exim 4.50 released

[Chrysalis]

I have emailed john already, details below.


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I have just put Exim release 4.50 on the primary ftp site:

ftp://ftp.csx.cam.ac.uk/pub/software/email/exim/exim4/exim-4.50.tar.gz
ftp://ftp.csx.cam.ac.uk/pub/software/email/exim/exim4/exim-4.50.tar.bz2

-
-------------------------------------------------------------------------------
This release contains a lot of new features, including the merging of the
exiscan patch into the main source.

As usual, all changes are in the doc/ChangeLog. See also the README.UPDATING
file for changes that might impact on some installations. The manual has
been updated for this release, so doc/NewStuff is empty.
-
-------------------------------------------------------------------------------

The primary ftp server is in Cambridge, England. There is a list of mirrors in:

ftp://ftp.csx.cam.ac.uk/pub/software/email/exim/Mirrors

The distribution files are signed with Philip Hazel's GPG key; the signature
files are in the same directory. The MD5 hash codes for the distribution files
are:

41ef46af9962dc241919ab5c545c4a8b exim-4.50.tar.gz
7844eff82171872f6b3971a4183368d9 exim-4.50.tar.bz2

The distribution contains an ASCII copy of the 4.50 manual and other documents.
Other formats of the documentation are also available:

ftp://ftp.csx.cam.ac.uk/pub/software/email/exim/exim4/exim-html-4.50.tar.gz
ftp://ftp.csx.cam.ac.uk/pub/software/email/exim/exim4/exim-pdf-4.50.tar.gz

ftp://ftp.csx.cam.ac.uk/pub/software/email/exim/exim4/exim-postscript-4.50.tar.gz
ftp://ftp.csx.cam.ac.uk/pub/software/email/exim/exim4/exim-texinfo-4.50.tar.gz

The .bz2 versions of these tarbundles are also available.

The HTML documentation contains the FAQ and configuration samples. These are
also available separately in HTML or txt format from the ftp site:

ftp://ftp.csx.cam.ac.uk/pub/software/email/exim/exim4/FAQ-html.tar.gz
ftp://ftp.csx.cam.ac.uk/pub/software/email/exim/exim4/FAQ.txt.gz
ftp://ftp.csx.cam.ac.uk/pub/software/email/exim/exim4/config.samples.tar.gz

The ChangeLog for this, and several previous releases, is included in the
distribution. Individual change log files are also available on the ftp site,
the current one being:

ftp://ftp.csx.cam.ac.uk/pub/software/email/exim/ChangeLogs/ChangeLog-4.50
ftp://ftp.csx.cam.ac.uk/pub/software/email/exim/ChangeLogs/ChangeLog-4.50.gz

Documentation for new features that have not yet been included in the manual is
available in the NewStuff file in the distribution (there are none for this
release). Individual NewStuff files are also available on the ftp site, the
current one being:

ftp://ftp.csx.cam.ac.uk/pub/software/email/exim/ChangeLogs/NewStuff-4.50
ftp://ftp.csx.cam.ac.uk/pub/software/email/exim/ChangeLogs/NewStuff-4.50.gz

Enjoy.

- --
Philip Hazel University of Cambridge Computing Service,
ph10@cus.cam.ac.uk Cambridge, England. Phone: +44 1223 334714.

[jlasman]

Those of us who need to know all of what Dr Hazel writes are probably already subscribed to the proper exim list(s).

Perhaps you could just extract for us the "new stuff" and whether or not this release covers any serious security issues.

Thanks.

Jeff

[vandal]

I was just about to post this :P

as well some people may not be subscribed and you can just download the file there and check out the change log to decide if there is anything worth upgrading :)

[Chrysalis]

sure :p

[vandal]

it looks like quite the overhaul, i think i will see how it goes with da_tests since there is no absolute security vuln in there.

