Discussion:
550 Unknown user
Kris Monstad
2006-09-12 13:16:10 UTC
Permalink
Hi there,

Ive got a problem with exim and I would greatly appreciate any help
offered...

As of this weekend gone by, Ive been getting tons of "Message Frozen"
emails in my inbox. The mail seems to be addressed to our domain, but
with a bogus (and gibberish) username. Here is an example of the mail:

Message 1GN7v5-0005t5-FC has been frozen (delivery error message).
The sender is <>.

The following address(es) have yet to be delivered:
***@ourdomain.com: SMTP error from remote mailer after RCPT TO:<***@ourdomain.com>: host <IP address> [IP address]: 550 Unknown user


I assume this is some spam/bouncing issue, though I dont really know enough to be sure. Im new to using Exim (and mail servers in general), so forgive any ignorance (or re-posting an old subject).

Thanks very much,
Kris Monstad
--
## List details at http://www.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/
Odhiambo G. Washington
2006-09-13 16:12:10 UTC
Permalink
* On 12/09/06 14:16 +0100, Kris Monstad wrote:
|
| Hi there,
|
| Ive got a problem with exim and I would greatly appreciate any help
| offered...
|
| As of this weekend gone by, Ive been getting tons of "Message Frozen"
| emails in my inbox. The mail seems to be addressed to our domain, but
| with a bogus (and gibberish) username. Here is an example of the mail:
|
| Message 1GN7v5-0005t5-FC has been frozen (delivery error message).
| The sender is <>.
|
| The following address(es) have yet to be delivered:
| ***@ourdomain.com: SMTP error from remote mailer after RCPT TO:<***@ourdomain.com>: host <IP address> [IP address]: 550 Unknown user
|
|
| I assume this is some spam/bouncing issue, though I dont really know enough to be sure. Im new to using Exim (and mail servers in general), so forgive any ignorance (or re-posting an old subject).


Hi Kris,

Do this:

egrep -v '^[[:space:]]*(#|$)' /usr/local/etc/exim/configure > my-exim.conf.txt


Then show us my-exim.conf.txt, with some small explanation.



cheers
- wash
+----------------------------------+-----------------------------------------+
Odhiambo Washington . WANANCHI ONLINE LTD (Nairobi, KE) |
wash () WANANCHI ! com . 1ere Etage, Loita Hse, Loita St., |
GSM: (+254) 722 743 223 . # 10286, 00100 NAIROBI |
GSM: (+254) 733 744 121 . (+254) 020 313 985 - 9 |
+---------------------------------+------------------------------------------+
"Oh My God! They killed init! You Bastards!"
--from a /. post
--
## List details at http://www.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/
Kris Monstad
2006-09-14 09:03:49 UTC
Permalink
Hi there,

Thanks for the response! Our configuration is as follows (I cant explain
any of the logic behind anything in it - Ive just been introduced to the
whole thing...) :

