Re: [exim] Weird error showing up in mainlog

> Solution needed as of 2 days ago.

Have you considered paying for some exim consultancy work?



On 24 November 2017 at 17:35, The Doctor <doctor@???> wrote:

> On Fri, Nov 24, 2017 at 07:03:03AM -0700, The Doctor wrote:
> > On Fri, Nov 24, 2017 at 10:18:29AM +0000, Jeremy Harris wrote:
> > > On 24/11/17 03:30, The Doctor wrote:
> > > > 2017-11-23 13:00:00 1eHxbt-0008Sf-2W ** {legit e-mail address}
> R=dnslookup T=remote_smtp H=doctor.nl2k.ab.ca [204.209.81.1]
> X=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=no: SMTP error from remote
> mail server after pipelined MAIL FROM:<root> SIZE=13880523: 501 <root>:
> sender address must contain a domain
> > > >
> > > > What is happening?
> > >
> > > A remote system that you are trying to send a mail to, is rejecting
> that
> > > message. The tail end of that log line, starting "501", is what they
> > > said.
> > >
> > > My interpretation of what they said is that they don't like one of
> > > - the envelope from
> > > - the header From: (or possibly Sender:)
> > > but you'd need to verify their policies by asking them.
> > > --
> > > Jeremy
> > >
> >
> >
> > Al right subsequent discoveries of followups of the symptoms were
> ignored.
> >
> > Let me describe step by step what is happening.
> >
> > 1) In order to bypass the annoying on behalf of header placed by
> > exim
> >
> > no_local_from_check
> > untrusted_set_sender = *
> >
> > 2)
> >
> > REmote non-LAN users can use either PLAIN or LOGIN without on the behalf
> of
> > and send through and is logged accordingly
> >
> > UNLESS
> >
> > 3)
> >
> > you show up as info@??? then instead of info@???
> > something in exim says you are "root" without any domain and
> >
> > the info account trying to pass an e-mail gets
> >
> > This message was created automatically by mail delivery software.
> >
> > A message that you sent could not be delivered to one or more of its
> > recipients. This is a permanent error. The following address(es) failed:
> >
> > i)
> > intended recipient @ whereever
> > host doctor.nl2k.ab.ca [204.209.81.1]
> > SMTP error from remote mail server after pipelined MAIL FROM:<root>
> SIZE=26833:
> > 501 <root>: sender address must contain a domain
> >
> > ii)
> >
> >
> > smiro@???
> > host ma1-aaemail-dr-lapp03.apple.com [17.171.2.72]
> > SMTP error from remote mail server after pipelined MAIL FROM:<root>:
> > 553 5.1.7 <root>... Domain name required for sender address root
> >
> > iii)
> >
> >
> > info@???
> > host doctor.nl2k.ab.ca [204.209.81.1]
> > SMTP error from remote mail server after pipelined MAIL FROM:<root>
> SIZE=2890232:
> > 501 <root>: sender address must contain a domain
> >
> > and the case of iii) was a cc to self.
> >
> >
> > ARe you now getting this picture of a showstopper in virtual e-mail of
> thsoe
> > using info@??? ?
> >
>
> <Snip>
>
> Some more relevant stuff from our logs
>
> 2017-11-24 09:07:36 1eIGVs-000Ntb-OB <= info@???
> H=d142-59-12
> 3-92.abhsia.telus.net (ImpactLaptop) [142.59.123.92] P=esmtpsa
> X=TLSv1.2:ECDHE-R
> SA-AES256-GCM-SHA384:256 CV=no A=LOGIN:smosinfo S=149486
> id=004201d3653e$5829d2b
> 0$087d7810$@???
> 2017-11-24 09:07:43 Start queue run: pid=91860
> 2017-11-24 09:07:46 1eIGVs-000Ntb-OB [23.103.157.10] SSL verify error:
> depth=1 e
> rror=unable to get local issuer certificate cert=/C=US/ST=Washington/L=
> Redmond/O
> =Microsoft Corporation/OU=Microsoft IT/CN=Microsoft IT SSL SHA2
> 2017-11-24 09:07:46 1eIGVs-000Ntb-OB Received TLS cert status response,
> itself u
> nverifiable
> 2017-11-24 09:07:52 1eIGVs-000Ntb-OB [173.254.28.40] SSL verify error:
> depth=2 e
> rror=unable to get local issuer certificate cert=/C=GB/ST=Greater
> Manchester/L=S
> alford/O=COMODO CA Limited/CN=COMODO RSA Certification Authority
> 2017-11-24 09:07:52 1eIGVs-000Ntb-OB [173.254.28.40] SSL verify error:
> certificate name mismatch: DN="/OU=Domain Control Validated/OU=Hosted by
> Just Host/OU=PositiveSSL Wildcard/CN=*.justhost.com" H="
> impactofficeservices.ca"
> 2017-11-24 09:07:52 1eIGVs-000Ntb-OB ** dmiller@???
> <Dmiller@???> R=dnslookup T=remote_smtp H=
> impactofficeservices.ca [173.254.28.40] X=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256