[DirectAdmin Support]

Hi Guys,

I've made all the binaries for exim, you can find them in http://files.directadmin.com/services/<youros>/da_exim-4.50<ext>

The only missing ones are RH8 and FC2, but you can just get the src rpm and build it: http://files.directadmin.com/services/da_exim-4.50-1.src.rpm

John

[sansobar]

unable to upgrade..

rpm -Uvh da_exim-4.50-1.i386.rpm
error: Failed dependencies:
libdb-4.2.so is needed by da_exim-4.50-1

[RayManZ]

Hi,

I'm getting the following error:

[root@server1 i386]# rpm -Uvh da_exim-4.50-1.i386.rpm
Preparing... ########################################### [100%]
file /etc/aliases from install of da_exim-4.50-1 conflicts with file from package setup-2.5.33-1

[Chrysalis]

tried to take the plunge and run on a non critical DA server for a while but its rejecting stuff in my old config, quite some changes in this version.

[UltimeWWW]

Originally posted by RayManZ
Hi,

I'm getting the following error:

[root@server1 i386]# rpm -Uvh da_exim-4.50-1.i386.rpm
Preparing... ########################################### [100%]
file /etc/aliases from install of da_exim-4.50-1 conflicts with file from package setup-2.5.33-1


Try to force it.

rpm -Uvh --force da_exim-4.50-1.i386.rpm

[hackerpitbull]

Upgrade with src.rpm file, HowTo for red hat users (tested on FC2)

cd /usr/src/redhat/SRPMS/
wget http://files.directadmin.com/services/da_exim-4.50-1.src.rpm
rpm -ivh da_exim-4.50-1.src.rpm
cd /usr/src/redhat/SPECS
rpmbuild -ba exim.spec
cd ../RPMS/i386
rpm -Uvh --force --nodeps da_exim-4.50-1.i386.rpm


(Based on hostpc.com guide in here: http://www.directadmin.com/forum/showthread.php?s=&threadid=6560&perpage=20&pagenumber=4 )

Good luck!

[dannygoh]

upgraded and broke my clamav installation. unknown "av_scanner" syntax

revert back to 4.44 :o

[RackSystems]

Originally posted by dannygoh
upgraded and broke my clamav installation. unknown "av_scanner" syntax

revert back to 4.44 :o

Check your exim.conf for the virusscanner section.

[Chrysalis]

Originally posted by dannygoh
upgraded and broke my clamav installation. unknown "av_scanner" syntax

revert back to 4.44 :o

This was the problem with mine also, its rejecting the clamav lines.

[ovsoft]

Any fix on that?

[interfasys]

I think DA needs to re-release the packages. It seems a configuration switch was missed.

[Chrysalis]

yep, was about to post the same, I think in exim 4.50 exiscan has changed and a confiugration switch is needed to enable it.

[interfasys]

John answered to me. It seems he missed that switch. New packages will be released. Let's hope that was really it ;).

Also, some rules in exim.conf need to be changed. demime is now deprecated.

[DirectAdmin Support]

Hello,

Ok, I've added the da_exim-4.50-2 version to our files system.

Source rpm:
http://files.directadmin.com/services/da_exim-4.50-2.src.rpm

and most of the binaries in their usual location. I added:

WITH_CONTENT_SCAN=yes

to the Local/Makefile.

John

[mattbates]

Hi,

Has anyone upgraded Exim to 4.50 with FreeBSD? I'm using FreeBSD 4.10 here and I'm wondering whether to upgrade.

Thanks,
Matt

[Chrysalis]

I have on a non production box, the pkg works unless you use anti virus because the current packages have no exiscan support, I dont know why john is taking so long on this.

[interfasys]

You've just tried release 2 and it has the same problem?

[interfasys]

To anybody wondering, that new package works fine with virus scanners. The only thing you need to do is to get rid of all the "demime" calls because they have been deprecated and are not available unless packages are built with anoth special switch.

More info in the Exim docs.

[jlasman]

Can someone/anyone with experience please tell me if there are any required changes to the /etc/exim.conf file when using the latest version of exim?

If so, then I should update SpamBlocker.

