--- /dev/null
- chapters 3 and 6. <filename>spec.txt.gz</filename> is an excellent
- reference.
+<?xml version="1.0" encoding="utf-8"?>
+<!DOCTYPE article PUBLIC "-//OASIS//DTD DocBook XML V4.4//EN"
+ "http://www.docbook.org/xml/4.4/docbookx.dtd">
+<article> <title>Exim 4 for Debian</title>
+ <section> <title>Introduction</title>
+ <para>
+ If you're reading this, you have found the README.Debian
+ file. This is good, thanks! Please continue reading this file in
+ its entirety. It is full of important information and has been
+ written with the questions in mind that keep popping up on the
+ mailing lists.
+ </para>
+ <section> <title>How to find your way around the Documentation</title>
+ <para>
+ Exim comes with very extensive documentation. Here is how to
+ find it.
+ <orderedlist>
+ <listitem>
+ <simpara>
+ A lot of information about Debian's Exim 4
+ packaging can be found in this document.
+ </simpara>
+ </listitem>
+ <listitem>
+ <simpara>
+ The packages contain a lot of Debian-specific man pages.
+ Use the <command>apropos exim</command> command to get a list.
+ </simpara>
+ </listitem>
+ <listitem>
+ <simpara>
+ Most files that control the default configuration are
+ documented in the exim4-config_files(5) man page, which
+ is symlinked to the file names. man <filename> should
+ lead you to the page.
+ </simpara>
+ </listitem>
+ <listitem>
+ <simpara>
+ The Debian Exim 4 packages have their own
+ <ulink url="http://pkg-exim4.alioth.debian.org">
+ Home Page
+ </ulink> which also links to a User FAQ.
+ </simpara>
+ </listitem>
+ <listitem>
+ <para>
+ The very extensive Upstream documentation is shipped
+ <orderedlist>
+ <listitem>
+ <simpara>
+ in text form
+ (<filename>/usr/share/doc/exim4-base/spec.txt.gz</filename>)
+ with the binary packages.
+ </simpara>
+ </listitem>
+ <listitem>
+ <simpara>
+ in HTML in the package
+ <filename>exim4-doc-html</filename>
+ </simpara>
+ </listitem>
+ <listitem>
+ <simpara>
+ as a Texinfo file in the package
+ <filename>exim4-doc-info</filename>
+ </simpara>
+ </listitem>
+ </orderedlist>
+ </para>
+ </listitem>
+ </orderedlist>
+ </para>
+ <para>
+ Please note that documentation found on the web or in other
+ parts of the Debian system (such as the Debian Reference)
+ might be outdated and thus give wrong advice. In doubt, the
+ documentation listed above should take precedence.
+ </para>
+ </section>
+ <section> <title>Getting Support</title>
+ <para>
+ For your questions and comments, there is a <ulink
+ url="http://lists.alioth.debian.org/mailman/listinfo/pkg-exim4-users">
+ Debian-specific mailing list</ulink>. Please ask Debian-specific
+ questions there, and only write to the upstream exim-users mailing
+ list if
+ you are sure that your question is not Debian-specific.
+ Debian-specific questions are more likely to find answers on
+ our pkg-exim4-users mailing list, while complex custom
+ configuration issues might be more easily solved on the
+ upstream exim-users mailing list because of the broader and
+ more experienced audience there. You can subscribe to
+ pkg-exim4-users <ulink
+ url="http://lists.alioth.debian.org/mailman/listinfo/pkg-exim4-users">
+ via the subscription web page;</ulink> you need to be
+ subscribed to post.
+ </para>
+ <para>
+ If you think that your question might be more easily answered
+ if one knows a bit about your configuration, you might want to
+ execute <command>reportbug --subject="none" --offline --quiet
+ --severity=wishlist --body="none" --output=exim4.reportbug
+ exim4-config</command> on the system in question, answer yes
+ to both "include [extended] configuration" questions and include
+ the contents of the exim4.reportbug file generated by this
+ command with your question. Please check whether the file
+ contains any confidential information before sending.
+ </para>
+ </section>
+ <section> <title>Packaging</title>
+ <para>
+ Similar to the Apache2 package, Exim 4 is an entirely
+ different package that does not currently offer a smooth
+ upgrade path from Debian's Exim 3 packages.
+ </para>
+ <para>
+ It is the first Exim package in Debian that can be configured
+ using debconf. However, the entire configuration framework is
+ extremely flexible, allowing you to get exactly the amount of
+ control you need for the job at hand.
+ </para>
+ <para>
+ The <ulink url="http://pkg-exim4.alioth.debian.org"
+ type="http">development web page</ulink> contains a lot of
+ useful links and other information. The subversion repository
+ of the Debian package is available for public read-only access
+ and is linked from the development web page.
+ </para>
+ <section> <title>Feature Sets in the daemon packages</title>
+ <para>
+ To use Exim 4, you need at least the following packages:
+ <variablelist>
+ <varlistentry>
+ <term>exim4-base</term>
+ <listitem>
+ <simpara>support files for all Exim MTA (v4) packages</simpara>
+ </listitem>
+ </varlistentry>
+ <varlistentry>
+ <term>exim4-config</term>
+ <listitem>
+ <simpara>configuration for the Exim MTA (v4)</simpara>
+ </listitem>
+ </varlistentry>
+ <varlistentry>
+ <term>exim4-daemon-light</term>
+ <listitem>
+ <simpara>lightweight exim MTA (v4) daemon</simpara>
+ </listitem>
+ </varlistentry>
+ </variablelist>
+ </para>
+ <para>
+ Just apting the metapackage <command>exim4</command> will pull
+ in the other packages per dependency. You'll get an exim daemon
+ with minimal feature set (no external lookups).
+ </para>
+ <para>
+ If you need more advanced features like LDAP, sqlite, PostgreSQL
+ and MySQL data lookups, SASL and SPA SMTP authentication, embedded
+ Perl interpreter, and exiscan-acl for integration of
+ virus-scanners and SpamAssassin, you can replace
+ <command>exim4-daemon-heavy</command> instead of
+ <command>exim4-daemon-light</command>. Additionally, the source
+ package offers infrastructure to build your own custom-tailored
+ exim4-daemon-custom which exactly fits your special local needs.
+ The infrastructure to do so is already in place, see
+ debian/rules for instructions.
+ </para>
+ </section>
+ <section> <title>How to build a custom daemon</title>
+ <para>
+ The process of building a custom daemon is partially
+ documented in the <filename>debian/rules</filename> file
+ in the source package. Patches for more documentation are welcome.
+ </para>
+ </section>
+ </section>
+ </section>
+ <section> <title>Configuration of Exim 4 in the Debian packages</title>
+ <para>
+ Generally, the Debian Exim 4 packages are configured through
+ debconf. You have been asked some questions on package installation,
+ and your initial Exim configuration has been created from your
+ answers. You can repeat the configuration process any time by invoking
+ <command>dpkg-reconfigure exim4-config</command>. If you are an
+ experienced Exim administrator and prefer to have your own,
+ hand-crafted, non-automatic Exim configuration, you will find
+ information about how to do so in
+ <xref linkend="completely-different-configuration"/>.
+ </para>
+ <para>
+ The debconf-driven configuration is mainly geared for a
+ one-domain shell account machine/workstation with local delivery
+ as suggested by the original upstream default configuration.
+ If you configure the packages to handle more than one local
+ domain, all local domains are treated identically. The domain
+ part is not used for routing and filtering decisions.
+ </para>
+ <para>
+ Despite the default configuration being extended somewhat from
+ the original upstream, chances are that you'll need to
+ manually change the Exim configuration with an editor if you intend to
+ do something that is not covered by the debconf-driven configuration.
+ It has never been the packages' intention to offer all possible
+ configuration methods through debconf. The configuration files are
+ there to be changed, feel free to do so if you see fit. The Debian
+ Exim 4 maintainers have tried to make the configuration as flexible as
+ possible so that manual intervention can be minimized.
+ </para>
+ <para>
+ If you need to make manual changes to the Exim configuration,
+ please be familiar with how Exim works. At minimum, have read this
+ README file and the manpages delivered with the Debian Exim 4
+ packages, and <filename>/usr/share/doc/exim4-base/spec.txt.gz</filename>
- <ulink url="http://www.exim.org/exim-html-current/doc/html/spec_html/ch-domain_host_address_and_local_part_lists.html">
- Exim specification - chapter Domain, host, address, and
- local part lists
- </ulink> and the exim4-config_files man page.
++ chapters <phrase>"How Exim receives and delivers mail"</phrase> and
++ <phrase>"The Exim run time configuration file"</phrase>.
++ <filename>spec.txt.gz</filename> is an excellent reference.
+ </para>
+ <para>
+ Please note that while most free-form fields in the
+ debconf-driven configuration have the entered string end up
+ verbatim in Exim's configuration file (and thus using more
+ advanced features like host, address and domain lists is possible
+ and will probably work), this is not officially supported.
+ Only plain lists are supported in the debconf dialogs. You may
+ use more advanced features, but they may stop working any time
+ during upgrades.
+ </para>
+ <section> <title>The Configuration System</title>
+ <section id="debconf-questions"> <title>The Debconf questions</title>
+ <para>
+ In this section, we try to document and explain the debconf
+ questions, which are themselves limited to a small screen of
+ information and might leave questions unanswered. Since you
+ can usually read this file only after having answered the
+ questions, the process can always be repeated by invoking
+ <command>dpkg-reconfigure exim4-config.</command>
+ <filename>/etc/exim4/update-exim4.conf.conf</filename>,
+ documented in the <command>update-exim4.conf</command>
+ manual page, is
+ a simple shell-script snippet used to store the answers
+ that you passed to debconf when initially configuring Exim.
+ You may also modify this file with an editor of your choice.
+ The package maintainer scripts can handle this and will
+ preserve your changes.
+ </para>
+ <section> <title>General type of mail configuration</title>
+ <para>
+ This is the main configuration question which will
+ control which of the remaining questions are
+ presented to you. It also controls things like daemon
+ invocation and delivery of outgoing mail.
+ </para>
+ <section> <title> internet site; mail is sent and
+ received directly using SMTP</title>
+ <para>
+ This option is suitable for a standalone system
+ with full internet connectivity.
+ </para>
+ <itemizedlist>
+ <listitem>
+ <para>
+ The Exim SMTP daemon will accept messages
+ to local domains, and deliver them locally.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ Outgoing mail will be delivered directly
+ to the mail exchange servers of the
+ recipient domain
+ </para>
+ </listitem>
+ </itemizedlist>
+ </section>
+ <section> <title> mail sent by smarthost; received via
+ SMTP or fetchmail</title>
+ <para>
+ This option is suitable for a standalone client system
+ which has restricted internet connectivity, for
+ example on a residential connection where an SMTP
+ smarthost is used. Some ISPs block outgoing SMTP
+ connections to combat the spam problem, thus
+ requiring the use of their smarthosts. It is
+ generally a good idea to use the ISPs smart host
+ if one is connected with a dynamic IP address
+ since quite a few sites do not accept mail
+ directly delivered from a dial-in pool.
+ </para>
+ <para>
+ fetchmail can be used to retrieve incoming mail
+ from the ISP's POP3 or IMAP mail server and
+ deliver it to Exim via SMTP.
+ </para>
+ <itemizedlist>
+ <listitem>
+ <para>
+ The Exim SMTP daemon will accept messages
+ to local domains, and deliver them locally.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ Outgoing mail will always be delivered to
+ the smarthost configured in exim4.
+ </para>
+ </listitem>
+ </itemizedlist>
+ </section>
+ <section> <title>mail sent by smarthost; no local mail</title>
+ <para>
+ This option is suitable for a client system in a
+ computer pool which is not responsible for a local
+ e-mail domain. All locally generated e-mail is
+ sent to the smarthost without any local domains.
+ </para>
+ </section>
+ <section> <title>local delivery only; not on a network</title>
+ <para>
+ This option is suitable for a standalone system
+ with no networking at all. Only messages for configured
+ local domains are accepted and delivered locally;
+ messages for all other domains are rejected:
+ ``Mailing to remote domains not supported''.
+ </para>
+ </section>
+ <section> <title>no configuration at this time</title>
+ <para>
+ This option disables most of Debian's automatisms
+ and leaves exim in an unconfigured state.
+ update-exim4.conf will still copy
+ <filename>/etc/exim4/exim4.conf.template</filename>
+ or concatenate the files from
+ <filename>/etc/exim4/conf.d,</filename> and will
+ not generate any configuration control macros.
+ Unless you manually edit the configuration source,
+ this will leave Exim with a syntactically invalid
+ configuration file, thus in a state where the
+ daemon won't even start.
+ </para>
+ <para>
+ Only choose this option if you know what you're
+ doing and are prepared to create your own Exim
+ configuration.
+ </para>
+ <para>
+ dpkg-conffile handling is still in place, and you
+ will be offered updates for configuration
+ snippets, as soon as they become available.
+ </para>
+ </section>
+ </section>
+ <section> <title>System mail name</title>
+ <para>
+ The "mail name" is the domain name used to "qualify"
+ mail addresses without a domain name.
+ </para>
+ <para>
+ This name will also be used by other programs. It
+ should be the single, full domain name (FQDN).
+ </para>
+ <para>
+ For example, if a mail address on the local host is
+ foo@example.org, then the correct value for this
+ option would be example.org.
+ </para>
+ <para>
+ Exim, as a rule, handles only fully qualified mail
+ addresses, that is, addresses with a local part, an @
+ sign and a domain. If confronted with an unqualified
+ address, that is, one without @ sign and without
+ domain, first thing exim does is qualify the address
+ by adding the @ sign and a domain.
+ </para>
+ <para>
+ This qualification happens for all addresses exim
+ encounters, be it sender, recipient or else.
+ </para>
+ <para>
+ The domain name used to qualify unqualified mail addresses
+ is called ``mail name'' on Debian systems and entered
+ in this debconf dialog. What you enter here will end
+ up in <filename>/etc/mailname,</filename> which is a
+ file that might be used by other programs as well.
+ </para>
+ <para>
+ In some configuration types, the package configuration
+ will offer you, at a later step, to hide this name
+ from outgoing messages by rewriting the headers.
+ </para>
+ </section>
+ <section> <title>IP addresses to listen on for incoming SMTP
+ connections</title>
+ <para>
+ Please enter a semicolon-separated list of IP addresses.
+ The Exim SMTP listener daemon will listen on all IP
+ addresses listed here.
+ </para>
+ <para>
+ An empty value will cause Exim to listen for connections
+ on all available network interfaces.
+ </para>
+ <para>
+ If this system does only receive e-mail directly from
+ local services (and not from other hosts),
+ it is suggested to prohibit external connections to the
+ local Exim daemon. Such services include e-mail
+ programs (MUSs) which talk to localhost only as well as
+ fetchmail. External connections are impossible when
+ 127.0.0.1 is entered here, as this will disable listening
+ on public network interfaces.
+ </para>
+ <para>
+ Do not change this unless you know what you are doing.
+ Altering this value could post a security risk to your
+ system. For most users, the default value is sufficient.
+ </para>
+ </section>
+ <section> <title>Other destinations for which mail is accepted</title>
+ <para>
+ Please enter a semicolon-separated list of recipient
+ domains for which this machine should consider itself
+ the final destination. These domains are commonly
+ called 'local domains'. The local hostname and 'localhost'
+ are always added to the list given here.
+ </para>
+ <para>
+ By default all local domains will be treated
+ identically. If both a.example and b.example are
+ local domains, acc@a.example and acc@b.example will
+ be delivered to the same final destination. If
+ different domain names should be treated differently,
+ it is necessary to edit the config files afterwards.
+ </para>
+ <para>
+ The answer to this question ends up in the list of
+ domains that Exim will consider local domains. Mail
+ for recipients in one of these domains will be
+ subject to local alias expansion and then delivered
+ locally in the appropriate configuration types.
+ </para>
+ </section>
+ <section> <title>Domains to relay mail for</title>
+ <para>
+ Please enter a semicolon-separated list of recipient
+ domains for which this system will relay mail, for
+ example as a fallback MX or mail gateway. This means
+ that this system will accept mail for these domains
+ from anywhere on the Internet and deliver them
+ according to local delivery rules.
+ </para>
+ <para>
+ Do not mention local domains here. Wildcards may be used.
+ </para>
+ <para>
+ The answer to this question is a list of the domains
+ for which Exim will relay messages coming in from anywhere
+ on the Internet.
+ </para>
+ </section>
+ <section> <title>Machines to relay mail for</title>
+ <para>
+ Please enter a semicolon-separated list of IP address
+ ranges for which this system will unconditionally relay
+ mail, functioning as a smarthost.
+ </para>
+ <para>
+ You should use the standard address/prefix format
+ (e.g. 194.222.242.0/24 or 5f03:1200:836f::/48).
+ </para>
+ <para>
+ If this system should not be a smarthost for any
+ other host, leave this list blank.
+ </para>
+ <para>
+ Please note that systems not listed here can still use
+ SMTP AUTH to relay through this system. If this system
+ only has clients on dynamic IP addresses that use SMTP
+ AUTH, leave this list blank as well. Do
+ <emphasis>NOT</emphasis> list 0.0.0.0/0!
+ </para>
+ <para>
+ Warning: While it is possible to use
+ host<emphasis>names</emphasis> instead of IP addresses in this
+ list extra care needs to be taken in this case.
+ <emphasis>Unresolvable names in the host list will break
+ relaying.</emphasis> See
- specified (See Exim specification, chapter 20.5).
++ Exim specification chapter <phrase>"Domain, host, address, and
++ local part lists"</phrase>
++ and the exim4-config_files man page.
+ </para>
+ </section>
+ <section> <title>IP address or host name of the outgoing
+ smarthost</title>
+ <para>
+ Please enter the IP address or the host name of a mail
+ server that this system should use as outgoing
+ smarthost. If the smarthost only accepts your mail on
+ a port different from TCP/25, append two colons and
+ the port number (for example smarthost.example::587 or
+ 192.168.254.254::2525). Colons in IPv6 addresses need
+ to be doubled.
+ </para>
+ <para>
+ If the smarthost requires authentication, please refer
+ to <xref linkend="smtp-auth"/> for notes about setting
+ up SMTP authentication.
+ </para>
+ <para>
+ Multiple smarthost entries are permitted, semicolon
+ separated. Each of the hosts is tried, in the order
- touching dpkg-conffiles itself is explitly allowed and wanted,
++ specified (See Exim specification, chapter
++ <phrase>"The manualroute router"</phrase>, section
++ <phrase>"How the list of hosts is used"</phrase>.)
+ </para>
+ </section>
+ <section> <title>Hide local mail name in outgoing mail</title>
+ <para>
+ The headers of outgoing mail can be rewritten to make
+ it appear to have been generated on a different
+ system, replacing the local host name in From,
+ Reply-To, Sender and Return-Path.
+ </para>
+ </section>
+ <section> <title>Visible domain name for local users</title>
+ <para>
+ If you ask Exim to hide the local mail name in
+ outgoing mail, it will next ask you for the domain
+ name that should be visible for your local users.
+ These information is then used to establish the
+ appropriate rewriting rules.
+ </para>
+ </section>
+ <section> <title>Keep number of DNS queries minimal
+ (Dial-on-Demand)</title>
+ <para>
+ In normal mode of operation Exim does DNS lookups at
+ startup, and when receiving or delivering messages.
+ This is for logging purposes and allows keeping down
+ the number of hard-coded values in the configuration.
+ </para>
+ <para>
+ If this system does not have a DNS full service
+ resolver available at all times (for example if its
+ Internet access is a dial-up line using
+ dial-on-demand), this might have unwanted
+ consequences. For example, starting up Exim or
+ running the queue (even with no messages waiting)
+ might trigger a costly dial-up-event.
+ </para>
+ <para>
+ This option should be selected if this system is
+ using Dial-on-Demand. If it has always-on Internet
+ access, this option should be disabled.
+ </para>
+ </section>
+ <section><title>Delivery method for local mail</title>
+ <para>
+ Exim is able to store locally delivered mail in
+ different formats. The most commonly used ones are
+ mbox and Maildir. mbox uses a single file for the
+ complete mail folder stored in /var/mail/. With
+ Maildir format every single message is stored in a
+ separate file in ~/Maildir/.
+ </para>
+ <para>
+ Please note that most mail tools in Debian expect the
+ local delivery method to be mbox in their default.
+ </para>
+ </section>
+ <section> <title>Split configuration into small files</title>
+ <para>
+ Our packages offer two (actually three, see
+ <xref linkend="completely-different-configuration"/>)
+ possibilities:
+ </para>
+ <orderedlist>
+ <listitem>
+ <simpara>
+ Generate Exim's configuration from
+ <filename>/etc/exim4/exim4.conf.template,</filename>
+ which is basically a normal Exim run-time
+ configuration file which will be supplemented
+ with some macros generated from Debconf in a
+ post-processing step before it is passed to exim.
+ </simpara>
+ </listitem>
+ <listitem>
+ <simpara>
+ Generate Exim's configuration from the
+ multiple files in
+ <filename>/etc/exim4/conf.d/</filename>. The
+ directories in
+ <filename>/etc/exim4/conf.d/</filename>
+ correspond to the sections of the Exim
+ run-time configuration file, so you should
+ easily find your way around there.
+ </simpara>
+ </listitem>
+ </orderedlist>
+ <para>
+ Splitting the configuration across multiple files
+ means that you have the actual configuration file
+ automatically generated from the files below
+ <filename>/etc/exim4/conf.d/</filename> by invoking
+ <command>update-exim4.conf</command>. Each section
+ of Exim's configuration has its own subdirectory and
+ the files in there are supposed to be read in
+ alphanumeric order.
+ <filename>router/00_exim4-config_header</filename>
+ is followed by
+ <filename>router/100_exim4-config_domain_literal</filename>,
+ ...
+ </para>
+ <para>
+ If you chose unsplit configuration,
+ <command>update-exim4.conf</command> builds the
+ configuration from
+ <filename>/etc/exim4/exim4.conf.template</filename>,
+ which is basically the files from
+ <filename>/etc/exim4/conf.d/</filename> concatenated
+ together at package build time, and thus guarantees
+ consistency on the target system.
+ </para>
+ <para>
+ In both cases, <command>update-exim4.conf</command>
+ generates exim configuration macros from the debconf
+ configuration values and puts them into
+ the actual configuration file, which is then used by
+ the Exim daemon. See the
+ <command>update-exim4.conf</command> manual
+ page for more in-depth information about this
+ mechanism.
+ </para>
+ <para>
+ Benefits of the split configuration approach:
+ <itemizedlist>
+ <listitem>
+ <simpara>
+ it means less work for you when upgrading.
+ If we shipped one big file and modified
+ for example the Maildir transport in a new
+ version you won't have to do manual
+ conffile merging unless you had changed
+ exactly <emphasis>this</emphasis>
+ transport.
+ </simpara>
+ </listitem>
+ <listitem>
+ <simpara>
+ It allows other packages (e.g. sa-exim) to
+ modify Exim's configuration by dropping
+ files into
+ <filename>/etc/exim4/conf.d</filename>.
+ This needs, however quite exact syncing
+ between the exim4 packages and the other,
+ cooperating package.
+ </simpara>
+ </listitem>
+ </itemizedlist>
+ </para>
+ <para>
+ Drawbacks of the split configuration approach:
+ <itemizedlist>
+ <listitem>
+ <simpara>
+ It is more fragile. If files from
+ different sources (package, manually
+ changed, or other package) get out of
+ sync, it is possible for Exim to break
+ until you manually correct this. This can
+ for example happen if we decide to add a
+ new option to the Debian setup of a later
+ version, and you have already set this
+ option in a local file.
+ </simpara>
+ </listitem>
+ </itemizedlist>
+ </para>
+ <para>
+ Benefits of the unsplit configuration approach:
+ <itemizedlist>
+ <listitem>
+ <simpara>
+ People familiar with configuring Exim may
+ find this approach easier to understand as
+ <filename>exim4.conf.template</filename>
+ basically is a complete Exim configuration
+ file which will only undergo some basic
+ string replacement before is it passed to
+ exim.
+ </simpara>
+ </listitem>
+ <listitem>
+ <simpara>
+ Split-config's fragility mentioned
+ above does not occur.
+ </simpara>
+ </listitem>
+ </itemizedlist>
+ </para>
+ <para>
+ Drawbacks of the unsplit configuration approach:
+ <itemizedlist>
+ <listitem>
+ <simpara>
+ Will require manual intervention in case of an
+ upgrade.
+ </simpara>
+ </listitem>
+ </itemizedlist>
+ </para>
+ <para>
+ If in doubt go for the unsplit config, because it is
+ easier to roll back to Debian's default configuration
+ in one step. If you intend to do many changes to the
+ Debian setup, you might want to use the split config
+ at the price of having to more closely examine the
+ config file after an update.
+ </para>
+ <para>
+ We'd appreciate a patch that uses ucf and the
+ 3-way-merge mechanism offered by that package. It
+ might be the best way to handle the big configuration
+ file.
+ </para>
+ <para>
+ If you are using unsplit configuration, have local
+ changes to <filename>/etc/exim4/conf.d/</filename>
+ (either made by yourself or by other packages dropping
+ their own routers or transports in) and want to
+ re-generate
+ <filename>/etc/exim4/exim4.conf.template</filename> to
+ activate these changes, you can do so by using
+ <command>update-exim4.conf.template</command>.
+ </para>
+ </section>
+ </section>
+ <section> <title>Access Control in the default configuration</title>
+ <para>
+ The Debian exim 4 packages come with a default configuration
+ that allows flexible access control and blacklisting of
+ sites and hosts. The acls involved can be found in
+ /etc/exim4/conf.d/acl, or in /etc/exim4/exim4.conf.template,
+ depending on which configuration scheme you use. Most
+ rejections of messages due to this mechanism happen at RCPT
+ time. Local configuration of the mechanisms happens through
+ data files in /etc/exim4 or via Exim macros that you can set
+ in /etc/exim4/conf.d/main, so there is normally no need to
+ change the files in the acl subdirectory in a split-config
+ setup. If you use the non-split config, you need to edit
+ /etc/exim4/exim4.conf.template, which, as a big
+ dpkg-conffile, won't give you any advantage of the .ifdef
+ scheme.
+ </para>
+ <para>
+ The data files are documented in the exim4-config_files man
+ page.
+ </para>
+ <para>
+ The access lists delivered with the exim4 packages also
+ contain quite a few configuration options that are too
+ restrictive to be active by default on a real-life site.
+ These are masked by .ifdef statements, can be activated by
+ setting the appropriate macros, and are documented in the
+ ACL files itself.
+ </para>
+ </section>
+ <section id='macros'> <title>Using Exim Macros to control the
+ configuration</title>
+ <para>
+ Our configuration can be controlled in a limited way by
+ setting macros. That way, you can switch on and off certain
+ parts of the default configuration and/or override values set
+ in Debconf without having to touch the dpkg-conffiles. While
- 6.4, for details how macro expansion works.
++ touching dpkg-conffiles itself is explicitly allowed and wanted,
+ it can be quite a nuisance to be asked on package upgrade
+ whether one wants to use the locally changed file or the
+ file changed by the package maintainer.
+ </para>
+ <para>
+ Whenever you see an <command>.ifdef</command> or
+ <command>.ifndef</command> clause in the configuration file,
+ you can control the appropriate clause by setting the macro in
+ a local configuration file. For split configuration, you can
+ drop the local configuration file anywhere in
+ <filename>/etc/exim4/conf.d/main</filename>. Just make sure it
+ gets read before the macro is first used.
+ <filename>000_localmacros</filename> is a possible name,
+ guaranteeing first order. For a non-split configuration,
+ <filename>/etc/exim4/exim4.conf.localmacros</filename> gets
+ read before
+ <filename>/etc/exim4/exim4.conf.template</filename>. To
+ actually set the macro <varname>EXIM4_EXAMPLE</varname> to the
+ value "this is a sample", write the following line
+ </para>
+ <para>
+ EXIM4_EXAMPLE = this is a sample
+ </para>
+ <para>
+ into the appropriate file. For more detailed discussion of the
+ general macro mechanism, see the Exim specification, chapter
- SMTPLISTENEROPTIONS='-oX 465:25 -oP /var/run/exim4/exim.pid'
++ <phrase>"The Exim run time configuration file"</phrase>, for
++ details how macro expansion works.
+ </para>
+ </section>
+ <section> <title>How does this work?</title>
+ <para>
+ The script <command>update-exim4.conf</command> parses the
+ <filename>/etc/exim4/update-exim4.conf.conf</filename> file
+ and provides the configuration for the exim daemon.
+ </para>
+ <para>
+ Depending on the value of
+ <varname>dc_use_split_config</varname>, it either
+ <itemizedlist>
+ <listitem>
+ <simpara>
+ takes all the files below
+ <filename>/etc/exim4/conf.d/</filename> and
+ concatenates them together or
+ </simpara>
+ </listitem>
+ <listitem>
+ <simpara>
+ uses <filename>exim4.conf.template</filename> as
+ input.
+ </simpara>
+ </listitem>
+ </itemizedlist>
+ The debconf-managed information from
+ <filename>/etc/exim4/update-exim4.conf.conf</filename> is
+ merged into the generated configuration file by generating a
+ number of Exim configuration macros.
+ </para>
+ <para>
+ <varname>DCsmarthost</varname>, for example, is set to the
+ value of <varname>$dc_smarthost</varname>
+ in <filename>/etc/exim4/update-exim4.conf.conf</filename>
+ which holds the answer to "Which machine will act as the
+ smarthost and handle outgoing mail?"
