[exim-dev] [Bug 2137] New: Temporary rejection of the random…

Góra strony
Delete this message
Reply to this message
Autor: admin
Data:  
Dla: exim-dev
Nowe tematy: [exim-dev] [Bug 2137] Temporary rejection of the random callout check causes actual callout to be skipped, [exim-dev] [Bug 2137] Temporary rejection of the random callout check causes actual callout to be skipped
Temat: [exim-dev] [Bug 2137] New: Temporary rejection of the random callout check causes actual callout to be skipped
https://bugs.exim.org/show_bug.cgi?id=2137

            Bug ID: 2137
           Summary: Temporary rejection of the random callout check causes
                    actual callout to be skipped
           Product: Exim
           Version: 4.89
          Hardware: x86
                OS: Linux
            Status: NEW
          Severity: bug
          Priority: medium
         Component: ACLs
          Assignee: jgh146exb@???
          Reporter: chirila@???
                CC: exim-dev@???


After an upgrade from 4.86.2 to 4.89 I noticed that whenever a callout check is
being done, if the route returns a 4XX instead of 5XX at the random check the
next check in the callout is skipped.

After the random check a QUIT is sent immediately in this case, instead of the
normal RSET and the next MAIL FROM and RCPT TO.

Version information:
--------------------

Basic Debian + custom build options

==========
$ exim -bV
Exim version 4.89 #3 built 23-Jun-2017 10:19:01
Copyright (c) University of Cambridge, 1995 - 2017
(c) The Exim Maintainers and contributors in ACKNOWLEDGMENTS file, 2007 - 2017
Berkeley DB: Berkeley DB 5.3.28: (September 9, 2013)
Support for: crypteq iconv() IPv6 Perl Expand_dlfunc OpenSSL Content_Scanning
DKIM DNSSEC Event OCSP PRDR SOCKS TCP_Fast_Open Experimental_SPF
Experimental_SRS Experimental_DANE Experimental_DMARC
Lookups (built-in): lsearch wildlsearch nwildlsearch iplsearch dbm dbmjz dbmnz
dnsdb mysql
Authenticators: cram_md5 plaintext
Routers: accept dnslookup ipliteral iplookup manualroute queryprogram redirect
Transports: appendfile/maildir autoreply pipe smtp
Fixed never_users: 0
Configure owner: 0:0
Size of off_t: 8
Configuration file is /var/lib/exim4/incoming-config.autogenerated
==========

Exim configuration:
-------------------

In RCPT ACL:

=====
acl_check_rcpt:

  deny
    !verify                = recipient/callout=2m,random


  accept
    set acl_m_verification = success
=====


In router:

=====
begin routers

spamexperts:
debug_print = "R: spamexperts for $local_part@$domain"
driver = manualroute
host_find_failed = ignore
host_all_ignored = freeze
transport = remote_smtp_se
route_list = $domain "<, mail.simplyspamfree.com"
=====

In transport:

=====
begin transports

remote_smtp_se:
debug_print = "T: remote_smtp for $local_part@$domain"
driver = smtp
hosts_verify_avoid_tls = *
=====


Debugging with -bhc option
--------------------------

With temporary rejection from the remote server

=====
>>> check !verify = recipient/callout=2m,random
>>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
>>> routing test@???
>>> R: spamexperts for test@???
>>> calling spamexperts router
>>> defer.simplyspamfree.com in "defer.simplyspamfree.com"? yes (matched "defer.simplyspamfree.com")
>>> routed by spamexperts router
>>> Attempting full verification using callout
>>> callout cache: no domain record found for defer.simplyspamfree.com
>>> callout cache: no address record found for test@???
>>> 2a01:4f8:161:124b::173 in hosts_require_dane? no (option unset)
>>> interface=NULL port=25
>>> Connecting to mail.simplyspamfree.com [2a01:4f8:161:124b::173]:25 ... 2a01:4f8:161:124b::173 in hosts_try_fastopen? no (option unset)
>>> connected
>>>   SMTP<< 220 mail.simplyspamfree.com ESMTP Exim 4.80 Fri, 23 Jun 2017 12:41:02 +0200
>>> 2a01:4f8:161:124b::173 in hosts_avoid_esmtp? no (option unset)
>>>   SMTP>> EHLO server1.test26.simplyspamfree.com
>>> cmd buf flush 40 bytes
>>>   SMTP<< 250-mail.simplyspamfree.com Hello server1.test26.simplyspamfree.com [2a01:4f8:161:124b::4026]
>>>          250-SIZE 52428800
>>>          250-8BITMIME
>>>          250-PIPELINING
>>>          250 HELP
>>> 2a01:4f8:161:124b::173 in hosts_require_tls? no (option unset)
>>> 2a01:4f8:161:124b::173 in hosts_avoid_pipelining? no (option unset)
>>> 2a01:4f8:161:124b::173 in hosts_require_auth? no (option unset)
>>>   SMTP>> MAIL FROM:<> SIZE=1023
>>>   SMTP>> RCPT TO:<server1.test26.simplyspamfree.com-1498214462-testing@???>
>>> cmd buf flush 113 bytes
>>>   SMTP<< 250 OK
>>>   SMTP<< 451 Temporary rejection instead of permanent
>>>   SMTP>> QUIT
>>> cmd buf flush 6 bytes
>>>   SMTP<< 221 mail.simplyspamfree.com closing connection
>>>   SMTP(close)>>
>>> 5.9.235.173 in hosts_require_dane? no (option unset)
>>> interface=NULL port=25

