[exim] Re: Untainting data and Vacation configuration

Page principale
Supprimer ce message
Répondre à ce message
Auteur: Glenn Gregorec
Date:  
À: exim-users
Sujet: [exim] Re: Untainting data and Vacation configuration
Thank You for sharing your insight Jeremy! :-)

My intention was not to make assisting my issue harder.  I was actually
trying to make it easier.  I hope this helps.

I have tried several other lookups in the hopes of learning where I am
making a mistake.  These did not work...

=== NOT WORKING ===
#    local_parts                 =
${lookup{${lc:${local_part}}}lsearch,{/usr/local/etc/dovecot/users}}
#    local_parts                 =
${lookup{${lc:${local_part}@${domain}}}lsearch,ret=key{/usr/local/etc/dovecot/users}}
    local_parts                 =
${lookup{${lc:$local_part@$domain}}lsearch,ret=key{/usr/local/etc/dovecot/users}}
#    local_parts                 =
passwd;${lookup{${lc:${local_part}@${domain}}}} :
lsearch;/usr/local/etc/dovecot/users
#    local_parts                 = passwd;$local_part@$domain_data :
lsearch;/usr/local/etc/dovecot/users

===

Here is the data from exim -bt -d emailUser@???

===
--------> vacationUser router <--------
local_part=emailUser domain=emailDomain.com
checking domains
 search_open: lsearch "/usr/local/etc/exim/vacation-domains"
   cached open
 search_find: file="/usr/local/etc/exim/vacation-domains"
   key="emailDomain.com" partial=-1 affix=NULL starflags=0 opts="ret=key"
 LRU list:
   7/usr/local/etc/exim/vacation-domains
   7/usr/local/etc/exim/vusers.emailDomain.com
   7/usr/local/etc/dovecot/users
   End
 internal_search_find: file="/usr/local/etc/exim/vacation-domains"
   type=lsearch key="emailDomain.com" opts=NULL
 cached data used for lookup of emailDomain.com
   in /usr/local/etc/exim/vacation-domains
 lookup yielded:
emailDomain.com in "emailDomain.com"?
 list element: emailDomain.com
 emailDomain.com in "emailDomain.com"? yes (matched "emailDomain.com")
checking local_parts
 search_open: lsearch "/usr/local/etc/dovecot/users"
   cached open
 search_find: file="/usr/local/etc/dovecot/users"
   key="emailUser@???" partial=-1 affix=NULL starflags=0
opts="ret=key"
 LRU list:
   7/usr/local/etc/dovecot/users
   7/usr/local/etc/exim/vacation-domains
   7/usr/local/etc/exim/vusers.emailDomain.com
   End
 internal_search_find: file="/usr/local/etc/dovecot/users"
   type=lsearch key="emailUser@???" opts=NULL
 cached data used for lookup of emailUser@???
   in /usr/local/etc/dovecot/users
 lookup yielded:
{BLF-CRYPT}$2a$05$xqWtKL1l.e3B98ISN0xbyOSROOIcMgAn6hIBZ7J9tHp/Wu28jvJfy::::::
emailUser in "emailUser@???"?
 list element: emailUser@???
emailUser in "emailUser@???"? no (end of list)
vacationUser router skipped: local_parts mismatch


On 2024-03-21 5:09 AM, Jeremy Harris via Exim-users wrote:
> On 21/03/2024 07:23, Glenn Gregorec via Exim-users wrote:
>> vacationUser:
>>    driver = redirect
>>    domains                     =
>> ${lookup{${lc:${domain}}}lsearch,ret=key{/usr/local/etc/exim/vacation-domains}}
>>    local_parts                 =
>> ${lookup{${lc:${local_part}@${domain}}}lsearch,ret=key{/usr/local/etc/dovecot/users}}
>>    file                        =
>> /var/vmail/$domain_data/$local_part_data@$domain_data/.vacation.msg
>>    debug_print                 = ROUTER - $router_name for
>> $local_part@$domain - Local_part_data is $local_part_data -
>> Domain_data is $domain_data
>
> Here's your lookup for the "local_parts" option:
>>   internal_search_find: file="/usr/local/etc/dovecot/users"
>>     type=lsearch key="user@???" opts=NULL
>>   cached data used for lookup of user@???
>>     in /usr/local/etc/dovecot/users
>>   lookup yielded: ENCRYPTED-PASSWORD::::::
>
> The result was "ENCRYPTED-PASSWORD::::::".
> a) this does not look anything like the key used for lookup
> b) the "opts=NULL" is of concern, suggesting that the actual lookup
>    is not the one you show as being the configuration
>
>> user in "user@???"?
>>   list element: user@???
>> user in "user@???"? no (end of list)
>> vacationUser router skipped: local_parts mismatch
>
> You have obfuscated that, so we cannot decode in detail and be certain.
> Thanks for making helping you harder.
> It is extremely likely that the local_part of the envelope recipient
> for the
> -bt test does not match the list you are giving to the "local_parts"
> option
> of that router.
>



--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@???
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/