Exim is a mail transfer agent for Unix systems connected to the Internet.
It is a monolithic MTA designed to be a command line compatible drop-in
replacement for Sendmail.
Exim is an excellent mailer for an ISP, as its control and flexibility
are very good and its requeueing and retry algorithms are very powerful.
Exim's configuration syntax is well documented.
===> The following configuration options are available for exim-4.100.1_1:
ALT_CONFIG_PREFIX=off: Restrict the set of configuration files
CONTENT_SCAN=on: Enable exiscan email content scanner
DAEMON=on: Install scripts to run as a daemon
DANE=off: Enable experimental DANE support
DEBUG=off: Build with debugging support
DISABLE_D_OPT=on: Disable macros overrides using option -D
DKIM=on: Enable support for DKIM
DNSSEC=on: Enable DNSSEC validation
DOCS=on: Build and/or install documentation
EMBEDDED_PERL=on: Enable embedded Perl interpreter
EVENT=on: Messages events support (TPDA namely)
EXIMON=off: Build eximon monitor (requires X libraries)
ICONV=on: Enable header charset conversion
INTERNATIONAL=on: Enable support for the transmission of UTF-8 envelope addresses
IPV6=on: IPv6 protocol support
LISTMATCH_RHS=off: Enable pre-4.77 behaviour for match_*
LMTP=on: RFC2033 SMTP over command pipe transport
OCSP=on: Enable OCSP stapling
PRDR=on: Enable Per-Recipient-Data-Response support
PROXY=off: Enable Experimental Proxy Protocol
READLINE=off: Enable readline(3) library
SOCKS=off: Enable smtp transport via socks5 proxies
SPF=on: Enable Sender Policy Framework checking
SUID=on: Install the exim binary suid root
WISHLIST=off: Include the unsupported patches
====> SMTP Authorization
AUTH_CRAM_MD5=on: Enable CRAM-MD5 authentication mechanisms
AUTH_DOVECOT=on: Enable Dovecot authentication mechanisms
AUTH_PLAINTEXT=on: Enable plaintext authentication
AUTH_RADIUS=off: Enable radius (RFC 2865) authentication
AUTH_SASL=off: Enable use of Cyrus SASL auth library
AUTH_SPA=on: Enable Secure Password Authentication
AUTH_TLS=off: Enable TLS client certificate authentication
SASLAUTHD=off: Enable use of Cyrus SASL auth daemon
PAM=on: Enable PAM authentication mechanisms
PASSWD=on: Enable /etc/passwd lookups
====> Lookup support
CDB=on: Enable CDB-style lookups
BDB=off: Enable Berkeley DB lookups
DNSDB=on: Enable DNS-style lookups
DSEARCH=on: Enable directory-list lookups
LSEARCH=on: Enable wildcarded-file lookups
MYSQL=off: Enable mysql lookups
NIS=off: Enable NIS-style lookups
OPENLDAP=off: Enable LDAP lookups
PGSQL=off: Enable postgresql lookups
REDIS=off: Enable redis lookups
SQLITE=off: Enable SQLite lookups
====> Supported storage formats
MAILDIR=on: Enable Maildir mailbox format
MAILSTORE=on: Enable Mailstore mailbox format
MBX=on: Enable MBX mailbox format
====> Experimental options
CERTNAMES=off: Check certiticates ownership
DCC=off: Enable DCC at ACL support via dccifd
DMARC=on: Enable DMARC support
DSN=off: Enable Delivery Status Notifications
ARC=off: Enable experimental ARC support
LMDB=off: Enable LMDB lookups
QUEUEFILE=off: Enable queuefile transport
====> TLS support: you can only select none or one of them
TLS=on: TLS support
GNUTLS=off: Use GnuTLS instead of OpenSSL for TLS
====> Local scan patch: you can only select none or one of them
SA_EXIM=off: Build with Spamassassin local scan (BROKEN)
====> Sender Rewriting Scheme: you can only select none or one of them
SRS=off: Enable Sender Rewriting Scheme
OLD_SRS=off: Enable Alternative Sender Rewriting Scheme
===> Use 'make config' to modify these settings
Reason:
The port changes from USE_DB to USE_NDBM. Any existing configuration like
${lookup{$needle}dbm{haystack.db}}
will need to change to
${lookup{$needle}dbm{haystack}}.
