Bug#1003399: After distribution upgrade many mails are "tainted" and not delivered

[Marc Haber]

On Sun, Jan 09, 2022 at 06:14:36PM +0100, karsten wrote:
> Am 09.01.22 um 18:07 schrieb Marc Haber:
> > Most information one finds on a search engine is outdated and maybe even
> > wrong. And the current information regading brand new software is often
> > not indexed yet.
> > 
> > >    .ifdef _OPT_MAIN_ALLOW_INSECURE_TAINTED_DATA
> > >     allow_insecure_tainted_data = yes
> > >    .endif
> > 
> > This will only work as a temporary measure and will be removed in the
> > future. You should work on getting your configuration to work with the
> > tightened security features newer exims come.
> 
> Yes - the other possibility is to prevent upgrades of this package.

That is a decidedly bad idea. Exim is a huge suid binary (a design one
out never choose today, the concept was valid 25 years ago) and you need
security updates for that.

> But there are additional other problems like spamassasin does not work any more,
> so the configuration must be updated in many kinds.

Spamassassin in YOUR configuration doesn't work any more. My systems
using spamassassin via exiscan-ACL have not even ridden a bump during
the upgrade.

> > If that are issues with Debian's default configuration please file bugs
> > so that we can fix them, if it's issues with your local configuration
> > you're on your own with that.
> 
> Is there a default configuration for a private virtual mail server on dynamic IP's ?

Not that I am aware of. But if you roll yourself, you need to be able to
take care of it. I think there might be solutions that might be better
suited to your needs than Exim.

btw, this triggers me, as "virtual mail" does not have a definition, it
leaves like ten way to interpret the task at hand.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany    |  lose things."    Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature |  How to make an American Quilt | Fax: *49 6224 1600421