[Pkg-exim4-users] Re: Exim4 delivery question (More info)

[Marc Haber]

On Tue, Jun 07, 2005 at 06:15:36PM -0400, Wayne Topa wrote:
> >>>>>>>>>>>>>>>> Remote deliveries >>>>>>>>>>>>>>>>
> --------> linuxone@intergate.com <--------
>   SMTP<< 250-corpweb.trip.net Hello host-69-95-18-11.roc.choiceone.net [69.95.18.11], pleased to meet you
>          250-ENHANCEDSTATUSCODES
>          250-PIPELINING
>          250-8BITMIME
>          250-SIZE 40000000
>          250-DSN
>          250-ETRN
>          250-AUTH LOGIN PLAIN DIGEST-MD5 CRAM-MD5
>          250-DELIVERBY
>          250 HELP

> lookup yielded: Login.Passwd

If that's your real password, you'd better change it.

>   SMTP>> AUTH CRAM-MD5
> waiting for data on socket
> read response data: size=58
>   SMTP<< 334 PDM1Mjg2MDczNDMuMTA3NzQwOThAY29ycHdlYi50cmlwLm5ldD4=
>   SMTP>> ************************************************************
> waiting for data on socket
> read response data: size=33
>   SMTP<< 535 5.7.0 authentication failed
> cram_md5 authenticator yielded 2

cram-md5 authentication fails.

>   SMTP>> MAIL FROM:<boss@localhost> SIZE=1298
>   SMTP>> RCPT TO:<linuxone@intergate.com>
>   SMTP>> DATA
> waiting for data on socket
> read response data: size=143
>   SMTP<< 250 2.1.0 <boss@localhost>... Sender ok
>   SMTP<< 250 2.1.5 <linuxone@intergate.com>... Recipient ok
>   SMTP<< 354 Enter mail, end with "." on a line by itself
>   SMTP>> writing message and terminating "."

but the server accepts the mail nevertheless. Is it your SMTP
smarthost _and_ MX for intergate.com?

> It still looks like the ISP's smtp server is screwed up, to me.

Possibly. All I can see is that CRAM-MD5 authentication fails.

> Just updated and now running exim4 4.50-8.  Noticed that TLS is
> enabled by default and, as my smtp server doesn't use it, I have to
> disable all the tls_* entries or I can't send mail.  Commenting them
> out allows me to send again.

Your Smarthost doesn't advertise STARTTLS, so exim should refrain from
using TLS when sending to that host. Please substantiate "can't send
mail" with debug output or at least state which error message you get.

> While reading the new Docs,
> /usr/share/doc/exim4-base/README.Debian.gz, I see that there is a way
> to enable TLS mentioned (as if it wasn't enabled by default).
> "Now, enable TLS by setting the macro MAIN_TLS_ENABLE in a local
> configuration file (documented below)."
> 
> The "documented below" mentions the file
> /etc/exim4/exim4.conf.localmacros.  There is no exim4.conf.localmacros
> file.

This is because there are no local macros in the package.

> I suppose that means you have to create it but I can't find
> anything about how to add an entry to disable the MAIN_TLS_ENABLE macro.

Also from README.Debian in exim4-base 4.50-8:
| For split configuration, you can drop the
| local configuration file anywhere in /etc/exim4/conf.d/main. Just make
| sure it gets read before the macro is first used. 000_localmacros is a
| possible name, guaranteeing first order. For a non-split
| configuration, /etc/exim4/exim4.conf.localmacros gets read before
| /etc/exim4/exim4.conf.template. To actually set the macro
| EXIM4_EXAMPLE to the value "this is a sample", write the following line
|
| EXIM4_EXAMPLE = this is a sample
|
| into the appropriate file. For more detailed discussion of the general
| macro mechanism, see the exim specification, chapter 6.4, for details
| how macro expansion works.

Since this is the only place where  /etc/exim4/exim4.conf.localmacros
is mentioned in README.Debian, you seem to have stopped reading one
sentence too early.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835