+ </para>
+ <para>
+ The result of these operations is saved as
+ <filename>/var/lib/exim4/config.autogenerated</filename>,
+ which is <emphasis>not</emphasis> a dpkg-conffile! Manual
+ changes to this file will be overwritten by
+ <command>update-exim4.conf</command>.
+ </para>
+ <para>
+ Please consult <command>update-exim4.conf</command> manpage
+ for more detailed information.
+ </para>
+ <para>
+ <command>update-exim4.conf</command> is invoked by the init
+ script prior to any operation that may invoke an exim process,
+ and gives an error message if the generated config file is
+ syntactically invalid. If you want to activate your changes to
+ files in conf.d/ just execute <command>invoke-rc.d exim4 restart</command>.
+ </para>
+ </section>
+ <section id="howto-change-config"><title>How do I do minor tweaks to the configuration?</title>
+ <para>
+ Some times, you want to do minor adjustments to the Exim
+ configuration to make Exim behave exactly like you want it
+ to behave. There are the following possibilities to modify
+ Exim's behavior.
+ </para>
+ <section><title>Adjustments supported by the debconf configuration</title>
+ <para>
+ If you want to modify parameters that are supported by the
+ debconf configuration, things are easy. Just invoke
+ <command>dpkg-reconfigure exim4-config</command> or hand-edit
+ <filename>/etc/exim4/update-exim4.conf.conf</filename> to your
+ liking and restart Exim.
+ </para>
+ <para>
+ You can find explanation of the debconf questions in <xref
+ linkend="debconf-questions"/>.
+ Additionally,
+ <filename>/etc/exim4/update-exim4.conf.conf</filename>
+ is documented in the <command>update-exim4.conf</command>
+ man page.
+ </para>
+ </section>
+ <section><title>Adjustments controlled by macros in the Debian Exim configuration</title>
+ <para>
+ Some aspects of the Debian Exim configuration can be
+ controlled by Exim macros. To find out about these, you
+ need basic understanding of Exim configuration. Just look
+ in our Exim configuration and see which macro needs to be
+ set to a different value to alter Exim's behavior.
+ </para>
+ <para>
+ <xref linkend="macros"/> gives a closer explanation about
+ how to do this.
+ </para>
+ </section>
+ <section><title>Making direct changes to the Debian Exim configuration</title>
+ <para>
+ You can, of course, make direct change to the
+ configuration. All configuration files in /etc/exim4 are
+ dpkg-conffiles, and you can thus edit them any time. Your
+ changes will be preserved through updates. You need to
+ know about how to configure Exim to be successful.
+ </para>
+ <para>
+ If you use unsplit configuration, edit
+ <filename>/etc/exim4/exim4.conf.template</filename>. If you use
+ split configuration, edit the Exim configuration snippets in
+ <filename>/etc/exim4/conf.d</filename>.
+ </para>
+ <para>
+ More information about how the Exim configuration is built
+ can be found in this document and in the
+ <command>update-exim4.conf</command> manual page.
+ </para>
+ </section>
+ </section>
+ <section id="completely-different-configuration"> <title>Using a completely different configuration scheme</title>
+ <para>
+ If you are an experienced Exim administrator, you might feel
+ working with our pre-fabricated configuration
+ cumbersome and complex. You might feel right if you need to
+ make more complex changes and do not need to receive updates
+ from us. This section is going to tell about how to use
+ your own configuration.
+ </para>
+ <para>
+ But, you might profit from keeping the Debian magic. Most
+ files that come with Debian exim4 are conffiles. Debian is
+ going to care about your changes and keeps them around.
+ Additionally, a lot of configuration options can be
+ overridden with a macro, which does not require you to
+ actually change our configuration file. A lot of people are
+ using our configuration scheme, and maybe it is going to
+ save you a lot of time if you decide to spend some time
+ familiarizing yourself with our scheme.
+ </para>
+ <section> <title>Override exim4-config configuration magic</title>
+ <para>
+ If you are only running a small number of systems and
+ want to completely disable Debian's magic, just take
+ your monolithic configuration file and install it as
+ <filename>/etc/exim4/exim4.conf</filename>. Exim will
+ use that file verbatim. To have something to start,
+ you can either take
+ <filename>/etc/exim4/exim4.conf.template</filename>,
+ run <command>update-exim4.conf --keepcomments --output
+ /etc/exim4/exim4.conf</command>, or use upstream's
+ default configuration file that is installed as
+ <filename>/usr/share/doc/exim4-base/examples/example.conf.gz</filename>.
+ You are going to lose all magic you get from packaging
+ though, so you need to be familiar with Exim to build
+ an actually working config.
+ </para>
+ <para>
+ <filename>/var/lib/exim4/config.autogenerated</filename>,
+ the file generated by
+ <command>update-exim4.conf</command>, is ignored as soon
+ as <filename>/etc/exim4/exim4.conf</filename> is found.
+ You should not edit
+ <filename>/etc/exim4/exim4.conf</filename> directly when
+ Exim is running, because the forked processes Exim starts
+ for SMTP receiving or queue running would use the new
+ configuration file, while the original main exim-daemon
+ would still use the old configuration file.
+ </para>
+ <para>
+ Some third-party HOWTOs that reference Debian and
+ claim to make things easy suggest dumping a
+ pre-fabricated, static config file to
+ <filename>/etc/exim4/exim4.conf</filename>. This is
+ considered bad advice by the Debian maintainers since
+ you are going to disable all updates and service magic
+ that Debian might deliver in the future this way. If
+ you do not know exactly what you're doing here, this
+ is a bad choice. We try to comment on external HOWTOs
+ found on the web in the <ulink
+ url="http://wiki.debian.org/PkgExim4UserFAQ">Debian
+ Exim4 User FAQ</ulink> to help you find out which
+ advice to follow.
+ </para>
+ </section>
+ <section> <title>Replacing exim4-config with your own exim4 configuration package.</title>
+ <para>
+ We split off Exim's configuration system (debconf,
+ <command>update-exim4.conf</command>, and the files in
+ <filename>/etc/exim4/conf.d)</filename> to a separate
+ package, exim4-config. If you want to, you can replace
+ exim4-config by something entirely different. The other
+ packages don't care. Your package needs to:
+ <itemizedlist>
+ <listitem>
+ <simpara>
+ Provides: exim4-config-2, Conflicts:
+ exim4-config-2,exim4-config
+ </simpara>
+ </listitem>
+ <listitem>
+ <simpara>
+ drop the Exim 4 configuration either into
+ <filename>/var/lib/exim4/config.autogenerated</filename>
+ or into <filename>/etc/exim4/exim4.conf</filename>.
+ </simpara>
+ </listitem>
+ </itemizedlist>
+ Your package must provide an executable <command>update-exim4.conf</command>
+ that must be in root's path (<filename>/usr/sbin</filename> recommended). The init
+ script will invoke that executable prior to invoking the
+ actual exim daemon. If you do not need that script, have it exit 0.
+ </para>
+ <para>
+ If you want to create your own configuration packages, there is a
+ number of helpers available.
+ <itemizedlist>
+ <listitem>
+ <simpara>
+ The Exim 4 Debian svn repository holds sources for a
+ exim4-config-simple package which contains a simple, not
+ debconf-driven configuration scheme as an example which can
+ be used as a template for a classical, exim4.conf based
+ configuration scheme.
+ </simpara>
+ </listitem>
+ <listitem>
+ <simpara>
+ The Exim 4 Debian svn repository holds sources for a
+ exim4-config-medium package which contains the conf.d
+ driven configuration of the main package with the
+ debconf interaction removed. This can be used to create
+ your own non-debconf configuration package that uses the
+ conf.d mechanism.
+ </simpara>
+ </listitem>
+ <listitem>
+ <simpara>
+ Finally, you can invoke the script
+ <filename>debian/config-custom/create-custom-config-package</filename>
+ which will create a new source package
+ "exim4-config-custom" with the debconf-driven config
+ scheme of exim4-config for your local modification.
+ </simpara>
+ </listitem>
+ </itemizedlist>
+ Please note that exim4-config-simple and
+ exim4-config-medium are only targeted to be used as a
+ template. The configurations contained are not
+ suitable for productive use. Of course, the Debian
+ maintainers appreciate any patches you might find
+ suitable. The scripts in exim4-config-simple and
+ exim4-config-medium may not work at all in your
+ environment. Unfortunately, they have not been
+ updated in a long time as well. We are willing to
+ accept patches.
+ </para>
+ <para>
+ See the development web page for links to the subversion
+ repository.
+ </para>
+ <para>
+ Exchanging the entire exim4-config package with
+ something custom comes particularly handy for sites
+ that have more than a few machines that are
+ similarly configured, but do not want to use the
+ original exim4-config package. Build your own
+ exim4-config-custom or exim4-config-foo, and simply
+ apt that package to the machines that need to have
+ that configuration. Future updates can then be
+ handled via the dpkg-conffile mechanism, properly
+ detecting local modifications.
+ </para>
+ <para>
+ In the future, it might be possible that Debian will
+ contain multiple flavours of Exim4 configuration.
+ However, these packages would have to be maintained
+ by someone else because the exim4 package
+ maintainers think that the scheme delivered with
+ exim4-config is the least of all evils and would
+ rather not spend the time to maintain multiple configuration
+ schemes while only actually using one. It would be
+ nice to have a configuration scheme using a
+ monolithic config file, managed by ucf in
+ three-way-merge mode. If anybody feels ready to
+ maintain it, please go ahead.
+ </para>
+ </section>
+ </section>
+ </section>
+ <section id="TLS"> <title>Using TLS</title>
+ <section> <title>Exim 4 as TLS/SSL client</title>
+ <para>
+ Both exim4-daemon-heavy and exim4-daemon-light support TLS/SSL
+ using the GnuTLS library and STARTTLS. Exim will use TLS
+ via STARTTLS <emphasis>automatically</emphasis> as client if
+ the server Exim connects to offers it.
+ </para>
+ <para>
+ This means that you will not need any special configuration if
+ you want to use TLS for outgoing mail. However, if your
+ server setup mandates the use of client certificates, you
+ need to amend your remote_smtp and/or remote_smtp_smarthost
+ transports with a tls_certificate option. This is not
+ commonly needed.
+ </para>
+ <para>
+ The certificate
+ presented by the remote host is not checked unless you
+ specify a tls_verify_certificate option on the transport.
+ </para>
+ <para id="tls_client_certicate">
+ To make exim send a TLS certificate to the remote host set
+ REMOTE_SMTP_TLS_CERTIFICATE/REMOTE_SMTP_PRIVATEKEY or for
+ the remote_smtp_smarthost transport
+ REMOTE_SMTP_SMARTHOST_TLS_CERTIFICATE/REMOTE_SMTP_SMARTHOST_PRIVATEKEY
+ respectively.
+ </para>
+ <para>
+ TLS on connect is not natively supported.
+ </para>
+ </section>
+ <section> <title>Enabling TLS support for Exim as server</title>
+ <para>
+ You should have created certificates in
+ <filename>/etc/exim4/</filename> either by hand or by usage of
+ the exim-gencert (which requires openssl). exim-gencert is
+ shipped in
+ <filename>/usr/share/doc/exim4-base/examples/</filename> and
+ takes care of proper access privileges on the private key
+ file.
+ </para>
+ <para>
+ Now, enable TLS by setting the macro MAIN_TLS_ENABLE in a
+ local configuration file as described in <xref linkend="macros"/>.
+ </para>
+ <para>
+ After this configuration, Exim will advertise STARTTLS when
+ connected to on the normal SMTP ports. Some broken clients
+ (most prominent example being nearly all versions of Microsoft
+ Outlook and Outlook Express, and Incredimail) insist on doing
+ TLS on connect on Port 465. If you need to support these, set
- It might be appropriate to add "+tls_cipher +tls_peerdn" to
++ SMTPLISTENEROPTIONS='-oX 465:25 -oP /run/exim4/exim.pid'
+ in <filename>/etc/default/exim4</filename> and
+ "tls_on_connect_ports=465" in the main configuration section.
+ </para>
+ <para>
+ The -oP is needed because Exim does not write an implicit pid
+ file if -oX is given. Without pid file, init script and cron
+ job will malfunction.
+ </para>
+ <para>
- configuration file. These options have Exim log what cipher
++ It might be appropriate to add "+tls_cipher" to
+ any log_selector statement you might already have, or to add a
+ log_selector statement setting these two options in a local
- encrypt the transaction, and they have Exim log the
- Distinguished Name of the peer's certificate.
++ configuration file. (For Debian's configuration simply define
++ the MAIN_LOG_SELECTOR macro.)
++ This option makes Exim log what cipher
+ your Exim and the peer's mailer have negotiated to use to
- <filename>/etc/exim4/lowuid_aliases</filename> is an alias
++ encrypt the transaction.
+ </para>
+ <para>
+ Exim can be configured to ask a client for a certificate and to
+ try to verify it. Debian's exim configuration used to enable
+ this by default, but stopped doing so since it caused TLS errors
+ with a couple of popular clients (Outlook, Incredimail, etc.).
+ To enable this again set the macro MAIN_TLS_TRY_VERIFY_HOSTS to
+ the lists hosts whose certificates you want to check. (Use * to
+ try checking all hosts. The value of the macro is used to
+ populate exim's main option tls_try_verify_hosts.) You should
+ also point MAIN_TLS_VERIFY_CERTIFICATES to a file containing the
+ accepted certificates, since its default setting
+ (/etc/ssl/certs/ca-certificates.crt) can contain a large list of
+ certificates which causes the interoperabilty problems with
+ Outlook et.al. noted above.
+ </para>
+ <para>
+ The server certificate is only used for incoming connections,
+ please consult <xref linkend="tls_client_certicate"/> for the
+ corresponding outgoing conncection options.
+ </para>
+ </section>
+ <section> <title>Troubleshooting</title>
+ <para>
+ If Exim complains in an SMTP session that TLS is unavailable,
+ the Exim mainlog or paniclog frequently has exact information
+ about what might be wrong. Fo example, you might see
+ </para>
+ <para>
+ 2003-01-27 19:06:45 TLS error on connection from localhost [127.0.0.1]
+ (cert/key setup): Error while reading file)
+ </para>
+ <para>
+ showing that there has been an error while accessing the
+ certificate or the private key file.
+ </para>
+ <para>
+ Insuffient entropy available is a frequent cause of TLS
+ failures in Exim context. If Exim logs "not enough random bytes
+ available", or simply hangs silently when an encrypted
+ connection should be established, then Exim was
+ unable to read enough random data from
+ <filename>/dev/random</filename> to do whatever cryptographic
+ operation is requested. Please check that your
+ <filename>/dev/random</filename> device is setup properly.
+ </para>
+ <para>
+ You might also find "TLS error on connection to [...]
+ (gnutls_handshake): The Diffie-Hellman prime sent by the server is
+ not acceptable (not long enough)." given as reason. Exim by default
+ requires a DH prime length of 1024 bits. This requirement can be
+ downgraded by setting the tls_dh_min_bits option on the SMTP
+ transport. The setting is accessible in the Debian configuration by
+ setting the macro TLS_DH_MIN_BITS. (e.g. "TLS_DH_MIN_BITS = 768").
+ </para>
+ </section>
+ </section>
+ <section id="smtp-auth"> <title>SMTP-AUTH</title>
+ <para>
+ Exim can do SMTP AUTH both as a client and as a server.
+ </para>
+ <para>
+ AUTH PLAIN and AUTH LOGIN are disabled for connections which are
+ not protected by SSL/TLS per default. These authentication
+ methods use cleartext passwords, and allowing the
+ transmission of cleartext passwords on unencrypted connections
+ is a security risk. Therefore, the default configuration configures
+ Exim not to use and/or allow AUTH PLAIN and AUTH LOGIN over
+ unencrypted connections.
+ </para>
+ <para>
+ It is thus recommended to set up Exim to use TLS to encrypt
+ the connections. Please refer to <xref linkend="TLS"/> for
+ documentation about this. Note that most Microsoft clients
+ need special handling for TLS.
+ </para>
+ <section> <title>Using Exim as SMTP-AUTH client</title>
+ <para>
+ If you want to set up Exim as SMTP AUTH client for delivery
+ to your internet access provider's smarthost put the name of
+ the server, your login and password in
+ <filename>/etc/exim4/passwd.client</filename>. See the man
+ page for exim4-config_files(5) for more information about the
+ required format.
+ </para>
+ <para>
+ If you need to enable AUTH PLAIN or AUTH LOGIN for unencrypted
+ connections because your service provider does support neither
+ TLS encryption nor the CRAM MD5 authentication method, you can
+ do so by setting the AUTH_CLIENT_ALLOW_NOTLS_PASSWORDS macro.
+ Please refer to <xref linkend="macros"/> for an explanation of
+ how best to do this.
+ </para>
+ <para>
+ <filename>/etc/exim4/passwd.client</filename> needs to be
+ readable for the exim user (user Debian-exim, group
+ Debian-exim). It is suggested that you keep the default
+ permissions root:Debian-exim 0640.
+ </para>
+ </section>
+ <section> <title>Using Exim as SMTP-AUTH server</title>
+ <para>
+ The configuration files include many, verbosely commented,
+ examples for server-side smtp-authentication which just need
+ to be uncommented.
+ </para>
+ <para>
+ If you need to enable AUTH PLAIN or AUTH LOGIN for unencrypted
+ connections because your clients neither support TLS encryption
+ nor the CRAM MD5 authentication method, you can do so by setting
+ the AUTH_SERVER_ALLOW_NOTLS_PASSWORDS macro. Please refer to
+ <xref linkend="macros"/> for an explanation of how best to
+ do this.
+ </para>
+ <para>
+ If you want to authenticate against system passwords (e.g.
+ <filename>/etc/shadow</filename>) the easiest way is to use
+ saslauthd in the Debian package sasl2-bin. You have to add the
+ exim-user (currently Debian-exim) to the sasl group, to give
+ exim permission to use the saslauthd service.
+ </para>
+ <para>
+ The Debian exim4 maintainers consider using system login
+ passwords a bad idea for the following reasons:
+ <itemizedlist>
+ <listitem>
+ <simpara>
+ A compromised password will give access to a system account.
+ </simpara>
+ </listitem>
+ <listitem>
+ <simpara>
+ E-Mail passwords could accidentally be transmitted unencrypted.
+ </simpara>
+ </listitem>
+ <listitem>
+ <simpara>
+ E-Mail passwords are likely to be stored with the
+ client software, which greatly increases the chance of a
+ compromise.
+ </simpara>
+ </listitem>
+ </itemizedlist>
+ </para>
+ </section>
+ </section>
+
+ <section> <title>How the Exim daemon is started</title>
+ <para>
+ The Debian Exim 4 packages' init script is located in
+ <filename>/etc/init.d/exim4</filename>. Apart from the
+ functions that are required by Debian policy and the LSB, it
+ supports the commands <command>what</command>, which executes
+ <command>exiwhat</command> to show what your Exim processes
+ are doing, and <command>force_stop</command> which
+ unconditionally kills all Exim processes.
+ </para>
+ <para>
+ The init script can be configured to start listening and/or
+ queue running daemons. This configuration can be found in
+ <filename>/etc/default/exim4</filename>. This file is
+ extensively documented.
+ </para>
+ </section>
+
+ <section> <title>Miscellaneous packaging issues</title>
+ <section> <title>The daily cron job</title>
+ <para>
+ Exim4's daily cron job
+ (<filename>/etc/cron.daily/exim4-base</filename>)
+ does basic housekeeping tasks:
+ <itemizedlist>
+ <listitem>
+ <simpara>
+ It reads <filename>/etc/default/exim4</filename>, so you
+ can use this file to change any of the variables used in
+ the cron job.
+ </simpara>
+ </listitem>
+ <listitem>
+ <simpara>
+ It is a no-op if no Exim4 binary is found.
+ </simpara>
+ </listitem>
+ <listitem>
+ <simpara>
+ If <command>$E4BCD_DAILY_REPORT_TO</command> is set
+ to a non-empty string, the output of eximstats is
+ mailed to the address given in that variable. The
+ default is empty, so no reports are sent. Options
+ for eximstats can be given in
+ <command>$E4BCD_DAILY_REPORT_OPTIONS</command>.
+ </simpara>
+ </listitem>
+ <listitem>
+ <simpara>
+ A non-empty paniclog is a nearly sure sign of bad
+ things going on. Thus, the cron job will send out
+ warning messages to the syslog and root if it finds
+ the panic log non-empty.
+ Please note that the paniclog is not rotated daily,
+ so existing issues will be reported daily until
+ either the paniclog is rotated due to its sheer
+ size, or you manually move it away, for example by
+ calling <command>logrotate -f
+ /etc/logrotate.d/exim4-paniclog</command> from a shell.
+ </simpara>
+ <simpara>
+ Just in case your system logs transient error
+ situations to the panic log as well (see, for
+ example,
+ <ulink url="http://www.exim.org/bugzilla/show_bug.cgi?id=92">Exim Bug 92</ulink>),
+ you can configure
+ <command>$E4BCD_PANICLOG_NOISE</command> to a
+ regular expression. If the paniclog contains only
+ lines that match that regular expression, no warning
+ messages are generated.
+ </simpara>
+ <simpara>
+ If you want to disable paniclog monitoring
+ completely, set <command>$E4BCD_WATCH_PANICLOG</command>
+ to no. <command>E4BCD_WATCH_PANICLOG=once</command> will
+ rotate a non-empty paniclog automatically after sending out
+ the warning e-mail.
++ </simpara>
++ <simpara>
++ The <command>E4BCD_PANICLOG_LINES</command> setting can be
++ used to limit the number of lines of paniclog quoted in
++ warning email. It is set to 10 by default.
+ </simpara>
+ </listitem>
+ <listitem>
+ <simpara>
+ It tidies up the retry and hints databases.
+ </simpara>
+ </listitem>
+ </itemizedlist>
+ </para>
+ </section>
+ </section>
+
+ <section> <title>Using Exim with inetd/xinetd</title>
+ <para>
+ Exim4 is run as a separate daemon instead of inetd/xinetd for
+ two reasons:
+ <variablelist>
+ <varlistentry>
+ <term>Ease of maintenance:</term>
+ <listitem>
+ <simpara>
+ update-inetd is difficult to impossible to handle
+ correctly (Just check the archived bug reports of Exim.)
+ and update-inetd seems to be unmaintained for a long
+ time, nobody dares to touch it. To quote Mark Baker, the
+ maintainer of Exim (v3): "I really wish I had never used
+ inetd in the first place, but simply set up exim to run
+ as a daemon, but it's too late to change that now."
+ </simpara>
+ </listitem>
+ </varlistentry>
+ <varlistentry>
+ <term>Extended features</term>
+ <listitem>
+ <simpara>
+ Running from <command>inetd</command> interferes with
+ Exim's resource controls (e.g it disables
+ smtp_accept_max_per_host and smtp_accept_max).
+ </simpara>
+ </listitem>
+ </varlistentry>
+ </variablelist>
+ </para>
+ <para>
+ If you introduce bugs on your systems by running from (x)inetd
+ you are on your own! If you want to run exim from
+ <command>xinetd</command>, follow these steps:
+ <orderedlist>
+ <listitem>
+ <simpara>
+ Disable Exim 4's listening daemon by executing
+ <command>update-exim4defaults --queuerunner
+ queueonly</command>
+ </simpara>
+ </listitem>
+ <listitem>
+ <para>
+ Create <filename>/etc/xinetd.d/exim4</filename>
+ <programlisting>
+service smtp
+{
+ disable = no
+ flags = NAMEINARGS
+ socket_type = stream
+ protocol = tcp
+ wait = no
+ user = Debian-exim
+ group = Debian-exim
+ server = /usr/sbin/exim4
+ server_args = exim4 -bs
+}
+ </programlisting>
+ </para>
+ </listitem>
+ <listitem>
+ <simpara>Run <command>invoke-rc.d exim4 restart; invoke-rc.d
+(x)inetd restart</command></simpara>
+ </listitem>
+ </orderedlist>
+ </para>
+ <para>If you want to use plain inetd, insert following line into
+ <filename>/etc/inetd.conf</filename>:<programlisting>
+smtp stream tcp nowait Debian-exim /usr/sbin/exim4 exim4 -bs
+ </programlisting>
+ </para>
+ </section>
+
+ <section> <title>Handling incoming mail for local accounts with low UID</title>
+ <para>
+ Since system accounts (mail, uucp, lp etc) are usually aliased
+ to root, and root's mailbox is usually read by a human, these
+ account names have started to be a common target for spammers.
+ The Debian Exim 4 packages have a mechanism to deal with this
+ situation. However, since this derives rather far from normal
+ behavior, it is disabled by default.
+ </para>
+ <para>
+ To enable it, set the macro FIRST_USER_ACCOUNT_UID to a numeric,
+ non-zero value. Incoming mail for local users that have a UID
+ lower than FIRST_USER_ACCOUNT_UID is rejected with the message "no
+ mail to system accounts". Incoming mail for local users that
+ have a UID greater or equal FIRST_USER_ACCOUNT_UID are processed as
+ usual. Therefore, the default value of 0 ensures that the
+ mechanism is disabled. On Debian systems, setting
+ FIRST_USER_ACCOUNT_UID to 500 or 1000 (depending on your local policy)
+ will disable incoming mail for system accounts.
+ </para>
+ <para>
+ Just in case that you need exceptions to the rule,
- format of <filename>/etc/exim4/lowuid_aliases</filename> is
++ <filename>/etc/exim4/lowuid-aliases</filename> is an alias
+ file that is only honored for local accounts with UID lower
+ than FIRST_USER_ACCOUNT_UID. If you define an alias for such an
+ account here, incoming mail is processed according to the
+ alias. If you alias the account to itself, messages are
+ delivered to the account itself, which is an exception to the
+ rule that messages for low-UID accounts are rejected. The
- Sometimes, it might be desireable to be able to bypass local
++ format of <filename>/etc/exim4/lowuid-aliases</filename> is
+ just another alias file.
+ </para>
+ </section>
+ <section> <title>How to bypass local routing specialities</title>
+ <para>
- PAM: On Debian systems the PAM modules run as the same user
++ Sometimes, it might be desirable to be able to bypass local
+ routing specialities like the alias file or a user-forward
+ file. This is possible in the Debian Exim4 packages by
+ prefixing the account name with "real-". For a local account
+ name "foo", "real-foo@hostname.example" will result in direct
+ delivery to foo's local Mailbox.
+ </para>
+ <para>
+ This feature is by default only available for locally
+ generated messages. If you want it to be accessible for
+ messages delivered from remote as well, set the Exim macro
+ COND_LOCAL_SUBMITTER to true. If you do not want this at all,
+ set the macro to false. Please note that the userforward
+ router uses this feature to get error messages delivered, i.e.
+ notifying the user of a syntax error in her
+ <filename>.forward</filename> file.
+ </para>
+ </section>
+ <section> <title>Using more complex deliveries from alias files</title>
+ <para>
+ Delivery to arbitrary files, directory or to pipes in the
+ <filename>/etc/aliases</filename> file is disabled by default
+ in the Debian Exim 4 packages. The delivery process including the
+ program being piped to would run as the exim admin-user
+ Debian-exim, which might open up security holes.
+ </para>
+ <para>
+ Invoking pipes from <filename>/etc/aliases</filename> file is
+ widely considered obsolete and deprecated. The Debian Exim
+ package maintainers would like to suggest using a dedicated
+ router/transport pair to invoke local processes for mail
+ processing. For example, the Debian mailman package contains a
+ <filename>/usr/share/doc/mailman/README.Exim4.Debian</filename> file
+ that gives a good example how to implement this. Using a
+ dedicated router/transport pair have the following advantages:
+ <itemizedlist>
+ <listitem>
+ <para>
+ The router/transport pair can be put in place by another
+ package, giving a well-defined transaction point between
+ Exim 4 and $PACKAGE.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ Not allowing pipe deliveries from alias files makes it
+ harder to accidentally run programs with wrong
+ privileges.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ It is possible to run different pipe processes under
+ different accounts.
+ </para>
+ </listitem>
+ <listitem>
+ <para>
+ Even if only invoking a single local program, it is easier
+ to do with your dedicated router/transport since you won't
+ need to change this file, making automatic updates of this
+ file possible for future versions of the Exim 4 packages. If
+ you do local changes here, dpkg conffile handling will
+ bother you on future updates.
+ </para>
+ </listitem>
+ </itemizedlist>
+ If you insist on using <filename>/etc/aliases</filename> in
+ the traditional way, you will need to activate the
+ respective functions by setting the transport options on the
+ system_aliases router appropriately. Macros are defined to make
+ this easier. See
+
+<filename>/etc/exim4/conf.d/router/400_exim4-config_system_aliases</filename>
+ for information about which macros are available. You might
+ find the address_file, address_pipe and/or address_directory
+ transports that are used for the userforward router helpful in
+ writing your own transports for use in the system_aliases router.
+ </para>
+ <para>
+ If any of your aliases expand to pipes or files or directories
+ you should set up a user and a group for these deliveries to run
+ under. You can do this by setting the "user" and - if necessary
+ - a "group" option and adding a "group" option if necessary.
+ Alternatively, you can specify "user" and/or "group" on the
+ transports that are used.
+ </para>
+ </section>
+
+ <section> <title>Putting Exim 4 and UUCP together</title>
+ <para>
+ UUCP is a traditional way to execute remote jobs (e.g. spool
+ mails), and as a lot of old things there are much more than one
+ way to do it. However, today, the ways to handle it have boiled
+ down to more or less two different ways.
+ </para>
+ <para>
+ Our recommendation is to use bsmtp/rsmtp wherever possible,
+ because it supports all kinds of mail addresses (also the empty
+ ones in bounces), and is also better from the security point of
+ view.
+ </para>
+ <section> <title>Sending mail via UUCP</title>
+ <section> <title>rmail with full addresses</title>
+ <para>
+ rmail is the oldest way to transfer mail to a remote system.