=====

With permanent rejection:

=====
>>> check !verify = recipient/callout=2m,random
>>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
>>> routing test@???
>>> R: spamexperts for test@???
>>> calling spamexperts router
>>> simplyspamfree.com in "simplyspamfree.com"? yes (matched "simplyspamfree.com")
>>> routed by spamexperts router
>>> Attempting full verification using callout
>>> callout cache: no domain record found for simplyspamfree.com
>>> callout cache: no address record found for test@???
>>> 2a01:4f8:161:124b::173 in hosts_require_dane? no (option unset)
>>> interface=NULL port=25
>>> Connecting to mail.simplyspamfree.com [2a01:4f8:161:124b::173]:25 ... 2a01:4f8:161:124b::173 in hosts_try_fastopen? no (option unset)
>>> connected
>>>   SMTP<< 220 mail.simplyspamfree.com ESMTP Exim 4.80 Fri, 23 Jun 2017 12:45:41 +0200
>>> 2a01:4f8:161:124b::173 in hosts_avoid_esmtp? no (option unset)
>>>   SMTP>> EHLO server1.test26.simplyspamfree.com
>>> cmd buf flush 40 bytes
>>>   SMTP<< 250-mail.simplyspamfree.com Hello server1.test26.simplyspamfree.com [2a01:4f8:161:124b::4026]
>>>          250-SIZE 52428800
>>>          250-8BITMIME
>>>          250-PIPELINING
>>>          250 HELP
>>> 2a01:4f8:161:124b::173 in hosts_require_tls? no (option unset)
>>> 2a01:4f8:161:124b::173 in hosts_avoid_pipelining? no (option unset)
>>> 2a01:4f8:161:124b::173 in hosts_require_auth? no (option unset)
>>>   SMTP>> MAIL FROM:<> SIZE=1023
>>>   SMTP>> RCPT TO:<server1.test26.simplyspamfree.com-1498214741-testing@???>
>>> cmd buf flush 107 bytes
>>>   SMTP<< 250 OK
>>>   SMTP<< 550 We do not accept message for server1.test26.simplyspamfree.com-1498214741-testing
>>>   SMTP>> RSET
>>> cmd buf flush 6 bytes
>>>   SMTP<< 250 Reset OK
>>>   SMTP>> MAIL FROM:<> SIZE=1023
>>>   SMTP>> RCPT TO:<test@???>
>>> cmd buf flush 59 bytes
>>>   SMTP<< 250 OK
>>>   SMTP<< 250 Accepted
>>>   SMTP>> QUIT
>>> cmd buf flush 6 bytes
>>>   SMTP<< 221 mail.simplyspamfree.com closing connection
>>>   SMTP(close)>>
>>> wrote callout cache domain record for simplyspamfree.com:
>>>   result=1 postmaster=0 random=2

=====

I've also ran the test on previous version:

====
$ exim -bV
Exim version 4.86 #3 built 26-Apr-2017 07:29:51
Copyright (c) University of Cambridge, 1995 - 2015
(c) The Exim Maintainers and contributors in ACKNOWLEDGMENTS file, 2007 - 2015
Berkeley DB: Berkeley DB 5.3.28: (September 9, 2013)
Support for: crypteq iconv() IPv6 Perl Expand_dlfunc OpenSSL Content_Scanning
DKIM DNSSEC PRDR OCSP Experimental_SPF Experimental_SRS Experimental_DANE
Experimental_DMARC Experimental_Event Experimental_SOCKS
Lookups (built-in): lsearch wildlsearch nwildlsearch iplsearch dbm dbmjz dbmnz
dnsdb mysql
Authenticators: cram_md5 plaintext
Routers: accept dnslookup ipliteral iplookup manualroute queryprogram redirect
Transports: appendfile/maildir autoreply pipe smtp
Fixed never_users: 0
Size of off_t: 8
Configuration file is /var/lib/exim4/incoming-config.autogenerated
====

====
>>> 2a01:4f8:161:124b::173 in hosts_avoid_esmtp? no (option unset)
>>>   SMTP>> EHLO server1.test38.simplyspamfree.com
>>>   SMTP<< 250-mail.simplyspamfree.com Hello server1.test38.simplyspamfree.com [2a01:4f8:10b:101::8038]
>>>          250-SIZE 52428800
>>>          250-8BITMIME
>>>          250-PIPELINING
>>>          250 HELP
>>> 2a01:4f8:161:124b::173 in hosts_require_tls? no (option unset)
>>> 2a01:4f8:161:124b::173 in hosts_require_auth? no (option unset)
>>>   SMTP>> MAIL FROM:<>
>>>   SMTP<< 250 OK
>>>   SMTP>> RCPT TO:<server1.test38.simplyspamfree.com-1498215015-testing@???>
>>>   SMTP<< 451 Temporary rejection instead of permanent
>>>   SMTP>> RSET
>>>   SMTP<< 250 Reset OK
>>>   SMTP>> MAIL FROM:<>
>>>   SMTP<< 250 OK
>>>   SMTP>> RCPT TO:<test@???>
>>>   SMTP<< 250 Accepted
>>>   SMTP>> QUIT

====

--
You are receiving this mail because:
You are on the CC list for the bug.