[afnog] Re: Exim Problem

[Brian Candler <B.Candler at pobox.com>]

On Thu, Jul 31, 2003 at 12:54:19PM -0700, Niran Bello wrote:
> 1.my mail server is myname.mydomain.com and have users
> created on this domain, ;let say user1, user2 and
> user3. I can send the mail to each user before llike
> from user1 at mydomain.com to user2 at mydomain.com with no
> problem. Now if i send it will the receiver will not
> receive any mail. When I check main log i got this 
>  
> 003-07-30 14:09:10 19hq9T-0000Ip-Uj Message is frozen 
> 2003-07-30 14:09:10 19hp73-0000BN-Dm Message is frozen
> 
> 2003-07-30 14:09:10 19hn43-00007Y-EV Message is frozen
> 
> 2003-07-30 14:09:10 19hptD-0000GO-Ff Message is frozen
> 
> 2003-07-30 14:09:10 19hqJg-0000K3-5c Message is frozen
> 
> 2003-07-30 14:09:10 19hqMX-0000Kw-6L Message is frozen

Try testing like this:
# exim -d user1 at mydomain.com
<type a message here>
.

This will show you the entire routing and delivery decision making process,
and show you why the messages are frozen.

To retry delivery one of those queued messages:

# exim -d -M 19hqJg-0000K3-5c


> 2003-07-30 14:09:10 End queue run: pid=1431 
> 2003-07-31 11:12:41 19iAQL-00002k-C2 <=
> root at niran.mclng.com U=root P=local S=71              
>                                                7 
> 2003-07-31 11:12:41 19iAQL-00002k-C2 User 0 set for
> local_delivery transport is                           
>                                    on the never_users
> list 
> 2003-07-31 11:12:41 19iAQL-00002k-C2 ==
> root at niran.mclng.com R=localuser T=local              
>                                               
> _delivery defer (-29): User 0 set for local_delivery
> transport is on the never_u                           
>                                   sers list 

Like I said before, you must set an alias for delivery to 'root'

> On panic log i got this 
>  
> 2003-07-21 14:36:47 socket bind() to port 25 for
> address (any IPv4) failed: Address already in use:
> daemon abandoned 
> 2003-07-21 14:38:22 socket bind() to port 25 for
> address (any IPv4) failed: Address already in use:
> daemon abandoned 

You are attempting to run two separate copies of the exim SMTP daemon
(exim -bd). You can't do this. If you need to restart exim then kill the old
daemon before starting a new one.

> 2003-07-31 11:12:41 19iAQL-00002k-C2 User 0 set for
> local_delivery transport is on the never_users list 

Same problem: You can't deliver to root.

> 2. This setup I want to use it for internal mail. I
> have this same mydomain.com using for external mail
> hosting for me somewhere. I want to achieve a
> situation that if i send mail to user1 at mydomain.com to
> user2 at mydomain it will remain local and if i send from
> user1 at mydomain.com to some at remotehost.com it will use
> other server. 

Right, so the MX records for 'mydomain.com' point to some other system? You
can make this sort of arrangement work, but you have to be careful.

In principle, you just put "mydomain.com" in the local_domains on your
system, then any mail to foo at mydomain.com will be delivered to local user
foo and never leave the system.

However, there are some things to worry about. Firstly, mail from remote
users will arrive on a different machine and therefore perhaps a different
mailbox:

                                               MX for mydomain.com
                                                        |
                                                        v
              +--------------+                   +---------------+
              | local system | ----------------- | remote system |
              +--------------+                   +---------------+
              Mailbox 'foo'                      Mailbox 'foo'
                    ^
                    |
             mail sent from
               local users

So, how are you going to deal with this? Maybe all your users will have to
configure two different POP accounts on their clients. Or you will have to
download mail for the whole domain from 'remote system' to 'local system'
periodically, perhaps using UUCP. You could use POP3 for this but it gets
messy because POP3 doesn't preserve the envelope. If the remote system has
separate POP3 mailboxes for each user then you could make a separate POP3
session for each local user, but if you have 50 users and want to pull mail
every 2 minutes then you will be generating a lot of load and traffic for
little benefit.

If you have a permanent Internet connection then the best solution is for
the remote system to forward mail using SMTP. This means that it needs to be
configured with a routing rule (* at mydomain.com forwards to local system).
This is easy to configure, but requires the cooperation of the remote
system administrator.

But in that case, you would be better just to point the MX record directly
at the local system - then mail from the rest of the world will arrive
directly at your server. The remote machine can be configured as backup MX.

Regards,

Brian.


