Exim 4.21: TLS läuft auf einem Rechner nicht

[giga]

Ich habe 2 Rechner mit fast identischer Konfiguration. Beide mit Kernel 2.6.4 und Exim 4.21. Ich versuche auf einem der beiden Exim mit TLS zum laufen zu bekommen. Auf dem Rechner läuft allerdings noch spamassassin und amavis-new mit Exim zusammen und genau auf diesem Rechner geht TLS nicht.

Code: Select all

#exim -bd -oX 465 -tls-on-connect

gibt nirgends einen Fehler aus, auch in keiner Log-Datei. Exim läuft allerdings nicht mit TLS auf Port 465. Alles ist wie vorher.

Auf dem anderen Rechner läuft Exim nach o.g. Befehl aber mit TLS auf Port 465 ohne irgendwelche Probleme.

Ich hab mal versucht mit strace rauszubekommen wo's hängt. Kann damit aber nichts anfangen, vielleicht kann mir ja hier jemand helfen:

Hier gehts nicht:

Code: Select all

....

open("/usr/lib/libcrypto.so.0.9.7", O_RDONLY) = 3
read(3, "177ELF111\0\0\0\0\0\0\0\0\03\03\01\0\0\0240276"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0555, st_size=1080200, ...}) = 0
mmap2(NULL, 1063384, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x4045c000
mmap2(0x4054b000, 69632, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0xef) = 0x4054b000
mmap2(0x4055c000, 14808, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x4055c000
close(3)                                = 0
open("/usr/lib/libz.so.1", O_RDONLY)    = 3
read(3, "177ELF111\0\0\0\0\0\0\0\0\03\03\01\0\0\026030"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=71063, ...}) = 0
mmap2(NULL, 62600, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x40560000
mmap2(0x4056e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0xe) = 0x4056e000
close(3)                                = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40570000
munmap(0x40016000, 17682)               = 0
modify_ldt(1, {entry_number:0, base_addr:0x402950a0, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0, useable:1}, 16) = 0
getpid()                                = 4996
rt_sigaction(SIGRTMIN, {0x4028fc1a, [], SA_RESTORER, 0x40329f98}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {0x4028fcf8, [], SA_RESTORER, 0x40329f98}, NULL, 8) = 0
rt_sigaction(SIGRT_2, {0x4028fe64, [], SA_RESTORER, 0x40329f98}, NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [RTMIN], NULL, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [33], NULL, 8) = 0
_sysctl({{CTL_KERN, KERN_VERSION}, 2, 0xbffff7b4, 31, (nil), 0}) = 0
open("/dev/urandom", O_RDONLY)          = 3
read(3, "346835JfY3313133374q274\0060204;8`C F*T~\0021"..., 32) = 32
close(3)                                = 0
rt_sigaction(SIGALRM, {0x40292a60, [], SA_RESTORER, 0x40329f98}, NULL, 8) = 0
brk(0)                                  = 0x80fb000
brk(0x811c000)                          = 0x811c000
brk(0)                                  = 0x811c000
fstat64(2, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 0), ...}) = 0
getpid()                                = 4996
rt_sigaction(SIGUSR1, {0x40292a60, [], SA_RESTORER|SA_RESTART, 0x40329f98}, NULL, 8) = 0
rt_sigaction(SIGHUP, {SIG_IGN}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGPIPE, {SIG_IGN}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGCHLD, {SIG_DFL}, NULL, 8) = 0
umask(0)                                = 022
geteuid32()                             = 0
getuid32()                              = 0
getgid32()                              = 0
setgid32(0)                             = 0
setuid32(0)                             = 0
getrlimit(RLIMIT_NOFILE, {rlim_cur=1024, rlim_max=1024}) = 0
setrlimit(RLIMIT_NPROC, {rlim_cur=RLIM_INFINITY, rlim_max=RLIM_INFINITY}) = 0
getgroups32(0x20, 0xbffffa30)           = 11
setgroups32(0, 0)                       = 0
getegid32()                             = 0
geteuid32()                             = 0
geteuid32()                             = 0
getegid32()                             = 0
setgid32(0)                             = 0
setuid32(0)                             = 0
open("/etc/exim/exim.conf", O_RDONLY)   = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=21124, ...}) = 0
fstat64(3, {st_mode=S_IFREG|0644, st_size=21124, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40016000
read(3, "################################"..., 4096) = 4096
read(3, "@[]" as an item in the local dom"..., 4096) = 4096
socket(PF_UNIX, SOCK_STREAM, 0)         = 4
connect(4, {sa_family=AF_UNIX, path="/var/run/.nscd_socket"}, 110) = -1 ENOENT (No such file or directory)
close(4)                                = 0
open("/etc/nsswitch.conf", O_RDONLY)    = 4
fstat64(4, {st_mode=S_IFREG|0644, st_size=498, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40017000
read(4, "# /etc/nsswitch.conf:n# $Header:"..., 4096) = 498
read(4, "", 4096)                       = 0
