Bug#1003399: Correct configuration of Exim

[Marc Haber]

On Mon, Jan 10, 2022 at 12:00:09PM +0100, karsten wrote:
> Am 09.01.22 um 19:05 schrieb Marc Haber:
> > > Yes - the other possibility is to prevent upgrades of this package.
> > 
> > That is a decidedly bad idea. Exim is a huge suid binary (a design one
> > out never choose today, the concept was valid 25 years ago) and you need
> > security updates for that.
> 
> That's of course true.
> Hopefully the version of Exim will not change until the configuration could be adapted.
> Security updates will not need a new version of Exim within this stable distribution?

Security updates are done, if possible, by backporting the fix to the
version currently in stable. The goal is to provide minimally invasive
security updates that don't break existing systems, concentrating
potentially breaking changes to the time when a new stable distribution
is released.

> > Spamassassin in YOUR configuration doesn't work any more. My systems
> > using spamassassin via exiscan-ACL have not even ridden a bump during
> > the upgrade.
> 
> Maybe you are so kind to provide an example how you have included Spamassassin in Exim,
> so that it will run with the packages of Debian 11?

Personally I am running spamassassin via the exiscan extension, using
the spamd_address option in main configuration and the spam option in
the data ACL. To get a report into the message you need to use, for
example, a system filter. See the exim specification chapter 45.2 for
more information.

> Indeed i am thinking that maybe Postfix is a better choice as MTA, because Exim seems to be
> more and more complicated to configure?

That depends on what you intend to do. postfix is like menu of a
restaurant: You can choose from the dishes if you like them. Exim is the
fully equipped kitchen: You can do anything you like but you need some
knowledge to do that.

> I would define an virtual mail system as email server for different domains,
> that can ideally be managed with entries in an database like Mariadb.

That is not enough defition, I am afraid. I guess defining this is
enough content for a Master's thesis.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany    |  lose things."    Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature |  How to make an American Quilt | Fax: *49 6224 1600421