------- end verify ------------
sender t_tran99@??? verified ok
require: condition test succeeded
processing "deny"
check condition = ${lookup ldap
{ldap:///mailSetting=deny_relays,o=mye-znet?mailSettingValue?sub?(sender_add
ress=${quote_ldap:$sender_address})}}{1}{0}}
search_open: ldap "NULL"
cached open
search_find: file="NULL"
key="ldap:///mailSetting=deny_relays,o=mye-znet?mailSettingValue?sub?(sender
_address=t_tran99%40yahoo.com)" partial=-1
LRU list:
internal_search_find: file="NULL"
type=ldap
key="ldap:///mailSetting=deny_relays,o=mye-znet?mailSettingValue?sub?(sender
_address=t_tran99%40yahoo.com)"
database lookup required for
ldap:///mailSetting=deny_relays,o=mye-znet?mailSettingValue?sub?(sender_addr
ess=t_tran99%40yahoo.com)
LDAP parameters: user=NULL pass=NULL size=0 time=0
perform_ldap_search: ldap URL
="ldap:///mailSetting=deny_relays,o=mye-znet?mailSettingValue?sub?(sender_ad
dress=t_tran99%40yahoo.com)" server=NULL port=0 sizelimit=0 timelimit=0
Re-using cached connection to LDAP server NULL:389
Start search
search ended by ldap_result yielding 101
LDAP search: no results
lookup failed
= {1}{0}}
deny: condition test deferred
SMTP>> 451 Temporary local problem - please try later
LOG: MAIN REJECT
H=68-113-197-201.ftwrth.tx.charter.com (peter) [68.113.197.201]
F=<t_tran99@???> temporarily rejected RCPT <t_tran99@???>:
LDAP search: no results
SMTP<< QUIT
SMTP>> 221 ldap closing connection
LOG: smtp_connection MAIN
SMTP connection from 68-113-197-201.ftwrth.tx.charter.com (peter)
[68.113.197.201] closed by QUIT
search_tidyup called
unbind LDAP connection to NULL:389
child 10352 ended: status=0x0
0 SMTP accept processes now running
THE SECOND DEBUG: (0,1)
-------------------
Exim version 4.10 uid=0 gid=0 pid=10357 L=834cd8 D=fff7577f
Berkeley DB: Sleepycat Software: Berkeley DB 4.0.14: (November 18, 2001)
changed uid/gid: forcing real = effective
uid=0 gid=0
auxiliary group list: <none>
trusted user
admin user
user name "root" extracted from gecos field "root"
originator: uid=0 gid=0 login=root name=root
listening on all interfaces (IPv4) port 25
pid written to /var/lock/exim.pid
changed uid/gid: running as a daemon
uid=99 gid=99
auxiliary group list: <none>
LOG: MAIN
exim 4.10 daemon started: pid=10357, no queue runs, listening for SMTP on
port 25 (IPv4)
set_process_info: 10357 daemon: no queue runs, listening for SMTP
daemon running with uid=99 gid=99 euid=99 egid=99
Listening...
Connection request from 68.113.197.201 port 4462
1 SMTP accept process running
Listening...
sender_fullhost = [68.113.197.201]
sender_rcvhost = [68.113.197.201]
Process 10358 is handling incoming connection from [68.113.197.201]
checking for IP options
no IP options found
host in host_lookup? yes (matched "*")
looking up host name for 68.113.197.201
IP address lookup yielded 68-113-197-201.ftwrth.tx.charter.com
68-113-197-201.ftwrth.tx.charter.com 68.113.197.201
checking addresses for 68-113-197-201.ftwrth.tx.charter.com
68.113.197.201
sender_fullhost = 68-113-197-201.ftwrth.tx.charter.com [68.113.197.201]
sender_rcvhost = 68-113-197-201.ftwrth.tx.charter.com ([68.113.197.201])
set_process_info: 10358 handling incoming connection from
68-113-197-201.ftwrth.tx.charter.com [68.113.197.201]
host in host_reject_connection? no (option unset)
host in sender_unqualified_hosts? no (option unset)
host in recipient_unqualified_hosts? no (option unset)
host in helo_verify_hosts? no (option unset)
host in helo_try_verify_hosts? no (option unset)
host in helo_accept_junk_hosts? no (option unset)
LOG: smtp_connection MAIN
SMTP connection from 68-113-197-201.ftwrth.tx.charter.com [68.113.197.201]
(TCP/IP connection count = 1)
SMTP>> 220 ldap ESMTP Exim 4.10 Tue, 10 Sep 2002 14:25:44 -0500
Process 10358 is ready for new message
smtp_setup_msg entered
SMTP<< HELO peter
sender_fullhost = 68-113-197-201.ftwrth.tx.charter.com (peter)
[68.113.197.201]
sender_rcvhost = 68-113-197-201.ftwrth.tx.charter.com ([68.113.197.201]
helo=peter)
set_process_info: 10358 handling incoming connection from
68-113-197-201.ftwrth.tx.charter.com (peter) [68.113.197.201]
SMTP>> 250 ldap Hello 68-113-197-201.ftwrth.tx.charter.com [68.113.197.201]
SMTP<< MAIL FROM: <t_tran99@???>
SMTP>> 250 OK
SMTP<< RCPT TO: <t_tran99@???>
active address t_tran99@???
