[exim] Re: Exim 4.92 to 4.94 upgrade breaking

Page principale
Supprimer ce message
Répondre à ce message
Auteur: Thomas Hochstein
Date:  
À: exim-users
Sujet: [exim] Re: Exim 4.92 to 4.94 upgrade breaking
Jeff Brown via Exim-users wrote:

> After upgrading this instance of exim I cannot send an email as an
> authorised user to an outside domain. I get e.g:
>
> 2024-06-27 15:26:07 H=([192.168.1.55]) [165.165.192.254]
> X=TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no
> F=<jeff@???> rejected RCPT <email@???>: relay not
> permitted


<jeff@???> tried to send mail to an external address, i.e.
relay mail, but didn't authenticated himself.

> I don't know how to debug this because, e.g. sudo exim -d -bt
> email@??? doesn't fail as it's sending from localhost which is
> fine.


If you do know how to send SMTP commands "by hand", you can do a simulated
SMTP session from 165.165.192.254 with full debugging output by using
| exim -d -bh 165.165.192.254


> Whereas in the log snip above my private IP is somehow regarded as
> the sending Host,


No, that's the HELO/EHLO your client send.

> via my provider's gateway IP;


Of course; you _do_ send mail from your provider's gateway IP.

> and is not permitting relay for authorised users.


That user is not authorised.

Do you accept all mail from your provider's gateway IP, 165.165.192.254,
i.e. is that IP address static and just used by yourself (or others who
may use that exim server as smarthost to send their mail)?

If that's the case, you can use
| /usr/sbin/exim_checkaccess 165.165.192.254 email@??? -f jeff@???

to test if that works.

Or do you authenticate by sending username and password via SMTP-Auth?

Nothing *should* have changed during the upgrade.

-thh

--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@???
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/