close(4)                                = 0
munmap(0x40017000, 4096)                = 0
open("/etc/ld.so.cache", O_RDONLY)      = 4
fstat64(4, {st_mode=S_IFREG|0644, st_size=17682, ...}) = 0
mmap2(NULL, 17682, PROT_READ, MAP_PRIVATE, 4, 0) = 0x40571000
close(4)                                = 0
open("/lib/libnss_compat.so.2", O_RDONLY) = 4
read(4, "177ELF111\0\0\0\0\0\0\0\0\03\03\01\0\0\024021"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=33362, ...}) = 0
mmap2(NULL, 30372, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0x40576000
mmap2(0x4057d000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 4, 0x6) = 0x4057d000
close(4)                                = 0
munmap(0x40571000, 17682)               = 0
open("/etc/ld.so.cache", O_RDONLY)      = 4
fstat64(4, {st_mode=S_IFREG|0644, st_size=17682, ...}) = 0
mmap2(NULL, 17682, PROT_READ, MAP_PRIVATE, 4, 0) = 0x40571000
close(4)                                = 0
open("/lib/libnss_nis.so.2", O_RDONLY)  = 4
read(4, "177ELF111\0\0\0\0\0\0\0\0\03\03\01\0\0\0p33\0\000"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=39983, ...}) = 0
mmap2(NULL, 34984, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0x4057e000
mmap2(0x40586000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 4, 0x7) = 0x40586000
close(4)                                = 0
open("/lib/libnss_files.so.2", O_RDONLY) = 4
read(4, "177ELF111\0\0\0\0\0\0\0\0\03\03\01\0\0\034034"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=42363, ...}) = 0
mmap2(NULL, 33712, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0x40587000
mmap2(0x4058f000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 4, 0x8) = 0x4058f000
close(4)                                = 0
munmap(0x40571000, 17682)               = 0
open("/etc/passwd", O_RDONLY)           = 4
fcntl64(4, F_GETFD)                     = 0
fcntl64(4, F_SETFD, FD_CLOEXEC)         = 0
_llseek(4, 0, [0], SEEK_CUR)            = 0
fstat64(4, {st_mode=S_IFREG|0644, st_size=2187, ...}) = 0
mmap2(NULL, 2187, PROT_READ, MAP_SHARED, 4, 0) = 0x40571000
_llseek(4, 2187, [2187], SEEK_SET)      = 0
munmap(0x40571000, 2187)                = 0
close(4)                                = 0
read(3, "the timeout to zero, all RFC 141"..., 4096) = 4096
chdir("/var/spool/exim")                = 0
setgid32(0xc)                           = 0
read(3, "n    message       = X-Warning: "..., 4096) = 4096
open("/etc/passwd", O_RDONLY)           = 4
fcntl64(4, F_GETFD)                     = 0
fcntl64(4, F_SETFD, FD_CLOEXEC)         = 0
_llseek(4, 0, [0], SEEK_CUR)            = 0
fstat64(4, {st_mode=S_IFREG|0644, st_size=2187, ...}) = 0
mmap2(NULL, 2187, PROT_READ, MAP_SHARED, 4, 0) = 0x40571000
_llseek(4, 2187, [2187], SEEK_SET)      = 0
munmap(0x40571000, 2187)                = 0
close(4)                                = 0
read(3, "transport = address_filen  pipe_"..., 4096) = 4096
socket(PF_UNIX, SOCK_STREAM, 0)         = 4
connect(4, {sa_family=AF_UNIX, path="/var/run/.nscd_socket"}, 110) = -1 ENOENT (No such file or directory)
close(4)                                = 0
open("/etc/group", O_RDONLY)            = 4
fcntl64(4, F_GETFD)                     = 0
fcntl64(4, F_SETFD, FD_CLOEXEC)         = 0
_llseek(4, 0, [0], SEEK_CUR)            = 0
fstat64(4, {st_mode=S_IFREG|0644, st_size=825, ...}) = 0
mmap2(NULL, 825, PROT_READ, MAP_SHARED, 4, 0) = 0x40571000
_llseek(4, 825, [825], SEEK_SET)        = 0
munmap(0x40571000, 825)                 = 0
close(4)                                = 0
open("/etc/group", O_RDONLY)            = 4
fcntl64(4, F_GETFD)                     = 0
fcntl64(4, F_SETFD, FD_CLOEXEC)         = 0
_llseek(4, 0, [0], SEEK_CUR)            = 0
fstat64(4, {st_mode=S_IFREG|0644, st_size=825, ...}) = 0
mmap2(NULL, 825, PROT_READ, MAP_SHARED, 4, 0) = 0x40571000
_llseek(4, 825, [825], SEEK_SET)        = 0
munmap(0x40571000, 825)                 = 0
close(4)                                = 0
read(3, "{$3}{}} \n    {eq{$3}{${extract{"..., 4096) = 644
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0x40016000, 4096)                = 0
open("/etc/passwd", O_RDONLY)           = 3
fcntl64(3, F_GETFD)                     = 0
fcntl64(3, F_SETFD, FD_CLOEXEC)         = 0
_llseek(3, 0, [0], SEEK_CUR)            = 0
fstat64(3, {st_mode=S_IFREG|0644, st_size=2187, ...}) = 0
mmap2(NULL, 2187, PROT_READ, MAP_SHARED, 3, 0) = 0x40016000
_llseek(3, 2187, [2187], SEEK_SET)      = 0
munmap(0x40016000, 2187)                = 0
close(3)                                = 0
close(0)                                = 0
close(1)                                = 0
close(2)                                = 0
getppid()                               = 4995
fork()                                  = 4997
--- SIGCHLD (Child exited) @ 0 (0) ---
_exit(0)