Thanks.

Jeff

[interfasys]

Based on personnal experience, not code analysis.

If you maintain the Exiscan ACL of Spamblocker, then yes, you need to make some changes.
The Exim doc has not yet been updated with improved examples, but in the meantime you can get good results with this.

deny message = This message contains malformed MIME ($demime_reason)
demime = *
condition = ${if >{$demime_errorlevel}{2}{1}{0}}
deny message = This message contains a virus or other harmful content ($malware_name)
demime = *
malware = *

Needs to change to:

deny message = This message contains a virus or other harmful content ($malware_name)
malware = *

To improve that code, you can play with "decode" which uncodes MIME attachements.
Chapter 40.3

If you don't maintain that part, then you're safe. Spamblocker still works well for me.

[interfasys]

OK...Here is my new Exiscan section. It works very well.
I've tested it with the following site which is great because you see the server's answer in real time.
http://www.declude.com/Articles.asp?ID=99

Please note that the DA packages DO NOT include the latest version of Spamblocker, you'll need to upgrade your exim.conf first.


In a version RSS1.2 /etc/exim.conf

Find
acl_smtp_rcpt = check_recipient
acl_smtp_data = check_message

and modify it like this
acl_smtp_rcpt = check_recipient
acl_smtp_mime = check_mime
acl_smtp_data = check_message


My new Exiscan section

# ACL that is used after the DATA command
######## EXISCAN ACL #########
check_mime:
# Decode MIME parts to disk. This will support virus scanners later.
warn decode = default

# File extension filtering.
deny message = This message contains an attachment of a type which we do not accept
condition = ${if match \
{${lc:$mime_filename}} \
{\N(\.exe|\.pif|\.bat|\.scr|\.lnk|\.com|.vbs)$\N} \
{1}{0}}
# CLSID attack filtering
deny message = Hiding of file extensions(CLSID hidden) is not allowed
condition = ${if match {$mime_filename}\
{\N\{[a-hA-H0-9-]{25,}\}\N}{1}{0}}

# Finally accept all other messages that have
# made it to this point
accept
check_message:
# Reject virus infected messages.
deny message = This message contains a virus or other harmful content ($malware_name)
malware = *

warn message = X-Antivirus-Scanner: Scanned with Exiscan. You should still use an antivirus.
accept
######## EXISCAN ACL #########


Don't forget to restart Exim.

EDIT:
Switch to the forum's "code" delimiters to get the right formatting.

[Chrysalis]

Originally posted by interfasys
You've just tried release 2 and it has the same problem?

didn't know there was a release 2 I been waiting for an announcement.

[Chrysalis]

interfasys if I was to edit exiscan part like you said and leave the rest of the config, then spamassassin stuff and rest will still work fine?

[Chrysalis]

Originally posted by interfasys
OK...Here is my new Exiscan section. It works very well.
I've tested it with the following site which is great because you see the server's answer in real time.
http://www.declude.com/Articles.asp?ID=99

Please note that the DA packages DO NOT include the latest version of Spamblocker, you'll need to upgrade your exim.conf first.


In a version RSS1.2 /etc/exim.conf

Find
acl_smtp_rcpt = check_recipient
acl_smtp_data = check_message

and modify it like this
acl_smtp_rcpt = check_recipient
acl_smtp_mime = check_mime
acl_smtp_data = check_message


My new Exiscan section

# ACL that is used after the DATA command
######## EXISCAN ACL #########
check_mime:
# Decode MIME parts to disk. This will support virus scanners later.
warn decode = default

# File extension filtering.
deny message = This message contains an attachment of a type which we do not accept
condition = ${if match \
{${lc:$mime_filename}} \
{\N(\.exe|\.pif|\.bat|\.scr|\.lnk|\.com|.vbs)$\N} \
{1}{0}}
# CLSID attack filtering
deny message = Hiding of file extensions(CLSID hidden) is not allowed
condition = ${if match {$mime_filename}\
{\N\{[a-hA-H0-9-]{25,}\}\N}{1}{0}}

# Finally accept all other messages that have
# made it to this point
accept
check_message:
# Reject virus infected messages.
deny message = This message contains a virus or other harmful content ($malware_name)
malware = *

warn message = X-Antivirus-Scanner: Scanned with Exiscan. You should still use an antivirus.
accept
######## EXISCAN ACL #########


Don't forget to restart Exim.