primary_hostname = centos.domain.co.uk
domainlist local_domains =
@:domain.co.uk:domain.com:domain2.com:domain3.co.uk
domainlist relay_to_domains =
hostlist relay_from_hosts = 127.0.0.1:*.domain.co.uk:<IP address>/24
system_filter = /etc/exim/filter
addresslist black_senders = lsearch*;/etc/exim/black_senders
acl_smtp_rcpt = acl_check_rcpt
never_users = root
host_lookup = *
rfc1413_hosts = *
rfc1413_query_timeout = 30s
ignore_bounce_errors_after = 2d
timeout_frozen_after = 7d
begin acl
acl_check_rcpt:
accept hosts = :
deny message = Restricted characters in address
domains = +local_domains
local_parts = ^[.] : ^.*[@%!/|]
deny message = Restricted characters in address
domains = !+local_domains
local_parts = ^[./|] : ^.*[@%!] : ^.*/\\.\\./
accept local_parts = postmaster
domains = +local_domains
accept domains = +local_domains
endpass
verify = recipient
accept domains = +relay_to_domains
endpass
verify = recipient
accept hosts = +relay_from_hosts
accept authenticated = *
deny message = relay not permitted
acl_check_mime:
warn decode = default
deny message = Blacklisted file extension detected
condition = ${if match \
{${lc:$mime_filename}} \
{\N(\.exe|\.pif|\.bat|\.scr|\.lnk|\.com)$\N} \
{1}{0}}
deny message = Sorry, noone speaks chinese here
condition = ${if eq{$mime_charset}{gb2312}{1}{0}}
accept
acl_check_content:
deny message = This message contains malware ($malware_name)
malware = *
warn message = X-Spam-Score: $spam_score ($spam_bar)
spam = nobody:true
warn message = X-Spam-Report: $spam_report
spam = nobody:true
warn message = X-Spam-Flag: YES
spam = nobody
deny message = This message scored $spam_score points. Congratulations!
spam = nobody:true
condition = ${if >{$spam_score_int}{100}{1}{0}}
accept
begin routers
govaninitiative:
driver = manualroute
domains = govan-initiative.co.uk
transport = remote_smtp
route_list = * 10.1.30.9
dnslookup:
driver = dnslookup
domains = ! +local_domains
transport = remote_smtp
ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8
no_more
system_aliases:
driver = redirect
allow_fail
allow_defer
data = ${lookup{$local_part}lsearch{/etc/aliases}}
file_transport = address_file
pipe_transport = address_pipe
userforward:
driver = redirect
check_local_user
file = $home/.forward
no_verify
no_expn
check_ancestor
file_transport = address_file
pipe_transport = address_pipe
reply_transport = address_reply
procmail:
debug_print = "R: procmail for $local_part@$domain"
driver = accept
domains = +local_domains
check_local_user
transport = procmail_pipe
require_files = ${local_part}:\
${if exists{/etc/procmailrc}\
{/etc/procmailrc}{${home}/.procmailrc}}:\
+/usr/bin/procmail
no_verify
no_expn
localuser:
driver = accept
check_local_user
transport = maildir_delivery
cannot_route_message = Unknown user
begin transports
maildir_delivery:
driver = appendfile
directory = $home/Maildir/
maildir_format
create_directory
delivery_date_add
envelope_to_add
return_path_add
group = mail
mode = 0660
directory_mode = 0770
procmail_pipe:
debug_print = "T: procmail_pipe for $local_part@$domain"
driver = pipe
path = "/bin:/usr/bin:/usr/local/bin"
command = "/usr/bin/procmail"
return_path_add
delivery_date_add
envelope_to_add
remote_smtp:
driver = smtp
local_delivery:
driver = appendfile
file = /var/mail/$local_part
delivery_date_add
envelope_to_add
return_path_add
group = mail
mode = 0660
address_pipe:
driver = pipe
return_output
address_file:
driver = appendfile
delivery_date_add
envelope_to_add
return_path_add
address_reply:
driver = autoreply
begin retry
* * F,2h,15m; G,16h,1h,1.5; F,4d,6h
begin rewrite
begin authenticators
-------------------------------------------------------------

Thanks again,
Kris Monstad
Post by Odhiambo G. Washington
|
| Hi there,
|
| Ive got a problem with exim and I would greatly appreciate any help
| offered...
|
| As of this weekend gone by, Ive been getting tons of "Message Frozen"
| emails in my inbox. The mail seems to be addressed to our domain, but
|
| Message 1GN7v5-0005t5-FC has been frozen (delivery error message).
| The sender is <>.
|
|
|
| I assume this is some spam/bouncing issue, though I dont really know enough to be sure. Im new to using Exim (and mail servers in general), so forgive any ignorance (or re-posting an old subject).
Hi Kris,
egrep -v '^[[:space:]]*(#|$)' /usr/local/etc/exim/configure > my-exim.conf.txt
Then show us my-exim.conf.txt, with some small explanation.
cheers
- wash
+----------------------------------+-----------------------------------------+
Odhiambo Washington . WANANCHI ONLINE LTD (Nairobi, KE) |
wash () WANANCHI ! com . 1ere Etage, Loita Hse, Loita St., |
GSM: (+254) 722 743 223 . # 10286, 00100 NAIROBI |
GSM: (+254) 733 744 121 . (+254) 020 313 985 - 9 |
+---------------------------------+------------------------------------------+
"Oh My God! They killed init! You Bastards!"
--from a /. post
--
## List details at http://www.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/
Kjetil Torgrim Homme
2006-09-14 11:21:09 UTC
Permalink
Post by Kris Monstad
Thanks for the response! Our configuration is as follows (I cant explain
any of the logic behind anything in it - Ive just been introduced to the
it's looking quite good.
Post by Kris Monstad
begin routers
driver = manualroute
domains = govan-initiative.co.uk
transport = remote_smtp
route_list = * 10.1.30.9
this router will accept _any_ address within that domain. is this the
domain you got bounces from?

I recommend you edit this stanza in your RCPT ACL:

accept domains = +relay_to_domains
endpass
verify = recipient/callout=30s,defer_ok

this means Exim will attempt a dummy delivery to the backend server to
check the veracity of the address.
--
Kjetil T.
--
## List details at http://www.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/
Kris Monstad
2006-09-14 16:12:54 UTC
Permalink
Hi there,

The "Message Frozen" mail appears to be due to incoming mail, mail
addressed to our domain but with false users. I dont know where these
emails are bouncing from , is there a way to find this out?