und hier läuft es:

Code: Select all

...

open("/usr/lib/libcrypto.so.0.9.7", O_RDONLY) = 3
read(3, "177ELF111\0\0\0\0\0\0\0\0\03\03\01\0\0\0240276"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0555, st_size=1080204, ...}) = 0
mmap2(NULL, 1063384, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x40419000
mmap2(0x40508000, 69632, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0xef) = 0x40508000
mmap2(0x40519000, 14808, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x40519000
close(3)                                = 0
mprotect(0xbffff000, 4096, PROT_READ|PROT_WRITE|PROT_EXEC|0x1000000) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x4051d000
munmap(0x40014000, 15778)               = 0
set_thread_area({entry_number:-1 -> 6, base_addr:0x40256060, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0, useable:1}) = 0
getpid()                                = 21837
rt_sigaction(SIGRTMIN, {0x40250e09, [], SA_RESTORER, 0x402e8bf8}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {0x40250f49, [], SA_RESTORER, 0x402e8bf8}, NULL, 8) = 0
rt_sigaction(SIGRT_2, {0x40251126, [], SA_RESTORER, 0x402e8bf8}, NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, [RTMIN], NULL, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [33], NULL, 8) = 0
_sysctl({{CTL_KERN, KERN_VERSION}, 2, 0xbffff7f4, 31, (nil), 0}) = 0
open("/dev/urandom", O_RDONLY)          = 3
read(3, ">X#$v2642542250333035033435357356Y240344\"..., 32) = 32
close(3)                                = 0
rt_sigaction(SIGALRM, {0x40253cd4, [], SA_RESTORER, 0x402e8bf8}, NULL, 8) = 0
brk(0)                                  = 0x80f9000
brk(0x811a000)                          = 0x811a000
brk(0)                                  = 0x811a000
fstat64(2, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 8), ...}) = 0
getpid()                                = 21837
rt_sigaction(SIGUSR1, {0x40253cd4, [], SA_RESTORER|SA_RESTART, 0x402e8bf8}, NULL, 8) = 0
rt_sigaction(SIGHUP, {SIG_IGN}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGPIPE, {SIG_IGN}, {SIG_DFL}, 8) = 0
rt_sigaction(SIGCHLD, {SIG_DFL}, NULL, 8) = 0
umask(0)                                = 022
geteuid32()                             = 0
getuid32()                              = 0
getgid32()                              = 0
setgid32(0)                             = 0
setuid32(0)                             = 0
getrlimit(RLIMIT_NOFILE, {rlim_cur=1024, rlim_max=1024}) = 0
setrlimit(RLIMIT_NPROC, {rlim_cur=RLIM_INFINITY, rlim_max=RLIM_INFINITY}) = 0
getgroups32(0x20, 0xbffffa70)           = 11
setgroups32(0, 0)                       = 0
getegid32()                             = 0
geteuid32()                             = 0
geteuid32()                             = 0
getegid32()                             = 0
setgid32(0)                             = 0
setuid32(0)                             = 0
open("/etc/exim/exim.conf", O_RDONLY)   = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=22559, ...}) = 0
fstat64(3, {st_mode=S_IFREG|0644, st_size=22559, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40014000
read(3, "################################"..., 4096) = 4096
read(3, "specifies domains for which your"..., 4096) = 4096
read(3, "ls have problemsn# with them. Th"..., 4096) = 4096
chdir("/var/spool/exim")                = 0
setgid32(0xc)                           = 0
read(3, "ist.examplen  ##################"..., 4096) = 4096
read(3, " an alias for "postmaster".n#n# "..., 4096) = 4096
read(3, "nsport is used for handling auto"..., 4096) = 2079
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0x40014000, 4096)                = 0
socket(PF_UNIX, SOCK_STREAM, 0)         = 3
connect(3, {sa_family=AF_UNIX, path="/var/run/.nscd_socket"}, 110) = -1 ENOENT (No such file or directory)
close(3)                                = 0