+ However, today it is normally required to use addresses with
+ full domains for that (Well, they look like any normal address
+ for you, and we do not tell about the other way to not confuse
+ you ;). If you want this, you can use this transport:
+ </para>
+ <programlisting>
+rmail:
+ debug_print = "T: rmail for $pipe_addresses"
+ driver=pipe
+ command = uux - -r -a$sender_address -gC $domain_data!rmail $pipe_addresses
+ return_fail_output
+ user=uucp
+ batch_max = 20
+ </programlisting>
+ <para>
+ However, all recipients are handled via the command line, so
+ you are discouraged to use it.
+ </para>
+ </section>
+ <section> <title>bsmtp/rsmtp</title>
+ <para>
+ This is a more efficient way to transfer mails. It works
+ like sending SMTP via a pipe, but instead of waiting for an
+ answer, the SMTP is just batched; from this is also the name
+ batched SMTP or short bsmtp.
+ </para>
+ <para>
+ Furthermore, this way won't fail on addresses like "
+ "@do.main. If you want this, please use this, if the remote
+ site uses rsmtp (e.g. is Exim 4):
+ </para>
+ <programlisting>
+rsmtp:
+ debug_print = "T: rsmtp for $pipe_addresses"
+ driver=pipe
+ command = /usr/bin/uux - -r -a$sender_address -gC $domain_data!rsmtp
+ use_bsmtp
+ return_fail_output
+ user=uucp
+ batch_max = 100
+ </programlisting>
+ <para>
+ and this if it wants bsmtp as the command:
+ </para>
+ <programlisting>
+bsmtp:
+ debug_print = "T: bsmtp for $pipe_addresses"
+ driver=pipe
+ command = /usr/bin/uux - -r -a$sender_address -gC $domain_data!bsmtp
+ use_bsmtp
+ return_fail_output
+ user=uucp
+ batch_max = 100
+ </programlisting>
+ <para>
+ Of course, these examples can be extended for e.g.
+ compression (but you can also use ssh for compression, if
+ you want).
+ </para>
+ </section>
+ <section> <title>The router</title>
+ <para>
+ You need a router to tell Exim 4 which mails to forward to
+ UUCP. You can use this one; please adopt the last line. Of
+ course, it is also possible to send mail via more than one way.
+ </para>
+ <programlisting>
+uucp_router:
+ debug_print = "R: uucp_router for $local_part@$domain"
+ driver=accept
+ require_files = +/usr/bin/uux
+ domains = wildlsearch;/etc/exim4/uucp
+ transport = rsmtp
+ </programlisting>
+ <para>
+ The file <filename>/etc/exim4/uucp</filename> looks like:
+ </para>
+ <programlisting>
+*.do.main uucp.name.of.remote.side
+ </programlisting>
+ </section>
+ <section> <title>Speaking UUCP with the smarthost</title>
+ <para>
+ If you have a leaf system (i.e. all your mail not for your
+ local system goes to a single remote system), you can just
+ forward all non-local mail to the remote UUCP system. In
+ this case, you can replace "domains = ..." with "domains = !
+ +local_domains", but then you need also to replace
+ $domain_data in the transport by the UUCP-name of your
+ smarthost. The file <filename>/etc/exim4/uucp</filename> is
+ not needed in this case.
+ </para>
+ </section>
+ </section>
+ <section> <title>Receiving mail via UUCP</title>
+ <section> <title>Allow UUCP to use any envelope address</title>
+ <para>
+ Depending how much you trust your local users, you might use
+ trusted_users and add uucp to it or use
+ local_sender_retain=true and local_from_check=false.
+ </para>
+ </section>
+ <section> <title>If you get batched smtp</title>
+ <para>
+ Allow uucp to execute rsmtp via
+ <programlisting>
+commands rmail rnews rsmtp
+ </programlisting>
+ in your <filename>/etc/uucp/sys</filename>, and ask the
+ sending site to use rsmtp (and not bsmtp) as the batched
+ command.
+ </para>
+ </section>
+ </section>
+ </section>
+ </section>
+
+ <section> <title>Updating from Exim 3</title>
+ <para>
+ If you use <command>exim4-config</command> from Debian, you will
+ get the debconf based configuration scheme that is intended to
+ cover the majority of cases.
+ </para>
+ <para>
+ If <command>exim4-config</command> is installed while an Exim 3
+ package is present on the system,
+ <command>exim4-config</command> tries to parse the Exim 3 config
+ file to determine the answers that were given to
+ <command>eximconfig</command> on Exim 3 installation. These
+ answers are then taken as default values for the debconf based
+ configuration process. Be warned! <command>eximconfig</command>
+ from the Exim 3 packages does not record the explicit answers
+ given on Exim 3 configuration. So we have to guess the answers
+ from the Exim 3 configuration file
+ <filename>/etc/exim/exim.conf</filename>, which is bound to fail
+ if the config file has been modified after using
+ <command>eximconfig</command>.
+ </para>
+ <para>
+ This is the reason why we refrained from doing a "silent update", but
+ only use the guessed answers to get reasonable defaults for our
+ debconf based configuration process.
+ </para>
+ <para>
+ Please note that we do not use the
+ <command>exim_convert4r4</command> script, but try to configure
+ the Exim 4 package in the same way Exim 3 was. This will
+ hopefully aid future updates.
+ </para>
+ <para>
+ If you have used a customized Exim 3 configuration, you can of
+ course use <command>exim_convert4r4</command>, and install the
+ resulting file as <filename>/etc/exim4/exim4.conf</filename>
+ after careful inspection. Exim 4 will then use that file and
+ ignore the file that it generated from the debconf
+ configuration. To aid future updates, we do, however, encourage
+ you not to use the
+ <filename>exim_convert4r4-generated</filename> file verbatim but
+ instead drop appropriate configuration snippets in their
+ appropriate place in <filename>/etc/exim4/conf.d</filename>.
+ </para>
+ </section>
+ <section> <title>Misc Notes</title>
+ <section> <title>PAM</title>
+ <para>
- mail to lower case before the comparision done by the
++ On Debian systems the PAM modules run as the same user
+ as the calling program, so they cannot do anything you
+ could not do yourself, and in particular cannot access
+ <filename>/etc/shadow</filename> unless the user is in group
+ shadow. - If you want to use
+ <filename>/etc/shadow</filename> for Exim's SMTP AUTH you
+ will need to run exim as group shadow. Only
+ exim4-daemon-heavy is linked against libpam. We suggest using
+ saslauthd instead.
+ </para>
+ </section>
+ <section> <title>Account name restrictions</title>
+ <para>
+ In the default configuration, Exim cannot locally deliver
+ mail to accounts which have capitals in their name. This is
+ caused by the fact that Exim converts the local part of incoming
- <variablelist>
- <varlistentry>
- <term>
- <ulink url="http://www.arise.demon.co.uk/exim-patches/">
- Patches</ulink> by Steve Haslam:
- </term>
- <listitem>
- <simpara>
- boolean_redefine_protect
- [src/mytypes.h]
- Surround the definition of TRUE and FALSE macros with #ifndef
- /#endif, in case some other header defines them (from mixing No
- Perl and Exim, istr)
- </simpara>
- </listitem>
- </varlistentry>
- <varlistentry>
- <term>
- Other stuff
- </term>
- <listitem>
- <itemizedlist>
- <listitem>
- <simpara>
- link exim dynamically against pcre.
- </simpara>
- </listitem>
- <listitem>
- <para>
- The main binary is /usr/sbin/exim4:
- <itemizedlist>
- <listitem>
- <simpara>
- src/globals.c was changed to use 'US
- BIN_DIRECTORY "/exim4"' as default for
- exim_path.
- </simpara>
- </listitem>
- <listitem>
- <simpara>
- changed default for $exim_path (modulo
- lower/upper case) from BIN_DIRECTORY/exim to
- BIN_DIRECTORY/exim4 in exicyclog.src,
- exim_checkaccess.src, eximon.src, exinext.src,
- exiqgrep.src, exiwhat.src.
- </simpara>
- </listitem>
- <listitem>
- <simpara>
- OS/Makefile-Linux:EXIWHAT_MULTIKILL_ARG=exim4
- </simpara>
- </listitem>
- </itemizedlist>
- </para>
- </listitem>
- <listitem>
- <simpara>
- <ulink
- url="http://marc.merlins.org/linux/exim/files/sa-exim-current/">localscan_dlopen
- .patch</ulink>:
- Allow to use and switch between different local_scan
++ mail to lower case before the comparison done by the
+ check_local_user directive in routers is done.
+ </para>
+ <para>
+ The router option caseful_local_part can be used to control
+ this, and we decided not to set this option in the Debian
+ configuration since it would be a rather big change to Exim's
+ default behavior.
+ </para>
+ </section>
+ <section> <title>No deliveries to root!</title>
+ <para>
+ No Exim 4 version released with any Debian OS can run
+ deliveries as root. If you don't redirect mail for root via
+ <filename>/etc/aliases</filename> to a nonprivileged
+ account, the mail will be delivered to
+ <filename>/var/mail/mail</filename> with permissions 0600 and
+ owner mail:mail.
+ </para>
+ <para>
+ This redirection is done by the mail4root router which
+ is last in the list and will thus catch mail for root that has not
+ been taken care of earlier.
+ </para>
+ </section>
+ <section> <title>Debugging maintainer and init scripts</title>
+ <para>
+ Most of the scripts that come with this Debian package do a
+ <command>set -x</command> if invoked with the environment
+ variable EX4DEBUG defined and non-zero. This is particularly
+ handy if you need to debug the maintainer scripts that are
+ invoked during package installation. Since dpkg redirects
+ stdout of maintainer scripts, calling dpkg with EX4DEBUG
+ set might yield interesting results. If in doubt, invoke
+ the maintainer scripts with EX4DEBUG set manually directly
+ from the command line.
+ </para>
+ </section>
+ <section> <title>SELinux</title>
+ <para>
+ There is no SELinux policy for Exim4 available so far.
+ Until this is resolved, users should use postfix or
+ sendmail if they intend to run SELinux.
+ </para>
+ <para>
+ The Debian Exim4 maintainers would appreciate if
+ somebody could write an SELinux policy. We will gladly
+ use them in the Debian packages as long as there is
+ somebody available to test, debug and support.
+ </para>
+ </section>
+ <section> <title>misc</title>
+ <itemizedlist>
+ <listitem>
+ <simpara>
+ <command>convert4r4</command> is installed as
+ <filename>/usr/sbin/exim_convert4r4.</filename>
+ </simpara>
+ </listitem>
+ <listitem>
+ <simpara>
+ The charset for $header_foo expansions defaults to
+ UTF-8 instead of ISO-8859-1.
+ </simpara>
+ </listitem>
+ <listitem>
+ <simpara>
+ <ulink url="http://marc.merlins.org/linux/exim/">
+ Marc Merlin's Exim 4 Page</ulink> has a lot of ACL
+ examples.
+ </simpara>
+ </listitem>
+ <listitem>
+ <simpara>
+ For an example of Exim usage in a
+ <emphasis>large</emphasis> installation, see
+ Tony Finch's
+ <ulink
+url="http://www-uxsup.csx.cam.ac.uk/~fanf2/hermes/doc/talks/2005-02-eximconf/">
+paper</ulink>
+ about the Exim installation at University of Cambridge:
+ </simpara>
+ </listitem>
+ </itemizedlist>
+ </section>
+ </section>
+ <section> <title>Debian modifications to the Exim source</title>
- </simpara>
- </listitem>
- <listitem>
- <simpara>
- changes to the documentation to have the <ulink
- url="mailto:pkg-exim4-users@lists.alioth.debian.org">
- Debian-specific mailing list</ulink> mentioned where
- the <ulink url="mailto:exim-users@exim.org">official
- exim-users list</ulink> is mentioned
- </simpara>
- </listitem>
- </itemizedlist>
- </listitem>
- </varlistentry>
- </variablelist>
++ <itemizedlist>
++ <listitem>
++ <simpara>
++ Install the exim binary as /usr/sbin/exim4 instead of
++ /usr/sbin/exim-<version> with a symlink /usr/sbin/exim. Also
++ adapt the documentation.
++ </simpara>
++ </listitem>
++ <listitem>
++ <simpara>
++ Make the build reproducible. Pull date/time from debian/changelog
++ and use it as build time instead of using __DATE__.
++ </simpara>
++ </listitem>
++ <listitem>
++ <simpara>
++ Documentation updates
++ </simpara>
++ <itemizedlist>
++ <listitem>
++ <simpara>
++ Mention how to install the Debian packaged perl-modules needed
++ for eximstats' graphs.
++ </simpara>
++ </listitem>
++ <listitem>
++ <simpara>
++ Add a warning about convert4r4.
++ </simpara>
++ </listitem>
++ <listitem>
++ <simpara>
++ Point to the <ulink
++ url="mailto:pkg-exim4-users@lists.alioth.debian.org">
++ Debian-specific mailing list</ulink> instead of
++ the <ulink url="mailto:exim-users@exim.org">official
++ exim-users list</ulink>.
++ </simpara>
++ </listitem>
++ </itemizedlist>
++ </listitem>
++ <listitem>
++ <simpara>
++ <ulink
++ url="http://marc.merlins.org/linux/exim/files/sa-exim-current/">localscan_dlopen.patch</ulink>:
++ This patch makes it possible to use and switch between
++ different local_scan
+ functions without recompiling Exim. Use
+ local_scan_path = /path/to/sharedobject to utilize
+ local_scan() in <filename>/path/to/sharedobject</filename>.
++ </simpara>
++ </listitem>
++ </itemizedlist>
+ </section>
+
+ <section> <title>Credits</title>
+ <para><variablelist>
+ <varlistentry>
+ <term><ulink url="mailto:aba@not.so.argh.org">Andreas
+ Barth</ulink></term>
+ <listitem>
+ <simpara>UUCP documentation</simpara>
+ </listitem>
+ </varlistentry>
+ <varlistentry>
+ <term>Dan Weber, Ryen Underwood</term>
+ <listitem>
+ <simpara>inetd/xinetd documentation</simpara>
+ </listitem>
+ </varlistentry>
+ </variablelist>
+ </para>
+ </section>
+
+</article>
--- /dev/null
- - route_list does not use a fixed lenght buffer anymore. (Closes: #231979)
++exim4 (4.89-2+deb9u3~bpo8+1) jessie-backports; urgency=medium
++
++ * Rebuild for jessie-backports.
++ * b-d on libmysqlclient-dev | libmysqlclient15-dev instead of
++ default-libmysqlclient-dev.
++
++ -- Andreas Metzler <ametzler@debian.org> Sun, 25 Feb 2018 15:26:27 +0100
++
++exim4 (4.89-2+deb9u3) stretch-security; urgency=high
++
++ * Non-maintainer upload by the Security Team.
++ * Fix base64d() buffer size (CVE-2018-6789) (Closes: #890000)
++
++ -- Salvatore Bonaccorso <carnil@debian.org> Sat, 10 Feb 2018 09:26:05 +0100
++
++exim4 (4.89-2+deb9u2) stretch-security; urgency=high
++
++ * Non-maintainer upload by the Security Team.
++ * Avoid release of store if there have been later allocations
++ (CVE-2017-16943) (Closes: #882648)
++ * Chunking: do not treat the first lonely dot special (CVE-2017-16944)
++ (Closes: #882671)
++
++ -- Salvatore Bonaccorso <carnil@debian.org> Tue, 28 Nov 2017 22:58:00 +0100
++
++exim4 (4.89-2+deb9u1) stretch-security; urgency=medium
++
++ * CVE-2017-100369
++
++ -- <jmm@debian.org> Wed, 14 Jun 2017 07:03:07 +0200
++
++exim4 (4.89-2) unstable; urgency=medium
++
++ * Revert addition of header "# pidfile: /var/run/exim4/exim.pid" to
++ initscript (#844178). It breaks when the initscript does not start a
++ daemon but only runs update-exim4.conf. (inetd or QUEUERUNNER='nodaemon').
++ Closes: #860317
++ * When reporting bugs also attach /etc/default/exim4 by default.
++
++ -- Andreas Metzler <ametzler@debian.org> Thu, 20 Apr 2017 17:14:04 +0200
++
++exim4 (4.89-1) unstable; urgency=medium
++
++ * Enable inbound (server-side) proxying for -heavy. Closes: #856712
++ * New upstream release, source identical to RC7.
++
++ -- Andreas Metzler <ametzler@debian.org> Thu, 09 Mar 2017 17:49:47 +0100
++
++exim4 (4.89~RC7-1) unstable; urgency=medium
++
++ * New upstream version.
++
++ -- Andreas Metzler <ametzler@debian.org> Wed, 01 Mar 2017 18:37:18 +0100
++
++exim4 (4.89~RC6-1) unstable; urgency=medium
++
++ * Document E4BCD_PANICLOG_LINES in README.Debian.
++ * New upstream version.
++
++ -- Andreas Metzler <ametzler@debian.org> Thu, 23 Feb 2017 18:24:33 +0100
++
++exim4 (4.89~RC5-1) unstable; urgency=medium
++
++ * New upstream version.
++
++ -- Andreas Metzler <ametzler@debian.org> Mon, 13 Feb 2017 19:04:46 +0100
++
++exim4 (4.89~RC4-1) unstable; urgency=medium
++
++ * New upstream version.
++ + Drop 92_CVE-2016-1238.diff.
++ * Use /run/exim4/ instead of legacy directory /var/run/exim4 for pidfile
++ while we are changing the init script.
++
++ -- Andreas Metzler <ametzler@debian.org> Sun, 12 Feb 2017 15:28:09 +0100
++
++exim4 (4.89~RC3-1) unstable; urgency=medium
++
++ * New upstream version.
++ + Unfuzz 92_CVE-2016-1238.diff.
++ * init file:
++ + Source /etc/default/exim4 *before* defining the shell
++ variables holding the pidfilenames. Overriding these via
++ /etc/default/exim4 is not supported.
++ + Add missing support for reload when QUEUERUNNER='queueonly'.
++ + For QUEUERUNNER='queueonly' use $PIDFILE instead of $QRPIDFILE. This way
++ $PIDFILE is used for the main exim process for all available QUEUERUNNER
++ choices.
++ + Add header "# pidfile: /var/run/exim4/exim.pid" for improved systemd
++ interaction. systemd-sysv-generator uses this pseudoheader to set
++ PIDFile in the generated service file and it also sets
++ RemainAfterExit=no instead of yes if it is present. Thanks, Michael
++ Biebl for suggestion and explanation. Closes: #844178
++
++ -- Andreas Metzler <ametzler@debian.org> Fri, 10 Feb 2017 19:08:52 +0100
++
++exim4 (4.89~RC2-1) unstable; urgency=medium
++
++ * New upstream version.
++ + Drop 75_add_bak_spec.txt.diff.
++
++ -- Andreas Metzler <ametzler@debian.org> Sat, 04 Feb 2017 15:24:44 +0100
++
++exim4 (4.89~RC1-1) unstable; urgency=low
++
++ * Refresh debian/upstream/signing-key.asc.
++ * New upstream bugfix release.
++ + Drop superfluous patches.
++ 75_00_DKIM-More-validation-of-DNS-key-record.-Bug-1926.patch
++ 75_01_DKIM-Under-debug-when-signing-do-an-extra-check-on-t.patch
++ 75_02_Do-not-call-ldap_start_tls_s-on-ldapi-connections.patch
++ 75_03_PROXY-fix-v2-protocol-decode.-Bugs-2003-1747.patch
++ 75_04_CHUNKING-fix-non-pipelined-synch-checks.-Bug-2004.patch
++ + Unfuzz 31_eximmanpage.dpatch and
++ 78_Disable-chunking-BDAT-by-default.patch.
++ + Add 75_add_bak_spec.txt.diff - spec.txt and filter.txt missing in rc
++ tarball.
++ + Unfuzz debian/EDITME.exim4-*.
++ + Update debian/example.conf.md5. - Upstream typo fix.
++
++ -- Andreas Metzler <ametzler@debian.org> Tue, 31 Jan 2017 19:52:50 +0100
++
++exim4 (4.88-5) unstable; urgency=medium
++
++ * 78_Disable-chunking-BDAT-by-default.patch: Change default value of main
++ option chunking_advertise_hosts and smtp transport option
++ hosts_try_chunking from "*" to empty.
++ This is a Debian specific change, we are right before the freeze and BDAT
++ needs a little time.
++
++ -- Andreas Metzler <ametzler@debian.org> Thu, 19 Jan 2017 19:18:15 +0100
++
++exim4 (4.88-4) unstable; urgency=medium
++
++ * Upload to unstable.
++
++ -- Andreas Metzler <ametzler@debian.org> Sat, 07 Jan 2017 14:38:00 +0100
++
++exim4 (4.88-3) experimental; urgency=medium
++
++ * Pull multiple patches from upstream GIT:
++ + 75_00_DKIM-More-validation-of-DNS-key-record.-Bug-1926.patch,
++ 75_01_DKIM-Under-debug-when-signing-do-an-extra-check-on-t.patch
++ + 75_02_Do-not-call-ldap_start_tls_s-on-ldapi-connections.patch
++ + 75_03_PROXY-fix-v2-protocol-decode.-Bugs-2003-1747.patch
++ + 75_04_CHUNKING-fix-non-pipelined-synch-checks.-Bug-2004.patch
++ (Thanks, Bart Noordervliet for the pointer) Closes: #850175
++
++ -- Andreas Metzler <ametzler@debian.org> Fri, 06 Jan 2017 17:32:20 +0100
++
++exim4 (4.88-2) unstable; urgency=medium
++
++ * Upload to unstable.
++
++ -- Andreas Metzler <ametzler@debian.org> Tue, 27 Dec 2016 17:36:29 +0100
++
++exim4 (4.88-1) experimental; urgency=medium
++
++ * New upstream version.
++ * Upload to experimental, let (almost identical) 4.88~RC6-2 propagate to
++ testing.
++ * Drop 75_Fix-DKIM-information-leakage.patch.
++
++ -- Andreas Metzler <ametzler@debian.org> Sun, 25 Dec 2016 18:07:12 +0100
++
++exim4 (4.88~RC6-2) unstable; urgency=high
++
++ * Add macro IGNORE_SMTP_LINE_LENGTH_LIMIT to allow disabling the SMTP DATA
++ physical line limit check for both for SMTP DATA ACL and remote_smtp*
++ transports. Closes: #828801
++ Also update corresponding NEWS entry.
++ * [lintian] debian/changelog: s/lenght/length/
++ * Pull 75_Fix-DKIM-information-leakage.patch from upstream GIT, fixing DKIM
++ information leakage issue CVE-2016-9963.
++
++ -- Andreas Metzler <ametzler@debian.org> Thu, 22 Dec 2016 16:50:21 +0100
++
++exim4 (4.88~RC6-1) unstable; urgency=low
++
++ * New upstream version.
++
++ -- Andreas Metzler <ametzler@debian.org> Thu, 08 Dec 2016 07:19:18 +0100
++
++exim4 (4.88~RC5-1) unstable; urgency=low
++
++ * New upstream version.
++ + Drop 75_01-Ensure-socket-is-nonblocking-before-draining.diff.
++
++ -- Andreas Metzler <ametzler@debian.org> Sat, 19 Nov 2016 17:43:51 +0100
++
++exim4 (4.88~RC4-2) unstable; urgency=low
++
++ * Pull 75_01-Ensure-socket-is-nonblocking-before-draining.diff from upstream
++ GIT to fix exim bug 1914 (exim doesn't close connection after quit.
++ * Upload to unstable.
++
++ -- Andreas Metzler <ametzler@debian.org> Sat, 12 Nov 2016 07:26:14 +0100
++
++exim4 (4.88~RC4-1) experimental; urgency=low
++
++ * New upstream version.
++
++ -- Andreas Metzler <ametzler@debian.org> Mon, 07 Nov 2016 19:08:47 +0100
++
++exim4 (4.88~RC3-1) experimental; urgency=medium
++
++ * New upstream version.
++ Drop 75_01-Fix-check-for-commandline-macro-definition.patch
++ 75_02_Fix-bug-with-aborted-server-TLS-connection-under-Gnu.patch.
++
++ -- Andreas Metzler <ametzler@debian.org> Mon, 24 Oct 2016 19:25:31 +0200
++
++exim4 (4.88~RC2-3) experimental; urgency=medium
++
++ * Fix thinko in exim4-daemon-*.postinst. Do not regenerate gnutls params on
++ every upgrade.
++ * 75_02_Fix-bug-with-aborted-server-TLS-connection-under-Gnu.patch: Fix
++ longstanding bug with aborted TLS server connection handling. Under
++ GnuTLS, when a session startup failed (eg because the client
++ disconnected) Exim did stdio operations after fclose. This was exposed by
++ a recent change which nulled out the file handle after the fclose.
++
++ -- Andreas Metzler <ametzler@debian.org> Sun, 23 Oct 2016 16:39:13 +0200
++
++exim4 (4.88~RC2-2) experimental; urgency=medium
++
++ * 75_01-Fix-check-for-commandline-macro-definition.patch - Fix permission
++ problems on commandline mail submission. Closes: #840355
++
++ -- Andreas Metzler <ametzler@debian.org> Thu, 13 Oct 2016 19:25:07 +0200
++
++exim4 (4.88~RC2-1) experimental; urgency=low
++
++ * New upstream version.
++ + Changed default Diffie-Hellman parameters to be Exim-specific, created
++ by Phil Pennock. Added RFC7919 DH primes as an alternative.
++ Closes: #839978
++ * Set tls_dhparam = historic to use site-specific DH parameters.
++ * Again, ship /usr/share/exim4/exim4_refresh_gnutls-params, use it in
++ -daemon postinst.
++ * Initialize /var/spool/exim4/gnutls-params-2048 at daemon install, either
++ by running certtool or by installing
++ /usr/share/exim4/gnutls-params-2048. Do not try to use
++ openssl dhparam, it takes too long.
++
++ -- Andreas Metzler <ametzler@debian.org> Sun, 09 Oct 2016 17:37:08 +0200
++
++exim4 (4.88~RC1-1) experimental; urgency=low
++
++ * Drop reference to removed (in 4.80-7) "what"-option in init script usage
++ message. (Thanks, Calum Mackay!) Closes: #823855
++ * 92_CVE-2016-1238.diff: eximstats: Remove . from @INC [CVE-2016-1238]
++ Closes: #832442
++ * [lintian] update-exim4.conf.8 - fix typo.
++ * [lintian] Drop unused override binaries-have-file-conflict.
++ * B-d on default-libmysqlclient-dev.
++ * New upstream version.
++ + Refresh patches: 31_eximmanpage.dpatch 32_exim4.dpatch 35_install.dpatch
++ 50_localscan_dlopen.dpatch
++ + Drop superfluous patches.
++ 71_01_configure.default-nice-message-for-overlong-lines-Bu.patch
++ 71_02_Delivery-quieten-smtp-transport-conn-reuse-vs.-deliv.patch
++ 71_03_Avoid-exposing-passwords-in-log-on-failing-ldap-look.patch
++ 71_04_Avoid-exposing-passwords-in-log-on-failing-ldap-look.patch
++ + Fix crash in VRFY handling when handed an unqualified name
++ (lacking @domain). Apply the same qualification processing as RCPT.
++ Closes: #834699
++ + Fix a possible security hole, wherein a process operating with the Exim
++ UID can gain a root shell. Credit to http://www.halfdog.net/ for
++ discovery and writeup. LP: #1580454
++ * [lintian] exim4-config_files.5 - fix typo.
++
++ -- Andreas Metzler <ametzler@debian.org> Sun, 25 Sep 2016 15:44:00 +0200
++
++exim4 (4.87-3) unstable; urgency=medium
++
++ * Pull multiple patches from upstream GIT:
++ + 71_01_configure.default-nice-message-for-overlong-lines-Bu.patch
++ Improved message on overlong lines in example config.
++ + 71_02_Delivery-quieten-smtp-transport-conn-reuse-vs.-deliv.patch
++ Fix race condition related to connection reuse.
++ https://bugs.exim.org/show_bug.cgi?id=1810
++ + 71_03_Avoid-exposing-passwords-in-log-on-failing-ldap-look.patch
++ 71_04_Avoid-exposing-passwords-in-log-on-failing-ldap-look.patch
++ Avoid exposing passwords in log on failing ldap lookup
++ expansion. https://bugs.exim.org/show_bug.cgi?id=165
++ * Copy information message on rejecting overlong lines in data ACL from
++ upstream example configuration. Closes: #823418
++ * Add NEWS entry on line-length-limit introduced in 4.87~RC1-1.
++ Closes: 821830
++
++ -- Andreas Metzler <ametzler@debian.org> Sun, 08 May 2016 14:03:10 +0200
++
++exim4 (4.87-2) unstable; urgency=medium
++
++ * Fix reference to README.Debian in 01_exim4-config_listmacrosdefs.
++ (Thanks, L. Guruprasad!) Closes: #821416
++ * Add REMOTE_SMTP_SMARTHOST_HOSTS_REQUIRE_TLS macro to enforce TLS
++ connections (hosts_require_tls option) in remote_smtp_smarthost
++ transport. Closes: #822174
++ * exim4-daemon-heavy: Disable WITH_OLD_DEMIME ("demime" ACL condition). It
++ is deprecated and will be removed in 4.88.
++ * README.Debian*: Fix minor issues found by lintian.
++ * Fix reference to spec.txt in 30_exim4-config_check_rcpt. Closes: #665399
++ * Drop exim4-base Recommends on perl-modules. This had been unnecessary
++ since 4.80~rc6-1 which dropped /usr/share/exim4/timeout.pl.