> CV=no: SMTP error from remote mail server after pipelined MAIL FROM:<root>
> SIZE=152662: 501 <root>: sender address must contain a domain
> 2017-11-24 09:07:56 1eIGVs-000Ntb-OB ** kevin.lindstrom@???
> R=dnslookup T=remote_smtp H=solutionsbi-ca.mail.protection.outlook.com
> [23.103.157.10] X=TLSv1.2:ECDHE-RSA-AES256-SHA384:256 CV=no: SMTP error
> from remote mail server after pipelined sending data block: 501 5.1.7
> Invalid address [QB1CAN01FT010.eop-CAN01.prod.protection.outlook.com]
> 2017-11-24 09:07:56 1eIGWC-000Nth-8I <= <> R=1eIGVs-000Ntb-OB U=exim
> P=local S=3083
> 2017-11-24 09:07:56 1eIGVs-000Ntb-OB Completed
>
> Note the sender was an info@ ...
>
>
> 2017-11-24 08:21:06 1eIFms-000NV7-4e <= info@??? H=
> s0106c82a14027763.ed.shawcable.net ([192.168.1.122]) [70.74.151.156]
> P=esmtpsa X=TLSv1:ECDHE-RSA-AES256-SHA:256 CV=no A=PLAIN:integration
> S=3447 id=1D3C06A3-4C4D-4179-94CD-BB4925FF94B3@???
> 2017-11-24 08:21:40 Start queue run: pid=90342
> 2017-11-24 08:21:40 1eIFmU-000NV3-7g [204.209.81.1] SSL verify error:
> depth=3 error=self signed certificate in certificate chain cert=/C=US/O=The
> Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority
> 2017-11-24 08:21:40 1eIFmU-000NV3-7g [204.209.81.1] SSL verify error:
> certificate name mismatch: DN="/OU=Domain Control Validated/CN=mail.nk.ca"
> H="doctor.nl2k.ab.ca"
> 2017-11-24 08:21:42 1eIFmU-000NV3-7g => root@??? R=dnslookup
> T=remote_smtp H=doctor.nl2k.ab.ca [204.209.81.1]
> X=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=no C="250 OK
> id=1eIFnR-000ANH-66"
> 2017-11-24 08:21:42 1eIFmU-000NV3-7g Completed
> 2017-11-24 08:21:42 1eIB4O-000BMZ-6h Spool file is locked (another process
> is handling this message)
> 2017-11-24 08:21:42 1eIFms-000NV7-4e H=gmail-smtp-in.l.google.com
> [2607:f8b0:400e:c04::1a] No route to host
> 2017-11-24 08:21:42 1eIFms-000NV7-4e [74.125.28.26] SSL verify error:
> depth=2 error=unable to get local issuer certificate cert=/C=US/O=GeoTrust
> Inc./CN=GeoTrust Global CA
> 2017-11-24 08:21:42 1eIB4O-000BMZ-6h == root@??? R=dnslookup
> T=remote_smtp defer (-46) H=doctor.nl2k.ab.ca [204.209.81.1]: SMTP error
> from remote mail server after end of data: 451 Temporary local problem -
> please try later
> 2017-11-24 08:21:42 1eIB4O-000BMZ-6h ** root@???: retry timeout exceeded
> 2017-11-24 08:21:42 1eIFnS-000NVF-Vw <= <> R=1eIB4O-000BMZ-6h U=exim
> P=local S=1927
> 2017-11-24 08:21:42 1eIB4O-000BMZ-6h Completed
> 2017-11-24 08:21:43 1eIFms-000NV7-4e Spool file is locked (another process
> is handling this message)
> 2017-11-24 08:21:43 End queue run: pid=90305
> 2017-11-24 08:21:43 1eIFms-000NV7-4e ** tracypilates@???
> R=dnslookup T=remote_smtp H=gmail-smtp-in.l.google.com [74.125.28.26]
> X=TLSv1.2:ECDHE-RSA-CHACHA20-POLY1305:256 CV=no: SMTP error from remote
> mail server after pipelined end of data: 553 5.1.2 The sender address
> <root> is not a valid RFC-5321 address. p17si18545031pgq.130 - gsmtp
> 2017-11-24 08:21:43 1eIFnT-000NVI-1i <= <> R=1eIFms-000NV7-4e U=exim
> P=local S=5022
> 2017-11-24 08:21:43 1eIFms-000NV7-4e Completed
> 2017-11-24 08:21:43 1eIFnT-000NVI-1i [204.209.81.1] SSL verify error:
> depth=3 error=self signed certificate in certificate chain cert=/C=US/O=The
> Go Daddy Group, Inc./OU=Go Daddy Class 2 Certification Authority
> 2017-11-24 08:21:43 1eIFnT-000NVI-1i [204.209.81.1] SSL verify error:
> certificate name mismatch: DN="/OU=Domain Control Validated/CN=mail.nk.ca"
> H="doctor.nl2k.ab.ca"
> 2017-11-24 08:21:55 1eIFnT-000NVI-1i => info@???
> R=dnslookup T=remote_smtp H=doctor.nl2k.ab.ca [204.209.81.1]
> X=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=no C="250 OK
> id=1eIFnT-000ANW-Aj"
> 2017-11-24 08:21:55 1eIFnT-000NVI-1i Completed
> 2017-11-24 08:21:55 End queue run: pid=90342
>
>
> This is backed up by http://ns2.nk.ca/eximstats.html
>
> Solution needed as of 2 days ago.
>
> --
> Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@
> nl2k.ab.ca
> Yahweh, Queen & country!Never Satan President Republic!Beware AntiChrist
> rising!
> https://www.empire.kred/ROOTNK?t=94a1f39b Look at Psalms 14 and 53 on
> Atheism
> Happy Christmas 2017 and Merry New Year 2018
>
> --
> ## List details at https://lists.exim.org/mailman/listinfo/exim-users
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/
>