The domain you pointed out is our parent domain. We lease a subnet from
them. Its not this domain mentioned in the message frozen alerts, but
our own domain on the subnet.

Ill edit the acl_check_rcpt as you have suggested.

Sorry I cant clarify further!
Thank you for your help,
Kris
Post by Kjetil Torgrim Homme
Post by Kris Monstad
Thanks for the response! Our configuration is as follows (I cant
explain any of the logic behind anything in it - Ive just been
it's looking quite good.
Post by Kris Monstad
begin routers
driver = manualroute
domains = govan-initiative.co.uk
transport = remote_smtp
route_list = * 10.1.30.9
this router will accept _any_ address within that domain. is this the
domain you got bounces from?
accept domains = +relay_to_domains
endpass
verify = recipient/callout=30s,defer_ok
this means Exim will attempt a dummy delivery to the backend server to
check the veracity of the address.
--
## List details at http://www.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/
Kris Monstad
2006-09-15 10:59:58 UTC
Permalink
Hi all,

Thanks for all replies so far!

I made the following suggested edit to my exim.conf, which I posted
Post by Odhiambo G. Washington
Post by Kris Monstad
accept domains = +relay_to_domains
endpass
verify = recipient/callout=30s,defer_ok
this means Exim will attempt a dummy delivery to the backend server to
check the veracity of the address.
Sadly still getting these "Message frozen" mails. Additionally, since I
started getting these messages, certain mail accounts (notably hotmail)
dont appear to be receiving mail from us. Others appear to be receiving
from us fine. Could this phenomenon be connected to my spam problem? I
was worried the spam problem was causing us to be filtered out.

If anyone could recommend a (verbose!) user guide to get me up to speed
on this, it would be most welcome!
Thanks,
Kris Monstad
Post by Odhiambo G. Washington
| Hi there,
Post by Kris Monstad
|
| Ive got a problem with exim and I would greatly appreciate any help
| offered...
|
| As of this weekend gone by, Ive been getting tons of "Message Frozen"
| emails in my inbox. The mail seems to be addressed to our domain, but
|
| Message 1GN7v5-0005t5-FC has been frozen (delivery error message).
| The sender is <>.
|
|
|
| I assume this is some spam/bouncing issue, though I dont really know enough to be sure. Im new to using Exim (and mail servers in general), so forgive any ignorance (or re-posting an old subject).
--
## List details at http://www.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/
cengiz yazgan
2006-09-15 11:48:38 UTC
Permalink
Hi All,

We are using exim with spamassassin
We easily add spam score message to the all mails header
Now we want to add same spam score message to the body of mail.
How can we fix it?
Can you help us?


Best regards


Cengiz YAZGAN
Sistem Mühendisi/System Engineer
DorukNet
Tel / Phone : +90 212 326 92 00 / 447
Fax : +90 212 227 28 11
E-mail : ***@doruk.net.tr
http://www.doruk.net.tr
http://www.doruk.net.tr/english.html

-----Original Message-----
From: exim-users-***@exim.org [mailto:exim-users-***@exim.org] On
Behalf Of Kris Monstad
Sent: 15 Eylül 2006 Cuma 14:00
To: Kris Monstad
Cc: exim-***@exim.org
Subject: Re: [exim] 550 Unknown user


Hi all,

Thanks for all replies so far!

I made the following suggested edit to my exim.conf, which I posted
Post by Odhiambo G. Washington
Post by Kris Monstad
accept domains = +relay_to_domains
endpass
verify = recipient/callout=30s,defer_ok
this means Exim will attempt a dummy delivery to the backend server to
check the veracity of the address.
Sadly still getting these "Message frozen" mails. Additionally, since I
started getting these messages, certain mail accounts (notably hotmail)
dont appear to be receiving mail from us. Others appear to be receiving
from us fine. Could this phenomenon be connected to my spam problem? I
was worried the spam problem was causing us to be filtered out.