++
++ -- Andreas Metzler <ametzler@debian.org> Sat, 30 Apr 2016 13:38:29 +0200
++
++exim4 (4.87-1) unstable; urgency=medium
++
++ * Fix comment in
++ conf.d/transport/30_exim4-config_remote_smtp_smarthost. (Thanks,
++ Jörg-Volker Peetz!) Closes: #819780
++ * New upstream release.
++
++ -- Andreas Metzler <ametzler@debian.org> Thu, 07 Apr 2016 19:26:59 +0200
++
++exim4 (4.87~RC7-1) unstable; urgency=low
++
++ * Enable SOCKS support in both -light and -heavy. Closes: #818091
++ * Fix typos in configuration. (Thanks, Vincent Lefevre!) Closes: #819482
++ * New upstream version.
++ + Drop 74_Store-the-initial-working-directory.diff,
++ 75_String-expansions-fix-extract.patch,
++ 76_only_warn_on_nonempty_environment.diff.
++ + Update debian/example.conf.md5.
++
++ -- Andreas Metzler <ametzler@debian.org> Fri, 01 Apr 2016 19:04:07 +0200
++
++exim4 (4.87~RC6-3) unstable; urgency=medium
++
++ * Merge changelog entries for 4.86.2-1 and -2.
++ * Upload to unstable.
++ * Add link to CVE details to latest NEWS entry and bump its version and date
++ to match this upload. Closes: #818349, #817244
++
++ -- Andreas Metzler <ametzler@debian.org> Wed, 23 Mar 2016 18:44:22 +0100
++
++exim4 (4.87~RC6-2) experimental; urgency=medium
++
++ * 74_Store-the-initial-working-directory.diff,
++ 76_only_warn_on_nonempty_environment.diff: Upstream followups on the
++ CVE fix (Thanks, Heiko Schlittermann!):
++ + Runtime warning is only generated if (and only if) keep_environment
++ is unset and environment is nonempty.
++ + Store the initial working directory and make it available in the new
++ expansion variable $initial_cwd.
++ * Merge all NEWS.Debian files into a single one, identical for all binary
++ packages. - Different NEWS files built from a single source package is not
++ and has not ever been supported by apt-listchanges which is the most
++ important frontend.
++ * Add a NEWS entry about the environment related runtime warning.
++
++ -- Andreas Metzler <ametzler@debian.org> Sat, 19 Mar 2016 18:11:32 +0100
++
++exim4 (4.87~RC6-1) experimental; urgency=medium
++
++ * New upstream version.
++ * Add 75_String-expansions-fix-extract.patch from upstream GIT, fixing
++ ${extract } string expansion for the numeric/3-string case. (Bug was
++ introduced in 4.85.)
++ * Set keep_environment to empty value instead of setting a minimal PATH in
++ add_environment.
++
++ -- Andreas Metzler <ametzler@debian.org> Fri, 11 Mar 2016 19:50:07 +0100
++
++exim4 (4.87~RC5-2) experimental; urgency=medium
++
++ * Update debian/upstream/signing-key.asc, using the keys listed in
++ ftp://ftp.exim.org/pub/exim/Exim-Maintainers-Keyring.asc. This adds
++ Heiko Schlittermann's key.
++ * Bump exim4-config Breaks to exim4-daemon-* (<< 4.87~RC5). Closes: #816790
++
++ -- Andreas Metzler <ametzler@debian.org> Sat, 05 Mar 2016 13:17:01 +0100
++
++exim4 (4.87~RC5-1) experimental; urgency=medium
++
++ * exim4-config.postinst: Test for existence of /etc/inetd.conf before trying
++ to grep in it. Closes: #814998
++ * New upstream version, includes the patch for CVE-2016-1531. (Local root
++ exploit).
++ * Add macros MAIN_KEEP_ENVIRONMENT and MAIN_ADD_ENVIRONMENT to set the new
++ options. If neither is used we use add_environment to set a minimal
++ PATH=/bin:/usr/bin to avoid a runtime warning.
++
++ -- Andreas Metzler <ametzler@debian.org> Wed, 02 Mar 2016 21:06:43 +0100
++
++exim4 (4.87~RC3-2) experimental; urgency=medium
++
++ * README.Debian: Refer to Exim specification by chapter name instead of
++ chapter number. Closes: #813351
++ * Fix some spelling errors found by lintian.
++ * Minor debian/rules cleanup:
++ + Restore originally intended behavior, upstream changelog is only
++ shipped in exim4-base, symlinks to it elsewhere.
++ + Drop workaround for #347577, fixed in debhelper 5.0.15.
++ + Use "dh binary-arch" and "dh binary-indep" and a bunch of override
++ targets instead of listing all dh-commands. While this is uglier and
++ slows things down a bit it shortens debian/rules by 40 lines and has the
++ huge benefit that we automatically use all suggested helpers in correct
++ order.
++ + Drop unused variables combinedidbgpackage/dhcombinedidbgpackage.
++ + Delete unused, commented code.
++ + Drop (exported) variable MTACONFLICTS, used only once.
++ * Bugfix: Stop build if generation of EDITME.exim4-heavy fails.
++ * Refresh debian/EDITME.*, -heavy was missing ldap and sql support.
++
++ -- Andreas Metzler <ametzler@debian.org> Sat, 13 Feb 2016 20:10:53 +0100
++
++exim4 (4.87~RC3-1) experimental; urgency=medium
++
++ * Move Vcs-* from git/http to https.
++ * [lintian] README.Debian: s/desireable/desirable/.
++ * [lintian] README.Debian: Fix grammar error "allow + infinitive".
++ * [lintian] exim4-config.postinst: Use which foo > /dev/null
++ instead of [ -x /path/to/foo ].
++ * Update list of patches in debian/README.Debian.xml
++ * Drop 66_enlarge-dh-parameters-size.dpatch: It does not have any effect
++ with GnuTLS >= 2.12 and even stable has GnuTLS 3.x.
++ * New upstream version.
++ + Upstream's default rcpt ACL now requires that a HELO/EHLO was accepted,
++ merge this change and drop CHECK_MAIL_HELO_ISSUED macro.
++
++ -- Andreas Metzler <ametzler@debian.org> Thu, 21 Jan 2016 17:44:00 +0100
++
++exim4 (4.87~RC2-1) experimental; urgency=medium
++
++ * New upstream version.
++
++ -- Andreas Metzler <ametzler@debian.org> Sat, 19 Dec 2015 17:51:39 +0100
++
++exim4 (4.87~RC1-1) experimental; urgency=medium
++
++ * New upstream version.
++ + Refresh patches.
++ + Drop debian/patches/75_00xx*.patch from exim-4_86+fixes branch.
++ + Sync with upstream default configuration: Check maximum (physical, i.e.
++ before unfolding) line length in default spec file data ACL and smtp
++ transport. Bug 1684 Closes: #797919
++ + HS/02 Add the Exim version string to the process info. This way exiwhat
++ gives some more detail about the running daemon. Closes: #240883
++ * Override upstream's new default of tls_advertise_hosts = * if
++ MAIN_TLS_ENABLE is not set.
++
++ -- Andreas Metzler <ametzler@debian.org> Fri, 11 Dec 2015 20:15:30 +0100
++
++exim4 (4.86.2-2) unstable; urgency=high
++
++ * Bump exim4-config Breaks to exim4-daemon-* (<< 4.86.2). Closes: #816790
++
++ -- Andreas Metzler <ametzler@debian.org> Sat, 05 Mar 2016 13:07:31 +0100
++
++exim4 (4.86.2-1) unstable; urgency=high
++
++ * Pull 75_0012_Cutthrough-Fix-bug-with-dot-only-line.patch from upstream
++ 4.86+fixes branch.
++ * New upstream security release for CVE-2016-1531.
++ + New options keep_environment/add_environment which are empty by default,
++ i.e. any subprocesses start in a clean (empty) environment.
++ + -C requires an absolute path.
++ + Exim changes it's working directory to / right after startup.
++ * Add macros MAIN_KEEP_ENVIRONMENT and MAIN_ADD_ENVIRONMENT to set the new
++ options. If neither is used we use add_environment to set a minimal
++ PATH=/bin:/usr/bin to avoid a runtime warning.
++
++ -- Andreas Metzler <ametzler@debian.org> Tue, 01 Mar 2016 19:34:39 +0100
++
++exim4 (4.86-7) unstable; urgency=medium
++
++ * Allow arch-indep build (dpkg-buildpackage -A). Closes: #806023
++ * 75_0011_MIME-fix-crash-on-filenames-having-null-charset.-Bug.patch from
++ exim-4_86+fixes branch fixes another MIME ACL related crash.
++ https://bugs.exim.org/show_bug.cgi?id=1730
++
++ -- Andreas Metzler <ametzler@debian.org> Sat, 28 Nov 2015 18:45:31 +0100
++
++exim4 (4.86-6) unstable; urgency=medium
++
++ * Cleanup (actual patch is identical): Use
++ 75_0009_Avoid-misaligned-access-in-cached-lookup.-Bug-1708.patch from
++ exim-4_86+fixes branch instad of
++ 76_Avoid-misaligned-access-in-cached-lookup.-Bug-1708.patch.
++ * Pull 75_0010_DKIM-ignore-space-tab-embedded-in-base64-during-deco.patch,
++ DKIM: ignore space & tab embedded in base64 during decode. Bug 1700
++
++ -- Andreas Metzler <ametzler@debian.org> Sun, 08 Nov 2015 07:55:51 +0100
++
++exim4 (4.86-5) unstable; urgency=high
++
++ * Pull 76_Avoid-misaligned-access-in-cached-lookup.-Bug-1708.patch from GIT
++ head to avoid misaligned access in cached lookup. Closes: #803255
++
++ -- Andreas Metzler <ametzler@debian.org> Tue, 03 Nov 2015 19:33:49 +0100
++
++exim4 (4.86-4) unstable; urgency=medium
++
++ * Fix documentation of lowuid_aliases router, exceptions are in
++ CONFDIR/lowuid-aliases not CONFDIR/lowuid_aliases. (Thanks, Tim Krah)
++ Closes: #799672
++ * fcron has been removed from Debian in 2011, stop listing it as an
++ alternative dependency of exim4-base (Thanks, Alexandre Detiste).
++ Closes: #798236
++ * Update to upstream exim-4_86+fixes branch:
++ + Drop 75_Fix-ESMTP-MAIL-command-option-processing.patch,
++ 76_Fix-post-transport-crash.patch,
++ 77_Fix-post-transport-crash-safeguard-for-missing-spool.patch,
++ 78_Close-logs-after-daemon-process-exceptional-write.patch.
++ + Add 75_0001-Fix-post-transport-crash.patch
++ 75_0002-Fix-post-transport-crash-safeguard-for-missing-spool.patch
++ 75_0003-Fix-ESMTP-MAIL-command-option-processing.patch
++ 75_0005-Close-logs-after-daemon-process-exceptional-write.-B.patch
++ 75_0007-DNS-time-limit-cached-returns-using-TTL.-Bug-1395.patch
++ 75_0008-Retry-always-use-interface-if-set-for-retry-DB-key.-.patch
++ * Use dh v9.
++
++ -- Andreas Metzler <ametzler@debian.org> Sat, 17 Oct 2015 15:01:01 +0200
++
++exim4 (4.86-3) unstable; urgency=medium
++
++ * Pull three patches from upstream git:
++ + 75_Fix-ESMTP-MAIL-command-option-processing.patch:
++ Corrects handling of mail-addresses with whitespace.
++ <http://article.gmane.org/gmane.mail.exim.user/97069>
++ + 76_Fix-post-transport-crash.patch
++ 77_Fix-post-transport-crash-safeguard-for-missing-spool.patch
++ <https://bugs.exim.org/show_bug.cgi?id=1671>
++ * Fix spelling error in copyright file. (Thanks, lintian)
++ * Pull 77_Fix-post-transport-crash-safeguard-for-missing-spool.patch from
++ upstream git, exim was keeping logfiles open after after a "too many
++ connections" event. Closes: #796524, #476958 (Thanks to Andreas Pflug for
++ chasing this.)
++ * When saving the berkeley DB version at build-time pass -P option to cpp,
++ to prevent linebreaks.
++
++ -- Andreas Metzler <ametzler@debian.org> Tue, 25 Aug 2015 20:05:59 +0200
++
++exim4 (4.86-2) unstable; urgency=high
++
++ * Update exim4-config Breaks, PRDR support is was moved from being
++ Experimental into the mainline with 4.83.
++ Closes: #794320
++
++ -- Andreas Metzler <ametzler@debian.org> Sun, 02 Aug 2015 07:40:24 +0200
++
++exim4 (4.86-1) unstable; urgency=medium
++
++ * New upstream version, identical to RC5 (except for the version string).
++
++ -- Andreas Metzler <ametzler@debian.org> Sun, 26 Jul 2015 18:35:33 +0200
++
++exim4 (4.86~RC5-1) unstable; urgency=medium
++
++ * New upstream version.
++ + Drop 75_Bump-LOCAL_SCAN_ABI_VERSION.patch.
++
++ -- Andreas Metzler <ametzler@debian.org> Sat, 18 Jul 2015 11:46:11 +0200
++
++exim4 (4.86~RC4-2) unstable; urgency=medium
++
++ * Drop libmysqlclient15-dev alternative build-dependency. Closes: #790463
++ * Update list of upstream gpg-keys (0x4D1E900E14C1CC04 Phil Pennock,
++ 0x85AB833FDDC03262 Nigel Metheringham, 0xFFC0F14C84C71B6E Tony Finch,
++ 0xC4F4F94804D29EBA Todd Lyons, 0xBCE58C8CE41F32DF Jeremy Harris,
++ 0x63762CDA67E2F359 David Woodhouse, 0xAD5EDBB793EC57E4 Graeme Fowler),
++ transition from debian/upstream-signing-key.pgp to
++ debian/upstream/signing-key.asc.
++ * Pull 75_Bump-LOCAL_SCAN_ABI_VERSION.patch from upstream GIT and update
++ exim4-localscanapi-x.y provides to 2.0. A binNMU of sa-exim will then
++ properly fix the issue. Closes: #790616
++
++ -- Andreas Metzler <ametzler@debian.org> Sun, 05 Jul 2015 11:47:47 +0200
++
++exim4 (4.86~RC4-1) unstable; urgency=medium
++
++ * unexport/undefine TZ in debian/rules for reproducible build. It would be
++ used as default value for TIMEZONE_DEFAULT.
++ * New upstream version.
++ + Unfuzz 31_eximmanpage.dpatch.
++
++ -- Andreas Metzler <ametzler@debian.org> Mon, 29 Jun 2015 07:43:19 +0200
++
++exim4 (4.86~RC3-2) unstable; urgency=medium
++
++ * Upload to unstable.
++
++ -- Andreas Metzler <ametzler@debian.org> Tue, 23 Jun 2015 19:11:19 +0200
++
++exim4 (4.86~RC3-1) experimental; urgency=medium
++
++ * Don't provide default-mta on Ubuntu and Ubuntu-derivatives. See LP-bug
++ 1166671.
++ * New upstream version.
++
++ -- Andreas Metzler <ametzler@debian.org> Mon, 22 Jun 2015 20:39:11 +0200
++
++exim4 (4.86~RC2-1) experimental; urgency=medium
++
++ * Drop nowadays unneeded XS-Testsuite: autopkgtest in debian/control
++ (Thanks, lintian).
++ * New upstream version:
++ +Drop included patches.
++ (-72_0001-Guard-routing-against-a-null-deref.-Bug-1639.patch,
++ 72_0002-Spamd-add-missing-initialiser.-Rspamd-mode-was-incor.patch,
++ 72_0003-DSN-fix-null-deref-when-bounce-is-due-to-conn-timeou.patch,
++ 72_0004-Content-scan-Use-ETIMEDOUT-not-ETIME-as-having-bette.patch)
++ * Sync Debian config with upstream default config:
++ + Set prdr_enable.
++ + Add +smtp_protocol_error +smtp_syntax_error +tls_certificate_verified to
++ log_selector option value.
++
++ -- Andreas Metzler <ametzler@debian.org> Wed, 17 Jun 2015 19:49:58 +0200
++
++exim4 (4.86~RC1-3) experimental; urgency=medium
++
++ * Get time and date of latest debian/changelog entry and patch exim(on) to
++ use these instead of __DATE__ and __TIME__.
++ * Pull 72_0004-Content-scan-Use-ETIMEDOUT-not-ETIME-as-having-bette.patch
++ from GIT to fix FTBFS on kfreebsd.
++
++ -- Andreas Metzler <ametzler@debian.org> Sat, 13 Jun 2015 15:22:47 +0200
++
++exim4 (4.86~RC1-2) experimental; urgency=medium
++
++ * Pull three post-release fixes from upstream GIT. (null pointer
++ derefencing, and spam scanning defaulting to rspam mode)
++ + 72_0001-Guard-routing-against-a-null-deref.-Bug-1639.patch
++ + 72_0002-Spamd-add-missing-initialiser.-Rspamd-mode-was-incor.patch
++ + 72_0003-DSN-fix-null-deref-when-bounce-is-due-to-conn-timeou.patch
++
++ -- Andreas Metzler <ametzler@debian.org> Sun, 07 Jun 2015 07:26:13 +0200
++
++exim4 (4.86~RC1-1) experimental; urgency=medium
++
++ * New upstream release.
++ + Drop 84_Fix-truncation-of-items-in-headers_remove-lists-this.patch,
++ refresh patches.
++ + Update EDITME*, enable AUTH_TLS for -heavy.
++ + Sync Debian config with upstream default config, rfc1413 calls are now
++ disabled by default.
++ + Uses MIME format bounce messages (RFC 3461). Closes: #230284,#400741
++ + The spamd_address main option now supports an optional timeout value per
++ server (tmo=timespec), it defaults two 2 minutes. Closes: #297915
++ + spamd_address also accepts hostnames and IPv6 addresses. Closes: #751687
++ + log reason for defer, on a hostlist dns-lookup temporary error.
++ Closes: #670035
++
++ -- Andreas Metzler <ametzler@debian.org> Sat, 06 Jun 2015 15:41:33 +0200
++
++exim4 (4.85-3) unstable; urgency=medium
++
++ * Upload to unstable.
++
++ -- Andreas Metzler <ametzler@debian.org> Tue, 28 Apr 2015 19:34:16 +0200
++
++exim4 (4.85-2) experimental; urgency=medium
++
++ * Merge from unstable 4.84-8.
++ + Tighten dependency of exim4 on exim4-base to (>= ${source:Version}) and
++ (<< ${source:Version}.1), at least source version, but not the next
++ sourceful upload. Closes: #777246
++ + Pull 84_Fix-truncation-of-items-in-headers_remove-lists-this.patch from
++ upstream GIT which fixes breakage of string-expansion in headers_remove
++ commands. (Thanks Gordon Dickens, for the pointer.) -
++ 83_Remove-limit-on-remove_headers-item-size.-Bug-1533.patch not added
++ here since it already part of 4.85.
++
++ -- Andreas Metzler <ametzler@debian.org> Sat, 21 Feb 2015 15:38:47 +0100
++
++exim4 (4.85-1) experimental; urgency=medium
++
++ * exim4-config_files.5: Escape dots in regex. (Thanks, ael)
++ * New upstream version.
++
++ -- Andreas Metzler <ametzler@debian.org> Tue, 13 Jan 2015 18:48:45 +0100
++
++exim4 (4.85~RC4-1) experimental; urgency=medium
++
++ * update-exim4.conf:
++ + Drop unused variable UPEX4C_internal_tmp.
++ + Use tempfile(1) if the generated file will not be written to
++ /var/lib/exim4/.
++ + Add --check option.
++ * init-script: On restart use update-exim4.conf --check before stopping the
++ daemon. (This is a no-op with systemd since its sysv compat layer
++ translates "foo restart" into "foo stop" "foo start" instead of using the
++ init scripts restart target.)
++ * Handle _RC in watchfile with uversionmangle.
++ * New upstream version.
++ + Stop repacking source, rfcs have been dropped.
++
++ -- Andreas Metzler <ametzler@debian.org> Wed, 31 Dec 2014 14:24:35 +0100
++
++exim4 (4.85~RC3+dfsg-1) experimental; urgency=medium
++
++ * New upstream version.
++
++ -- Andreas Metzler <ametzler@debian.org> Thu, 18 Dec 2014 19:07:59 +0100
++
++exim4 (4.85~RC2+dfsg-1) experimental; urgency=medium
++
++ * New upstream version.
++ * Unfuzz patches: 50_localscan_dlopen.dpatch 67_unnecessaryCopt.diff
++ 70_remove_exim-users_references.dpatch.
++
++ -- Andreas Metzler <ametzler@debian.org> Mon, 01 Dec 2014 18:54:17 +0100
++
++exim4 (4.85~RC1+dfsg-1) experimental; urgency=medium
++
++ * Unset message_prefix/message_sufix in maildrop_pipe transport. Maildrop
++ neither expects a mbox-style From nor an empty line add the end. (Thanks,
++ Edward Betts) Closes: #769396
++ * Change the init script's restart order from { regenerate_config; stop;
++ start ; } to { stop; regenerate_config; start ; }. (Thanks, Jakub Warmuz)
++ Closes: #768874
++ * New upstream version.
++ + Unfuzz 66_enlarge-dh-parameters-size.dpatch
++ + Drop 80_mime_empty_charset.diff.
++ * Remove rfc from upstream source and repack it.
++
++ -- Andreas Metzler <ametzler@debian.org> Tue, 18 Nov 2014 19:28:20 +0100
++
+exim4 (4.84-8) unstable; urgency=medium
+
+ * Pull 83_Remove-limit-on-remove_headers-item-size.-Bug-1533.patch and
+ 84_Fix-truncation-of-items-in-headers_remove-lists-this.patch from
+ upstream GIT which fix breakage of string-expansion in headers_remove
+ commands. (Thanks Gordon Dickens, for the pointer.)
+
+ -- Andreas Metzler <ametzler@debian.org> Tue, 17 Feb 2015 18:00:42 +0100
+
+exim4 (4.84-7) unstable; urgency=medium
+
+ * Tighten dependency of exim4 on exim4-base to (>= ${source:Version}) and
+ (<< ${source:Version}.1), at least source version, but not the next
+ sourceful upload. Closes: #777246
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 07 Feb 2015 15:12:33 +0100
+
+exim4 (4.84-6) unstable; urgency=medium
+
+ * Revert init script's restart order change in 4.84-4 for the time being.
+ This needs a slightly more involved change than I want to push into jessie
+ right now.
+
+ -- Andreas Metzler <ametzler@debian.org> Sun, 21 Dec 2014 14:07:12 +0100
+
+exim4 (4.84-5) unstable; urgency=medium
+
+ * 82_quoted-or-r-2047-encoded.diff pulled from upstream git (sans
+ testsuite), extends the fix in 4.84-2.
+
+ -- Andreas Metzler <ametzler@debian.org> Wed, 17 Dec 2014 19:03:39 +0100
+
+exim4 (4.84-4) unstable; urgency=medium
+
+ * Unset message_prefix/message_sufix in maildrop_pipe transport. Maildrop
+ neither expects a mbox-style From nor an empty line add the end. (Thanks,
+ Edward Betts) Closes: #769396
+ * Change the init script's restart order from { regenerate_config; stop;
+ start ; } to { stop; regenerate_config; start ; }. (Thanks, Jakub Warmuz)
+ Closes: #768874
+ * 81_buffer-overrun-in-spam-acl.diff from upstream git. Fix a buffer overrun
+ with control characters in argument of spam= acl condition.
+ <http://bugs.exim.org/show_bug.cgi?id=1552>
+
+ -- Andreas Metzler <ametzler@debian.org> Sun, 30 Nov 2014 08:24:04 +0100
+
+exim4 (4.84-3) unstable; urgency=medium
+
+ * Apply patch to Italian (it) debconf template translation, thanks to
+ s3v <c0llapsed@yahoo.it>. Closes: #764925
+ * Let virtual package cron-daemon fulfill exim4-base's dependency now that
+ bcron provides it instead of "cron" and systemd-cron is fixed.
+ Closes: #765720
+
+ -- Andreas Metzler <ametzler@debian.org> Sun, 19 Oct 2014 13:35:56 +0200
+
+exim4 (4.84-2) unstable; urgency=high
+
+ * Add 80_mime_empty_charset.diff from upstream GIT (the parts that change
+ the code, not the testsuite) to handle empty content-type charset.
+
+ -- Andreas Metzler <ametzler@debian.org> Fri, 29 Aug 2014 19:41:38 +0200
+
+exim4 (4.84-1) unstable; urgency=medium
+
+ * New upstream release.
+
+ -- Andreas Metzler <ametzler@debian.org> Thu, 14 Aug 2014 19:33:01 +0200
+
+exim4 (4.84~RC2-1) unstable; urgency=medium
+
+ * New upstream release candidate.
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 09 Aug 2014 07:42:00 +0200
+
+exim4 (4.84~RC1-3) unstable; urgency=medium
+
+ * Third try. Simply comment *custom* in debian/control.
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 02 Aug 2014 09:29:13 +0200
+
+exim4 (4.84~RC1-2) unstable; urgency=medium
+
+ * Re-upload, after manually removing *custom* from the changes file to avoid
+ false detection of NEW packages due to the changes in the archive
+ infrastructure related source-only uploads.
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 02 Aug 2014 08:14:54 +0200
+
+exim4 (4.84~RC1-1) unstable; urgency=medium
+
+ * New upstream release candidate, fixing a regression in the MIME handling
+ code.
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 02 Aug 2014 07:45:26 +0200
+
+exim4 (4.83-2) unstable; urgency=medium
+
+ * Upload to unstable.
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 26 Jul 2014 09:25:15 +0200
+
+exim4 (4.83-1) experimental; urgency=medium
+
+ * New upstream release which includes the fix for CVE-2014-2972.
+
+ -- Andreas Metzler <ametzler@debian.org> Wed, 23 Jul 2014 08:13:22 +0200
+
+exim4 (4.83~RC3-1) experimental; urgency=medium
+
+ * New upstream release candidate.
+
+ -- Andreas Metzler <ametzler@debian.org> Tue, 08 Jul 2014 19:07:52 +0200
+
+exim4 (4.83~RC2-1) experimental; urgency=medium
+
+ * New upstream release candidate.
+ + JH/26 Port service names are now accepted for tls_on_connect_ports, to
+ align with daemon_smtp_ports. Bug 72. Closes: #316441
+
+
+ -- Andreas Metzler <ametzler@debian.org> Fri, 06 Jun 2014 19:11:24 +0200
+
+exim4 (4.83~RC1-1) experimental; urgency=medium
+
+ * New upstream feature release candidate.
+ + JH/06 Log outbound-TLS and port details, subject to log selectors, for a
+ failed delivery. Closes: #712987
+ * Unfuzz 31_eximmanpage.dpatch and 50_localscan_dlopen.dpatch.
+ * Drop superfluous patches: 75_unbind-ldap-connection.diff
+ 76_fix_ldap_option_setting.diff 77_close-the-server-side-of-TLS.diff
+ 80_fix_ftbfs_hurd.diff
+ * Since exim4-base currently only includes daily cronjobs let anacron
+ fulfill the dependency, too. Systems with missing recommends (anacron
+ recommends cron) that are *not* restarted regularily will therefore not
+ run the cron-job regularily. Exim should not break horribly in this case
+ and we can assume the local system administrator knows what (s)he is doing
+ by disabling installation of recommends. (Policy: "[...] packages that
+ would be found together with this one in all but unusual installations")
+ Closes: #733929
+
+ -- Andreas Metzler <ametzler@debian.org> Thu, 29 May 2014 13:09:04 +0200
+
+exim4 (4.82.1-2) unstable; urgency=high
+
+ * [87_double_expansion.diff] from upstream. Stop unwanted double expansion
+ of arguments to mathematical comparison operations. CVE-2014-2972
+
+ -- Andreas Metzler <ametzler@debian.org> Sun, 20 Jul 2014 19:05:48 +0200
+
+exim4 (4.82.1-1) unstable; urgency=high
+
+ * New upstream security release, fixing CVE-2014-2957. This is a remote
+ code execution flaw in Exim version 4.82 (only) when built with DMARC
+ support. Debian's binary packages are not built with DMARC support and
+ therefore not vulnerable. However we want to fix this for people building
+ their own binaries based on Debian's packaging.
+
+ -- Andreas Metzler <ametzler@debian.org> Wed, 28 May 2014 19:01:43 +0200
+
+exim4 (4.82-8) unstable; urgency=medium
+
+ * Now that GMP has been relicensed to LGPLv3+/GPLv2+ build exim against
+ GnuTLS v3.
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 12 Apr 2014 16:19:05 +0200
+
+exim4 (4.82-7) unstable; urgency=high
+
+ [ Martin Pitt ]
+ * debian/tests/control: Add missing python test dependency, as
+ debian/tests/security calls python. Closes: #740092
+
+ [ Andreas Metzler ]
+ * 4.82 deprecated $tls_bits, $tls_certificate_verified, $tls_cipher,
+ $tls_peerdn, $tls_sni and introduced tls_in_*/tls_out_* variants of these
+ variables which describe the respective status of the current incoming or
+ outgoing TLS connection. The rationale for this is that a single exim
+ process can now use both an incoming (message reception) and outgoing
+ TLS connection (callout or cutthrough delivery) concurrently. With this
+ change the "old" variables were mapped to tls_in_*, i.e. they expand to
+ empty values on outgoing connections. (This is not yet documented.)
+ Outgoing tls-connections can therefore not be detected by nonempty
+ $tls_cipher anymore. exim4-config << 4.82 used this mechanism to prevent
+ sending of plaintext AUTH information on unencrypted connections. Force a
+ lockstep upgrade of exim4-config by bumping the version of exim4-base's
+ dependency on exim4-config to >= 4.82.