Please also rename your old DBM files while the exim daemon is stopped:
find /var/spool/exim/db/* -not -name \*.lockfile -exec mv -i {} {}.db \;
Number of commits found: 436 (showing only 100 on this page) #
- Update security/gnutls to 3.4.10.
- Rename the LIBDANE option DANE because that's the name of the protocol
supported by libgnutls-dane and gnutls-cli. Also clarify the option
description.
- Add an IDN option.
- libgnutls-openssl has been removed in 3.4. Some ports used this library
in their LIB_DEPENDS but no port actually required it.
- Some old API functions have been removed. Ports that used these have been
updated or patched to use the new API.
- Add a patch to print/cups to prevent overlinking of libgnutls.so.
- Bump PORTREVISION on dependent ports.
net-im/jabber: This port used the old API to give users fine grained
control over which crypto algorithms were used via a configuration file.
It's not immediately obvious how to port this to the new API so the port
always uses the defaults now.
www/hydra: Mark BROKEN. This uses more removed calls than the other ports,
is said to be alpha quality and not fully functional and has been abandoned
10 years ago.
PR: 207768
Exp-run by: antoine
Approved by: portmgr (antoine)
MASTER_SITES cleanup.
- Replace ${MASTER_SITE_FOO} with FOO.
- Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9%
of the time.)
- Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and
no hint of what it should be was present.
- Fix some logic.
- And generally, make things more simple and easy to understand.
While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and
SAMBA macros.
Also, replace some EXTRACT_SUFX occurences with USES=tar:*.
Checked by: make fetch-urlall-list
With hat: portmgr
Sponsored by: Absolight
mail category: Remove $PTHREAD_LIBS
Note: The following ports did not pass check-plist (CP) or stage-qa (QA)
tests. The sendmail port has many problems, but this was already known
by myself as I fixed it properly on DPorts last week. It's a forward
action to submit a PR against mail/sendmail.
* antivirus-milter (CP)
* dk-milter (CP)
* milter-regex (CP)
* sendmail (CP, QA)
approved by: PTHREAD blanket
- Add rspamd extra patch and option [1]
- Remove obsoleted POST-INSTALL note [2]
- Bump revision since options have been changed
Submitted by: swappers at gmail.com [1], pi@ [2]
Use openssl from the ports for FreeBSD < 10 and DANE option is enabled.
Do not bump portrevision since DANE is not enabled by default.
PR: 196722
Submitted by: Gary <freebsd-bugzilla at in-addr.com>
mail/libspf2:
- Convert to USES=libtool and bump dependent ports
- Add INSTALL_TARGET=install-strip
(Also some white space fixes in dependent ports)
Approved by: portmgr (implicit, bump unstaged port)
Update to 4.84.
This is a bugfix only release of exim. The most important fix was introduced in
the
ports by local patch which is not needed now.
PR: 192625
Submitted by: pi
- Add patch recommended by the exim developers to fix mime regression in 4.83
- Remove SA_1024 as it has been adandoned long ago [1]
- Fix message in post-install stage [1]
- Bump revision
Submitted by: Victor Ustugov via jabber [1]
net/openldap24-*:
- Convert to USES=libtool and bump dependent ports
- Avoid USE_AUTOTOOLS
- Don't use PTHREAD_LIBS
- Use MAKE_CMD
databases/glom:
- Drop :keepla
- Add INSTALL_TARGET=install-strip
databases/libgda4* databases/libgda5*:
- Convert to USES=libtool and bump dependent ports
- USES=tar:xz
- Use INSTALL_TARGET=install-strip
- Use @sample
(Only the first 15 lines of the commit message are shown above )
- Replace security/gnutls with security/gnutls3 and update to 3.2.15
- Bump PORTREVISION on all ports that depend on security/gnutls and
adjust all ports that depend on security/gnutls3
- Update mail/anubis to version 4.2 which supports gnutls 3.x
- Update mail/libvmime to a development snapshot (recommended by upstream
developers)
PR: 191274
Exp-run by: antoine
Approved by: portmgr (antoine)
Update to 4.83.