If anyone could recommend a (verbose!) user guide to get me up to speed
on this, it would be most welcome!
Thanks,
Kris Monstad
Post by Odhiambo G. Washington
| Hi there,
Post by Kris Monstad
|
| Ive got a problem with exim and I would greatly appreciate any help
| offered...
|
| As of this weekend gone by, Ive been getting tons of "Message Frozen"
| emails in my inbox. The mail seems to be addressed to our domain, but
|
| Message 1GN7v5-0005t5-FC has been frozen (delivery error message).
| The sender is <>.
|
RCPT TO:<***@absolutestudios.com>: host <10.4.130.48> [10.4.130.48]:
550 Unknown user
Post by Odhiambo G. Washington
Post by Kris Monstad
|
|
| I assume this is some spam/bouncing issue, though I dont really know
enough to be sure. Im new to using Exim (and mail servers in general), so
forgive any ignorance (or re-posting an old subject).
--
## List details at http://www.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/
--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.405 / Virus Database: 268.12.4/448 - Release Date: 14.09.2006
--
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.405 / Virus Database: 268.12.4/448 - Release Date: 14.09.2006
--
## List details at http://www.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/
Drav Sloan
2006-09-15 12:26:31 UTC
Permalink
Post by cengiz yazgan
Hi All,
Hi.

Just as a point of etiquette it's not polite to 'hijack a mailing
list threads' (reply to a message already posted to a list with a
different question). This is because thread aware clients will show
your mail embedded in the thread in which the message you replied
to resides. This means you end up with a post with a different
question (and therefore threaded answers) mixed up in a thread that
started with a different question.

There was probably as less long winded way of saying that ;)
Post by cengiz yazgan
We easily add spam score message to the all mails header
Now we want to add same spam score message to the body of mail.
This is probably best asked on a spamassassin mailing list, or
looking at their docs on the spamassassin homepage:

http://spamassassin.apache.org/index.html

Regards

Drav.
--
## List details at http://www.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/
cengiz yazgan
2006-09-15 13:22:37 UTC
Permalink
Hi Drav

You're right
But we havent known that clearly
So at this time we realy join the mail-list Thanks for your explaining


Cengiz YAZGAN
Sistem Mühendisi/System Engineer
DorukNet
Tel / Phone : +90 212 326 92 00 / 447
Fax : +90 212 227 28 11
E-mail : ***@doruk.net.tr
http://www.doruk.net.tr
http://www.doruk.net.tr/english.html

-----Original Message-----
From: Drav Sloan [mailto:holborn-***@real-life.tm]
Sent: 15 Eylül 2006 Cuma 15:27
To: cengiz yazgan
Cc: exim-***@exim.org
Subject: Re: [exim] Spamassasian
Post by cengiz yazgan
Hi All,
Hi.

Just as a point of etiquette it's not polite to 'hijack a mailing
list threads' (reply to a message already posted to a list with a
different question). This is because thread aware clients will show
your mail embedded in the thread in which the message you replied
to resides. This means you end up with a post with a different
question (and therefore threaded answers) mixed up in a thread that
started with a different question.

There was probably as less long winded way of saying that ;)
Post by cengiz yazgan
We easily add spam score message to the all mails header
Now we want to add same spam score message to the body of mail.
This is probably best asked on a spamassassin mailing list, or
looking at their docs on the spamassassin homepage:

http://spamassassin.apache.org/index.html

Regards

Drav.
--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.1.405 / Virus Database: 268.12.4/448 - Release Date: 14.09.2006
--
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.405 / Virus Database: 268.12.4/448 - Release Date: 14.09.2006
--
## List details at http://www.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/
Nigel Wade
2006-09-15 15:07:11 UTC
Permalink
Post by Drav Sloan
Post by cengiz yazgan
Hi All,
Hi.
Just as a point of etiquette it's not polite to 'hijack a mailing
list threads' (reply to a message already posted to a list with a
different question). This is because thread aware clients will show
your mail embedded in the thread in which the message you replied
to resides. This means you end up with a post with a different
question (and therefore threaded answers) mixed up in a thread that
started with a different question.
There was probably as less long winded way of saying that ;)
It's also unwise because readers who are not interested in the orginal thread
will probably mark the entire thread as read, and therefore never see the message.
--
Nigel Wade, System Administrator, Space Plasma Physics Group,
University of Leicester, Leicester, LE1 7RH, UK
E-mail : ***@ion.le.ac.uk
Phone : +44 (0)116 2523548, Fax : +44 (0)116 2523555
--
## List details at http://www.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/
John Robinson
2006-09-15 12:36:20 UTC
Permalink
Post by cengiz yazgan
We are using exim with spamassassin
We easily add spam score message to the all mails header
Now we want to add same spam score message to the body of mail.
How can we fix it?
Can you help us?
I think you'll need to pass the message through a filter external to
Exim, to handle doing this with MIME or HTML messages. I think
spamassassin can do it to some extent, but you'd have to feed your
message to spamassassin via an extra transport, and not using exim's
now-built-in exiscan-acl facilities (e.g. something like what's
described here http://www.win.tue.nl/~martijna/Debianstuff/ )

Cheers,

John.
--
## List details at http://www.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/
Continue reading on narkive:
Loading...