+ Closes: #742901, #736081
+
+ -- Andreas Metzler <ametzler@debian.org> Sun, 06 Apr 2014 08:32:11 +0200
+
+exim4 (4.82-6) experimental; urgency=medium
+
+ [ Martin Pitt ]
+ * debian/tests/control: Add missing python test dependency, as
+ debian/tests/security calls python. Closes: #740092
+
+ [ Andreas Metzler ]
+ * Now that GMP has been relicensed to LGPLv3+/GPLv2+ build exim against
+ GnuTLS v3.
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 05 Apr 2014 14:18:11 +0200
+
+exim4 (4.82-5) unstable; urgency=medium
+
+ * Upgrade to libdb5.3-dev. Closes: #738637 Be paranoid and bump BDBVERSION
+ in exim4-base.postinst from 3.0 (no idea why this did not read 5.1) to
+ 5.3, therefore purging hints db on upgrades.
+
+ -- Andreas Metzler <ametzler@debian.org> Wed, 12 Feb 2014 19:31:55 +0100
+
+exim4 (4.82-4) unstable; urgency=medium
+
+ * Correct title/name of exim4-config_files(5). (Thanks, Heiko Schlittermann)
+ Closes: #734212
+ * 80_fix_ftbfs_hurd.diff by Samuel Thibault fixes FTBFS on GNU/hurd due to
+ missing support for TCLASS. Closes: #738445
+ * Add debian/upstream-signing-key.pgp (listed in
+ debian/source/include-binaries) and update watchfile to check
+ upstream signature.
+
+ -- Andreas Metzler <ametzler@debian.org> Sun, 09 Feb 2014 19:41:34 +0100
+
+exim4 (4.82-3) unstable; urgency=low
+
+ * Upload to unstable.
+
+ -- Andreas Metzler <ametzler@debian.org> Wed, 27 Nov 2013 19:51:26 +0100
+
+exim4 (4.82-2) experimental; urgency=low
+
+ * Pull two post-release fixes from upstream git master:
+ + 75_unbind-ldap-connection.diff - Only unbind ldap connection if bind
+ succeeded.
+ + 77_close-the-server-side-of-TLS.diff - Correctly close the server side
+ of TLS when forking for delivery.
+ * Pull 76_fix_ldap_option_setting.diff from Todd Lyons testing tree. See
+ <http://mid.gmane.org/20131029200309.GA277075%40zedat.fu-berlin.de>.
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 09 Nov 2013 17:24:59 +0100
+
+exim4 (4.82-1) experimental; urgency=low
+
+ * New upstream stable release.
+ * Drop exim4-config_files.5 symlinks for local_host_whitelist and
+ local_sender_whitelist, add symlinks for host_local_deny_exceptions and
+ sender_local_deny_exceptions instead. Closes: #661365
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 09 Nov 2013 11:52:58 +0100
+
+exim4 (4.82~rc5-1) experimental; urgency=low
+
+ * New upstream version.
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 26 Oct 2013 08:50:58 +0200
+
+exim4 (4.82~rc3-1) experimental; urgency=low
+
+ * New upstream version.
+ + TL/15 Fix exiqsumm summary for corner case. Patch provided by Richard
+ Hall.
+ + TL/16 Bugzilla 1289 - Clarify host/ip processing when have errors
+ looking up a hostname or reverse DNS when processing a host list. Used
+ suggestions from multiple comments on this bug.
+ + TL/17 Bugzilla 1057 - Multiple clamd TCP targets patch from Mark Zealey.
+ * Add macros for sending a client certificate on outgoing TLS connections.
+ (REMOTE_SMTP_TLS_CERTIFICATE/REMOTE_SMTP_PRIVATEKEY,
+ REMOTE_SMTP_SMARTHOST_TLS_CERTIFICATE/REMOTE_SMTP_SMARTHOST_PRIVATEKEY)
+ Closes: #677826
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 12 Oct 2013 09:30:28 +0200
+
+exim4 (4.82~rc2-1) experimental; urgency=low
+
+ * exim-gencert: Generate 2048bit key by default. LP: #1200581
+ * New upstream version.
+ + Drop 80_addmanuallybuiltdocs.diff
+
+ -- Andreas Metzler <ametzler@debian.org> Thu, 03 Oct 2013 19:24:59 +0200
+
+exim4 (4.82~rc1-1) experimental; urgency=low
+
+ * New upstream version.
+ + TL/02 Add +smtp_confirmation as a default logging option.
+ Closes: #649600
+ + JH/05 Permit multiple router/transport headers_add/remove lines.
+ Closes: #276126
+ + See /usr/share/doc/exim4-base/NewStuff.gz for other newly added
+ features.
+ * Upload to experimental.
+ * Drop unnecessary patches (30_dontoverridecflags.dpatch
+ 75_openssl_sni.diff 76_tls_dh_min_bits.diff 77_docsfortls_dh_min_bits.diff
+ 78_pkcs11_init.diff 84_CVE-2012-5671.patch 85_server_set_id_SPA.diff
+ 86_Dovecot-robustness.diff 87_localinjected_mimeacl.diff), unfuzz patches.
+ * Applying upstream's default configuration updates to Debian configuration
+ change 30_exim4-config_examples to use tls_in_cipher/tls_out_cipher
+ instead of tls_out_cipher. - exim4-config therefore Breaks
+ exim daemon << 4.82~rc1.
+ * 80_addmanuallybuiltdocs.diff: Upstream rc tarball ships empty filter.txt
+ and spec.txt, replace these with correct handbuilt versions.
+
+ -- Andreas Metzler <ametzler@debian.org> Sun, 29 Sep 2013 14:43:25 +0200
+
+exim4 (4.80-9) unstable; urgency=low
+
+ * Upload to unstable.
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 14 Sep 2013 08:05:18 +0200
+
+exim4 (4.80-8) experimental; urgency=low
+
+ * Import updated watchfile by Bart Martens. (Handles more compression types
+ and x.y.revision versioning.)
+ * In initscript invoke pidofproc with a pathname argument as it is
+ documented in LSB and required by lsb-base (>= 4.1+Debian9).
+ Closes: #693696, #718871
+ * Improve exim4-config_files.5 and README.Debian - Warn about unresolvable
+ items in host lists. Closes: #627988
+ * Drop support for "/etc/init.d/exim4 what". It offers zero benefit to
+ invoking exiwhat directly and throws an error mesage, too. (Thanks Regid
+ Ichira for the diagnosis.) Closes: #643720
+ * Set "host_find_failed = ignore" (instead of defer) on smarthost and
+ hub_user_smarthost router. Now if one (of the possibly multiple) listed
+ smarthosts is not resolvable (NXDOMAIN) ignores it and and tries the next
+ listed one. If all listed hosts are unresolvable the mail is still
+ defered, since host_all_ignored is set to defer by default. Therefore the
+ behavior does not change for single-smarthost systems. Closes: #658878
+ * Remove obsolete conffile /etc/cron.monthly/exim4-base which was only
+ shipped in 4.69-3. Closes: #689334
+ * Update exim_db.8, syncing against spec.txt from exim 4.80.
+ * 87_localinjected_mimeacl.diff from upstream GIT. When injecting a message
+ locally in non-SMTP mode, and with MIME ACLs configured, if the ACL
+ rejected the message, Exim would try to `fprintf(NULL, "%s",
+ the_message)`. This fixes that.
+ * [lintian] Escape some dashes in exim4-config_files.5.
+ * Point vcs-* to anonscm.
+ * Remove pidfile after stopping the daemon, exim does not remove it itself.
+ Closes: #702988
+ * eu.po: Fix last reference to /usr/share/doc/exim4-base/README.Debian
+ (without either .html or .gz suffix). Closes: #394975
+ * Merge autopkgtests from Ubuntu (Thanks Yolanda Robla for the pointer)
+ Closes: #710018
+ + tests/CVE-2010-4344.py is GPLv2 - Add license header.
+ + tests/daemon and tests/security do not use bashisms, change shebang
+ to /bin/sh.
+ * Upload to experimental, due to perl transition.
+
+ -- Andreas Metzler <ametzler@debian.org> Sun, 01 Sep 2013 15:58:49 +0200
+
+exim4 (4.80-7) unstable; urgency=low
+
+ * Use exim's ${quote:xxx} operator when invoking spfquery to disallow
+ bypassing of SPF validation by using special mailbox names. (Thanks to
+ Lekensteyn for diagnosis and testing.) Closes: #697057
+
+ -- Andreas Metzler <ametzler@debian.org> Wed, 02 Jan 2013 19:37:21 +0100
+
+exim4 (4.80-6) unstable; urgency=low
+
+ * Cherrypick two changes from GIT:
+ + 85_server_set_id_SPA.diff: server_set_id was not stored in
+ $authenticated_id when using SPA authentication.
+ http://article.gmane.org/gmane.mail.exim.user/92181
+ + 86_Dovecot-robustness.diff: robustness fixes for the Dovecot
+ authenticator.
+
+ -- Andreas Metzler <ametzler@debian.org> Wed, 21 Nov 2012 19:08:53 +0100
+
+exim4 (4.80-5.1) unstable; urgency=high
+
+ * Non-maintainer upload by the Security Team.
+ * CVE-2012-5671: Fix heap-based buffer overflow in DKIM handling.
+
+ -- Nico Golde <nion@debian.org> Thu, 25 Oct 2012 20:11:11 +0200
+
+exim4 (4.80-5) unstable; urgency=low
+
+ * Fix grammar error in debian/manpages/exim4-config_files.5. (Thanks,
+ Regid Ichira)
+ * Fix hardening support. (Thanks, Simon Ruderich)
+ + Append $(CPPFLAGS) to CFLAGS, the exim buildsystem does not use it.
+ + Set LFLAGS += $(LDFLAGS) in debian/rules.
+ Closes: #687645
+ * Correct typo in Russian debconf translation. (Thanks, Krasu)
+ Closes: #683385
+ * Point Vcs-* to git repository.
+
+ -- Andreas Metzler <ametzler@debian.org> Sun, 23 Sep 2012 12:20:16 +0200
+
+exim4 (4.80-4) unstable; urgency=low
+
+ * Disable autoloading of PKCS#11 modules. Closes: #678238
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 23 Jun 2012 18:35:03 +0200
+
+exim4 (4.80-3) unstable; urgency=low
+
+ * Pull 75_openssl_sni.diff from upstream. - Segfault caused by NULL
+ dereference if Exim is built using OpenSSL, tls_sni is used and a
+ forced expansion failure is configured.
+ * Pull 76_tls_dh_min_bits.diff (and the corresponding doc change
+ 77_docsfortls_dh_min_bits.diff) from upstream. Adds a new SMTP transport
+ option tls_dh_min_bits for setting the minimal size of DH parameters.
+ * Add macro TLS_DH_MIN_BITS for setting the tls_dh_min_bits smtp transport
+ option. Closes: #676563
+ * [lintian] Stop shipping empty directory /usr/share/exim4 in exim4-base.
+
+ -- Andreas Metzler <ametzler@debian.org> Fri, 08 Jun 2012 12:37:05 +0200
+
+exim4 (4.80-2) unstable; urgency=low
+
+ * [Brown paper bag] actually target unstable in changelog.
+
+ -- Andreas Metzler <ametzler@debian.org> Sun, 03 Jun 2012 17:24:05 +0200
+
+exim4 (4.80-1) experimental; urgency=low
+
+ * New upstream version, identical to rc7.
+ * Add a missing piece of documentation to update-exim4.conf.8. DCreadhost
+ is not only used for rewriting, in satellite setup it is also
+ the host where local mail is delivered to. (Thanks, Regid Ichira).
+ Closes: #675712
+
+ -- Andreas Metzler <ametzler@debian.org> Sun, 03 Jun 2012 16:49:51 +0200
+
+exim4 (4.80~rc7-1) experimental; urgency=low
+
+ * New upstream version.
+ * Let debian/EDITME.openssl.exim4-light.diff apply again.
+
+ -- Andreas Metzler <ametzler@debian.org> Tue, 29 May 2012 19:33:07 +0200
+
+exim4 (4.80~rc6-1) experimental; urgency=low
+
+ * Ship newly available GnuTLS-FAQ.txt in exim4-base.
+ * Upstream's handling of GnuTLS DH parameters has changed, hardcoded
+ parameters (from RFCs are used by default. See
+ /usr/share/doc/exim4-base/README.UPDATING* for details. Stop shipping
+ /usr/share/exim4/exim4_refresh_gnutls-params /usr/share/exim4/timeout.pl
+ and /var/spool/exim4/gnutls-params-2236.
+
+ -- Andreas Metzler <ametzler@debian.org> Sun, 27 May 2012 18:46:48 +0200
+
+exim4 (4.80~rc5-1) experimental; urgency=low
+
+ * New upstream version.
+
+ -- Andreas Metzler <ametzler@debian.org> Thu, 24 May 2012 20:20:24 +0200
+
+exim4 (4.80~rc4-1) experimental; urgency=low
+
+ * New upstream version.
+ + Unfuzz 50_localscan_dlopen.dpatch
+ + Drop 80_revert_stringformatprintf.diff, superseded upstream.
+ + Default DH param size switched to 2236 for NSS compat. Update
+ generation script and shipped parameters.
+
+ -- Andreas Metzler <ametzler@debian.org> Mon, 21 May 2012 20:00:18 +0200
+
+exim4 (4.80~rc2-1) experimental; urgency=low
+
+ * Fix typo in retry/30_exim4-config (s/frequenzy/frequency/) (Thanks, Regid
+ Ichira). Closes: #646338
+ * dpkg-buildflags supersedes hardening-wrapper. set
+ DEB_BUILD_MAINT_OPTIONS := hardening=+bindnow,+pie to use features enabled
+ by hardening-wrapper by default. Make sure to always set -Wall.
+ * List mapppings between debconf choices ("mail sent by smarthost; no local
+ mail" et al.) and corresponding values of the DC_eximconfig_configtype
+ macro in update-exim4.conf(8). Closes: #651883
+ * README.Debian.*: Correct documentation of the lowuid_aliases router. - The
+ macro is named FIRST_USER_ACCOUNT_UID instead of FIRST_USER_UID. (Thanks,
+ Yubao Liu) Closes: #653058
+ * add more verbose help to /etc/default/exim4. Closes: #653272
+ * Updated French debconf templates translation. (thanks for proofreading,
+ debian-l10n-french!) Closes: #668475
+ * Fix typo usualy in update-exim4.conf.8.
+ * Add source lintian override (debian/source/lintian-overrides) for
+ binaries-have-file-conflict exim4-daemon-heavy-dbg exim4-daemon-light-dbg.
+ *-daemon-dbg depends on the respective -daemon, and the daemon-packages
+ conflict with each other.
+ * New upstream version:
+ + Unfuzz patches
+ + Update 66_enlarge-dh-parameters-size.dpatch. This is now a noop if built
+ against gnutls >= 2.12.
+ + Default DH param size is 2432, update generation script and shipped
+ parameters.
+ + Unfuzz/update */EDITME/*. Update debian/example.conf.md5.
+ + 80_revert_stringformatprintf.diff. Do not mark string_format() as
+ PRINTF_FUNCTION(3,4) to allow compilation with -Wformat
+ -Werror=format-security
+ + Sets accept_8bitmime = true by default. Closes: #445013
+ + Uses GnuTLS priority string for configuration. (See NEWS.Debian)
+ Closes: #624041
+
+ -- Andreas Metzler <ametzler@debian.org> Sun, 20 May 2012 15:57:15 +0200
+
+exim4 (4.77-1) unstable; urgency=low
+
+ * Fix typo in exim4-config_files.5. (Thanks, Regid Ichira) Closes: #645283
+ * New upstream stable release. (No major changes compared to rc4)
+ * Upload to unstable.
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 22 Oct 2011 18:00:11 +0200
+
+exim4 (4.77~rc4-1) experimental; urgency=low
+
+ * New upstream release candidate.
+ + drop patches included in this release.
+ (80_gnutls_certificate_verify_peers2.diff 80_gnutls_initrc.diff
+ 80_TLS1.2-and-TLS1.1-support.diff)
+ + New expansion conditions, "inlist", "inlisti".
+ + Exim no longer performs string expansion on the second string of
+ the match_* expansion conditions: "match_address", "match_domain",
+ "match_ip" & "match_local_part". Named lists can still be used. The
+ previous behavior made it too easy to create (remotely) vulnerable
+ configurations. A more detailed rationale and explanation can be found
+ on
+ https://lists.exim.org/lurker/message/20111003.122326.fbcf32b7.en.html
+ + doc/pcrepattern.txt is not shipped anymore as part of the exim tarball
+ (and therefore the Debian package suite.)
+ * Make use of /usr/share/dpkg/buildflags.mk if available.
+ * Change build system to build each binary variant in a separate copy of
+ the source tree instead of re-using the copy and moving away the results
+ after build. The old approach stopped working since upstream added a
+ dependency on make all to make install. - As we were changing parts of
+ tree (Local/Makefile) after the build this caused an (incorrect) rebuild
+ on make install.
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 08 Oct 2011 13:07:35 +0200
+
+exim4 (4.76-4) experimental; urgency=low
+
+ * 80_TLS1.2-and-TLS1.1-support.diff (pulled from upstream GIT gnutls_fixes
+ branch): Enable TLS1.2 and TLS1.1
+ * 80_gnutls_certificate_verify_peers2.diff, 80_gnutls_initrc.diff (pulled
+ from upstream GIT gnutls_fixes branch): Use
+ gnutls_certificate_verify_peers2() instead of
+ gnutls_certificate_verify_peers(). The deprecated function was dropped in
+ GnuTLS 3.x. Closes: #624082
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 24 Sep 2011 18:36:08 +0200
+
+exim4 (4.76-3) unstable; urgency=low
+
+ * [exim4-base.cron.daily] Correct invocation of mail(1), options need to be
+ specified before arguments for compatibility with heirloom-mailx (Thanks,
+ Andreas Schiweck). Closes: #629314
+ * [exim4-base.exim4.init] Use echo instead of log_failure_msg for the panic
+ log warning. Closes: #629610
+ * [exim4-base.postinst] Also take care of ratelimit db on bdbd upgrades.
+ Closes: #630985
+ * Update Debian exim webpage URL. Closes: #641126
+ * Do not run upgrade test for 4.67-5 on exim4.conf.template if split config
+ is used and vice versa. Closes: #577633
+ * [lintian] Do not specify priority in binary package stanzas, unless it
+ deviates from the source package priority setting.
+ * [lintian] Drop unused lintian override binary-without-manpage
+ usr/sbin/exim.
+ * [lintian] Improve on short descriptions of *-dbg packages.
+
+ -- Andreas Metzler <ametzler@debian.org> Sun, 18 Sep 2011 11:49:13 +0200
+
+exim4 (4.76-2) unstable; urgency=low
+
+ * debian/rules: Remove test/ and test-stamp on clean.
+ * Handle BerkeleyDB upgrades more gracefully. Instead of checking Debian
+ version numbers compare DB-version of old exim (stored by postinst in
+ /var/lib/exim4/berkeleydbvers.txt) with currently used DB-version
+ (hardcoded at build time in exim4-base.postinst).
+ * [exim4-base.postinst exim4-config.postinst] Do away with unnecessary
+ chowns by dropping them or limiting to upgrades from 4.30.
+
+ -- Andreas Metzler <ametzler@debian.org> Sun, 29 May 2011 18:21:03 +0200
+
+exim4 (4.76-1) unstable; urgency=low
+
+ * New upstream version.
+ * Drop 80_match_isinlist.diff (included upstream).
+
+ -- Andreas Metzler <ametzler@debian.org> Mon, 09 May 2011 19:12:09 +0200
+
+exim4 (4.76~RC1-3) experimental; urgency=low
+
+ * 80_match_isinlist.diff pulled from upstream git.
+
+ -- Andreas Metzler <ametzler@debian.org> Sun, 08 May 2011 14:44:20 +0200
+
+exim4 (4.76~RC1-2) experimental; urgency=low
+
+ * Fix testsuite error.
+ * Disable verification of DKIM signatures if DC_minimaldns or the (newly
+ added) DISABLE_DKIM_VERIFY macro are set. Closes: #609764
+ * [lintian] Drop useless comments from debian/watch.
+
+ -- Andreas Metzler <ametzler@debian.org> Sun, 08 May 2011 08:58:24 +0200
+
+exim4 (4.76~RC1-1) experimental; urgency=low
+
+ * New upstream version.
+ * Drop superfluous patches. 80_ldap_require_cert-work.diff
+ 81_negatebool.diff 82_dkimpercent.diff
+ * [Lintian] Fix grammar error in manpage (spelling-error-in-manpage
+ update-exim4defaults.8.gz allows to allows one to).
+ * [debian/minimaltest]: Added. Try to run a minimal functionality test after
+ building exim. (Currently only supported if the build-system has a
+ Debian-exim user.)
+
+ -- Andreas Metzler <ametzler@debian.org> Fri, 06 May 2011 20:27:56 +0200
+
+exim4 (4.75-3) unstable; urgency=high
+
+ * [debian/rules] Fix dependencies and targets, speeding up package build.
+ Previously everything was compiled twice.
+ * Patches pulled from upstream git:
+ +81_negatebool.diff Negating the $bool expansion condition did not work.
+ +82_dkimpercent.diff dkim sig logged to paniclog. Closes: #624670
+ (CVE-2011-1764)
+
+ -- Andreas Metzler <ametzler@debian.org> Fri, 06 May 2011 20:08:51 +0200
+
+exim4 (4.75-2) unstable; urgency=low
+
+ * clamav socket on Debian is clamd:/var/run/clamav/clamd.ctl, fix
+ configuration example accordingly. (Thanks, Roman V. Nikolaev)
+ Closes: #622111
+ * Use on libdb5.1-dev (instead of 4.8), zap hints db on upgrade from <=
+ 4.75-1. Closes: #621388
+ * Enable hardening options. (Last difference to Ubuntu except for not being
+ the default-mta there.) Closes: #542726
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 16 Apr 2011 14:45:36 +0200
+
+exim4 (4.75-1) unstable; urgency=low
+
+ * New upstream version.
+ * 80_ldap_require_cert-work.diff Pulled from upstream git. The new
+ ldap_require_cert option would segfault if used.
+
+ -- Andreas Metzler <ametzler@debian.org> Mon, 28 Mar 2011 19:24:55 +0200
+
+exim4 (4.75~rc3-1) experimental; urgency=low
+
+ * New upstream version.
+
+ -- Andreas Metzler <ametzler@debian.org> Thu, 03 Mar 2011 19:10:06 +0100
+
+exim4 (4.75~rc2-1) experimental; urgency=low
+
+ * New upstream version.
+ + Fixes exiqgrep "Line mismatch" error on messages without size info.
+ Closes: #528625
+ + Restore default SIGPIPE handler for child_open_uid. Closes: #573779
+ * Enable verbose compilation.
+
+ -- Andreas Metzler <ametzler@debian.org> Sun, 27 Feb 2011 11:59:45 +0100
+
+exim4 (4.74-2) unstable; urgency=low
+
+ * Upload to unstable.
+
+ -- Andreas Metzler <ametzler@debian.org> Thu, 24 Feb 2011 19:02:07 +0100
+
+exim4 (4.74-1) experimental; urgency=low
+
+ * 4.74 release, should build on hurd again.
+ * Fix some lintian --pedantic issues: copyright-refers-to-symlink-license
+ maintainer-script-without-set-e debian-control-has-unusual-field-spacing
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 29 Jan 2011 15:39:51 +0100
+
+exim4 (4.74~rc2-1) experimental; urgency=low
+
+ * In spf example use spf-tools-perl's spfquery instead of the one from
+ libmail-spf-query-perl. Do not try to use unimplemented best-guess
+ support. Update Suggests accordingly. Closes: #608336
+ * Add headers in ACL by using the add_header modifier instead of "message".
+ (This modifier has been available since 4.61.) Closes: #609308
+ * New upstream version.
+ + includes the fix for CVE-2011-0017
+ + If a non-debug daemon was invoked with a non-whitelisted macro, then
+ logs from after attempting delivery would be silently lost, including
+ for successful delivery. This log-loss bug was introduced in 4.73
+ as part of the security lockdown. Closes: #610611
+ + Update some patches.
+
+ -- Andreas Metzler <ametzler@debian.org> Sun, 23 Jan 2011 14:02:36 +0100
+
+exim4 (4.73~rc1-1) experimental; urgency=low
+
+ * New upstream release candidate.
+ * Drop included patches. 80_4.73rc1_*, 40_dkimnotinpaniclog.diff.
+ * Update 31_eximmanpage.dpatch.
+ * exim4 now uses INSTREAM (added in clamav 0.95) instead of STREAM when
+ talking to clamav. exim4-daemon-heavy therefore Breaks: clamav-daemon
+ (<< 0.95).
+ * Unfuzz EDITME*diff.
+ * Dependency changes:
+ + Drop exim4-config's conflicts with bash (<< 2.05). This was relevant
+ pre-sarge.
+ + Drop exim4-daemon-* dependency on exim4-base (>> 4.71-2). This one is
+ superfluous because of of the dependency on
+ exim4-base (>= ${Upstream-Version}).
+ + exim4-config breaks instead of conflicts with pre-DKIM (i.e. << 4.69.1)
+ exim4-daemon.
+ + exim4-base breaks instead of conflicts with <<${Upstream-Version} daemon
+ packages.
+ * Add Vcs-Svn and Vcs-Browser fields to debian/control.
+ * Build depend on libmysqlclient-dev | libmysqlclient15-dev instead of
+ libmysqlclient15-dev. libmysqlclient-dev is not a virtual package
+ anymore. Closes: #590218
+ * Use db_settitle unconditionally, even etch supports this. Drop unneeded
+ lintian override exim4-config: settitle-requires-versioned-depends.
+
+ -- Andreas Metzler <ametzler@debian.org> Mon, 27 Dec 2010 19:48:19 +0100
+
+exim4 (4.72-6) unstable; urgency=high
+
+ * 80_4.74_filtertesting.diff: Do not abort when setgid fails if privileges
+ were dropped. This fixes a regression from 4.72-2, it was not possible to
+ test filter files with exim4 -bf anymore. Closes: #611572
+
+ -- Andreas Metzler <ametzler@debian.org> Mon, 31 Jan 2011 19:05:48 +0100
+
+exim4 (4.72-5) unstable; urgency=medium
+
+ * 80_4.74_deliverylogging.patch (Pulled from upstream git): If a non-debug
+ daemon was invoked with a non-whitelisted macro, then logs from after
+ attempting delivery would be silently lost, including for successful
+ delivery. This log-loss bug was introduced as part of the security
+ lockdown for fixing CVE-2010-4345. Closes: #610611
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 29 Jan 2011 14:33:36 +0100
+
+exim4 (4.72-4) unstable; urgency=medium
+
+ * In spf example use spf-tools-perl's spfquery instead of the one from
+ libmail-spf-query-perl. Do not try to use unimplemented best-guess
+ support. Update Suggests accordingly. Closes: #608336
+ * 80_4.74_CVE-2011-0017.patch (Pulled from upstream git): Check return
+ values of setgid/setuid. This is a privilege escalation vulnerability
+ whereby the Exim run-time user can cause root to append content of the
+ attacker's choosing to arbitrary files.
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 22 Jan 2011 17:48:19 +0100
+
+exim4 (4.72-3) unstable; urgency=low
+
+ * [README.Debian*] Correct command for manual paniclog rotation. (Thanks,
+ Jörg Sommer) Closes: #602188
+ * 67_unnecessaryCopt.diff: Do not use exim's -C option in utility scripts.
+ This would not work with ALT_CONFIG_PREFIX.
+ * Pull changes related to fixing CVE-2010-4345 from exim 4.73 rc1.
+ Closes: #606527
+ + 1_cfile_norw_eximuid: Don't allow a configure file which is writeable by
+ the Exim user or group.
+ + 2_permcheck_configurefile: Check configure file permissions even for
+ non-default files if still privileged.
+ + 3_remove_ALT_CONFIG_ROOT_ONLY: Remove ALT_CONFIG_ROOT_ONLY build option,
+ effectively making it always true.
+ + 4_FD_CLOEXEC: Set FD_CLOEXEC on SMTP sockets after forking in the
+ daemon, to ensure that rogue child processes cannot use them.
+ + 5_TRUSTED_CONFIG_LIST: Add TRUSTED_CONFIG_LIST compile option.
+ + 6_nonroot_system_filter_user: If the system filter needs to be run as
+ root, let that be explicitly configured. The default is now the Exim
+ run-time user.
+ + 7_filter_D_option: Add a (compiletime) whitelist of acceptable values
+ for the -D option.
+ + 8_updatedocumentation: Update documentation to reflect the changes.
+ * Build with WHITELIST_D_MACROS=OUTGOING. Post patch 7_filter_D_option exim
+ will not regain root privileges (usually necessary for local delivery) if
+ the -D option was used. Macro identifiers listed in WHITELIST_D_MACROS are
+ exempted from this restriction. mailscanner (4.79.11-2.2) uses -DOUTGOING.
+ * Build with TRUSTED_CONFIG_LIST=/etc/exim4/trusted_configs. Post patch
+ 3_remove_ALT_CONFIG_ROOT_ONLY exim will not re-gain root privileges
+ (usually necessary for local delivery) if the -C option was used. This
+ makes it impossible to start a fully functional damon with an alternate
+ configuration file. /etc/exim4/trusted_configs (can) contain a list of
+ filenames (one per line, full path given) to which this restriction does
+ not apply.