open("/etc/nsswitch.conf", O_RDONLY)    = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=498, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40014000
read(3, "# /etc/nsswitch.conf:n# $Header:"..., 4096) = 498
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0x40014000, 4096)                = 0
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=15778, ...}) = 0
mmap2(NULL, 15778, PROT_READ, MAP_PRIVATE, 3, 0) = 0x40014000
close(3)                                = 0
open("/lib/libnss_compat.so.2", O_RDONLY) = 3
read(3, "177ELF111\0\0\0\0\0\0\0\0\03\03\01\0\0\030021"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=27396, ...}) = 0
mmap2(NULL, 29828, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x4051e000
mmap2(0x40525000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x6) = 0x40525000
close(3)                                = 0
munmap(0x40014000, 15778)               = 0
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=15778, ...}) = 0
mmap2(NULL, 15778, PROT_READ, MAP_PRIVATE, 3, 0) = 0x40014000
close(3)                                = 0
open("/lib/libnss_nis.so.2", O_RDONLY)  = 3
read(3, "177ELF111\0\0\0\0\0\0\0\0\03\03\01\0\0\022033"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=32588, ...}) = 0
mmap2(NULL, 34504, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x40526000
mmap2(0x4052e000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x7) = 0x4052e000
close(3)                                = 0
open("/lib/libnss_files.so.2", O_RDONLY) = 3
read(3, "177ELF111\0\0\0\0\0\0\0\0\03\03\01\0\0\0\035\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=34588, ...}) = 0
mmap2(NULL, 36760, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x4052f000
mmap2(0x40537000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x7) = 0x40537000
close(3)                                = 0
munmap(0x40014000, 15778)               = 0
open("/etc/passwd", O_RDONLY)           = 3
fcntl64(3, F_GETFD)                     = 0
fcntl64(3, F_SETFD, FD_CLOEXEC)         = 0
_llseek(3, 0, [0], SEEK_CUR)            = 0
fstat64(3, {st_mode=S_IFREG|0644, st_size=1886, ...}) = 0
mmap2(NULL, 1886, PROT_READ, MAP_SHARED, 3, 0) = 0x40014000
_llseek(3, 1886, [1886], SEEK_SET)      = 0
munmap(0x40014000, 1886)                = 0
close(3)                                = 0
close(0)                                = 0
close(1)                                = 0
close(2)                                = 0
getppid()                               = 21836
fork()                                  = 21838
exit_group(0)

Werd aber irgendwie nicht schlau, warum es auf dem 2. Rechner einwandfrei läuft und auf dem anderen nicht :( :( :(

[captaincrunch]

OpenSSL auf der Kiste, auf der es nicht läuft sauber installiert? Wie hast du Exim aufgesetzt? Wie schaut die Config aus?

Fragen über Fragen... ;)

[giga]

also so siehts aus:

Gentoo:
- Exim 4.21
- openssl-0.9.7d
- amavisd-new-20030616_p8
- Mail-SpamAssassin-2.63

exim.conf:

Code: Select all

######################################################################
#                  Runtime configuration file for Exim               #
######################################################################

# This is a default configuration file which will operate correctly in
# uncomplicated installations. Please see the manual for a complete list
# of all the runtime configuration options that can be included in a
# configuration file. There are many more than are mentioned here. The
# manual is in the file doc/spec.txt in the Exim distribution as a plain
# ASCII file. Other formats (PostScript, Texinfo, HTML, PDF) are available
# from the Exim ftp sites. The manual is also online at the Exim web sites.


# This file is divided into several parts, all but the first of which are
# headed by a line starting with the word "begin". Only those parts that
# are required need to be present. Blank lines, and lines starting with #
# are ignored.