local_part=t_tran99 domain=mye-znet.com
using ACL "check_recipient"
processing "accept"
check hosts = :
host in ":"? no (end of list)
accept: condition test failed
processing "deny"
check local_parts = ^.*[@%!/|] : ^\\.
t_tran99 in "^.*[@%!/|] : ^\."? no (end of list)
deny: condition test failed
processing "require"
check verify = recipient
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
Verifying t_tran99@???
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
Considering t_tran99@???
active address t_tran99@???
local_part=t_tran99 domain=mye-znet.com
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
routing t_tran99@???
--------> lookuphost router <--------
local_part=t_tran99 domain=mye-znet.com
checking domains
mye-znet.com in "localhost : mye-znet.com"? yes (matched "mye-znet.com")
mye-znet.com in "! +local_domains"? no (matched "! +local_domains")
cached lookup data = NULL
lookuphost router skipped: domains mismatch
--------> literal router <--------
local_part=t_tran99 domain=mye-znet.com
checking domains
cached yes match for +local_domains
mye-znet.com in "! +local_domains"? no (matched "! +local_domains" - cached)
cached lookup data = NULL
literal router skipped: domains mismatch
--------> ldap_user router <--------
local_part=t_tran99 domain=mye-znet.com
calling ldap_user router
rda_interpret (string): ${lookup ldap
{ldap:///dc=${domain},o=mye-znet?mailMessageStore?sub?(&(uid=${local_part}))
}}
search_open: ldap "NULL"
search_find: file="NULL"
key="ldap:///dc=mye-znet.com,o=mye-znet?mailMessageStore?sub?(&(uid=t_tran99
))" partial=-1
LRU list:
internal_search_find: file="NULL"
type=ldap
key="ldap:///dc=mye-znet.com,o=mye-znet?mailMessageStore?sub?(&(uid=t_tran99
))"
database lookup required for
ldap:///dc=mye-znet.com,o=mye-znet?mailMessageStore?sub?(&(uid=t_tran99))
LDAP parameters: user=NULL pass=NULL size=0 time=0
perform_ldap_search: ldap URL
="ldap:///dc=mye-znet.com,o=mye-znet?mailMessageStore?sub?(&(uid=t_tran99))"
server=NULL port=0 sizelimit=0 timelimit=0
Initialized connection with LDAP server NULL:389
LDAP_OPT_X_TLS_TRY set
Binding with user=NULL password=NULL
Start search
ldap_result loop
LDAP entry loop
LDAP attr loop mailMessageStore:/home/mailspool/mye-znet.com/t_tran99
search ended by ldap_result yielding 101
LDAP search: returning: /home/mailspool/mye-znet.com/t_tran99
lookup yielded: /home/mailspool/mye-znet.com/t_tran99
expanded: /home/mailspool/mye-znet.com/t_tran99
file is not a filter file
parse_forward_list: /home/mailspool/mye-znet.com/t_tran99
extract item: /home/mailspool/mye-znet.com/t_tran99
set transport address_file_ldap
ldap_user router generated /home/mailspool/mye-znet.com/t_tran99
pipe, file, or autoreply
errors_to=NULL transport=address_file_ldap
uid=unset gid=unset home=NULL
routed by ldap_user router
envelope to: t_tran99@???
transport: <none>
----------- end verify ------------
require: condition test succeeded
processing "require"
check verify = sender
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
Verifying t_tran99@???