+
+ -- Andreas Metzler <ametzler@debian.org> Sun, 26 Dec 2010 15:13:08 +0100
+
+exim4 (4.72-2) unstable; urgency=low
+
+ [ Marc Haber ]
+ * Apply patch to russian (ru) debconf template, thanks to Тим
+ Алексеевский and Tim Alexeevsky. Closes: #576202
+ * fix exim4-config_files man page, mention
+ {host|sender}_local_deny_exceptions instead of
+ local_{host|sender}_whitelist. Thanks to Fabien André in #578176
+ * add !acl = acl_local_deny_exceptions to defer stanzas in SPF code.
+ Thanks to Fabien André. Closes: #578176
+ * Re-work config.autogenerated header to more exactly reflect
+ configuration source. (mh) Closes: #593984
+
+ [ Andreas Metzler ]
+ * Fix getopt invocation to make update-exim4.conf.template -o work. (Thank
+ you Matthew W. S. Bell) Closes: #590333
+ * 40_dkimnotinpaniclog.diff pulled from upstream git. Stop logging
+ non-critical DKIM errors in paniclog. Closes: #567876
+ * Debconf translations:
+ - Danish. Closes: #592792
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 30 Oct 2010 13:38:26 +0200
+
+exim4 (4.72-1) unstable; urgency=low
+
+ * New upstream release. (Identical to the git snapshot previously
+ uploaded to experimental.)
+
+ -- Andreas Metzler <ametzler@debian.org> Thu, 03 Jun 2010 17:42:52 +0200
+
+exim4 (4.72~20100529-1) experimental; urgency=low
+
+ * Git snapshot 20100529.
+ + Fix documentation for exipick -bpra. #574778
+ + CVE-2010-2024: Protect against symlink attacks on MBX lockfile in /tmp.
+ (Debian's default configuration does not use MBX format, but the
+ exim4-daemon-heavy binary supports MBX.)
+ + CVE-2010-2023 Prevent hardlink attack on mbox sticky mail directory.
+ (Probably not relevant for Debian systems at all, since the mail spool
+ is 2775 root:mail.)
+ + Dovecot authenticator ignores unknown keywords, making it compatible
+ with version 1.1 of Dovecot authentication protocol. (= dovecot 2.0).
+ See Changelog for complete list.
+ * Drop patches included upstream: 36_typoinexipick.diff
+ 20_PDKIM-Upgrade-PolarSSL.diff.
+
+ -- Andreas Metzler <ametzler@debian.org> Sun, 30 May 2010 14:01:52 +0200
+
+exim4 (4.71-4) unstable; urgency=low
+
+ * Drop unneeded lintian overrides.
+ + description-contains-homepage
+ + debian/source.lintian-overrides dbg-package-missing-depends exim4-dbg.
+ + partially-translated-question
+ + maintainer-script-needs-depends-on-update-inetd
+ + possible-bashism-in-maintainer-script
+ + binary-without-manpage
+ + possible-debconf-note-abuse
+ + changelog-not-compressed-with-max-compression
+ * Lintian informational hints:
+ + hyphen-used-as-minus-sign. debian/manpages/exim4-config_files.5
+ debian/manpages/update-exim4.conf.8 debian/manpages/exiwhat.8
+ * Use dh_lintian.
+ * Fix sourcing of lsb-functions in init-script. Test for existence of
+ /usr/lib/exim4/exim4 first. Unconditionally read /lib/lsb/init-functions.
+ If they are not present the package's dependencies are not installed.
+ Bump dependency on lsb-base to 3.0-6. (log_action_*)
+ * Update reference to spec.txt in README.Debian. Closes: #568051
+ * Invoke spfquery as spfquery.mail-spf-query-perl. There are three different
+ implementations of spfquery in Debian, with incompatible commandline
+ switches and different exit codes. Closes: #573956
+
+ -- Andreas Metzler <ametzler@debian.org> Thu, 25 Mar 2010 17:34:30 +0100
+
+exim4 (4.71-3) unstable; urgency=low
+
+ * exim4-base.cron.daily: Do not run exim_tidydb on Berkeley DB logfiles.
+ Closes: #501892
+ * exim4-base.postinst: If exim_dumpdb fails to read a hints-db also remove
+ Berkeley DB logfiles.
+ * Switch to Berkeley DB 4.8 (from 4.6). Zap hints db on upgrade. Temporarily
+ make -daemon packages depend on exim4-base >> 4.71-2. (This can be removed
+ after the next upstream release.)
+ Closes: #548479
+ * control: Drop bzip2 from Build-Depends. Use line-wrapping for
+ Build-Depends.
+ * 36_typoinexipick.diff: Fix a typo in exipick manpage. (Lintian).
+ * exim4-base.postinst: Redirect status message to stderr.
+
+ -- Andreas Metzler <ametzler@debian.org> Fri, 01 Jan 2010 13:41:44 +0100
+
+exim4 (4.71-2) unstable; urgency=low
+
+ * Pulled from upstream: 20_PDKIM-Upgrade-PolarSSL.diff. Update files copied
+ from PolarSSL to 0.12.1.
+ * Add example file to set smarthost from /etc/network/interfaces (mh)
+ * Add DKIM_* macros on remote smtp transports for setting the corresponding
+ dkim_* options.
+ * Upload to unstable.
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 12 Dec 2009 13:24:21 +0100
+
+exim4 (4.71-1) experimental; urgency=low
+
+ * New upstream version.
+ + Drop patches included upstream. 51_dkimrelatedcrash.diff
+ 51_noreject_unsigned.diff.
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 28 Nov 2009 12:03:50 +0100
+
+exim4 (4.70-2) experimental; urgency=low
+
+ * 51_noreject_unsigned.diff Fix a dkim related expansion error that appears
+ when the expanded value of dkim_verify_signers winds up empty and
+ acl_smtp_dkim is defined. (This has the effect of rejecting any mail
+ without DKIM signature.)
+ * Work around 490937 by removing CHANGES.
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 21 Nov 2009 10:15:41 +0100
+
+exim4 (4.70-1) experimental; urgency=low
+
+ * Point watchfile to ftp.exim.org.
+ * Use dpkg-source v3 instead of dpatch, simplifying debian/rules a little
+ bit.
+ * New upstream version.
+ + Pull 51_dkimrelatedcrash.diff fixing a segfault only applying to the
+ 4.7x series. http://bugs.exim.org/show_bug.cgi?id=912
+ * debhelper v7 mode.
+ + Use -XCHANGES to Keep dh_installchangelogs v7 from insisting to install
+ ./CHANGES as upstream changelog.
+ + Bump build-dependency.
+ + Use dh_prep instead of dh_clean -k.
+
+ -- Andreas Metzler <ametzler@debian.org> Sun, 15 Nov 2009 13:10:32 +0100
+
+exim4 (4.70~rc4-1) experimental; urgency=low
+
+ * New upstream version.
+
+ -- Andreas Metzler <ametzler@debian.org> Wed, 11 Nov 2009 19:04:35 +0100
+
+exim4 (4.70~cvs+20091030-1) experimental; urgency=low
+
+ * New upstream snapshot.
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 31 Oct 2009 10:08:55 +0100
+
+exim4 (4.70~cvs+20091026-1) experimental; urgency=low
+
+ * New snapshot.
+ + Fixes segfault in dovecot authenticator. Closes: #551106
+ + Improved documentation regarding certifacte verification on outgoing
+ SMTP connections. Closes: #544472
+ * Drop 40_boolean_redefine_protect.dpatch - included upstream.
+ * Drop unapplied superfluous patches from diff: 36_pcre 37_exiwhatpsmisc.
+
+ -- Andreas Metzler <ametzler@debian.org> Mon, 26 Oct 2009 16:09:32 +0100
+
+exim4 (4.70~cvs+20091017-1) experimental; urgency=low
+
+ * Fix syntax errors in README.Debian.xml. (Thank's, Daniel Leidert)
+ * New upstream cvs snapshot.
+ + Drop unnecessary patches: 36_pcre 37_exiwhatpsmisc.
+ + Close dovecot socket after wrong password was given. Closes: #515503
+ + Standalone DKIM support. Obsoletes and therefore
+ Closes: #486437,#459883
+ * Drop upstream URL from package descriptions. Closes: #471425
+ * [patches/00_unpack.dpatch] Drop workaround for tar 1.14, even oldstable
+ has 1.16. Closes: #486436.
+ * Do not set 'tls_try_verify_hosts = *' by default anymore. Some clients
+ (e.g Outlook) will terminate the SSL connection when the server presents
+ the long list of accepted TLS certificates after STARTTLS. If TLS
+ certificate validation of clients is needed you'll need to set
+ MAIN_TLS_TRY_VERIFY_HOSTS again and point MAIN_TLS_VERIFY_CERTIFICATES to
+ a file containing only the accepted certificates.
+ Closes: #515999, #316522, #482012
+ * Add debian/README.source. (Policy 3.8.3)
+ * Fix typo in update-exim4.conf.8.
+ Thanks to Calum Mackay. Closes: #543354
+ * Listen on IPv6 loopback interface by default. (Only applies to fresh
+ installations.) Closes: #544292
+ * upstream default configure file explicitly disables dkim in some
+ instances. Merge into Debian config and update debian/example.conf.md5.
+ Bump Conflicts of exim4-config package.
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 17 Oct 2009 14:26:54 +0200
+
+exim4 (4.69-11) unstable; urgency=medium
+
+ * Build-Depend on lynx-cur|lynx instead of lynx. (lynx is just a dummy
+ package currently, and due its strict dependencies uninstallable until
+ the most recent version of lynx-cur has been built.)
+ * Work around sed's improved unicode support, not accepting latin1
+ characters as pattern delimiters in UTF-8 locales anymore. Closes: #527445
+ + [update-exim4.conf] Go for / as separator instead. - This might have
+ served a purpose in earlier releases with free-form replacements but is
+ just overcomplicated now.
+ + [update-exim4defaults]: The tricky bits for exim options are the
+ ones that take a filename as argument (e.g. -C and -oX) or -D for
+ overriding macros. Use LC_CTYPE=C.
+ + [exim4-config.config] The sed commands deals with (lists of) hostnames
+ and IP(v6) addresses and nets. Use LC_CTYPE=C.
+
+ -- Andreas Metzler <ametzler@debian.org> Sun, 10 May 2009 10:15:34 +0200
+
+exim4 (4.69-10) unstable; urgency=low
+
+ [ Andreas Metzler ]
+ * Use macro CONFDIR in lowuid_aliases router, too. Closes: #507124
+ * Disable shell filename expansion in update-exim4.conf using set -f.
+ Closes: #515668
+ * Stop using set -u in update-exim4.conf. With version 4.0 bash changed its
+ behavior to throw an error on expansion of $* or $@ with set -u if no
+ positional parameters were given. Working around this is obnoxious and
+ harms readability, imho doing away with set -u's benefits. Closes: #518752
+ * Allow setting outgoing smtp helo/ehlo by setting
+ REMOTE_SMTP_HELO_DATA macro directly. Previously this was just supposed
+ to be used as a helper macro for REMOTE_SMTP_HELO_FROM_DNS.
+ REMOTE_SMTP_HELO_FROM_DNS overrides a manual REMOTE_SMTP_HELO_DATA data
+ setting. Closes: #514113
+ * [README.Debian] Bring documentation for Diffie-Hellman parameters up to
+ current practice, mainly by deleting most of the outdated docs.
+ Closes: #508749
+ * [exim4 init-script]. Modify check for smtp inetd entry to use an anchored
+ pattern, matching "smtp" but not "smtp-foo". Closes: #516146
+ * exim4-daemon-light now Provides: default-mta. See #508644.
+ * Ship both transport-filter.pl and ratelimit.pl in
+ /usr/share/doc/exim4-base/examples. Closes: #518836
+ * [lintian] Add ${misc:Depends} to all Depends.
+ * [lintian] Add override for dbg-package-missing-depends exim4-dbg.
+ * Sync debian/control with override file by moving *-dbg to section debug.
+ * Fix grammar error in update-exim4.conf.8. (Thank's, Gerfried Fuchs)
+ Closes: #525248
+
+ [ Christian Perrier ]
+ * Debconf translations:
+ - Asturian. Closes: #511624
+ - Belarusian. Closes: #516049
+ - Kazakh added. Closes: #520996
+ - Slovak. Closes: #523447
+ - Bengali added.
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 02 May 2009 09:05:56 +0200
+
+exim4 (4.69-9) unstable; urgency=medium
+
+ * [update-exim4.conf]: Use POSIX character classes [:alnum:] or explicit
+ listing ("ABCDEF..") instead of a-z, since the latter does not work as
+ expected in some locales. Closes: #500691
+
+ -- Andreas Metzler <ametzler@debian.org> Tue, 30 Sep 2008 20:12:27 +0200
+
+exim4 (4.69-8) unstable; urgency=low
+
+ [ Andreas Metzler ]
+ * Quote last n lines (configurable by changing the value of
+ E4BCD_PANICLOG_LINES, defaults to 10) of paniclog in warning
+ email sent out on non-empty paniclog. Closes: #499492
+ * Fix evaluation logic of E4BCD_WATCH_PANICLOG for sending out warning
+ e-mails about non-empty paniclog in daily cron-job to match documentation:
+ + yes: Send daily warning e-mails, do not touch panniclog.
+ + once: Send out the mail and rotate paniclog afterwards.
+ + no: Do nothing. (Logfile is rotated when its size reaches 10 MB.)
+ (Previously the interpretations of "once" and yes were mixed up.)
+
+ [ Debconf translations ]
+ * Catalan. Closes: #499299
+
+ -- Andreas Metzler <ametzler@debian.org> Sun, 28 Sep 2008 12:01:39 +0200
+
+exim4 (4.69-7) unstable; urgency=low
+
+ [ Andreas Metzler ]
+ * Sync from ubuntu: Refer to spec.txt.gz instead of spec.txt in
+ README.Debian.xml.
+
+ [ Debconf translations ]
+ * Korean. Closes: #491518
+ * Lithuanian. Closes: #497402
+ * Greek. Closes: #498466
+ * Esperanto. Closes: #498796
+
+ -- Andreas Metzler <ametzler@debian.org> Tue, 16 Sep 2008 19:14:08 +0200
+
+exim4 (4.69-6) unstable; urgency=high
+
+ [ Debconf translations ]
+ * Malayalam. Closes: #479466
+ * Albanian. Closes: #480282
+ * Polish. Closes: #481638
+ * Vietnamese. Closes: #482641
+ * Turkish. Closes: #482714
+ * Brazilian Portuguese. Closes: #485384
+ * Finnish. Closes: #489171
+
+ [ Marc Haber ]
+ * Have timeout.pl print a meaningful error message if perl-modules
+ is not installed. Have exim4-base recommend perl-modules.
+ Thanks to Tom Schouten. Closes: #482319
+ * Create gnutls-params with mode 644 in the first place.
+ Thanks to Jean-Luc Coulon. Closes: #481765
+ * Replace ~/.rnd with $HOME/.rnd in exim_gencerts. Thanks to
+ Ross Boylan for noticing this.
+ * exim4-config.config: send hostname --fqdn stderr to /dev/null,
+ we handle errors properly. Thanks to Andrew Vaughan in #481597.
+
+ [ Andreas Metzler ]
+ * Fix typos/other errors in README.Debian.xml. Improve formatting.
+ (Thank's Georg Neis and Paul Menzel) Closes: #486105, #486106, #486116
+ * Revert fancy quoting in initscript. Closes: #486667,#482752
+ (fixes rc-bugs).
+ * [debian/control README.Debian.xml] Spelling fix ("metapackage" instead of
+ "meta-package"). Thank's lintian
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 19 Jul 2008 19:56:36 +0200
+
+exim4 (4.69-5) unstable; urgency=low
+
+ * remove chmod/chown code from exim4_refresh_gnutls-params completely
+ * do not remove gnutls-params in exim4-base.postinst
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Mon, 28 Apr 2008 21:46:18 +0200
+
+exim4 (4.69-4) unstable; urgency=low
+
+ * update-exim4.conf: Fix impossible code path in guessed_name check. Ouch.
+ Thanks to Anand Kumria. Closes: #478066
+ * Regenerating the 2048 bits DH parameters takes too long for slow
+ systems, disable (both in the monthly cron job and postinst) and
+ document that paranoid people will want to regenerate them manually.
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Sun, 27 Apr 2008 10:06:39 +0200
+
+exim4 (4.69-3) unstable; urgency=low
+
+ * The "please do not file duplicate bugs" release
+
+ [ Marc Haber ]
+ * Work around lsb-base regression (#477055, "wontfix") by changing
+ the way we quote exim's arguments in the init script, hoping that
+ this does not sacrifice robustness.
+ Closes: #477194, #477236, #477239, #477258, #477562, #476987
+ * README.Debian.xml: Fix router/transport pair typo.
+ Thanks to Georg Neis. Closes: #463573
+ * Have exim4-base Suggest swaks
+ * Relax exim4-dbg dependency on eximon4 to a recommends (see #463929).
+ * 30_exim4-config_check_rcp: Remove mention of /usr/share/doc/exim4-
+ config/default_acl in favor of exim4-config_files(5).
+ Thanks to Jon Dowland. Closes: #464539
+ * Move paniclog log rotation to /etc/logrotate.d/exim4-paniclog to
+ allow people to manually rotate the paniclog only by calling
+ logrotate -f /etc/logrotate.d/exim4-paniclog. Thanks to Josip Rodin
+ (#396003) for this nice idea. Implement E4BCD_WATCH_PANICLOG=once
+ as suggested by Vasilis Vasaitis.
+ * activate dlfunc. Closes: #471314
+ * set LC_ALL=C in debian/rules. Thanks to Michael Meskes. Closes: #471486
+ * Document that Incredimail's TLS "implementation" breaks on a
+ certificate request. Thanks to Andrew McGlashan. Closes: #459323
+ * Fix parenthesis mismatch in README.Debian
+ * exim4_refresh_gnutls-params: Call openssh dhparam with
+ HOME=$EXIM4_SPOOLDIR so that openssl's .rnd file is placed there.
+ * update-exim4.conf: print a warning if dc_minimaldns and hostname
+ --fqdn does not print a fully qualified name. Thanks to Lothar
+ Ketterer. Closes: #476249
+ * DH parameters handling: Closes: #475194
+ * add dpatch to have exim use 2048 bit DH parameters
+ * ship static gnutls-params file with the package.
+ * Override resulting lintian warning.
+ * generate new gnutls-params only monthly and in postinst on configure.
+ * exim4_refresh_gnutls-params:
+ * generate 2048 bit DH parameters
+ * dh-params file can be world readable
+ * Filter out noise from mainlog before handing it off to eximstats
+ in daily cron job. Thanks to Justin Pryzby. Closes: #476541
+ * Move docs from Apps/Net to Network/Communication
+ * linda R.I.P.
+
+ [ Robert Millan ]
+ * Process acl_local_deny_exceptions ACL before rejecting a message in SPF
+ check. Thanks to Miklos Szeredi. Closes: #451633
+
+ [ Andreas Metzler ]
+ * Fix typos in exinext's man page (/s/eximnext/exinext/). (Thanks,
+ Filipus Klutiero) Closes: #471113
+ * exiwhat: Check at runtime whether killall is available. Fall back to a
+ combination of 'ps ax' and regular kill otherwise.
+ Closes: #476455
+ * Fix wrong logic in testing for existence of lsb-base functions in init
+ script. (Thanks, Tim Cross) Closes: #477578
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Sat, 26 Apr 2008 00:00:30 +0200
+
+exim4 (4.69-2) unstable; urgency=low
+
+ [ Marc Haber ]
+ * update-exim4.conf: fix bashism echo -n in preprocess_macro.
+ Thanks to Michal Politowski. Closes: #462173
+
+ [ Christian Perrier ]
+ * Debconf translations updates:
+ - German. Thanks to Eric Schanze. Closes: #462673
+
+ [Andreas Metzler]
+ * Add missing .P to exim_db.8 to fix indenting. (Thanks, David L. Anselmi)
+ Closes: #462712
+ * Add (disabled) patch to save random seed to a file
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Wed, 30 Jan 2008 09:26:56 +0100
+
+exim4 (4.69-1) unstable; urgency=low
+
+ [ Marc Haber ]
+ * New upstream version.
+ - improve --help handling. Closes: 438435
+ * Debconf translations updates:
+ - Dutch. Thanks to Bart Cornelis. Closes: #448924
+ - Norwegian Bokmål. Thanks to Hans Fredrik Nordhaug. Closes: #452383
+ - Slovak. Thanks to Peter Mann. Closes: #460502
+ - Catalan: fix some semicolon issues and most obvious fuzzy strings.
+ Thanks to Jordà Polo. Closes: #447765.
+ * Add support for smtp_accept_max_nonmail_hosts to ease external
+ relay testing.
+ * Make Change to init script dependencies as suggested by Petter
+ Reinholdtsen. Closes: #460229
+ * debian/control:
+ * Add Homepage field to Source Package stanza.
+ * Standards-Version: 3.7.3 (no changes necessary)
+ * lintian/overrides:
+ - Override all description-contains-homepage messages,
+ we're going to keep this field around until post-lenny.
+ - Override exim4-daemon-heavy: package-contains-empty-directory
+ usr/lib/exim4/local_scan/, the directory should be there to show
+ people where to put local extensions (and I am not sure how exim
+ behaves if that directory is not there).
+ * linda/overrides:
+ - Override menu section Applications, which is a false alert.
+ - Override complaint about newer standards version.
+ - This override does not work due to #386647
+ * exim4-base.NEWS: fix Debian's typo
+ * exim4-base.dirs: remove usr/bin, we do not ship any files there.
+ * Generate exim macros from every definition found in ue4cc that
+ starts with a capital letter (sans CFILEMODE) to cater for an
+ obviously very common user error. This feature is going to stay
+ undocumented.
+
+ [ Christian Perrier ]
+ * Debconf translations updates:
+ - Dzongkha. Thanks to Tenzin Dendup. Closes: #455871
+ - Slovak. Thanks to Peter Mann. Closes: #460502
+
+ [ Andreas Metzler ]
+ * Fix typo in acl/20_exim4-config_local_deny_exceptions. (Thanks, Roderick
+ Schertler) Closes: #456343
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 22 Jan 2008 09:19:14 +0100
+
+exim4 (4.68-2) unstable; urgency=low
+
+ [ Marc Haber ]
+ * Fix changelog: lowuid router does not close #420217. Closes: #440217
+
+ [ Andreas Metzler ]
+ * Mention /etc/exim4/exim4.conf in FILES section of update-exim4.conf.8.
+ * Fix syntax error in real-local router. Closes: #446346
+ * Configuring exim as configtype="internet host" asks a different set of
+ questions than e.g. satellite. However some of the settings controlled by
+ these hidden questions still have effects on exim's behavior. Change
+ exim4-config to ask these hidden questions if they have been set to a
+ non-default value. (Either manually, or by switching configtype after
+ setting the values.) Closes: #443210
+ These questions have been added conditionally:
+ - internet site with smarthost:
+ + dc_relay_domains
+ - satellite
+ + dc_relay_domains
+ + dc_localdelivery
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Thu, 01 Nov 2007 19:17:36 +0100
+
+exim4 (4.68-1) unstable; urgency=low
+
+ * new upstream version. Closes: #444195
+ * Documents tls_verify_hosts during TLS sessions. Closes: #422419
+ * new example.conf md5 sum
+ * Move lowuid router to a later place, handle real- only for
+ locally generated messages. Thanks to Andreas Metzler and others
+ on pkg-exim4-devel. Closes: #440217
+ * /etc/init.d/exim4:
+ * Use start_daemon and killproc from lsb-base
+ as a new plunge at #396944
+ * Do not clean the environment as severly as before (functions
+ need to survive).
+ * README.Debian:
+ * Document that using client certificates needs extra
+ configuration. Thanks to John Goerzen. Closes: #440663
+ * conf.d/main/03_exim4-config_tlsoptions: Make it clear that this
+ file only concerns exim as an SMTP server.
+ * exim4-config.preinst: Add EX4DEBUG facility, add rm_conffile
+ function
+ * Rename acl_whitelist_local_deny to acl_local_deny_exceptions
+ as suggested by Ross Boylan. Closes: #387078.
+ * Switch Build-Depends to db4.6. Closes: #442645
+ * Debconf translations updates:
+ - Portuguese. Thanks to Miguel Figueiredo. Closes: #441895, #445494
+ - Norwegian Nynorsk. Thanks to Håvard Korsvoll.
+ * exim4-config.NEWS: Explicitly mention that .dpkg-old and
+ .dpkg-dist files are included in the DEBCONFsomethingDEBCONF check to
+ allow lazy people to only grep the docs instead of actually reading
+ them. This was requested by Hamish Moffatt in #445327.
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Sun, 07 Oct 2007 21:38:22 +0200
+
+exim4 (4.67-8) unstable; urgency=low
+
+ [ Marc Haber ]
+ * Define REMOTE_SMTP_HELO_DATA and REMOTE_SMTP_HELO_FROM_DNS macros
+ to have exim pull its HELO name from DNS automatically.
+ Thanks to Jari Aalto and Magnus Holmgren. Closes: #275975
+ * Enable DNSDB in exim4-daemon-light (needed by the HELO magic)
+ * update-exim4.conf: Allow [] in ascii strings (needed for @[])
+ * Improve domain literal docs
+ * Remove debconf template noalias_regenerate
+ * Fix PRIMARY_HOSTNAME typo in main/02_exim4-config_options.
+ Thanks to Tim Krah. Closes: #434337
+ * fix alphabet salad in README.Debian. Closes: #434640
+ * Add E4BCD_DAILY_REPORT_TO to daily cron job.
+ Thanks to Florian Schlichting. Closes: #426840
+ * Fix /etc/exim paths in exim4-config_files(5).
+ Thanks to Marques Johansson.
+ * Debconf translations updates:
+ - Japanese. Closes: #433070
+ - Spanish. Thanks to Javier Fernández-Sanguino Peña. Closes: #433084
+ - Thai. Thanks to Theppitak Karoonboonyanan. Closes: #433177
+ - Arabic. Thanks to Ossama Khayat. Closes: #433222
+ - Hebrew. Thanks to Baruch Even. Closes: #433291
+ - Italian. Closes: #433200
+ - Galician. Closes: #433218
+ - Portuguese. Thanks to Miguel Figueiredo. Closes: #433293
+ - Hungarian. Thanks to Josip Rodin. Closes: #433336
+ - Punjabi. Thanks to Amanpreet Singh Alam. Closes: #433578
+ - Marathi. Thanks to Priti Patil.
+ - Wolof. Thanks to M Mamoune Mbacke. Closes: #433701
+ - Indonesian. Thanks to Arief S Fitrianto. Closes: #433758
+ - Romanian. Thanks to Eddy Petrisor. Closes: #433854
+ - Nepali. Thanks to shyam krishna bal. Closes: #435345
+ - Swedish. Thanks to Daniel Nylander. Closes: #435705
+
+ [ Andreas Metzler ]
+ * Update eximon menu file for menu 2.1.35 hierarchy.
+
+ [ Christian Perrier ]
+ * Fix typo in README.Debian.xml. Thanks to <shaulka@012.net.il>
+ Closes: #434961
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Sun, 19 Aug 2007 09:25:10 +0200
+
+exim4 (4.67-7) unstable; urgency=low
+
+ * only generate HIDE_MAILNAME macro if its value is really non-empty
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Sat, 14 Jul 2007 08:47:40 +0200
+
+exim4 (4.67-6) unstable; urgency=low
+
+ * Add some more debugging output to maintainer scipts, hopefully
+ nailing #396944 which has surfaced again.
+ * Improve wording in NEWS.Debian for exim4-config.
+ Closes: #431019, #431130
+ * Issue DEBCONFfooDEBCONF warning as well for
+ DEBCONFheaders_rewriteDEBCONF.
+ Thanks to John Goerzen. Closes: #431088
+ * fix localhost inserted twice into local_domains. Closes: #432394
+ * fix MAIN_RELAY_TO_DOMAINS in update-exim4.conf.
+ Thanks to Ben Wheeler. Closes: #432521
+ * Document that special handling is needed for host lists that only
+ consist of a single IPv6 address. Thanks to Frederic Daniel Luc
+ Lehobey. Closes: #432229
+ * Add forgotten (conditional) definition of REMOTE_SMTP_HEADERS_REWRITE
+ and REMOTE_SMTP_RETURN_PATH for remote_smtp transports.
+ Thanks to Miguel Martins Feitosa Filho. Closes: #432716
+ * Debconf translations
+ * Bulgarian completed. Closes: #431957, #430521
+ * Update Tamil. Thanks to Tirumurti Vasudevan. Closes: #432181
+ * Update Spanish.
+ Thanks to Javier Fernández-Sanguino Peña. Closes: #429940
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Fri, 13 Jul 2007 22:22:09 +0200
+
+exim4 (4.67-5) unstable; urgency=low
+
+ * the "verderben viele Koeche den Brei?" release
+
+ [ Andreas Metzler ]
+ * Point to exim4_passwd(5) instead of non-existing exim_passwd(5) in AUTH
+ section of configuration. (Thanks Arkadiusz Dykiel, #430149)
+ * update-exim4.conf check_ascii_pipe(): Accept < since we use it for list
+ construction. Closes: #430391
+ * Anchor UPEX4CmacrosUPEX4C in update-exim4.conf
+
+ [ Robert Millan ]
+ * Update informational message in SPF ACL to use the latest
+ http://www.openspf.org/Why API.
+
+ [ Debconf translations ]
+ * French completed and converted to UTF-8
+ * All remaining non UTF-8 translation switched to UTF-8
+
+ [ Marc Haber ]
+ * do not quote error message in lowuid router
+ * replace commented UPEX4CmacrosUPEX4C with UPEX4CmacrosUPEX4C exim
+ configuration macro definition as placeholder for ue4c-generated macros.