########### IMPORTANT ########## IMPORTANT ########### IMPORTANT ###########
#                                                                          #
# Whenever you change Exim's configuration file, you *must* remember to    #
# HUP the Exim daemon, because it will not pick up the new configuration   #
# until you do. However, any other Exim processes that are started, for    #
# example, a process started by an MUA in order to send a message, will    #
# see the new configuration as soon as it is in place.                     #
#                                                                          #
# You do not need to HUP the daemon for changes in auxiliary files that    #
# are referenced from this file. They are read every time they are used.   #
#                                                                          #
# It is usually a good idea to test a new configuration for syntactic      #
# correctness before installing it (for example, by running the command    #
# "exim -C /config/file.new -bV").                                         #
#                                                                          #
########### IMPORTANT ########## IMPORTANT ########### IMPORTANT ###########



######################################################################
#                    MAIN CONFIGURATION SETTINGS                     #
######################################################################

# Specify your host's canonical name here. This should normally be the fully
# qualified "official" name of your host. If this option is not set, the
# uname() function is called to obtain the name. In many cases this does
# the right thing and you need not set anything explicitly.

primary_hostname = smtp.domain.de


# The next three settings create two lists of domains and one list of hosts.
# These lists are referred to later in this configuration using the syntax
# +local_domains, +relay_to_domains, and +relay_from_hosts, respectively. They
# are all colon-separated lists:

domainlist local_domains = @
domainlist virtual_domains = /etc/exim/maps/virtual_domains
domainlist all_local_domains = +virtual_domains : +local_domains

domainlist relay_to_domains = domain2.de
hostlist   relay_from_hosts = 127.0.0.1  : xxx.xxx.xxx.xxx

local_interfaces = 0.0.0.0.25 : 127.0.0.1.10025

# Most straightforward access control requirements can be obtained by
# appropriate settings of the above options. In more complicated situations, you
# may need to modify the Access Control List (ACL) which appears later in this
# file.

# The first setting specifies your local domains, for example:
#
#   domainlist local_domains = my.first.domain : my.second.domain
#
# You can use "@" to mean "the name of the local host", as in the default
# setting above. This is the name that is specified by primary_hostname,
# as specified above (or defaulted). If you do not want to do any local
# deliveries, remove the "@" from the setting above. If you want to accept mail
# addressed to your host's literal IP address, for example, mail addressed to
# "user@[192.168.23.44]", you can add "@[]" as an item in the local domains
# list. You also need to uncomment "allow_domain_literals" below. This is not
# recommended for today's Internet.

# The second setting specifies domains for which your host is an incoming relay.
# If you are not doing any relaying, you should leave the list empty. However,
# if your host is an MX backup or gateway of some kind for some domains, you
# must set relay_to_domains to match those domains. For example:
#
# domainlist relay_to_domains = *.myco.com : my.friend.org
#
# This will allow any host to relay through your host to those domains.
# See the section of the manual entitled "Control of relaying" for more
# information.

# The third setting specifies hosts that can use your host as an outgoing relay
# to any other host on the Internet. Such a setting commonly refers to a
# complete local network as well as the localhost. For example:
#
# hostlist relay_from_hosts = 127.0.0.1 : 192.168.0.0/16
#
# The "/16" is a bit mask (CIDR notation), not a number of hosts. Note that you
# have to include 127.0.0.1 if you want to allow processes on your host to send
# SMTP mail by using the loopback address. A number of MUAs use this method of
# sending mail.


# All three of these lists may contain many different kinds of item, including
# wildcarded names, regular expressions, and file lookups. See the reference
# manual for details. The lists above are used in the access control list for
# incoming messages. The name of this ACL is defined here:

acl_smtp_rcpt = acl_check_rcpt

# You should not change that setting until you understand how ACLs work.


# Specify the domain you want to be added to all unqualified addresses
# here. An unqualified address is one that does not contain an "@" character
# followed by a domain. For example, "caesar@rome.example" is a fully qualified
# address, but the string "caesar" (i.e. just a login name) is an unqualified
# email address. Unqualified addresses are accepted only from local callers by
# default. See the recipient_unqualified_hosts option if you want to permit
# unqualified addresses from remote sources. If this option is not set, the
# primary_hostname value is used for qualification.

qualify_domain = domain.de


# If you want unqualified recipient addresses to be qualified with a different
# domain to unqualified sender addresses, specify the recipient domain here.
# If this option is not set, the qualify_domain value is used.

