On Sun, Jan 09, 2022 at 06:14:36PM +0100, karsten wrote: > Am 09.01.22 um 18:07 schrieb Marc Haber: > > Most information one finds on a search engine is outdated and maybe even > > wrong. And the current information regading brand new software is often > > not indexed yet. > > > > > .ifdef _OPT_MAIN_ALLOW_INSECURE_TAINTED_DATA > > > allow_insecure_tainted_data = yes > > > .endif > > > > This will only work as a temporary measure and will be removed in the > > future. You should work on getting your configuration to work with the > > tightened security features newer exims come. > > Yes - the other possibility is to prevent upgrades of this package.
That is a decidedly bad idea. Exim is a huge suid binary (a design one out never choose today, the concept was valid 25 years ago) and you need security updates for that. > But there are additional other problems like spamassasin does not work any > more, > so the configuration must be updated in many kinds. Spamassassin in YOUR configuration doesn't work any more. My systems using spamassassin via exiscan-ACL have not even ridden a bump during the upgrade. > > If that are issues with Debian's default configuration please file bugs > > so that we can fix them, if it's issues with your local configuration > > you're on your own with that. > > Is there a default configuration for a private virtual mail server on dynamic > IP's ? Not that I am aware of. But if you roll yourself, you need to be able to take care of it. I think there might be solutions that might be better suited to your needs than Exim. btw, this triggers me, as "virtual mail" does not have a definition, it leaves like ten way to interpret the task at hand. Greetings Marc -- ----------------------------------------------------------------------------- Marc Haber | "I don't trust Computers. They | Mailadresse im Header Leimen, Germany | lose things." Winona Ryder | Fon: *49 6224 1600402 Nordisch by Nature | How to make an American Quilt | Fax: *49 6224 1600421