+
+ [ Christian Perrier ]
+ * Correct the invalid ${fqdn} variable in exim4-config.templates
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Thu, 28 Jun 2007 09:22:04 +0200
+
+exim4 (4.67-4) unstable; urgency=low
+
+ * update-exim4.conf:
+ * fix embarrassing typo in update-exim4.conf that broke macro
+ expansion for two values.
+ Thanks to Andrew Chittenden. Closes: #429828
+ * Allow ! and * in ue4cc.
+ Thanks to Dieter Hametner and Raf D'Halleweyn. Closes: #429986
+ * have @ and localhost added to local_domains list.
+ Thanks to a big number of people. Closes: #429939
+ * eliminate -e && chmod construct as a possible cause of #429617.
+ Thanks to Martin Ketzer and Silvestre Zabala
+ * Now barfs if DEBCONFsomethingDEBCONF is still found in the
+ configuration file. Thanks to a truckload of users who were too lazy
+ to read the docs, did not accept the suggested configuration file
+ changes and then complained about a non-working exim ("malformed macro
+ definition")
+ * README.Debian: Document the new low-UID handling mechanism.
+ Thanks to Johannes Rohr. Closes: #429878
+ * debian/rules: do not ignore make clean errors
+ * Debconf translation updates:
+ - Basque. Closes: #429626
+ - Czech.
+ - Brazilian Portuguese. Closes: #429867
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Fri, 22 Jun 2007 13:55:15 +0200
+
+exim4 (4.67-3) unstable; urgency=low
+
+ [ Andreas Metzler ]
+ * Initialize permissions of bug-script and exim-adduser as 755, since diff
+ does not preserve permissions. Both were shipped as 644 in binary packages
+ not built with svn-buildpackage. Closes: #420446
+
+ [ Marc Haber ]
+ * Merge experimental changes from revision 2018:2073
+ * Fix "Zahlendreher" in closure of #427690. Closes: #427690
+ * update-exim4.conf:
+ * finally get rid of the DEBCONFfooDEBCONF stuff. That information
+ is now passed to the configuration by ue4c by directly setting exim
+ macros in the configuration. This has caused both the configuration
+ and ue4c to be much shorter.
+ * run with -e, -C and -u.
+ * convert input read from update-exim4.conf.conf to lower case
+ * barf if strange characters are found in ue4cc. Closes: #400294
+ * Remove superfluous "x$foo" = "xbar" constructs from scripts
+ * Add routers to reject mail to accounts with low UID.
+ Closes: #400790.
+ * Make daily cron job barf if /usr/bin/mail is not found. Have
+ exim4-base recommend mailx. Closes: #427690
+ * Have all -daemon packages provide exim4-localscanapi-1.0 and
+ exim4-localscanapi-1.1 as requested by Magnus Holmgren while fixing
+ #426425. Also include exim4-localscan-plugin-config script with
+ exim4-dev. Thanks to Magnus for helping with this. Closes: #428274
+ * remove /etc/exim4/email-addresses symlink and document this.
+ Thanks to Josip Rodin. Closes: #420578
+ * introduce conf.d/250_exim4-config_lowuid which optionally allows
+ to reject (or alias away) mail to low-uid accounts that are not
+ listed in an exception list. Thanks to Dominic Hargreaves,
+ Marc Sherman and Ross Boylan. Closes: #400790, #307768, #331716
+ * remove versioned depends on cron, since the version we need is
+ well before sarge.
+ * Add cron | fcron dependency. Fcron is going to be removed again
+ at the first sign of trouble. Closes: #381806
+ * remove move_exim3_spool debconf template. Closes: #391762
+ * replace openssl gendh with openssl dhparam. Closes: #413235
+ * adapt docs, README and manpages
+ * have Hilko fix the lynx-dump postprocessing to repair generating
+ README.Debian text version. Thanks!
+ * increase README.Debian generation robustness. Thanks to Hilko.
+ * debconf:
+ * Partly apply Christian Perrier's patch for reviewed
+ templates and control file. Closes: #426980
+ * Other minor template changes.
+ * get rid of "mails" in debconf templates, use "messages" instead.
+ Re-word local_interface debconf template. Other minor changes.
+ Thanks to Jens Seidel and Christian Perrrier. Closes: #394976
+ * re-work exim4-config.config logic to have split/non-split config
+ asked last instead of first. This partly addresses #410756.
+ * Add exim4-daemon-heavy.templates, exim4-daemon-light.templates
+ and exim4.templates to POTFILES.in
+ * Re-Word dc_other_hostnames debconf template.
+ Thanks to Hans G. Ehrbar. Closes: #421860
+
+ [ Christian Perrier ]
+
+ * Debconf translation updates:
+ - French
+ - Ukrainian. Closes: #427793
+ - Bulgarian.
+ - Thai.
+ - Galician.
+ - Swedish.
+ - Punjabi.
+ - Indonesian.
+ - Italian.
+ - Khmer.
+ - Traditional Chinese. Closes: #428072, #428069.
+ - Portuguese.
+ - Simplified Chinese.
+ - Marathi
+ - Romanian. Closes: #429242
+ - Russian. Closes: #429352
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Mon, 18 Jun 2007 10:26:20 +0200
+
+exim4 (4.67-1) unstable; urgency=low
+
+ [ Marc Haber ]
+ * new upstream version
+ * remove 37_upstream-patch-384015-add_headers
+ * remove 80_disable_rsa_export
+ * remove 80_upstream_408174_4-64-PH18
+ * EDITME patch changes to allow for 4.67
+ * enable dovecot authentication
+ * Upstream patch from Magnus Holmgren included upstream.
+ Thanks to Simon Walter. Closes: #407957
+ * Upstream patch PH/18 included upstream.
+ Thanks to Marc Schiffbauer. Closes: #408174
+ * merge experimental changes
+ * exim man page patch changes for 4.67
+ * robustness patches for
+ * create-custom-package
+ * exim-gencert
+ * exim4-base.config
+ * exim4-base.postinst
+ * exim4-config.config
+ * exim4-config.postinst
+ * exim4-daemon-light.postinst
+ * update-exim4defaults
+ * replace backticks with $() notation
+ * Add patch to 50_localscan_dlopen to reduce dynamic symbol table.
+ Thanks to Magnus Holmgren. Closes: #413602
+ * remove woody compatibility hacks from
+ * exim4-daemon-light.postinst
+ * exim4-config.postinst
+ * Fix eximnext => exinext in man page.
+ * README.Debian:
+ * add warning to "IP addresses for incoming connections" section.
+ * add new chapter about how to influence exim's behavior.
+ * add missing closing bracket. Thanks to Martin Schwarz. Closes: #419700
+ * update-exim4.conf(8):
+ * clarify update-exim4.conf about how ue4cc and exim configuration
+ interface
+ * remote_smtp_smarthost transport: make hosts_try_auth host list
+ semicolon-separated to correctly handle IPv6
+ * multiple minor changes to lintian overrides
+ * debian/control: have exim4 depend on debconf (>= 1.4.69) | cdebconf
+ (>= 0.39) explicitly to allow usage of debconf error template type.
+
+ [ Christian Perrier ]
+ * Esperanto debconf translation update (Serge Leblanc). Closes: #415590
+ * Marathi debconf translation added (Priti Pathil). Closes: #416801
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Sat, 21 Apr 2007 11:48:48 +0200
+
+exim4 (4.63-17) unstable; urgency=low
+
+ * 30_exim4-config_examples: add missing backslash in non-TLS client
+ login authenticator. Thanks to Kai Weber. Closes: #407567
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Sat, 20 Jan 2007 10:38:16 +0100
+
+exim4 (4.63-16) unstable; urgency=low
+
+ * Add ta (Tamil) translation of Tirumurti Vasudevan
+ Closes: #406974
+ * exim4_refresh_gnutls-params: allow EXIM4_SPOOLDIR to be overridden from
+ the environment. Closes: #406989
+ * Re-work client authenticators to handle passwords containing
+ colons and circumflexes. Thanks to Steaphan Greene. Closes: #406686
+ * transport/30_exim4-config_remote_smtp_smarthost: feed
+ hosts_try_auth from $host and $host_address, avoiding issues with
+ round-robin DNS setup.
+ Thanks to Celejar and Heiko Schlittermann. Closes: #403583
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Thu, 18 Jan 2007 21:10:34 +0100
+
+exim4 (4.63-15) unstable; urgency=low
+
+ * keep config.h from being installed in exim4-base.
+ Thanks to Aaron M. Ucko. Closes: #405824
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Sat, 6 Jan 2007 22:12:05 +0100
+
+exim4 (4.63-14) unstable; urgency=low
+
+ * patch LOCAL_SCAN_ABI_VERSION to 1.1 in 50_localscan_dlopen after
+ consulting with Magnus Holmgren.
+ * Fix update-exim4.conf.8 manpage
+ * FILES section is no longer doubled
+ * NAME is no longer multi-line
+ * proper reference to ue4cc in FILES section
+ * Thanks to Angus Mackenzie
+ * debian/rules
+ * allow buildbasepackages and extradaemonpackages to be set from
+ the environment
+ * fix buildbasepackages=no and extradaemonpackages which were
+ broken due to the new -dev binary package
+ * remove "" in various places, this is Make not shell
+ * add optional debugging output for variables that are meant to be set
+ externally
+ * clean now unpatches first, otherwise clean fails because files
+ are first deleted and then non-existing files are unpatched
+ * take config.h from first non-light daemon package built instead
+ of -heavy (we might not be building -heavy but still need -dev)
+ * Thanks to Gerfried Fuchs for actually using these features and
+ finding this bug group.
+ * exim4.init: Now returns 0 when starting and daemon already
+ running, and when stopping and daemon already stopped. This fixes LSB
+ compliance. Thanks to Heiko Schlittermann. Closes: #404182
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Fri, 5 Jan 2007 16:34:58 +0100
+
+exim4 (4.63-13) unstable; urgency=low
+
+ * Fix mangled sense in /etc/aliases exim4-config_files(5) man page.
+ Thanks to Angus Mackenzie.
+ * [update-exim4.conf.8] exim4-config_files manpage is in section 5 instead
+ of 8. Thanks to Angus Mackenzie. Closes: #404494 (am)
+ * Clarify /etc/exim4/passwd.client host name lookup to go after the
+ reverse DNS entry in exim4-config_files(5) man page.
+ * Update uk (Ukrainian) translation of debconf templates.
+ Thanks to Eugeniy Meshcheryakov and Yanovych Borys. Closes: #404481
+ * Update sl (Slovenian) translation of debconf templates.
+ Thanks to Matej Kovacic. Closes: #404481
+ * merge in experimental changes:
+ * create exim4-dev package for sa-exim and other packages. Closes: #401462
+ * fix broken usage of DPATCH_WORKDIR (dpatch-edit-patch didn't
+ work with tarballed upstream)
+ * don't use DPATCH_WORKDIR any more
+ * modify patches to apply to build-tree
+ * remove leftover debugging output from debian/patches/00_unpack.dpatch
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 2 Jan 2007 14:43:59 +0100
+
+exim4 (4.63-12) unstable; urgency=low
+
+ * exim4-base.postinst: Redirect command -v's stdout to /dev/null
+ * update-exim4.conf: add lots of quoting to increase robustness.
+ Thanks to Paul Slootman. Closes: #403605
+ * Debconf templates translation updates and new translations:
+ - Esperanto
+ - Norwegian Nynorsk (Håvard Korsvoll).
+ - Punjabi (A.S. Alam).
+ - Malayalam (Praveen A). Closes: #402541
+ - Italian (typos corrected by Davide Viti). Closes: #403199
+ - see Last-Translator for rewards)
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Wed, 20 Dec 2006 14:23:57 +0100
+
+exim4 (4.63-11) unstable; urgency=low
+
+ * Remove patch to spec.txt for pkg-exim4-users, it is included
+ upstream. No idea why this patch even applied correctly.
+ * README.Debian:
+ * Fix wrong pidfile name
+ * Move FAQ to the Wiki
+ * Adapt "Using completely different configuration scheme" to also
+ mention /etc/exim4/exim4.conf.
+ * Move titles in the same line as the section statement, making it
+ easier to work with a code folding editor.
+ * exim4_files(5): fix recommended permissions for passwd[.client].
+ Thanks to Georg Neis. Closes: #398365
+ * Remove temporary gnutls parameters file if neither certtool nor
+ openssl are installed. Closes: #399023
+ * Fix path to gnutls-params file in exim4-base.postinst.
+ Thanks to J.L. Fernandez. Closes: #400794
+ * Translation updates (see Last-Translator for rewards).
+ - Punjabi (not yet complete)
+ - Hebrew (not yet complete)
+ - Portuguese. Closes: #399242
+ * merge changes from experimental:
+ * enable sqlite for exim4-daemon-heavy.
+ Thanks to Adrian Phillips. Closes: #398718
+ * Add Build-Dependency on libsqlite3-dev.
+ Thanks to Frank Lichtenheld. Closes: #398880
+ * Build-Depends
+ * add po-debconf
+ * add bzip2
+ * debian/rules:
+ * run debconf-updatepo in clean targets
+ * adapt build system to allow direct building from an upstream tarball
+ * needs tardy at build time on sarge, but not on newer distributions
+ * use dpatch-run for patches instead of locally programmed handling
+ * add lintian overrides:
+ * partially-translated-question exim4/dc_eximconfig_configtype for
+ cy, eo, et, he, mk, nn, pa, pl, sl, tl, uk - translators, move!
+ * possible-debconf-note-abuse config:15 */drec
+ * remove gratuitous exim4-daemon-heavy.postinst
+ (it is symlinked at build time)
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Fri, 1 Dec 2006 11:16:34 +0000
+
+exim4 (4.63-10) unstable; urgency=low
+
+ * The "praise Osamu Aoki" release.
+ * Translation updates (see Last-Translator for rewards).
+ - Dutch. Closes: #396725
+ * README.Debian:
+ * Add information about how to obtain reportbug information for
+ mailing list questions.
+ * Point people directly to passwd.client man page instead of the
+ file itself. Thanks to Osamu Aoki.
+ * Re-work the /etc/aliases section.
+ * Improve smarthost description in update-exim4.conf(8) man page.
+ Give examples. Thanks to Osamu Aoki.
+ * include documentation for /etc/aliases in exim4-config_files(5)
+ man page. Symlink to etc-aliases(5).
+ Thanks to Osamu Aoki. Closes: #397042
+ * Change symlink of exim4-config_files(5) to email-addresses(5) to
+ point to etc-email-addresses(5) for consistency.
+ * Use nwildlsearch to index into passwd.client to allow wildcards
+ here. Thanks to Osamu Aoki. This is another pain relief for #244724.
+ * use printf instead of echo in daily cron job.
+ Thanks to Ming Hua. Closes: #395448
+ * Add de-uglyfication request to man pages.
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Sun, 5 Nov 2006 10:36:28 +0000
+
+exim4 (4.63-9) unstable; urgency=low
+
+ * Fix a spelling error in templates: s/adviseable/advisable
+ Thanks to Jens Seidel for spotting it
+ * Translation updates (see Last-Translator for rewards).
+ - Bosnian. Closes: #396592
+ - Bulgarian. Closes: #396558
+ - Greek.
+ - Lithuanian. Closes: #396478
+ - Norwegian Bokmål. Closes: #391768
+ - Wolof. Closes: #395944
+ * Have ue4c barf on more lookup types found in more ue4cc fields,
+ courtesy to regexp from hell.
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Thu, 2 Nov 2006 18:07:24 +0000
+
+exim4 (4.63-8) unstable; urgency=low
+
+ * Translation updates (see Last-Translator for rewards).
+ - Albanian. Closes: #394725
+ - Arabic
+ - Basque
+ - Catalan
+ - Chinese (Simplified)
+ - Chinese (Traditional)
+ - Croatian
+ - Czech
+ - Dzongkha
+ - Finnish. Closes: #393644
+ - German
+ - Italian.
+ - Korean. Closes: #394235
+ - Nepali
+ - Norwegian Bokmal. Closes: #394270
+ - Portuguese
+ - Romanian
+ - Russian.
+ - Slovak
+ - Turkish
+ * README.Debian
+ * remove wiki references from README.Debian
+ * remove dc_local_delivery FAQ entry since this is now debconfized
+ * Fix typos, replace "documented below" with a direct link.
+ Thanks to Olaf van der Spek. Closes: #394617
+ * exim4-config.templates
+ * Fixed typo: s/arbitrary/arbitrarily
+ * Extra space removed at the end of a line. Closes: #394569
+ * Change references to inexistent README.Debian.html and README.Debian,
+ both replaced by README.Debian.gz. Thanks to Eric Schanze for spotting
+ this.
+ * Various English use changes suggested by Jens Seidel. Closes: #394651
+ * update-exim4.conf: Fix wrong behavior if a debconf list answer already
+ starts with "<". Thanks to Vineet Kumar. Closes: #393843
+ * conf.d/main/02_exim4-config_options: Use upstream's wording for
+ rfc1413 configuration, fix wrongly commented timeout value.
+ Thanks to Andre Bischoff on IRC.
+ * conf.d/transports/35_exim4-config_address_directory: Add
+ delivery_date_add, streamline other options' syntax.
+ Thanks to Dominic Hargreaves. Closes: #393930
+ * Remove commented out inetd entries from maintainer scripts, we are
+ not going to support inetd again.
+ * Zap gnutls-params in postinst if old binary format is detected.
+ Exim cannot read that file any more since RSA_EXPORT has been removed.
+ Always kill the file if file(1) is not present, recommend file(1).
+ Thanks to John Goerzen. Closes: #394598
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Mon, 23 Oct 2006 20:49:46 +0200
+
+exim4 (4.63-7) unstable; urgency=low
+
+ * Translation updates (see Last-Translator for rewards). Closes: #391768
+ - Brazilian Portuguese
+ - Danish. Closes: #392548
+ - Galician
+ - Hungarian
+ - Indonesian
+ - Japanese
+ - Spanish
+ - Thai
+ * Do not ask for local delivery method if custom entry (i.e. neither
+ maildir_home nor mail_spool) has bin set in update-exim4.conf and continue
+ to use this custom setting instead of overwriting it with mail_spool. (am)
+ Closes: #392993
+ * Special-case "dsearch;" constructs in dc_other_hostnames, no
+ longer supported. Adapt documentation accordingly.
+ * Adapt docs and man pages so that they do not longer suggest that
+ answers to debconf questions might use all exim
+ host/address/domain list features.
+ * fix ue4c to handle more than one smarthost correctly.
+ * Handle spaces, commas and semicolons as separator in root alias
+ handling.
+ * Wolof translation contained a comma in the translation of a element of the
+ Choices list for the dc_eximconfig_configtype question, replace it with a
+ semicolon. (am)
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Sat, 14 Oct 2006 23:45:17 +0000
+
+exim4 (4.63-6) unstable; urgency=low
+
+ * s/ipv6/IPv6 in templates (general writing consistency)
+ * Translation updates (see Last-Translator for rewards)
+ - Arabic (partial)
+ - Basque (partial)
+ - Croatian (partial)
+ - Greek (partial)
+ - Khmer
+ - Spanish (partial)
+ - Swedish
+ - Vietnamese. Closes: #392772
+ * README.Debian:
+ * Fine tuning of SMTP AUTH and TLS docs after user feedback
+ received over $BEVERAGE irl.
+ * Adapt configuration chapter to re-worded templates.
+ * Fix exim4_files man page names to not pollute name space.
+ * Clarify exim4-config_files man page to reflect that the host name
+ given there does not actually influence the routing decision.
+ Thanks to Sven Luther.
+ * Fix list separator handling for dc_other_hostnames in ue4c.
+ Thanks to Alexandre Fayolle. Closes: #392831
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Sat, 14 Oct 2006 07:40:05 +0000
+
+exim4 (4.63-5) unstable; urgency=low
+
+ * define MAIN_LOG_SELECTOR conditionally.
+ Thanks to Aaron M. Ucko. Closes: #390758
+ * Fix typos in man pages. Thanks to A. Costa.
+ Closes: #390705, #390706, #390707
+ * Address #373786:
+ * cron.daily: Try UID change with start-stop-daemon, and fall
+ back to su if that fails. This should enhance compatibility
+ with libpam-tmpdir.
+ * exim4_refresh_gnutls-params: don't drop privileges any more,
+ generate gnutls-params as root and chown them later.
+ * Thanks to Piotr Kaczuba and Tollef Fog Heen. Closes: #373786
+ * Add debugging facility to exim4_refresh_gnutls-params
+ * Debconf-Rework
+ * update-exim4.conf: expand UE4CC_semicolon list to allow
+ semicolons in all debconf questions as list separators for consistency.
+ * Do template changes suggested by Christian Perrier. Closes: #260141
+ * new mail name template thanks to Jari Aalto. Closes: #275953
+ * relay templates changes thanks to Ross Boylan. Closes: #342061
+ * remove conftype exim3manual. Closes: #355265
+ * use semicolon as list separator in debconf templates. ue4.conf
+ handles both semicolons and colons since #360162. Thanks to Adam
+ Borowski. Closes: #365428
+ * Make existing templates style-compatible regarding developer's
+ reference.
+ * Lower priorities so that the Installer can do its work without
+ exim4 asking questions. Closes: #379485
+ * Modify templates saying that smarthost::port is a valid
+ notation. Modify transport/30_exim4-config_remote_smtp_smarthost to
+ take only the first part of DCsmarthost (up to first colon) as host
+ name for hosts_try_auth. This allows debconf configuration of a
+ different port to connect to the smarthost. Closes: #251949
+ * Add debconf template to packages telling people to dpkg-reconfigure
+ exim4-config.
+ * Allow choosing between delivery to /var/mail or ~/Maildir with debconf.
+ (am) Closes: #250980, #274560, #289959
+ * Translation updates (see Last-Translator for rewards)
+ - Brazilian Portuguese
+ - Danish
+ - Galician
+ - Slovak
+ - Thai
+ - Turkish
+ - Romanian
+ - Japanese
+ - French
+ * Patch by Florian Weimer which disables RSA_EXPORT support which
+ should eliminate the "exim blocking on entropy starvation" issue.
+ * update-exim4.conf: Take only the first word from /etc/mailname as
+ system mail name. Thanks to Mike Mestnik. Closes: #215319.
+ * init script: log_failure_message alert if non-zero paniclog is
+ found. Thanks to Andreas Barth.
+ * README.Debian: document cron job, including paniclog monitoring.
+ Thanks to Stephen Gran.
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 10 Oct 2006 16:50:27 +0000
+
+exim4 (4.63-4) unstable; urgency=low
+
+ * Make update-exim4.conf man page also update-exim4.conf.conf man page.
+ * Fix SPF error message when $sender_address_domain is undefined (i.e. sender
+ is <>). (rm)
+ * Change debian/rules documentation for daemon-custom build.
+ Thanks to Guido Hennecke. Closes: #386135
+ * Rotate paniclog by size, not daily, to avoid rotating away
+ messages after complaining from the daily cron job.
+ Thanks to Dirk Meyer.
+ * Update Slovak translation.
+ Thanks to Peter Mann.
+ * Add Wolof translation.
+ Thanks to M Mamoune Mbacke
+ * Add a paragraph explaning the gnutls-bin suggestion to ease DH
+ parameter generation in case of entropy starvation.
+ Thanks to Andi Barth and Florian Weimer.
+ * Since a new version of sysvinit upload will move /var/run/ to a tmpfs
+ directories under /var/run/ and their permissions are not persistent
+ anymore but will be lost after a reboot. - Re-generate /var/run/exim4 in
+ the init script to compensate for this. (am) (closes: #387699)
+ * update-exim4.conf: Exit with an error if dc_use_split_config is neither
+ true nor false instead of replacing the configuration with an empty one.
+ (am) Closes: #386554
+ * More intelligence for exim4_refresh_gnutls-params:
+ * If certtool (from gnutls-bin) is unavailable but openssl is installed
+ use openssl to re-generate DH params. (am)
+ * Change exim4-base Suggests on gnutls-bin to gnutls-bin|openssl. (am)
+ * Move invocation and background mechanism to exim4_refresh_gnutls-params.
+ Script can now be called any time from the command line or any
+ other script.
+ * Only regenerate dh params if tls_advertise_hosts is non empty.
+ According to Florian Weimer, DH params are only needed for
+ incoming TLS connections.
+ * Thanks, Yuri D'Elia. This addresses #387448
+ * Improve entropy and gnutls-params docs.
+ * cron-daily:
+ * Invoke exim4_refresh_gnutls-params unconditionally.
+ * Send out e-mail alert if gnutls-params is older than 14 days.
+ * rename config varables to E4BCD_, source /etc/default/exim4
+ * introduce a E4BCD_PANICLOG_NOISE variable containing a regexp.
+ Paniclog is negatively filtered against that regexp and paniclog
+ warning is only sent out if unfiltered lines remain. This is to allow
+ work around http://www.exim.org/bugzilla/show_bug.cgi?id=92
+ * Prepare hosts_avoid_tls statement on SMTP transports
+ * Macroize log_selector, remove +tls_cipher from examples (it is on
+ by default) and always set tls_peerdn (we use TLS by default for
+ outgoing connections). Make it easier to enable debug logging.
+ * Mention in the comments of the default RCPT ACL that verification
+ is likely to have false negatives in smarthost/satellite setups. This
+ is the easiest way to fix #388460; the "real" fix would be very very
+ complicated and thus unsuitable for the default configuration.
+ Closes: #388460
+ * README.Debian:
+ * Re-Work "misc" section to contain subsection. Fix minor
+ formatting issues.
+ * Add a section about SELinux to the misc subsection saying that
+ we currently do not have an SELinux policy but would appreciate
+ people helping here. This is already bug #387327 and #390179.
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Sun, 1 Oct 2006 14:37:53 +0000
+
+exim4 (4.63-3) unstable; urgency=low
+
+ * Have exim4-config conflict with exim4-daemon-* << 4.63.
+ Thanks to Yannick Roehlly. Closes: #383420, #384058
+ * Tweak NEWS.Debian formatting. Remove asterisks and make sure that
+ contents lines start with four spaces.
+ * exim4-config.NEWS: A pair of minor fixes in SPF entry. (rm) Closes: #383708
+ * Apply upstream fix allowing header names with an odd number of
+ characters in add_headers in filters.
+ Thanks to Tony Finch. Closes: #384015
+ * Add documentation for inaccessible home directories.
+ Thanks to Juha Jäykkä. Closes: #383469
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Wed, 23 Aug 2006 17:16:38 +0000
+
+exim4 (4.63-2) unstable; urgency=low
+
+ * upload to unstable
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 15 Aug 2006 20:35:55 +0000
+
+exim4 (4.63-1) experimental; urgency=low
+
+ * New upstream version 4.63
+ + Change PostgreSQL charset handling. Closes: #369351
+ + Recognize SMTP codes at the start of "message" in ACLs and after
+ :fail: and :defer: in a redirect router. Add forbid_smtp_code to
+ suppress the latter. forbid_smtp_code is enabled in Debian's
+ default config. Closes: #378131
+ * Adapt configuration to current upstream
+ + re-work RCPT ACL. Closes: #379155
+ + add new comments to default authenticators
+ + use $auth[123] instead of $[123] which are now deprecated
+ + forbid_smtp_code on userforward router
+ * Add missing dependency on lsb-base (>= 3.0-3), needed for the new
+ init-script shipped in exim4-base. (am)
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 1 Aug 2006 10:47:44 +0000
+
+exim4 (4.62-5) unstable; urgency=low
+
+ * Fix typo in exim4-base daily cron job.
+ Thanks to Salvatore Bonaccorso. Closes: #381048
+ * Fix language issues in package descriptions
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 8 Aug 2006 15:02:14 +0200
+
+exim4 (4.62-4) unstable; urgency=low
+
+ * Add missing dependency on lsb-base (>= 3.0-3), needed for the new
+ init-script shipped in exim4-base. (am)
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 1 Aug 2006 11:03:57 +0000
+
+exim4 (4.62-3) unstable; urgency=low
+
+ * remove pkg-exim4-user mail address from README.Debian, mention
+ that one needs to be subscribed to post.
+ Thanks to Ross Boylan. Closes: #368242
+ * re-word -o description in update-exim4.conf(8) man page.
+ Thanks to Ross Boylan.
+ * Flag update-exim4.conf(8) man page for a re-work in its BUGS
+ section.
+ * Give a - hopefully - better explanation of the mail name thingy in
+ README.Debian.
+ * Fix occurrences of default_acl file in documentation. Make part of
+ README.Debian less confusing.
+ Thanks to Ross Boylan. Closes: #376459
+ * When installing via apt using dpkg-preconfigure the value of
+ dc_hide_mailname was overwritten during the second run of the debconf
+ script (invoked by postinst), before the value was stored in the
+ configuration file. Fix this. (am) Closes: #376460
+ * Make spamassassin example in 40_exim4_config_check_data actually
+ work, add link to documentation for "really suiteable" configuration
+ examples. Thanks, again, to Ross Boylan.
+ * remove left-over "and a bunch" sentence from exim4-config_files.5
+ * Add a symlink from /etc/email-addresses to /etc/exim4/email-addresses
+ * Fix bad parsing of CHECK_RCPT_DOMAIN_DNSBLS.
+ Thanks to Robert Millan. Closes: #378581
+ * Note in README.Debian that other parts of the Debian system might
+ give outdated and/or wrong advice. See #378684, #378685.
+ * SPF support: (rm) Closes: #290464
+ * Add (disabled) template to check SPF in 30_exim4-config_check_rcpt.
+ * Add libmail-spf-query-perl (>= 1.999-1) to Suggests.
+ * Rewrite Q/A about SPF from README.Debian.
+ * Add a small note to exim4-config.NEWS.