# qualify_recipient =


# The following line must be uncommented if you want Exim to recognize
# addresses of the form "user@[10.11.12.13]" that is, with a "domain literal"
# (an IP address) instead of a named domain. The RFCs still require this form,
# but it makes little sense to permit mail to be sent to specific hosts by
# their IP address in the modern Internet. This ancient format has been used
# by those seeking to abuse hosts by using them for unwanted relaying. If you
# really do want to support domain literals, uncomment the following line, and
# see also the "domain_literal" router below.

# allow_domain_literals


# No deliveries will ever be run under the uids of these users (a colon-
# separated list). An attempt to do so causes a panic error to be logged, and
# the delivery to be deferred. This is a paranoic safety catch. Note that the
# default setting means you cannot deliver mail addressed to root as if it
# were a normal user. This isn't usually a problem, as most sites have an alias
# for root that redirects such mail to a human administrator.

never_users = root


# The setting below causes Exim to do a reverse DNS lookup on all incoming
# IP calls, in order to get the true host name. If you feel this is too
# expensive, you can specify the networks for which a lookup is done, or
# remove the setting entirely.

# host_lookup = *


# The settings below, which are actually the same as the defaults in the
# code, cause Exim to make RFC 1413 (ident) callbacks for all incoming SMTP
# calls. You can limit the hosts to which these calls are made, and/or change
# the timeout that is used. If you set the timeout to zero, all RFC 1413 calls
# are disabled. RFC 1413 calls are cheap and can provide useful information
# for tracing problem messages, but some hosts and firewalls have problems
# with them. This can result in a timeout instead of an immediate refused
# connection, leading to delays on starting up an SMTP session.

rfc1413_hosts = *
rfc1413_query_timeout = 30s


# By default, Exim expects all envelope addresses to be fully qualified, that
# is, they must contain both a local part and a domain. If you want to accept
# unqualified addresses (just a local part) from certain hosts, you can specify
# these hosts by setting one or both of
#
# sender_unqualified_hosts =
# recipient_unqualified_hosts =
#
# to control sender and recipient addresses, respectively. When this is done,
# unqualified addresses are qualified using the settings of qualify_domain
# and/or qualify_recipient (see above).


# If you want Exim to support the "percent hack" for certain domains,
# uncomment the following line and provide a list of domains. The "percent
# hack" is the feature by which mail addressed to x%y@z (where z is one of
# the domains listed) is locally rerouted to x@y and sent on. If z is not one
# of the "percent hack" domains, x%y is treated as an ordinary local part. This
# hack is rarely needed nowadays; you should not enable it unless you are sure
# that you really need it.
#
# percent_hack_domains =
#
# As well as setting this option you will also need to remove the test
# for local parts containing % in the ACL definition below.


# When Exim can neither deliver a message nor return it to sender, it "freezes"
# the delivery error message (aka "bounce message"). There are also other
# circumstances in which messages get frozen. They will stay on the queue for
# ever unless one of the following options is set.

# This option unfreezes frozen bounce messages after two days, tries
# once more to deliver them, and ignores any delivery failures.

ignore_bounce_errors_after = 2d

# This option cancels (removes) frozen messages that are older than a week.

timeout_frozen_after = 2d



######################################################################
#                       ACL CONFIGURATION                            #
#         Specifies access control lists for incoming SMTP mail      #
######################################################################

begin acl

# This access control list is used for every RCPT command in an incoming
# SMTP message. The tests are run in order until the address is either
# accepted or denied.

acl_check_rcpt:

  # Accept if the source is local SMTP (i.e. not over TCP/IP). We do this by
  # testing for an empty sending host field.

  accept  hosts = :

  # Deny if the local part contains @ or % or / or | or !. These are rarely
  # found in genuine local parts, but are often tried by people looking to
  # circumvent relaying restrictions.

  # Also deny if the local part starts with a dot. Empty components aren't
  # strictly legal in RFC 2822, but Exim allows them because this is common.
  # However, actually starting with a dot may cause trouble if the local part
  # is used as a file name (e.g. for a mailing list).

  deny    local_parts   = ^.*[@%!/|] : ^\.