Changes in the port:
- Added new options:
* DNSSEC: validate peers using TLSA records
* PRDR: Per-Recipient-Data-Response support
* CERTNAMES: Check certiticates ownership
* DSN: Delivery Status Notifications
* PROXY: Experimental Proxy Protocol
- Enable OCSP stapling by default
- Disable NIS by default
- SRS support is now radio group
- DNSSEC and PRDR are now enabled by default
Changes in exim itself:
(Only the first 15 lines of the commit message are shown above )
- Enable compiler flags responsive for exporting symbols to the elf file.
This is specifically important for DSO modules enabled in exim by default.
Without these flags modules were unable to use exim's API that has made this
feature completely unusable. [1]
- Fix minor issue with strip command by passing STRIP_CMD in the MAKE_ENV
- Bump portrevision
Submitted by: Victor Ustugov <victor at corvax.kiev.ua>
- Disable developers checks for source files: they are not intended for
end-users and
require perl for build stage.
Do not bump portrevision, as those checks have no influence on the target
package.
- Fix search path for optional dependencies (partially based on [1])
- Enable EXPERIMENTAL_REDIS knob if REDIS option is enabled
- Bump portrevision
Submitted by: pi [1]
- Update extra patch for XCLIENT support:
* now xclient is parsed by splitting, so xclient handling was rewritten;
* support xtext decoding;
* support of [UNAVAILABLE] and [TEMPUNAVAIL] that was broken;
* announce xclient in ehlo reply for hosts permitted for xclient;
* use verify_check_host as it seems to be the proper choice now.
- Remove blank lines from pkg-plist [1]
- Bump revision
Submitted by: bapt [1]
Bump PORTREVISION on all ports with USE_SQLITE=yes or USE_SQLITE=3 that
have not been bumped yet after the latest libsqlite3.so library version
change.
Approved by: portmgr (implicit)
Convert all :U to :tu and :L to :tl
Since FreeBSD 8.4 and FreeBSD 9.1 make(1) do support :tu and :tl as a
replacement for :U and :L (which has been marked as deprecated)
bmake which is the default on FreeBSD 10+ only support by default
:tu/:tl a hack has been added at the time to support :U and :L to ease
migration. This hack is now not necessary anymore
Note that this makes the ports tree incompatible with make(1) from
FreeBSD 8.3 or earlier
With hat: portmgr
Move {mail,japanese}/p5-Mail-SpamAssassin to &/spamassassin, in the name of
improving accessibility.
I think people who want to just find the port/package and install it are
more likely to look for "spamassassin the program" than "spamassassin the
perl module collection."
Exim: update to 4.82
New Stuff since 4.80.1 (ftp://exim.inode.at/exim/ChangeLogs/NewStuff-4.82):
1. New command-line option -bI:sieve will list all supported sieve extensions
of this Exim build on standard output, one per line.
ManageSieve (RFC 5804) providers managing scripts for use by Exim should
query this to establish the correct list to include in the protocol's
SIEVE capability line.
2. If the -n option is combined with the -bP option, then the name of an
emitted option is not output, only the value (if visible to you).
For instance, "exim -n -bP pid_file_path" should just emit a pathname
followed by a newline, and no other text.
(Only the first 15 lines of the commit message are shown above )
- Make ports use the libc provided iconv implementation on 10-CURRENT
after r254273
- Fix a bunch of ports to properly work after this
- Mark converters/libiconv as IGNORE for systems with iconv in libc
Reviewed by: bapt
Approved by: portmgr (bapt)
Discussed with: bapt, bsam (who both contributed ideas and code)
mail/exim: fix handling of WITH_MYSQL_VER
- fix introduction of bogus MYSQL_VER option that appeared after
blind conversion to OPTIONSng in r320120;
- drop support for WITH_MYSQL_VER="auto": this is an obsolete setting
that currently has the same effect as not defining WITH_MYSQL_VER
at all;
- don't set WANT_MYSQL_VER based on WITH_MYSQL_VER: setting the
latter is enough, since we don't insist on any particular MySQL
version.