Ok I got 2 problems, first is this, with my old clamav part of config which I am guessing is to do with this denime stuff.


##### clamav ACL, reject virus infected mails with proper error

warn message = This message contains malformed MIME ($demime_reason).
demime = *
condition = ${if >{$demime_errorlevel}{2}{1}{0}}

warn message = This message contains a virus or other harmful content \
($malware_name)
demime = *
malware = *

warn message = Potentially harmful content. If you meant to open this file \
then please make sure the source is trusted first.
demime = ade:adp:bas:bat:chm:cmd:com:cpl:crt:eml:exe:hlp:hta:inf:ins:isp:jse:lnk
:mdb:mde:msc:msi:msp:pcd:reg:scr:sct:shs:url:vbs:vbe:wsf:wsh:wsc

# Add X-Scanned Header

warn message = X-Antivirus-Scanner: Clean mail though you should still use an An
tivirus

##### end clamav ACL

secondly I tried just using the exiscan config you pasted and got this error.

2005-03-02 18:26:24 Exim configuration error in line 598 of /etc/exim.conf:
error in ACL: unknown ACL condition/modifier in "{${lc:$mime_filename}}"

[interfasys]

I've just seen that the code on this page is missing backslashes...I used the wrong forum delimiters. Fixed in the original post.

[Chrysalis]

thanks.

What does the exiscan code do, auto reject filetypes but no scanning of files?

If possible could you make the clamav code I posted into the new format :)

[interfasys]

I don't think the format has changed, but here is my line:
av_scanner = clamd:/var/run/clamav/clamd

Make sure you put this as the first line.

[Chrysalis]

Originally posted by interfasys
I don't think the format has changed, but here is my line:
av_scanner = clamd:/var/run/clamav/clamd

Make sure you put this as the first line.

Sorry I am confused :( I use that line with the exiscan code you posted or the clamav stuff I posted?

Also the RSS1.2 version of exim.conf it breaks my spamassassin. I noticed the spamassassin sections were changed in that.

It causes these errors, so I went back to 1.0 and will edit from there.

2005-03-03 08:40:38 1D6lss-000PZL-DB <gggg@ggggg.net>: spamcheck transport output: An error was detected while processing a file of BSMTP input.
2005-03-03 08:40:38 1D6lss-000PZL-DB == gggg@ggggg.net R=spamcheck_director T=spamcheck defer (-24): Transport filter process failed (127): unable to execute command

[interfasys]

You need to put the av_scanner at the very top of your exim.conf, right after the initial large comments block.

As for spamassassin, it's working fine, I suspect you didn't check the paths in the config file ;)

[Chrysalis]

yep its /usr/local/bin not /usr/bin :D

I have the clamav line but my clamav code gets rejected so I just use your exiscan code :)

thanks for your help

[interfasys]

I just want to add that the new section that checks mime type is really great. It works better than my last Exiscan config. CLSID attacks are now succesfully blocked.

[interfasys]

There are a couple of different ways to configure the av_scanner for clam. Check the Exim doc, you'll probably find one that suits you.

[inetworx]

Originally posted by interfasys
John answered to me. It seems he missed that switch. New packages will be released. Let's hope that was really it ;).

Also, some rules in exim.conf need to be changed. demime is now deprecated.

Still goes wrong!

More conflicts...