  # Accept mail to postmaster in any local domain, regardless of the source,
  # and without verifying the sender.

  accept  local_parts   = postmaster
          domains       = + all_local_domains

  # Deny unless the sender address can be verified.

  require verify        = sender

  #############################################################################
  # There are no checks on DNS "black" lists because the domains that contain
  # these lists are changing all the time. However, here are two examples of
  # how you could get Exim to perform a DNS black list lookup at this point.
  # The first one denies, while the second just warns.
  #
  # deny    message       = rejected because $sender_host_address is in a black list at $dnslist_domainn$dnslist_text
  #         dnslists      = black.list.example
  #
  # warn    message       = X-Warning: $sender_host_address is in a black list at $dnslist_domain
  #         log_message   = found in $dnslist_domain
  #         dnslists      = black.list.example
  #############################################################################

  # Accept if the address is in a local domain, but only if the recipient can
  # be verified. Otherwise deny. The "endpass" line is the border between
  # passing on to the next ACL statement (if tests above it fail) or denying
  # access (if tests below it fail).

  accept  domains       = +all_local_domains
          endpass
          message       = unknown user
          verify        = recipient

  # Accept if the address is in a domain for which we are relaying, but again,
  # only if the recipient can be verified.

  accept  domains       = +relay_to_domains
          endpass
          message       = unrouteable address
          verify        = recipient

  # If control reaches this point, the domain is neither in +local_domains
  # nor in +relay_to_domains.

  # Accept if the message comes from one of the hosts for which we are an
  # outgoing relay. Recipient verification is omitted here, because in many
  # cases the clients are dumb MUAs that don't cope well with SMTP error
  # responses. If you are actually relaying out from MTAs, you should probably
  # add recipient verification here.

  accept  hosts         = +relay_from_hosts

  # Accept if the message arrived over an authenticated connection, from
  # any host. Again, these messages are usually from MUAs, so recipient
  # verification is omitted.

  accept  authenticated = *

  # Reaching the end of the ACL causes a "deny", but we might as well give
  # an explicit message.

  deny    message       = relay not permitted



######################################################################
#                      ROUTERS CONFIGURATION                         #
#               Specifies how addresses are handled                  #
######################################################################
#     THE ORDER IN WHICH THE ROUTERS ARE DEFINED IS IMPORTANT!       #
# An address is passed to each router in turn until it is accepted.  #
######################################################################

begin routers

amavis:
        driver = manualroute
        condition = "${if or {{eq {$interface_port}{10025}} 
                          {eq {$received_protocol}{spam-scanned}} 
                          {eq {$sender_address}{}} 
                         }{0}{1}}"
        # if scanning incoming mails, uncomment the following line and
        # change local_domains accordingly
        # domains = +all_local_domains
        no_verify
        transport = amavis
        route_list = "* localhost byname"
        self = send

spamcheck_director:
    driver = accept
    condition = "${if and { {!def:h_X-Spam-Flag:} 
    {!eq {$received_protocol}{spam-scanned}} {!eq {$received_protocol}{local}} } {1}{0}}"
    # Nur Domains scannen, die in /etc/exim/maps/spamcheck_domains stehen
    domains = lsearch;/etc/exim/maps/spamcheck_domains
    retry_use_local_part
    transport = spamcheck
    no_verify
    # ein paar absender müssen nicht gescannt werden !
    senders = !lsearch;/etc/exim/maps/do_not_scan_senders
    # do_not_scan_senders wird einfach mit den entsprechenden Emailadressen beschrieben

dnslookup:
  driver = dnslookup
  domains = ! +all_local_domains
  transport = remote_smtp
  ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8
  no_more

virtual_localuser:
	driver = accept
    condition = ${if eq {}{${lookup{$local_part}lsearch{/etc/exim/virtual/${domain}/passwd}}}{no}{yes}}
	retry_use_local_part
    transport = virtual_localdelivery

virtual_alias:
	driver = redirect
    allow_defer
    allow_fail
    data = ${lookup{$local_part}lsearch*{/etc/exim/virtual/${domain}/aliases}}
	qualify_preserve_domain
    retry_use_local_part
    user = mail


system_aliases:
  driver = redirect
  allow_fail
  allow_defer
  data = ${lookup{$local_part}lsearch{/etc/aliases}}
# user = exim
  file_transport = address_file
  pipe_transport = address_pipe

userforward:
  driver = redirect
  check_local_user
  file = $home/.forward
  no_verify
  no_expn
  check_ancestor
# allow_filter
  file_transport = address_file
  pipe_transport = address_pipe
  reply_transport = address_reply


# This router matches local user mailboxes.

localuser:
  driver = accept
  check_local_user
  transport = local_delivery



######################################################################
#                      TRANSPORTS CONFIGURATION                      #
######################################################################
#                       ORDER DOES NOT MATTER                        #
#     Only one appropriate transport is called for each delivery.    #
######################################################################

