headers
Tim Wilde | 2 Dec 2004 23:26
Picon

DNS Loop In Callout

I have run across a very strange DNS loop in a recipient callout 
verification.  I've looked through archives and done as much debugging as 
I could without much luck.  Basically, what is happening is, I have a 
series of transports that are used to send messages to specific hosts on 
specific ports.  An example of one of these would be:

port_redir_smtp2525:
         driver = smtp
         hosts = $acl_m6
         port = 2525
         headers_remove = X-Scanner
         interface = 63.208.196.165
         connect_timeout = 2m
         command_timeout = 2m
         data_timeout = 2m
         final_timeout = 5m

Where $acl_m6 contains a hostname.  In my test case, that hostname is 
"test.krellis.org".  I have callout verification turned on in my recipient 
ACL thusly:

         require message = User unknown
                 verify = recipient/callout=5s,defer_ok/no_details

When test.krellis.org resolves to a single IP address, this works fine. 
However, when test.krellis.org resolves to multiple IP addresses, I 
encounter a never-ending DNS query loop.  A -d+all session shows:

16:55:34 54758 ---0 Get 0x81ce888    32          dns.c  810
16:55:34 54758 ---0 Get 0x81ce8a8    32          dns.c  810
(Continue reading)

Permalink | Reply | 3 comments |
headers
Tony Finch | 3 Dec 2004 11:18
Picon
Favicon

Re: DNS Loop In Callout

On Thu, 2 Dec 2004, Tim Wilde wrote:

> I have run across a very strange DNS loop in a recipient callout verification.

This is fixed by the following change in version 4.44

30. Exim went into a mad DNS loop when attempting to do a callout where the
    host was specified on an smtp transport, and looking it up yielded more
    than one IP address.

Tony.
-- 
f.a.n.finch  <dot <at> dotat.at>  http://dotat.at/
MALIN HEBRIDES: NORTHEAST 4 OR 5 INCREASING 6. RAIN LATER. GOOD BECOMING
MODERATE.

--

--
Permalink | Reply | 2 comments |
headers
Tim Wilde | 4 Dec 2004 05:37
Picon

Re: DNS Loop In Callout

On Fri, 3 Dec 2004, Tony Finch wrote:

> On Thu, 2 Dec 2004, Tim Wilde wrote:
>
>> I have run across a very strange DNS loop in a recipient callout 
>> verification.
>
> This is fixed by the following change in version 4.44
>
> 30. Exim went into a mad DNS loop when attempting to do a callout where the
>    host was specified on an smtp transport, and looking it up yielded more
>    than one IP address.

Any chance of a patch against 4.43 that addresses this (or a ballpark idea 
when to expect 4.44)?  We have an application we really need to have 
callouts enabled for in this situation.  Thanks for your help.

Tim Wilde

-- 
Tim Wilde
twilde <at> dyndns.org
Systems Administrator
Dynamic Network Services, Inc.
http://www.dyndns.org/

--

--
Permalink | Reply | 1 comment |
headers
Philip Hazel | 6 Dec 2004 10:12
Picon
Picon

Re: DNS Loop In Callout

On Fri, 3 Dec 2004, Tim Wilde wrote:

> Any chance of a patch against 4.43 that addresses this (or a ballpark idea
> when to expect 4.44)?  We have an application we really need to have callouts
> enabled for in this situation.  Thanks for your help.

The fix is in the snapshot in

ftp://ftp.csx.cam.ac.uk/pub/software/email/exim/Testing/exim-snapshot.tar.gz
ftp://ftp.csx.cam.ac.uk/pub/software/email/exim/Testing/exim-snapshot.tar.gz.sig

The patch is below.

Regards,
Philip

--

-- 
Philip Hazel            University of Cambridge Computing Service,
ph10 <at> cus.cam.ac.uk      Cambridge, England. Phone: +44 1223 334714.

