Bug#421980: exim4: ALL outgoing mail returned "Relaying not allowed"

[David Baron]

On Tuesday 05 June 2007, Marc Haber wrote:
> On Sat, May 26, 2007 at 11:15:39PM +0300, David Baron wrote:
> > On Saturday 26 May 2007, Marc Haber wrote:
> > > Is provider-smtp still smtp.012.net.il? If so, I currently do not see
> > > any issue why this should not work. Maybe debug output obtained by
> > > running
> > >
> > > echo foo | exim -d-all+auth+deliver+transport
> > > mh+debian-packages at zugschlus.de
> > >
> > > can help in finding out. This debugging output should not contain any
> > > private data such as passwords.
> >
> > The PLAIN AUTH was sucessful on this and seems to be OK (but not always).
> >
> > THe "macro" was not enough, it seems. There is a line in the
> > remote_smtp_smarthost "transport" macro
> > said uncomment following line to disable TLS on outgoing connections so I
> > did that.
>
> this should not be relevant as smtp.012.net.il does not advertise
> STARTTLS. Exim should not try using it in this case, so I do not think
> that it would be really necessary to disable TLS on the transport level.
>
> Can you provide debug output of a failed session with TLS not disabled
> on transport level?
>
> Btw, smtp.012.net.il says "454 4.7.1 TLS library initialization
> failure." when trying to use STARTTLS even if not advertised, which is
> a clear sign of an accidental misconfiguration of the host.
>

I disable it at the macro and also in the remote smarthost script. Works now 
(usually but does fail often enough).

> > Now to persuade the provider that their server "upgrade" to plain text
> > auth is not such an upgrade and TLS would be better :-)
> >
> > In any event, that exim command test generates a lot of output and it
> > cannot be redirected to a file (maybe there is an options for the
> > command line to do so.)
>
> $ echo bla | exim -d+all mh+debian-packages at zugschlus.de > output.exim 2>&1
> $ ls -al output.exim
> -rw-rw-r-- 1 mh mh 45K 2007-06-05 17:12 output.exim
> $
>
> Looks to me as if redirection works fine. You need to redirect stderr
> as well since that's where debug output is printed to.
>
> Greetings
> Marc