# A transport is used only when referenced from a router that successfully
# handles an address.

begin transports

amavis:
       driver = smtp
       port = 10024
       allow_localhost

spamcheck:
	driver = pipe
	batch_max = 100
	command = /usr/sbin/exim -oMr spam-scanned -bS
	current_directory = "/tmp"
	user = mail
	group = mail
	home_directory = "/tmp"
	log_output
	message_prefix =
	message_suffix =
	return_fail_output
	no_return_path_add
	transport_filter = /usr/bin/spamc
	use_bsmtp

virtual_localdelivery:
	driver = appendfile
    create_directory
    directory_mode = 700
    file = /var/spool/virtual/${domain}/${local_part}
	group = mail
    headers_remove = "Bcc"
    mode = 660
    user = mail

remote_smtp:
  driver = smtp
  headers_remove = "X-List:Bcc"

local_delivery:
  driver = appendfile
  file = /var/spool/mail/$local_part
  delivery_date_add
  envelope_to_add
  return_path_add
# group = mail
# mode = 0660


# This transport is used for handling pipe deliveries generated by alias or
# .forward files. If the pipe generates any standard output, it is returned
# to the sender of the message as a delivery error. Set return_fail_output
# instead of return_output if you want this to happen only when the pipe fails
# to complete normally. You can set different transports for aliases and
# forwards if you want to - see the references to address_pipe in the routers
# section above.

address_pipe:
  driver = pipe
  return_output


# This transport is used for handling deliveries directly to files that are
# generated by aliasing or forwarding.

address_file:
  driver = appendfile
  delivery_date_add
  envelope_to_add
  return_path_add


# This transport is used for handling autoreplies generated by the filtering
# option of the userforward router.

address_reply:
  driver = autoreply



######################################################################
#                      RETRY CONFIGURATION                           #
######################################################################

begin retry

# This single retry rule applies to all domains and all errors. It specifies
# retries every 15 minutes for 2 hours, then increasing retry intervals,
# starting at 1 hour and increasing each time by a factor of 1.5, up to 16
# hours, then retries every 6 hours until 4 days have passed since the first
# failed delivery.

# Domain               Error       Retries
# ------               -----       -------

*                      *           F,2h,15m; G,16h,1h,1.5; F,4d,6h



######################################################################
#                      REWRITE CONFIGURATION                         #
######################################################################

# There are no rewriting specifications in this default configuration file.

begin rewrite



######################################################################
#                   AUTHENTICATION CONFIGURATION                     #
######################################################################

# There are no authenticator specifications in this default configuration file.

begin authenticators

fixed_plain:
driver = plaintext
public_name = PLAIN
server_condition = "
    ${if and {{!eq{$2}{}}{!eq{$3}{}} 
    {eq{$3}{${extract{1}{:} 
    {${lookup{$2}lsearch{/etc/exim/auth}{$value}{*:*}}}}}}}{1}{0}}"
server_set_id = $2

login_plain:
driver = plaintext
public_name = LOGIN
server_prompts = "Username:: : Password::"
server_condition = "
    # $1 = Username | $2 = password
    ${if and {{!eq{$1}{}}{!eq{$2}{}} 
    {eq{$2}{${extract{1}{:} 
    {${lookup{$1}lsearch{/etc/exim/auth}{$value}{*:*}}}}}}}{1}{0}}"
server_set_id = $1

fixed_cram:
driver = cram_md5
public_name = CRAM-MD5
server_secret = "${if eq{$1}{$1} 
    {${lookup{$1}lsearch{/etc/exim/auth}{$value}{*:*}}}fail}"
server_set_id = $1




# End of Exim configuration file

[captaincrunch]

Ich seh da nüscht von SSL/TLS in der Config... ;)

[giga]

Ich seh da nüscht von SSL/TLS in der Config... ;)

Moment :roll:

So wie ich das verstanden hatte muss da nix rein, auf dem anderen Rechner steht auch nix drin. Werd mich mal auf die Suche nach nem Howto machen oder kennt jemand eins?

:oops:

Jetzt bin ich bisschen verwirrt. Ich will meine eMails zum Mailserver hin verschlüsseln. Ist da das HowTo passend????

http://www.credentia.cc/certs/howto/exim.html

Oder ist das nur zwischen Mailservern oder für was ist das denn gut? 8O

[dodolin]

Ich will meine eMails zum Mailserver hin verschlüsseln.

Geht das genauer? Was willst du du genau tun?

Ist da das HowTo passend????

http://www.credentia.cc/certs/howto/exim.html

Oder ist das nur zwischen Mailservern oder für was ist das denn gut?

Ja, das ist für "zwischen Mailservern". BTW: Deine Config passt aber nicht wirklich zu diesem Howto, falls du danach bereits vorgegangen wärest.