*** exim-4.43/src/verify.c  Tue Oct  5 09:32:08 2004
--- verify.c	Fri Nov 12 16:23:13 2004
***************
*** 1015,1028 ****
            else
              {
              uschar *canonical_name;
!             host_item *host;
              host_build_hostlist(&host_list, s, tf.hosts_randomize);
(Continue reading)

Permalink | Reply | 0 comments |
headers
David Woodhouse | 8 Dec 2004 15:37
Favicon

Re: problems in eximstats.8

On Tue, 2004-11-23 at 09:40 +0000, Nigel Metheringham wrote:
> I understand the exiscan extension includes SPF.  The Fedora RPMs are
> built with exiscan, although I don't know if SPF is configured in (or
> even if it needs build time configuring in). 

It would need to be, and it isn't.

>  As I am another SPF sceptic I haven't followed this up.

Although I'm not actually the maintainer of that package, and I'll be
taking a large blunt implement to anyone else who tries to add SPF
support to Fedora's Exim RPM. I think it'll remain SPF-free for the time
being.

Eric, I'd recommend that you investigate other solutions which aren't so
broken.

-- 
dwmw2

--

--
Permalink | Reply | 0 comments |
headers
Marc Haber | 28 Dec 2004 12:19
Picon

Makefile for GNU/Hurd, GNU/k*BSD

Hi,

the Debian porters for GNU/Hurd and GNU/k*BSD have delivered Makefiles
for these two platforms which could probably be incorporated into the
exim distribution. A patch creating those two files is available on
the web:

http://bugs.debian.org/cgi-bin/bugreport.cgi/exim4_4.34-4.diff?bug=262611&msg=3&att=1

Can this one be applied upstream?

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835

--

--
Permalink | Reply | 6 comments |
headers
Philip Hazel | 29 Dec 2004 12:45
Picon
Picon

Re: Makefile for GNU/Hurd, GNU/k*BSD

On Tue, 28 Dec 2004, Marc Haber wrote:

> http://bugs.debian.org/cgi-bin/bugreport.cgi/exim4_4.34-4.diff?bug=262611&msg=3&att=1
> 
> Can this one be applied upstream?

I think I can probably get new confs into the 4.50 release. However,
that URL mentions 4.34 and Exim is now at 4.43. It would be easier for 
me if you could just send me new configuration files rather than 
patches.

Regards,
Philip

-- 
Philip Hazel            University of Cambridge Computing Service,
ph10 <at> cus.cam.ac.uk      Cambridge, England. Phone: +44 1223 334714.

--

--
Permalink | Reply | 5 comments |
headers
Marc Haber | 29 Dec 2004 15:18
Picon

Re: Makefile for GNU/Hurd, GNU/k*BSD

On Wed, Dec 29, 2004 at 11:45:34AM +0000, Philip Hazel wrote:
> However,
> that URL mentions 4.34 and Exim is now at 4.43.

Debian users report bugs against 4.34 since that's what we currently
have in testind and unstable. 4.43 is in experimental, and the patch
in the BTS applies to 4.43 as well.

That patches don't do much besides creating new configuration files
from scratch.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835

--

--
Permalink | Reply | 4 comments |
headers
Philip Hazel | 29 Dec 2004 16:50
Picon
Picon

Re: Makefile for GNU/Hurd, GNU/k*BSD

On Wed, 29 Dec 2004, Marc Haber wrote:

> That patches don't do much besides creating new configuration files
> from scratch.

Not true. It patches a file called debian/patches/37_kbsd-gnu.dpatch 
which is not part of the base Exim. It also patches the existing 
OS/Makefile-GNU configuration as well as adding some new files.

It also patches OS/os.h-Linux which is the normal Linux configuration.
I don't think I want to change that in the base distribution at this 
stage of the release cycle.

Regards,
Philip

-- 
Philip Hazel            University of Cambridge Computing Service,
ph10 <at> cus.cam.ac.uk      Cambridge, England. Phone: +44 1223 334714.

--

--
Permalink | Reply | 3 comments |

Gmane