PR: ports/179719
QA page: http://codelabs.ru/fbsd/ports/qa/mail/exim/4.80.1_2-p1
Rely on bsdtar to autodetermine the format of the distfiles when possible
For a while now bsdtar is able to autotermine compression and archive format.
Let's then use tar directly instead of piping to tar.
Now USE_BZIP2 and USE_XZ only set EXTRACT_SUFX to the right format
Exim: add patch that avoids breaking messages with Spamooborona 1024
SO 1024 sometimes give back new headers with '\r\n' as the end of line
delimiter. Such result should be treated properly to avoid adding extra
'\n' to the message headers and turning some of them into body.
mail/exim: add exim_tidydb_filter for periodic tidydb job
It allows to filter/transform the output from the tidydb that is
sometimes large and not very much suitable for informational mails
from cron.
Feature safe: yes
mail/exim: fix build with SASL
Uncomment only relevant configuration line for SASL libraries
(we're currently using SASL 2.x, so it is -lsasl2).
PR: 169833
Found by: Richard E. Depew
Pointyhat to: rea@
mail/exim: upgrade to 4.80
Extracts from the NewStuff,
ftp://exim.inode.at/exim/ChangeLogs/NewStuff-4.80
1. New authenticator driver, "gsasl". Server-only (at present).
This is a SASL interface, licensed under GPL, which can be found at
http://www.gnu.org/software/gsasl/.
This system does not provide sources of data for authentication, so
careful use needs to be made of the conditions in Exim.
2. New authenticator driver, "heimdal_gssapi". Server-only.
A replacement for using cyrus_sasl with Heimdal, now that $KRB5_KTNAME
is no longer honoured for setuid programs by Heimdal. Use the
"server_keytab" option to point to the keytab.
(Only the first 15 lines of the commit message are shown above )
In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
mail/exim: upgrade to 4.77
New stuff (from ftp://exim.inode.at/exim/ChangeLogs/NewStuff-4.77):
1. New options for the ratelimit ACL condition: /count= and /unique=.
The /noupdate option has been replaced by a /readonly option.
2. The SMTP transport's protocol option may now be set to "smtps", to
use SSL-on-connect outbound.
3. New variable $av_failed, set true if the AV scanner deferred; ie, when
there is a problem talking to the AV scanner, or the AV scanner running.
4. New expansion conditions, "inlist" and "inlisti", which take simple lists
and check if the search item is a member of the list. This does not
support named lists, but does subject the list part to string expansion.
(Only the first 15 lines of the commit message are shown above )
mail/exim: upgrade to 4.76
4.76 is the security release that fixes CVE-2011-1764, format string
attack and information leak, both inside the DKIM code.
List of changes (ftp://exim.inode.at/exim/ChangeLogs/ChangeLog-4.76):
PP/01 The new ldap_require_cert option would segfault if used. Fixed.
PP/02 Harmonised TLS library version reporting; only show if
debugging. Layout now matches that introduced for other
libraries in 4.74 PP/03.
PP/03 New openssl_options items: no_sslv2 no_sslv3 no_ticket no_tlsv1
(Only the first 15 lines of the commit message are shown above )
mail/exim: upgrade to 4.75
From NewStuff-4.75:
1. In addition to the existing LDAP and LDAP/SSL ("ldaps") support,
there is now LDAP/TLS support, given sufficiently modern OpenLDAP
client libraries. The following global options have been added in
support of this: ldap_ca_cert_dir, ldap_ca_cert_file, ldap_cert_file,
ldap_cert_key, ldap_cipher_suite, ldap_require_cert, ldap_start_tls.
2. The pipe transport now takes a boolean option, "freeze_signal",
default false. When true, if the external delivery command exits on
a signal then Exim will freeze the message in the queue, instead of
generating a bounce.