Preparing... ########################################### [100%]
file /etc/aliases from install of da_exim-4.50-2 conflicts with file from package da_exim-4.42-1
file /etc/exim.cert from install of da_exim-4.50-2 conflicts with file from package da_exim-4.42-1
file /etc/exim.conf from install of da_exim-4.50-2 conflicts with file from package da_exim-4.42-1
file /etc/exim.key from install of da_exim-4.50-2 conflicts with file from package da_exim-4.42-1
file /etc/exim.pl from install of da_exim-4.50-2 conflicts with file from package da_exim-4.42-1
file /usr/sbin/exicyclog from install of da_exim-4.50-2 conflicts with file from package da_exim-4.42-1
file /usr/sbin/exigrep from install of da_exim-4.50-2 conflicts with file from package da_exim-4.42-1
file /usr/sbin/exim from install of da_exim-4.50-2 conflicts with file from package da_exim-4.42-1
file /usr/sbin/exim_checkaccess from install of da_exim-4.50-2 conflicts with file from package da_exim-4.42-1
file /usr/sbin/exim_dbmbuild from install of da_exim-4.50-2 conflicts with file from package da_exim-4.42-1
file /usr/sbin/exim_dumpdb from install of da_exim-4.50-2 conflicts with file from package da_exim-4.42-1
file /usr/sbin/exim_fixdb from install of da_exim-4.50-2 conflicts with file from package da_exim-4.42-1
file /usr/sbin/exim_lock from install of da_exim-4.50-2 conflicts with file from package da_exim-4.42-1
file /usr/sbin/exim_tidydb from install of da_exim-4.50-2 conflicts with file from package da_exim-4.42-1
file /usr/sbin/eximstats from install of da_exim-4.50-2 conflicts with file from package da_exim-4.42-1
file /usr/sbin/exinext from install of da_exim-4.50-2 conflicts with file from package da_exim-4.42-1
file /usr/sbin/exiqsumm from install of da_exim-4.50-2 conflicts with file from package da_exim-4.42-1
file /usr/sbin/exiwhat from install of da_exim-4.50-2 conflicts with file from package da_exim-4.42-1
file /usr/share/man/man8/exim.8.gz from install of da_exim-4.50-2 conflicts with file from package da_exim-4.42-1


WTF am I a ... ?

[Chrysalis]

you didnt remove da_exim-4.42-1 first.

[koos]

We have DA fc2 and want to update exim.
We also use clamav and spamassassin without mailscanner. Can anyone post a step by step howto?
Because this topic is to difficult for us :D

Many thanks,

Stupid Dutch people :D

[rldev]

Will Clam version info be in the header of an accepted email?

I did this upgrade and clam seems to work, but I would like to prove it.

[interfasys]

You just get this:
X-Antivirus-Scanner: Scanned with Exiscan. You should still use an antivirus.

But you can mod the conf file to get additional info.

[Tëkki]

Hi Guys,

I followed your steps - in details, got the aliases error, then did the --force --nodeps and now my exim is giving me this:

2005-05-05 16:32:01 1DTYvx-0003li-5w User 0 set for local_delivery transport is on the never_users list
2005-05-05 16:32:01 1DTYvx-0003li-5w ==root@xxx.xxx.xxx.xxx R=localuser T=local_delivery defer (-29): User 0 set for local_delivery transport is on the never_users list
2005-05-05 16:32:01 1DTYvx-0003li-5w failed to open database lock file /var/spool/exim/db/retry.lockfile: Permission denied (euid=8 egid=12)
2005-05-05 16:32:01 1DTYvx-0003li-5w failed to unlink /var/spool/exim/input//1DTYvx-0003li-5w-J: Permission denied
2005-05-05 16:32:01 1DTYSv-0003S3-1W User 0 set for local_delivery transport is on the never_users list
2005-05-05 16:32:01 1DTYSv-0003S3-1W == root@xxx.xxx.xxx.xxx R=localuser T=local_delivery defer (-29): User 0 set for local_delivery transport is on the never_users list
2005-05-05 16:32:01 1DTYSv-0003S3-1W failed to open database lock file /var/spool/exim/db/retry.lockfile: Permission denied (euid=8 egid=12)
2005-05-05 16:32:01 1DTYSv-0003S3-1W failed to unlink /var/spool/exim/input//1DTYSv-0003S3-1W-J: Permission denied
2005-05-05 16:32:01 1DTXWr-0002p0-SH User 0 set for local_delivery transport is on the never_users list
2005-05-05 16:32:01 1DTXWr-0002p0-SH == root@xxx.xxx.xxx.xxxR=localuser T=local_delivery defer (-29): User 0 set for local_delivery transport is on the never_users list
2005-05-05 16:32:01 1DTXWr-0002p0-SH failed to open database lock file /var/spool/exim/db/retry.lockfile: Permission denied (euid=8 egid=12)
2005-05-05 16:32:01 1DTXWr-0002p0-SH failed to unlink /var/spool/exim/input//1DTXWr-0002p0-SH-J: Permission denied
2005-05-05 16:32:01 1DTX3p-0002Va-QS User 0 set for local_delivery transport is on the never_users list
2005-05-05 16:32:01 1DTX3p-0002Va-QS == root@xxx.xxx.xxx.xxx R=localuser T=local_delivery defer (-29): User 0 set for local_delivery transport is on the never_users list
2005-05-05 16:32:01 1DTX3p-0002Va-QS failed to open database lock file /var/spool/exim/db/retry.lockfile: Permission denied (euid=8 egid=12)
2005-05-05 16:32:01 1DTX3p-0002Va-QS failed to unlink /var/spool/exim/input//1DTX3p-0002Va-QS-J: Permission denied
2005-05-05 16:32:01 1DTWan-0002Bz-NG User 0 set for local_delivery transport is on the never_users list
2005-05-05 16:32:01 1DTWan-0002Bz-NG == root@xxx.xxx.xxx.xxx R=localuser T=local_delivery defer (-29): User 0 set for local_delivery transport is on the never_users list
2005-05-05 16:32:01 1DTWan-0002Bz-NG failed to open database lock file /var/spool/exim/db/retry.lockfile: Permission denied (euid=8 egid=12)
2005-05-05 16:32:01 1DTWan-0002Bz-NG failed to unlink /var/spool/exim/input//1DTWan-0002Bz-NG-J: Permission denied
2005-05-05 16:32:01 1DTW7l-0001sZ-LO User 0 set for local_delivery transport is on the never_users list
2005-05-05 16:32:01 1DTW7l-0001sZ-LO == root@xxx.xxx.xxx.xxx R=localuser T=local_delivery defer (-29): User 0 set for local_delivery transport is on the never_users list
2005-05-05 16:32:01 1DTW7l-0001sZ-LO failed to open database lock file /var/spool/exim/db/retry.lockfile: Permission denied (euid=8 egid=12)
2005-05-05 16:32:01 1DTW7l-0001sZ-LO failed to unlink /var/spool/exim/input//1DTW7l-0001sZ-LO-J: Permission denied
2005-05-05 16:32:01 1DTVej-0001Yx-Dg User 0 set for local_delivery transport is on the never_users list
2005-05-05 16:32:01 1DTVej-0001Yx-Dg == root@xxx.xxx.xxx.xxx R=localuser T=local_delivery defer (-29): User 0 set for local_delivery transport is on the never_users list
2005-05-05 16:32:01 1DTVej-0001Yx-Dg failed to open database lock file /var/spool/exim/db/retry.lockfile: Permission denied (euid=8 egid=12)
2005-05-05 16:32:01 1DTVej-0001Yx-Dg failed to unlink /var/spool/exim/input//1DTVej-0001Yx-Dg-J: Permission denied
2005-05-05 16:32:01 1DTSNW-0002Bh-4c User 0 set for local_delivery transport is on the never_users list
2005-05-05 16:32:01 1DTSNW-0002Bh-4c == root@xxx.xxx.xxx.xxx R=localuser T=local_delivery defer (-29): User 0 set for local_delivery transport is on the never_users list
2005-05-05 16:32:01 1DTSNW-0002Bh-4c failed to open database lock file /var/spool/exim/db/retry.lockfile: Permission denied (euid=8 egid=12)
2005-05-05 16:32:01 1DTSNW-0002Bh-4c failed to unlink /var/spool/exim/input//1DTSNW-0002Bh-4c-J: Permission denied
2005-05-05 16:32:01 1DTVBh-0001Fl-DK User 0 set for local_delivery transport is on the never_users list
2005-05-05 16:32:01 1DTVBh-0001Fl-DK == root@xxx.xxx.xxx.xxx R=localuser T=local_delivery defer (-29): User 0 set for local_delivery transport is on the never_users list
2005-05-05 16:32:01 1DTVBh-0001Fl-DK failed to open database lock file /var/spool/exim/db/retry.lockfile: Permission denied (euid=8 egid=12)
2005-05-05 16:32:01 1DTVBh-0001Fl-DK failed to unlink /var/spool/exim/input//1DTVBh-0001Fl-DK-J: Permission denied
2005-05-05 16:32:01 1DTXzt-00038d-Vt User 0 set for local_delivery transport is on the never_users list
2005-05-05 16:32:01 1DTXzt-00038d-Vt == root@xxx.xxx.xxx.xxx R=localuser T=local_delivery defer (-29): User 0 set for local_delivery transport is on the never_users list
2005-05-05 16:32:01 1DTXzt-00038d-Vt failed to open database lock file /var/spool/exim/db/retry.lockfile: Permission denied (euid=8 egid=12)
2005-05-05 16:32:01 1DTXzt-00038d-Vt failed to unlink /var/spool/exim/input//1DTXzt-00038d-Vt-J: Permission denied
2005-05-05 16:32:01 1DTZOz-0006qb-BB User 0 set for local_delivery transport is on the never_users list
2005-05-05 16:32:01 1DTZOz-0006qb-BB == root@xxx.xxx.xxx.xxx R=localuser T=local_delivery defer (-29): User 0 set for local_delivery transport is on the never_users list
2005-05-05 16:32:01 1DTZOz-0006qb-BB failed to open database lock file /var/spool/exim/db/retry.lockfile: Permission denied (euid=8 egid=12)
2005-05-05 16:32:01 1DTZOz-0006qb-BB failed to unlink /var/spool/exim/input//1DTZOz-0006qb-BB-J: Permission denied

