Bug#289458: callout verification and synchronization checks bite each other

[Andreas Barth]

Package: exim4
Severity: important
Version: 4.34-8/4.43-1

Hi,


the following problem occurs to me when I want to send mail to costa
(arch.debian.org): The callout verification fails on costa, so delaying
/ rejecting my mail.

The callout on costa has in acl_check_rcpt:
        deny condition = ${extract{calloutsender}{${lookup{$domain}lsearch{DOMAINPOLICY}}}{$value}{no}}                                         
                message = Sender callout failed: Sender adress can't be verified trough SMTP check.
                ! verify = sender/callout=20s

        deny condition = ${extract{calloutrecipient}{${lookup{$domain}lsearch{DOMAINPOLICY}}}{$value}{no}}
                message = Recipient callout failed: Recipient adress can't be verified trough SMTP check.
                ! verify = recipient/callout=20s

and in acl_check_data:
        # callouts and header checks
        require !condition = $header_X-WhitelistedRCPT-nohdrfromcallback:
                verify = header_sender/callout=20s
                verify = header_syntax


On my system, errors like this are logged:
2005-01-09 09:27:12 SMTP protocol violation: synchronization error (input sent without waiting for greeting): rejected connection from H=costa.debian.org [217.196.43.131]


Costa is running exim4-daemon-heavy version 4.34-8, my MX is running
exim4-daemon-heavy version 4.43-1.



Cheers,
Andi
-- 
   http://home.arcor.de/andreas-barth/
   PGP 1024/89FB5CE5  DC F1 85 6D A6 45 9C 0F  3B BE F1 D0 C5 D1 D9 0C