(Only the first 15 lines of the commit message are shown above )
mail/exim: update to 4.74
Changelog is at
http://ftp.exim.org/pub/exim/ChangeLogs/ChangeLog-4.74
Please, note that CVE-2011-0017 is not applicable to FreeBSD,
because setuid() doesn't check RLIMIT_NPROC.
Also fixed the periodic script for tidying the databases: now it won't
produce errors if the lockfile is here, but the actual database file
is gone. [2]
And finally, synced the mirror list to the current one and
pruned old unusable mirrors:
- ftp.csx.cam.ac.uk: not synced anymore;
- www.no.exim.org: no DNS record;
- ftp.demon.nl: no longer mirrors Exim;
- ftp.freenet.de: mirror of ftp.csx.cam.ac.uk;
- ftp.esat.net: not synced anymore;
- ftp.mirrorservice.org: mirror of ftp.csx.cam.ac.uk.
Feature safe: yes
PR: 154323 [1]
Submitted by: Geraint Edwards <gedge@yadn.org> [2],
Alexander Wittig <alexander@wittig.name> [1]
Approved by: erwin (mentor), renato (mentor)
mail/exim: fix variable substitution
There was an extra '=' sign at the sed substitution
pattern that affected users of make-only options
TRUSTED_CONFIG_LIST and WHITELIST_D_MACROS: Exim
binary won't build if any of these options is set.
Spotted by: tdb
Pointyhat to: rea
Approved by: erwin (mentor)
mail/exim: update to 4.73
Most notably, this version fixes local exim -> root escalation,
CVE-2010-4345.
Port had also gained configurable knob for disabling -D option
and make variables TRUSTED_CONFIG_LIST and WHITELIST_D_MACROS
to fine tune the behaviour of options -C and -D.
New items are documented at
ftp://exim.inode.at/exim/ChangeLogs/NewStuff-4.73
Changelog is available at
ftp://exim.inode.at/exim/ChangeLogs/ChangeLog-4.73
Security: e4fcf020-0447-11e0-becc-0022156e8794 / CVE-2010-4345
PR: 152963 [1], 153711 [2]
Submitted by: Alexander Wittig <alexander@wittig.name> [1]
Approved by: garga (mentor)
Update to 4.72
The changes from the previous release are:
1. TWO SECURITY FIXES: one relating to mail-spools which are
globally writable, the other to locking of MBX folders (not mbox).
These have CVE identifiers CVE-2010-2023 and CVE-2010-2024
2. MySQL stored procedures are now supported.
3. The dkim_domain transport option is now a list, not a single
string, and messages will be signed for each element in the list
(discarding duplicates).
4. The 4.70 release unexpectedly changed the behaviour of dnsdb TXT
(Only the first 15 lines of the commit message are shown above )
"Spamooborona 1024" software by Yandex allows to filter up to 1024
good messages per day for any mailhost. It is to note: 1024 - it is
not the total amount of messages scanned but the only good ones,
which aren't considered as spam. Once 1024 good messages get passed
through the filter, the rest of mail traffic will be passed without
considering spam or ham until the end of the day.
http://so.yandex.ru/companies/so1024.xml
The patch allows use of "Spamooborona 1024" with Exim by using
Local_scan()'s functionality provided by Yandex LLC.
PR: ports/146215
Submitted by: Alexey V.Degtyarev <alexey@renatasystems.org>
- Retire MASTER_SITE_SOURCEFORGE_EXTENDED, it's no longer needed - all mirrors
actually have all distfiles
- Merge all SF mirrors to MASTER_SITE_SOURCEFORGE, resort according to quick
download speed survey
- Fix MASTER_SITES for all port that have used SOURCEFORGE_EXTENTED
Approved by: portmgr (pav)
- Update X.org ports to 7.4+ (few ports are more recent than the katamari).
- Bump PORTREVISION for all ports depending on libglut since the shlib
version number went from 4 to 3.
- Bump PORTREVISION for all ports depending on libXaw as libXaw.so.8 isn't
installed anymore.
- Couple of ports fixes (mostly missing xorg components added to USE_XORG).
