Re: [exim] no DMARC?

Top Page
Delete this message
Reply to this message
Author: wido.exim
Date:  
To: exim-users
Old-Topics: Re: [exim] no DMARC?
Subject: Re: [exim] no DMARC?
Hi,

On 27-10-18 12:33, Heiko Schlittermann via Exim-users wrote:
>> $ exim --version
>> Exim version 4.91 #2 built 30-Jul-2018 18:35:06
>                              ~~~~~~~~~~~~~~~~~~~~
> I'd expect a more recent build date, or is did you build end of July?


No, it was not. I have very limited experience in building my own
packages, so I do not know what sets the build date. Today I gave it a
another go.

Today I pulled the latest source from the Debian repo, which is
exim4-4.92~RC4. I used the Makefile as posted at the bottom of this
mail, part of it is:
SUPPORT_DMARC=yes
DMARC_TLD_FILE= /etc/exim4/opendmarc.tlds
CFLAGS += -I/usr/include
LDFLAGS += -lopendmarc

After installing the package I see that the new build is in use, but
still no DMARC support:

$ exim4 --version
Exim version 4.92-RC4 #3 built 05-Jan-2019 14:35:38
Support for: crypteq iconv() IPv6 PAM Perl Expand_dlfunc GnuTLS
move_frozen_messages Content_Scanning DANE DKIM DNSSEC Event OCSP PRDR
PROXY SOCKS TCP_Fast_Open

After adding some DMARC configuration as pointed out here:
https://github.com/Exim/exim/blob/master/doc/doc-txt/experimental-spec.txt

Exim does not want to start because of the lacking DMARC support:
$ journalctl -xe | grep dmarc
Jan 07 23:58:36 neptunus exim4[20124]: main option "dmarc_tld_file"
unknown

Why doesn't my build have DMARC support?


Kind regard,
Wido


Makefile:
$ grep -ve "^#" -ve "^$" Local/Makefile
BIN_DIRECTORY=/usr/sbin
CONFIGURE_FILE=/etc/exim4/exim4.conf
EXIM_USER=ref:Debian-exim
SPOOL_DIRECTORY=/var/spool/exim4
ROUTER_ACCEPT=yes
ROUTER_DNSLOOKUP=yes
ROUTER_IPLITERAL=yes
ROUTER_MANUALROUTE=yes
ROUTER_QUERYPROGRAM=yes
ROUTER_REDIRECT=yes
ROUTER_IPLOOKUP=yes
TRANSPORT_APPENDFILE=yes
TRANSPORT_AUTOREPLY=yes
TRANSPORT_PIPE=yes
TRANSPORT_SMTP=yes
SUPPORT_MAILDIR=yes
SUPPORT_MAILSTORE=yes
SUPPORT_MBX=yes
LOOKUP_DBM=yes
LOOKUP_LSEARCH=yes
LOOKUP_DNSDB=yes
LOOKUP_CDB=yes
LOOKUP_DSEARCH=yes
LOOKUP_LDAP=yes
LOOKUP_MYSQL=yes
LOOKUP_NIS=yes
LOOKUP_NISPLUS=yes
LOOKUP_PASSWD=yes
LOOKUP_PGSQL=yes
LOOKUP_SQLITE=yes
LOOKUP_SQLITE_PC=sqlite3
LDAP_LIB_TYPE=OPENLDAP2
PCRE_CONFIG=yes
SUPPORT_DANE=yes
LOOKUP_INCLUDE=-I /usr/include/mysql -I /usr/include/postgresql -I
/usr/local/ldap/include -I /usr/local/mysql/include -I
/usr/local/pgsql/include
LOOKUP_LIBS=-L/usr/local/lib -lldap -llber -lmysqlclient -lpq -lsqlite3
WITH_CONTENT_SCAN=yes
DISABLE_MAL_AVE=yes
DISABLE_MAL_KAV=yes
DISABLE_MAL_MKS=yes
EXPERIMENTAL_DCC=yes
SUPPORT_DMARC=yes
DMARC_TLD_FILE= /etc/exim4/opendmarc.tlds
CFLAGS += -I/usr/include
LDFLAGS += -lopendmarc
EXPERIMENTAL_ARC=yes
EXPERIMENTAL_DSN_INFO=yes
EXPERIMENTAL_LMDB=yes
CFLAGS += -I/usr/local/include
LDFLAGS += -llmdb
EXPERIMENTAL_QUEUEFILE=yes
FIXED_NEVER_USERS=root
CONFIGURE_OWNER=ref:Debian-exim
CONFIGURE_GROUP=ref:Debian-exim
AUTH_CRAM_MD5=yes
AUTH_CYRUS_SASL=yes
AUTH_DOVECOT=yes
AUTH_PLAINTEXT=yes
AUTH_SPA=yes
AUTH_TLS=yes
AUTH_LIBS=-lsasl2
HEADERS_CHARSET="ISO-8859-1"
HAVE_ICONV=yes
DEFAULT_CRYPT=crypt16
SUPPORT_TLS=yes
USE_GNUTLS=yes
TLS_LIBS=-lgnutls -ltasn1 -lgcrypt -lgnutls-dane
TLS_LIBS += -lgnutls-dane
TLS_INCLUDE=-I /opt/gnu/include -I /usr/lib/x86_64-linux-gnu/
DLOPEN_LOCAL_SCAN=yes
LDFLAGS += -rdynamic
CFLAGS += -fvisibility=hidden
LOG_FILE_PATH=/var/log/exim4/%slog
SYSLOG_LOG_PID=yes
EXICYCLOG_MAX=10
COMPRESS_COMMAND=/usr/bin/gzip
COMPRESS_SUFFIX=gz
ZCAT_COMMAND=/usr/bin/zcat
EXIM_PERL=perl.o
SUPPORT_PAM=yes
EXTRALIBS_EXIM=-lpam
SUPPORT_SOCKS=yes
SUPPORT_PROXY=yes
SUPPORT_SPF=yes
CFLAGS += -I/usr/include
LDFLAGS += -lspf2
SYSTEM_ALIASES_FILE=/etc/aliases
HAVE_IPV6=yes
EXIM_TMPDIR="/tmp"
SUPPORT_MOVE_FROZEN_MESSAGES=yes