Re: [exim] HELO problem

Top Page
Delete this message
Reply to this message
Author: Heiko Schlittermann
Date:  
To: exim-users
Subject: Re: [exim] HELO problem
Sławomir Dworaczek via Exim-users <exim-users@???> (Mi 21 Aug 2019 18:35:29 CEST):
> Helo
> After reinstall server my ACL
>
> drop   message       = "No you are Me or OURS (HELO was $sender_helo_name and equal my local domains or my domains relay)"
>        condition     = ${if match_domain{$sender_helo_name}{+local_domains:+relay_to_domains}{yes}{no}}
>     delay         = 45s

>
> log error after send mail from localhost from phpmail or vacation binary
>
> 2019-08-21 04:51:19 [28082] H=(domain.pl) [127.0.0.1] X=TLSv1:DHE-RSA-AES256-SHA:256 CV=no F=<user091@???> rejected RCPT <m.$ "No you are Me or OURS (HELO was domain.pl and equal my local domains or my domains relay)"
>
> 2019-08-21 04:51:19 [28070] 1i0Ghm-0007Ie-4U => |/usr/bin/vacation -t0 -a user@??? user091 (user091@???) <m.now$
> 2019-08-21 04:51:19 [28070] 1i0Ghm-0007Ie-4U Completed


If this is Linux¹, the last two lines are create by process id 27070 which
started short before 28082.

So, I'd say the rejection was caused by the vacation script.

BTW: The invocation to the vacation script look suspicious. '<m.now$'.
     What's this? Do you want command execution via the shell?


     The default is *no shell*, so, the '<m.now$' is interpretet as a normal
     token on the command line. (Though I'm missing the string 'now' from the
     reject log line. ***You should not redact anything!***


But, the bottom line is: vacation sends a message, to you. Using your
local Exim. For some reason your local Exim opens a SMTP connection to
itself and gets rejected for the above reason.

(I suppose, vacation does not use SMTP, it just calls sendmail and pipes
its message into it.)

¹) Other systems may use non-sequential PIDs.

    Best regards from Dresden/Germany
    Viele Grüße aus Dresden
    Heiko Schlittermann
--
 SCHLITTERMANN.de ---------------------------- internet & unix support -
 Heiko Schlittermann, Dipl.-Ing. (TU) - {fon,fax}: +49.351.802998{1,3} -
 gnupg encrypted messages are welcome --------------- key ID: F69376CE -
 ! key id 7CBF764A and 972EAC9F are revoked since 2015-01 ------------ -