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
Considering t_tran99@???
active address t_tran99@???
local_part=t_tran99 domain=yahoo.com
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
routing t_tran99@???
--------> lookuphost router <--------
local_part=t_tran99 domain=yahoo.com
checking domains
yahoo.com in "localhost : mye-znet.com"? no (end of list)
yahoo.com in "! +local_domains"? yes (end of list)
cached lookup data = NULL
calling lookuphost router
lookuphost router called for t_tran99@???
domain = yahoo.com
DNS lookup of yahoo.com (MX) succeeded
fully qualified name = yahoo.com
host_find_bydns yield = HOST_FOUND (2); returned hosts:
mx1.mail.yahoo.com 64.157.4.81 1
mx1.mail.yahoo.com 64.157.4.83 1
mx2.mail.yahoo.com 64.157.4.82 1
mx2.mail.yahoo.com 64.157.4.84 1
mx4.mail.yahoo.com 216.136.129.15 5
mx4.mail.yahoo.com 216.136.129.16 5
mx4.mail.yahoo.com 216.136.129.18 5
mx4.mail.yahoo.com 216.136.129.17 5
set transport remote_smtp
queued for remote_smtp transport: local_part = t_tran99
domain = yahoo.com
errors_to=NULL
domain_data=NULL localpart_data=NULL
routed by lookuphost router
envelope to: t_tran99@???
transport: remote_smtp
host mx1.mail.yahoo.com [64.157.4.81] MX=1
host mx1.mail.yahoo.com [64.157.4.83] MX=1
host mx2.mail.yahoo.com [64.157.4.82] MX=1
host mx2.mail.yahoo.com [64.157.4.84] MX=1
host mx4.mail.yahoo.com [216.136.129.15] MX=5
host mx4.mail.yahoo.com [216.136.129.16] MX=5
host mx4.mail.yahoo.com [216.136.129.18] MX=5
host mx4.mail.yahoo.com [216.136.129.17] MX=5
----------- end verify ------------
sender t_tran99@??? verified ok
require: condition test succeeded
processing "deny"
check condition = ${lookup ldap
{ldap:///mailSetting=deny_relays,o=mye-znet?mailSettingValue?sub?(sender_add
ress=${quote_ldap:$sender_address})}}{0}{1}}
search_open: ldap "NULL"
cached open
search_find: file="NULL"
key="ldap:///mailSetting=deny_relays,o=mye-znet?mailSettingValue?sub?(sender
_address=t_tran99%40yahoo.com)" partial=-1
LRU list:
internal_search_find: file="NULL"
type=ldap
key="ldap:///mailSetting=deny_relays,o=mye-znet?mailSettingValue?sub?(sender
_address=t_tran99%40yahoo.com)"
database lookup required for
ldap:///mailSetting=deny_relays,o=mye-znet?mailSettingValue?sub?(sender_addr
ess=t_tran99%40yahoo.com)
LDAP parameters: user=NULL pass=NULL size=0 time=0
perform_ldap_search: ldap URL
="ldap:///mailSetting=deny_relays,o=mye-znet?mailSettingValue?sub?(sender_ad
dress=t_tran99%40yahoo.com)" server=NULL port=0 sizelimit=0 timelimit=0
Re-using cached connection to LDAP server NULL:389
Start search
search ended by ldap_result yielding 101
LDAP search: no results
lookup failed
= {0}{1}}
deny: condition test deferred
SMTP>> 451 Temporary local problem - please try later
LOG: MAIN REJECT
H=68-113-197-201.ftwrth.tx.charter.com (peter) [68.113.197.201]
F=<t_tran99@???> temporarily rejected RCPT <t_tran99@???>:
LDAP search: no results
SMTP<< QUIT
SMTP>> 221 ldap closing connection
LOG: smtp_connection MAIN
SMTP connection from 68-113-197-201.ftwrth.tx.charter.com (peter)
[68.113.197.201] closed by QUIT
search_tidyup called
unbind LDAP connection to NULL:389
child 10358 ended: status=0x0
0 SMTP accept processes now running