Any clue?

Thanks in advance
Tekki

[interfasys]

Nothing to worry about.
Exim doesn't deliver to root unless you tell it too. Simply modify your scripts so that they notify another user that is not on the never_user list.

[Tëkki]

Hi Olivier,

Thanks for the quick response.

The thing is, I never got this error before when I had exim 4.50.1 or earlier running on the system.

What scripts do I modify? If you are talking about scripts running on the websites then I have to say that I am positive that the problem lies somewhere else.

This is really weird! I just tried to send an email through the server running exim and I got this:

2005-05-05 17:02:33 1DTfzt-0002Kn-S7 Failed to create spool file /var/spool/exim/input//1DTfzt-0002Kn-S7-D: Permission denied
2005-05-05 17:02:33 1DTfzt-0002Ko-Sd Failed to create spool file /var/spool/exim/input//1DTfzt-0002Ko-Sd-D: Permission denied

No email was sent- even though Exim is running!

I'd really appreciate all the help I can get - Thanks a mill

Tekki

[interfasys]

Yep, seems you have 2 problems. I don't have an answer for the second one, but I can only suggest to try this:
http://help.directadmin.com/item.php?id=51

[Tëkki]

I gave your suggestions a run but that didn't work too...

There's a problem in running Exim 4.50-2 with Centos 4 ... I just downgraded and did nothing but restart Exim and it works fine!

I'm currently using exim-4.43-1.RHEL4.3 ... I guess I'll have to wait until a new rpm is released for Centos 4 ...

Cheers & thanks for your help ..

Tekki