>  
> Thanks.
> --- Brian Candler <B.Candler at pobox.com> wrote:
> > On Thu, Jul 31, 2003 at 09:30:59AM -0700, Niran
> > Bello wrote:
> > > Dear all, 
> > >  
> > > I have configured the Exim formally I send and
> > > received the mail within my local domain but now i
> > > can't receive any mail again. If I send mail I
> > will
> > > not receive it. 
> > > When I check my log I got the following 
> > > root at niran.mclng.com U=root P=local S=71, User 0
> > set
> > > for local_delivery transport is on the never_users
> > > list. and get MESSAGE IS FROZEN 
> > 
> > Yep. Exim will not deliver to "root" by default, for
> > security reasons.
> > 
> > Set up an entry in /etc/aliases pointing to a local
> > account - e.g.
> > 
> > root:  niran
> > 
> > > Second problem. 
> > > I want to configure the exim for local user and I
> > have
> > > another mail serve being hosted by somebody on my
> > > behalf, I don't know what mail is using, i want to
> > use
> > > this mail adreess but keep the local mail local
> > and
> > > forward the outside one using hosted mail server
> > 
> > I don't quite follow that. Do you mind stating the
> > specifics, i.e. the
> > actual E-mail addresses and servers in question?
> > Then you can state how you
> > want the system to behave, e.g. "when I do X I want
> > Y to happen"
> > 
> > Regards,
> > 
> > Brian.
> > 
> > 
> > 
> > 
> > 
> > > 
> > > 
> > > 
> > > --- Brian Candler <B.Candler at pobox.com> wrote:
> > > > On Mon, Jul 21, 2003 at 06:42:18AM -0700, Niran
> > > > Bello wrote:
> > > > > 
> > > > > Thanks Brian, am okay now with that problem
> > now
> > > > >  But am having two other problem now.
> > > > > 1. I want to the situation that my user email
> > > > address
> > > > > will be user at mydomain.com now am having
> > > > > user at hostname.mydomain.com.
> > > > 
> > > > The feature you need is described in INSTALL in
> > the
> > > > source directory - this
> > > > document is well worth reading carefully.
> > > > 
> > > >    /usr/local/share/sqwebmail/hostname - when
> > > > SqWebMail is installed with
> > > >    a  basic  configuration for a single domain,
> > > > SqWebMail sets the domain
> > > >    in  the  return  address  for  outgoing
> > messages
> > > > to the defined system
> > > >    hostname.  If  this file exists it will be
> > used
> > > > instead of the defined
> > > >    system hostname.
> > > > 
> > > > i.e. create a file called "hostname" containing
> > just
> > > > "mydomain.com".
> > > > The actual directory may not be
> > > > /usr/local/share/sqwebmail/, depending on
> > > > how you ./configure'd sqwebmail. It's the same
> > > > directory that contains
> > > > the files "authdaemonrc", "authmodulelist" etc.
> > > > 
> > > > > 2. If I create new users am unable to open to
> > > > check
> > > > > the mail is given me below error message.
> > > > > 
> > > > > Unable to open the maidir fro this account-
> > the
> > > > > maildir doesn't exist or has incorrecr
> > ownership
> > > > or
> > > > > permissions.
> > > > > I add this user to exim group.
> > > > > I used the # pw useradd username -m -s
> > > > /nonexistent
> > > > 
> > > > "the maildir doesn't exist" - you need to create
> > the
> > > > maildir before they can
> > > > login. The easiest way is just to send a welcome
> > > > mail to the user.
> > > > 
> > > > The end-users should not be in the exim group;
> > it's
> > > > only the system
> > > > administrators who should be in this group (it
> > > > allows them to read the mail
> > > > logs, force a run of the mail queue, freeze and
> > > > unfreeze messages etc)
> > > > 
> > > > Regards,
> > > > 
> > > > Brian.
> > > > 
> > > > > --- Brian Candler <B.Candler at pobox.com> wrote:
> > > > > > On Fri, Jul 18, 2003 at 09:29:00AM -0700,
> > Niran
> > > > > > Bello wrote:
> > > > > > > 
> > > > > > > Hi all
> > > > > > > I configured exim, pop3 and Sqwebmail in
> > my
> > > > > > network
> > > > > > > but i want to configure my login page too.
> > > > > > > I can login with
> > > > > > > http://myhost.mydomain/cgi-bin/sqwebmail
> > but
> > > > am i
> > > > > > want
> > > > > > > a situation that I will be able to login 
> > with
> > > > > > > http://myhostname.mydomain/ alone/
> > > > > > 
> > > > > > Simplest solution: create an index.html in
> > the
> > > > top
> > > > > > level of your webserver
> > > > > > document tree, which issues a redirect to
> > the
> > > > > > correct URL: something like
> > > > > > 
> > > > > > <html>
> > > > > > <head>
> > > > > > <meta http-equiv="refresh" content="0;
> > > > > > url=/cgi-bin/sqwebmail">
> > > > > > </head>
> > > > > > <body>
> > > > > > <p>If your browser does not refresh
> > > > automatically,
> > > > > > please
> > > > > > <a href="/cgi-bin/sqwebmail">click here</a>
> > to
> > > > > > continue</p>
> > > > > > </body>
> > > > > > </html>
> > > > > > 
> > > > > > Then if someone goes to
> > > > http://myhostname.mydomain/
> > > > > > their browser will be
> > > > > > directed to the right place automatically.
> > Is
> > > > that
> > > > > > sufficient?
> > > > > > 
> > > > > > You can map a more friendly URL to
> > sqwebmail,
> > > > e.g.
> > > > > >    http://myhostname.mydomain/webmail
> > > > > > 
> > > > > > by using ScriptAlias:
> > > > > > 
> > > > > > ScriptAlias "/webmail"
> > > > > > "/usr/local/apache/cgi-bin/sqwebmail"
> > > > > > 
> > > > > > But it's not a good idea to map the root
> > > > directory
> > > > > > to a CGI, because you
> > > > > > also need to be able to serve files from the
> > > > > > /images/ directory.
> > > > > > 
> > > > > > Regards,
> > > > > > 
> > > > > > Brian.
> > > > > 
> > > > > __________________________________
> > > > > Do you Yahoo!?
> > > > > SBC Yahoo! DSL - Now only $29.95 per month!
> > > > > http://sbc.yahoo.com
> > > > > 
> > > 
> > > __________________________________
> > > Do you Yahoo!?
> > > Yahoo! SiteBuilder - Free, easy-to-use web site
> > design software
> > 
> === message truncated ===
> 
> __________________________________
> Do you Yahoo!?
> Yahoo! SiteBuilder - Free, easy-to-use web site design software
> http://sitebuilder.yahoo.com
> 
__________________________________________________
This is the Africa Network Operators' Group(AfNOG) 
technical discussion list.
The AfNOG website is: <http://www.afnog.org>