+ * Add conf.d/acl/30_exim4-config_check_mail to reject mail without HELO/EHLO.
+ (rm) Closes: #378935
+ * Add LSBized init script. Thanks to Carlos Villegas. Closes: #376953
+ * re-order RCPT ACL statements to resemble Upstreams default config
+ a little more. This used to be the case in the beginning, but was
+ changed eventually, and I didn't find any rationale for our deviation.
+ Thus, we change back to upstream's default to see which things might
+ break.
+ * remove cron.d from exim4-base dirs - we do not have a cron.d job
+ any more for years.
+ * Re-work daily cron job:
+ * Make statistics configurable with a variable
+ * Comment that the log handling code is fragile and depending on
+ log rotation strategy
+ * Add code to generate warnings if paniclog non-empty.
+ Thanks to Andrew Ferrier. Closes: #379898
+ * Build -dbg packages.
+ * Updated vi (vietnamese) translation.
+ Thanks to Clytie Siddall. (am) Closes: #380357
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Mon, 31 Jul 2006 06:10:51 +0000
+
+exim4 (4.62-2) unstable; urgency=low
+
+ * Move explanation about using ";" as separator in lists from debian/NEWS to
+ debian/exim4-config.NEWS. (The former ends up as
+ /usr/share/doc/eximon4/NEWS.Debian.gz.) Also fix version-number of
+ entry. (am)
+ * have ue4.conf --verbose print split or non-split config.
+ Thanks to Florian Laws. (mh)
+ * Mention http://pkg-exim4.alioth.debian.org/ in package description.
+ Thanks to Florian Laws. (mh)
+ * Mention in package description that README.Debian has information
+ about how to configure the Debian packages.
+ * /etc/init.d/exim4: parse extended inetd.conf syntax from
+ openbsd-inetd. (mh) Closes: #365928
+ * New th (thai) translation.
+ Thanks to Theppitak Karoonboonyanan. (mh) Closes: #367351
+ * New dz (Dzongkha) translation.
+ Thanks to Pema Geyleg. (am) Closes: #368593
+ * New ne (Nepali) translation.
+ Thanks to Paras pradhan. (am) Closes: #369526
+ * New eo (Esperanto) translation.
+ Thanks to Serge Leblanc. (am) Closes: #369241
+ * Updated hu (hungarian) translation.
+ Thanks to Attila Szervac. (am) Closes: #374616
+ * Make documentation of CHECK_RCPT_LOCAL_LOCALPARTS and
+ CHECK_RCPT_REMOTE_LOCALPARTS more verbose and concentrate it in the
+ ACL file. Thanks to Klaus Muth. (mh) Closes: #366491
+ * README.Debian.xml (mh)
+ * Add new section documenting where to find documentation.
+ * Move misplaced sentence.
+ * Fix spelling errors in README.Debian.
+ Thanks to Salvatore Bonaccorso. Closes: #366003
+ Thanks to Ross Boylan. Closes: #374216
+ * remove "you can stop reading now" sentence.
+ Thanks to David Lawyer. Closes: #370790
+ * Mention Debian-specific man pages
+ * Give instructions about how to use apropos to find out about man
+ pages.
+ * Documentation changes inspired by Ross Boylan. Closes: #369126
+ * Add exim4-config_files(5) man page to aid as repository for file
+ explanations.
+ * /etc/email-addresses
+ * /etc/exim4/local_host_blacklist
+ * /etc/exim4/local_host_whitelist
+ * /etc/exim4/local_sender_blacklist
+ * /etc/exim4/local_sender_whitelist
+ * /etc/exim4/local_sender_callout
+ * /etc/exim4/local_rcpt_callout
+ * /etc/exim4/local_domain_dnsbl_whitelist
+ * /etc/exim4/hubbed_hosts
+ * /etc/exim4/passwd
+ * /etc/exim4/passwd.client
+ * /etc/exim4/exim.crt
+ * /etc/exim4/exim.key
+ If you find any files that might be missing in the man page,
+ please report a bug.
+ * mention exim4-config_files(5) in update-exim4.conf.8
+ * Explicitly mention README.Debian in exim man page.
+ * Remove /usr/share/doc/exim4-config/default_acl, move contents to
+ README.Debian and exim4-config_files.
+ * remove empty /usr/share/doc/exim4-config/examples.
+ * clarify docs in RCPT ACL.
+ * streamline docs:
+ * hubbed_hosts router.
+ * passwd.client.
+ * server side authentication examples
+ * Standard-Version: 3.7.2, no changes necessary.
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Sat, 24 Jun 2006 08:56:19 +0000
+
+exim4 (4.62-1) unstable; urgency=low
+
+ * New upstream version
+ * remove !acl patch, bug is fixed upstream
+ * Some minor changes to README.Debian
+ * Downgrade priority of exim4/dc_eximconfig_configtype, exim4/no_config and
+ exim4/exim3_upgrade from critical to high, as there is a sane default.
+ Closes: #342077
+ * Allow single quotes in recipient mail addresses. Closes: #346222
+ * Update debian/mtalist to conflict with hula-mta. (mh)
+ * Move back man-pages (actually they are symlinks) related to the
+ mail-transport-agent virtual package from exim4-base to the daemon
+ packages. Other MTA packages also include these manpages and would
+ otherwise need to explicitly conflict with exim4-base. Add "Replaces:
+ exim4-base (<= 4.61-1)" to the daemon packages. Thanks to Justin Pryzby.
+ Closes: #362852 (am)
+ * Update km (Khmer) translation.
+ Thanks to Khoem Sokhem. (mh) Closes: #363672, #363671
+ * Update pa (Punjabi) translation.
+ Thanks to A S Alam. (am) Closes: #364268
+ * replace backticks with $() construct in ue4.conf. (mh)
+ * Allow ";" as separator in dc_local_interfaces and dc_relay_nets.
+ If a semicolon is found, "<;" is prepended to allow a semicolon as
+ separator. Thanks to Adam Borowski. (mh) Closes: #360162
+ * Link against libdb4.3 instead of 4.2. (am). Closes: #365467
+ * Standards-Version: 3.7.0, no changes required. (am)
+ * README.Debian: Add link to "how to use a completely different
+ configuration scheme" to the beginning of the chapter about Debian's
+ configuration to provide an easy way out for experienced exim people.
+ (mh)
+ * Fix grammar error in README.Debian. (Thanks, Ross Boylan) Closes: #365546
+ * Whennever changing major Berkeley DB versions we zap the exim hint
+ databases in exim4-base postinst. Change the code to also delete
+ __db.retry, __db.misc, __db.callout and __db.wait* (which afaik are
+ Berkeley DB internal files). If these are somehow broken strange errors
+ occur, e.g. #360696. As we are deleting the whole db, deleting these files
+ seems to be a good idea. (am)
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 2 May 2006 11:47:58 +0000
+
+exim4 (4.61-1) unstable; urgency=low
+
+ * New upstream version
+ - Temporary files for content scanning subdirectory are now also mode 640
+ instead of 666. Closes: #280282
+ - If group was specified without a user on a router, and no group
+ or user was specified on a transport, the group from the router
+ was ignored. Closes: #343074
+ - .include statements now require an absolute path. Closes: #268083
+ * Apply upstream patch allowing !acl constructs
+ (http://www.exim.org/mail-archives/exim-cvs/2006-April/msg00008.html)
+ * Rename the Punjabi translation file name from pa_IN to pa
+ to fit a decision taken in -i18n
+ * README.Debian:
+ * mention that relay_nets does allow relaying without authentication.
+ * minor formatting fixes
+ * Add Khmer debconf translation (Thanks, Kakada Hok) (bubulle)
+ Closes: #359668
+ * Add linda overrides for libs-not-in-depends (see #357727)
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 4 Apr 2006 19:50:39 +0000
+
+exim4 (4.60-5) unstable; urgency=low
+
+ * re-introduce inst_aliases, patch src/install_exim to prevent path
+ to inst_aliases to be put into example config file. (mh)
+ * Fix typo in README.Debian.xml, thanks to Frank S. Thomas. (mh)
+ * Fix Copy&Waste error in README.Debian.xml.
+ Thanks to Olaf van der Spek. (mh) Closes: #356354
+ * Added partial Punjabi debconf translation,
+ thanks to Amanpreet Singh Alam. (cp) Closes: #349644
+ * Fix wrong example in conf.d/acl/20_exim4-config_whitelist_local_deny.
+ Thanks to Kaare Hviid for pointing this out on IRC. (mh)
+ * Add documentation about Debconf templates to README.Debian to make
+ yath happy. (mh)
+ * exim4-refresh_gnutls-params: Use prefix for tempfile to make it
+ easier recognizeable. (mh)
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Mon, 13 Mar 2006 15:30:07 +0000
+
+exim4 (4.60-4) unstable; urgency=low
+
+ * add rationale to README.Debian explaining why using system
+ passwords for SMTP AUTH is a bad idea.
+ * streamline configuration to decrease differences to upstream default
+ example, and to adopt new things that were added since we last
+ looked there.
+ * Do not set inst_aliases for installation, this only affects
+ example.conf anyway.
+ * fail build if upstream's example configuration has changed.
+ * fix NEWS confusion. Thanks to Andreas for spotting this.
+ * exim4-base.exim4.init: invoke exim4 daemon with the environment
+ cleaned to avoid language confusion.
+ * document tls on connect in README.Debian.
+ * use adduser --quiet instead of > /dev/null in *.postinst.
+ * Add require_files directive to userforward router to avoid errors
+ when mailing uucp@hostname.
+ * Add comment about setting up TLS in conf.d/auth/30_exim4-config_examples
+ to keep people from blindly allowing cleartext auth.
+ * Replace 37_dns_disable_additional_section patch with
+ 37_upstream_patch_342619, which is the nearly identical patch from
+ upstream CVS, approved by Philip. (mh) Closes: #342619
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Wed, 22 Feb 2006 10:30:16 +0000
+
+exim4 (4.60-3) unstable; urgency=low
+
+ * Have exim4-base replace exim4-daemon-light and -heavy. This is a
+ needed corollary to the movement of the man pages to -base. Let's
+ hope that this change doesn't introduce too much breakage. Thanks
+ to Hamish Moffatt for making me take a closer look at policy.
+ (mh) Closes: #347908, #348067
+ * Introduce Makefile variable to build with OpenSSL instead of
+ GnuTLS. This is a last minute maneuver to help sites suffering from
+ the GnuTLS entropy issue (#338319, #343085) whose only other chance is
+ disabling TLS completely. Please note that building exim4-daemon-heavy
+ with OpenSSL is a GPL violation since OpenSSL's license clashes with
+ the MySQL client library, which is GPL licensed without OpenSSL
+ exception. (mh)
+ * re-pack configuration diffs. (mh) Closes: #331698
+ * Fix wrong variable substitution in lt (Lithuanian) debconf
+ translation. Thanks to Davide Viti and Gintautas Miliauskas. (mh)
+ Closes: #342242
+ * Fix typo in exim.8 man page. Thanks to A Costa. (mh) Closes: #338579
+ * Honor dpkg-statoverride entries for run-time data in /var.
+ Thanks to Peter Mottram. (mh) Closes: #269448
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Sun, 15 Jan 2006 00:23:47 +0000
+
+exim4 (4.60-2) unstable; urgency=low
+
+ * Add, but not enable, 37_dns_disable_additional_section.dpatch,
+ which might be a possible fix for #342619
+ * conf.d/auth/30_exim4-config_examples: add hint to adapt public_name
+ string in support_broken_outlook_express_4_server authenticator if
+ other authencators than LOGIN and PLAIN are offered.
+ * Fix missing special characters in some debconf translations.
+ Thanks to Davide Viti. (mh) Closes: #341442
+ * Fix broken README reference in system_aliases router docs. (mh)
+ * remove references to alias files from the address_pipe transport. (mh)
+ * remove "Some-State" default from exim-gencert. (mh)
+ * Clarify split vs unsplit config in README.Debian. Thanks to Faheem
+ Mitha and Ross Boylan for helping. (mh)
+ * Update Build-Depends to libmysqlclient15-dev. (mh) Closes: #343767
+ * Fix wrong header in conf.d/routers/300_exim4-config_real_local.
+ Thanks to Ross Boylan for spotting this. (mh)
+ * Document headers_rewrite, return_path and dc_mailname_in_oh in
+ update-exim4.conf man page. (mh) Closes: #332520, #342233
+ * Re-Instate debian/patches/31_eximmanpage which was erroneously
+ removed in 4.60-1, we have local Debian patches in here. Thanks to
+ Ross Boylan for spotting this. (mh) Closes: #330967
+ * Mention relay permission from localhost in update-exim4.conf(8). (mh)
+ * Add more prose to relay control configuration. (mh)
+ * Update Greek debconf translation (Thanks, Kostas Papadimas) (am)
+ Closes: #344576
+ * Add cross-reference to README.Debian to better find macro docs.
+ Thanks to Shyamal Prasad. (mh) Closes: #329988
+ * Fix incorrect variable substitution in pt_BR debconf translation. (Thanks,
+ Felipe Augusto van de Wiel) (am) Closes: #345363
+ * [exim4-config.templates, po/*po] Replace reference to README.SMTP-AUTH
+ with one to its replacement README.Debian.html. (am) Closes: #344826
+ * Re-work long package descriptions. Move reference to README.Debian in
+ front, add hint to dpkg-reconfigure exim4-config, complete stub
+ sentences, remove non-referenced acronym MTA from the long
+ descriptions, move explanation what exim is to the very front.
+ * README.Debian: Add section about changing the configuration,
+ explain structure of conf.d and .conf.template, add hint that the SMTP
+ AUTH examples are documented.
+ * Introduce MAIN_TLS_CERTKEY to allow for single-file certificate/key
+ storage. Thanks to John Goerzen. (mh) Closes: #315126
+ * Mention entropy issue in README.Debian.
+ * Ship symlink to /usr/sbin/exim, see NEWS.Debian. (mh) Closes: 319316
+ * use dh_installinit -n instead of --noscripts to work around #347577. (mh)
+ * use dh_installinit --name instead of --init-script, rename init
+ script. (mh)
+ * move man pages from daemon packages to exim4-base, add lintian
+ and linda overrides to allow daemon packages not to contain man pages.
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Thu, 12 Jan 2006 12:36:50 +0000
+
+exim4 (4.60-1) unstable; urgency=low
+
+ * new upstream version 4.60
+ * assign value to UE4CC after command line processing. Only have
+ ue4c throw an error on not-existing UPEX4C_confd if split config is
+ seleted. Thanks to Ted Percival. (mh) Closes: #337229
+ * A number of man page fixes. Thanks to A Costa. (mh)
+ Closes: #338580, #338581, #338582, #338583, #338584
+ * Pull spool dir path from exim -bP instead of hard-coding it in
+ daily cron job and exim4_refresh_gnutls-params.
+ Thanks to Alex Hermann. (mh) Closes: 340002
+ * Corrected zh_CN translation by Ming Hua. (am) Closes: #338928
+ * Corrected pl translation by Jacek Politowski. (am) Closes: #339671
+ * Change README.Debian to clarify the exim as a client only uses
+ STARTTLS and not TLS on connect. Thanks to Rob Brenart and Marc
+ Sherman for pointing that out on exim-users.
+ * Clarify passwd.client format. Thanks to Osamu Aoki for providing a
+ good starting point in #244724, which is unfortunately not fixed just
+ now.
+ * remove patch 31_eximmanpage, fixes are included upstream.
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Mon, 28 Nov 2005 18:16:12 +0000
+
+exim4 (4.54-2) unstable; urgency=low
+
+ * debian/README.Debian* merged into one xml-file. Binary packages ship both
+ a html (generated by xsltproc) and plain-text version (lynx +
+ post processing) of the file. (Hilko Bengen)
+ * Switch to libmysqlclient14.
+ * Fix two typos in French debconf templates.
+ Thanks to Christian Perrier. (mh)
+ * Replace broken courier auth example with one that actually denies
+ access if a wrong password is given. Thanks to Peter Thomassen for
+ carrying that report from some colorful web forum to the people who
+ can fix it after like four months. (mh) Closes: #336979
+ * Fix minor typos in README.Debian.xml and changelog. (mh)
+ * Add 255.255.255.255 to ignore_target_hosts in dnslookup. (mh)
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Wed, 2 Nov 2005 19:40:22 +0000
+
+exim4 (4.54-1) unstable; urgency=low
+
+ * new upstream version 4.54. (mh)
+ * fix typo in router/real_local header
+ * add same_domain_copy_routing to router/hubbed_hosts
+ * [update-exim4.conf.8] false friend: s/sensible/sensitive/.
+ Thanks to Ross Boylan. (am) Closes: #330975
+ * modify broken outlook express 4 authenticator so that it only
+ advertises on encrypted connections, as the other plaintext
+ authenticators do. Thanks again, Fred Viles. (mh)
+ * update-exim4.conf.8: alphabetically sort REPLACEMENT PATTERNS and
+ CONFIGURATION VARIABLES sections, add documentation for
+ DEBCONFlocal_domainsDEBCONF.
+ Thanks to Ross Boylan. (mh) Closes: #330980
+ * fix bashism == in init script. Thanks to Adam D. Barratt and
+ Justin Pryzby. (mh) Closes: #331299
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 4 Oct 2005 09:59:24 +0000
+
+exim4 (4.53-1) unstable; urgency=low
+
+ * new upstream version 4.53. (mh)
+ * Fix obviously unfinished sentence in update-exim4.conf.8
+ documenting dc_local_interfaces. (mh)
+ * Move SMTP authentication docs to README.Debian. (mh)
+ * Adapt reportbug script to be useable from the command line as well,
+ mention this in README.Debian mailing list paragraph. (mh)
+ * Remove /etc/default/exim4 in exim4-config's postrm instead of exim4-base's
+ one, as it is created in exim4-config's postinst. (am) Closes: #325901
+ * Fix error in README.Debian.xinetd.
+ Thanks to Diego Biurrun. (mh) Closes: #327847
+ * Fix substitute variable in Japanese (ja) debconf translation.
+ Thanks to Kenshi Muto. (mh) Closes: #329729
+ * Add lintian override for maintainer-script-needs-depends-on-netbase. We
+ don't need that depends since update-inetd.conf is checked for presence
+ before invocation and that invocation is only optional cleanup. (mh)
+ * add linda override to kill double shlib warning - libgnutls is
+ fully versioned and thus is not a problem. (mh)
+ * add lintian override to kill bashism "local" warning for
+ exim4-config.config and exim4-config.postinst (see #330548). (mh)
+ * add general package blurb to description of the exim4 meta package
+ as well. Thanks to Marc Sherman for pointing this out. (mh)
+ * remove code to escape dashes in the pod2man generated man pages.
+ That code makes the man pages syntactically invalid, we'd rather
+ live with suboptimal rendering (which is a pod2man bug anyway). (mh)
+ * change spacing for rewrite rules in configuration, man page and
+ ue4.conf to ease paragraph filling for the man page. (mh)
+ * re-pack config patches. (mh)
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Wed, 28 Sep 2005 18:34:51 +0000
+
+exim4 (4.52-2) unstable; urgency=low
+
+ * unpack/pack configs to get clear EDITME patches (mh)
+ * Update ca (Catalan) translation.
+ Thanks to Aleix Badia i Bosch. (mh) Closes: #317429
+ * Update mk (Macedonian) translation.
+ Thanks to Georgi Stanojevski. (mh) Closes: #320231
+ * Use certtool from gnutls-bin in cron.daily to re-generate gnutls-params
+ instead of only removing the file and letting exim4 re-generate it at SMTP
+ time after receiving STARTTLS. The maximum runtime of certtool is limited
+ to 2*1800 seconds per default by using timeout.pl by Piotr Roszatycki
+ (checked and beautified by Marc 'HE' Brockschmidt). Add gnutls-bin to
+ exim4-base' Suggests. (am) Closes: #285371
+ * Build-Depend on libgnutls-dev (from gnutls12) instead of libgnutls11.
+ * Drop compability with debhelper in woody (am):
+ - mv *.templates.master *.templates
+ - update po/POTFILES.in accordingly.
+ - no more manual invocation of po2debconf in debian/rules
+ - use dh_installppp instead of manual dh_installdirs/dh_install.
+ Closes: #212893
+ - Build-Depends: debhelper (>= 4.1.68)
+ * drop upgly passwd dependency introduced in 4.30-6. (am)
+ * shorten Build-Depends by replacing "libxfoo-dev|xlibs-dev' with just
+ 'libxfoo-dev'. (am)
+ * Do not try to authenticate to smarthost if smarthost offers AUTH LOGIN but
+ passwd.client does not contain a matching entry. (am) Closes: #323565
+
+ -- Andreas Metzler <ametzler@debian.org> Sun, 21 Aug 2005 11:44:27 +0200
+
+exim4 (4.52-1) unstable; urgency=low
+
+ * new upstream version 4.51. (mh)
+ * adapt 70_remove_exim-users_references
+ * remove 37_gnutlsparams
+ * adapt 36_pcre
+ * adapt 31_eximmanpage
+ * fix package priorities to have them in sync with override again. (mh)
+ * Fix error in nb (Norwegian) translation.
+ Thanks to Helge Hafting. (mh). Closes: #315775
+ * Standards-Version: 3.6.2, no changes needed. (mh)
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Sat, 2 Jul 2005 06:08:34 +0000
+
+exim4 (4.51-2) unstable; urgency=low
+
+ * Fix typo in exiwhat.8. (am) Closes: #313246
+ * Clarify tls_verify_certificates documentation in
+ conf.d/main/03_exim4-config_tlsoptions. Thanks to Wenzhuo Zhang. (mh)
+ * Accept postmaster liberally for relay_to_domains. Thanks to
+ Roderick Schertler. (mh) Closes: #313023
+ * Improve update-exim4.conf's internal run-parts to warn about ignored files
+ if running in verbose-mode. (am) Closes: #315656
+ * Make it possible to purge a previously uninstalled exim4-suite if debconf
+ has between removed since. (am) Closes: #315173
+ - Stop useless sourcing of confmodule in exim4-config.postrm.
+ - Use debconf to ask about trashing the mailqueue if debconf is available,
+ keep the queue otherwise.
+ * exim failed to setup gnutls parameters if the gnutls-param file was
+ missing. This caused TLS breakage. (am) Closes: #315650
+
+ -- Andreas Metzler <ametzler@debian.org> Tue, 28 Jun 2005 19:35:35 +0200
+
+exim4 (4.51-1) unstable; urgency=low
+
+ * new upstream version 4.51. (mh)
+ * remove 80_upstream_fix-296492
+ * remove 81_fix-kfreebsd-gnu
+ * remove 82_upstream_fix-299733
+ * remove 82_upstream_fix_299743
+ * remove 83_upstream_fix-strangelog
+ * build-depends: replace postgresql-dev with libpq-dev. (mh)
+ * apply patch to EDITME.exim4-heavy.diff from ubuntu for clearer
+ postgresql build. (mh)
+ * fix wrong dc_other_hostnames statement in manpage. Thanks to
+ Daniel Hermann. (mh) Closes: #311023
+ * give more directions how to use /etc/exim4/exim4.conf. (mh)
+ * Fix duplicated server_advertise_condition line in
+ login_saslauth_server. Thanks to Rich Aycock. (mh) Closes: #311906
+ * Conditional restarting the daemon in exim4-config.config now checks for
+ DEBCONF_RECONFIGURE=1 instead of (mis)using an internal
+ debconf-template. (am)
+ * Documentation Improvements for update-exim4.conf.8, exim4.conf.template
+ and 01_exim4-config_listmacrosdefs and README.Debian.
+ Thanks to Ross Boylan. (am/mh)
+ * New translation: et (Estonian) by Siim Põder. (mh) Closes: #312474
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Fri, 10 Jun 2005 18:57:03 +0000
+
+exim4 (4.50-8) unstable; urgency=low
+
+ * integrate TLS docs in README.Debian, remove README.TLS.
+ Thanks to Sam Morris. (mh) Closes: #310771
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Fri, 27 May 2005 07:57:14 +0000
+
+exim4 (4.50-7) unstable; urgency=low
+
+ * Documentation Only Fixes
+ - Fix grammar error in README.system_aliases. Thanks to Andreas
+ Barth on IRC. (mh)
+ - Optimize unencrypted authentication docs. Thanks to Drew Parsons.
+ (mh) Closes: #305443
+ - Clarify dc_smarthost host list processing in update-exim4.conf.8.
+ (mh) Closes: #307370
+ - Clarify split-config description in README.Debian.
+ Thanks to Luc Saffre. (mh)
+ - Fix a typo in README.Debian-accountname, thanks to Brett Parker. (mh)
+ - Fix an issue in the exim manpage creating the illusion that
+ whitespace is allowed between -d and its options.
+ Thanks to Greg Kochanski. (mh) Closes: #309174
+ - Start re-work of README.Debian FAQ.
+ - Add "should -config depend on -base" question to README.Debian FAQ.
+ - Link README.Debian to -daemon-light and -daemon-heavy, include a
+ copy of README.Debian in -config.
+ Thanks to Daniel Maier. (mh) Closes: #310118
+ * Translations
+ - Update: cy (Welsh) by Dafydd Harries. (mh) Closes: #306349
+ - New: vi (Vietnamese) by Clytie Siddall. (mh) Closes: #306613
+ - Fix typos in pt.po (Thanks, Miguel Figueire) (am) Closes: #310057
+ * Configuration Clarification
+ - move the regexps in the local part checks to macros, adapt docs.
+ Thanks to Adam M. Costello. (mh) Closes: #306094
+ * Bug Fixes
+ - preserve escape sequences like '\\N' in
+ /etc/exim4/update-exim4.conf.conf:
+ - use awk instead of sed in exim4-config.postinst (Thanks, Barry Kitson).
+ - use printf '%s\n' "$foo" instead of echo "$foo". (echo in dash would
+ swallow the second backslash)
+ - actually making this work requires changes in debconf, too,
+ see #306134.
+ - (Closes: #305957) (am)
+ - apply upstream patch from
+ http://www.exim.org/mail-archives/exim-users/Week-of-Mon-20050425/msg00035.html
+ in some circumstances, exim writes parts of /etc/passwd and/or
+ /etc/group to the reject log. This scares people. (mh)
+ - apply upstream patch from
+ http://www.exim.org/mail-archives/exim-dev/2005-April/msg00012.html to
+ only try SASL mechanisms that are actually specified in the
+ configurations. Thanks to Juergen Kreileder. (mh) Closes: #299743
+ - Build against libmysqlclient12-dev instead of libmysqlclient10-dev.
+ (am) Closes: #306970
+ - As "mail sent by smarthost; no local mail" aka satellite requires setting
+ dc_readhost always ask this question. (am) Closes: #304838
+ - Make nonsplit-config read /etc/exim4/exim4.conf.localmacros before
+ /etc/exim4/exim4.conf.template to allow macros here as well. (mh)
+ - Make it clear that "broken debconf" warning is issued by
+ exim4-config.postinst
+ - Make sure that "generated, do not touch" disclaimer in
+ /var/lib/exim4/config.autogenerated always appears
+ - [exim4-config] As the.config script stores answers in debconf's db and the
+ postinst actually generates configurations files from these values
+ restarting the daemon on dpkg-reconfigure has to be done in postinst. (am)
+ Closes: #310703
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Thu, 26 May 2005 17:47:24 +0000
+
+exim4 (4.50-6) unstable; urgency=low
+
+ * fix some errors in update-exim4.conf(8) manpage. (am)
+ * more macros in config. (mh)
+ * Apply upstream fix: $primary_hostname is now expanded in
+ cyrus_sasl authenticator. Thanks to Juergen Kreileder, and of
+ course Philip Hazel. (mh) Closes: 299733
+ * fix conftype none missing "| \" bug, again. Thanks to Andrew Nimmo
+ and Gabriel L. Briones III. (mh) Closes: 303351.
+ * The upstream fix for #296492 sometimes causes an endless loop. Update
+ patch with correction from Philip's commit, revision 1.10. (mh)
+ * Document real_local router. (mh)
+ * Add instructions about how to use inetd. Thanks to Ryan Underwood.
+ (mh) Closes: #304436
+ * Fix wrong file header in 100_exim4-config_domain_literal. (mh)
+ * Fix bad english in 01_exim4-config_listmacrosdefs. (mh)
+ * conf.d/main/02_exim4-config_options: Remove macro effort for options
+ that we leave at their default by default anyway, re-commenting them
+ for reference. (am)
+ * Allow cleartext client AUTH PLAIN and AUTH LOGIN by setting a
+ macro. (mh)
+ * Update information in README.SMTP-AUTH. (mh)
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Sun, 17 Apr 2005 19:10:26 +0000
+
+exim4 (4.50-5) unstable; urgency=low
+
+ * move exim4-config-simple and exim4-config-medium from the main
+ source package to keep them from being released.
+ * document the fact that the check done by update-exim4.conf does
+ not detect all possible errors and fails with errors that are inside
+ expanded items in the config file. Thanks to Marc Sherman.
+ (mh) Closes: 286721
+ * Add examples for cyrus_sasl to conf.d/auth/30_exim4-config_examples.
+ Thanks to Juergen Kreileder. (mh) Closes: #299732
+ * remove --dry-run from 10_daemon_close_fds.dpatch so that failures
+ to patch cause failure. Thanks to Gergely Nagy, and apologies for
+ blaming it on dpatch (see #297670). (mh)
+ * remove ACL example file, incorporate DNSBL examples (without
+ actual DNSBL domains) into main config. The example file hasn't been
+ updated in ages, and the main config file has become quite
+ sophisticated by itself. (mh)
+ * add example authenticators for courier authdaemon. (mh)
+ * have exim4-base recommend psmisc. Thanks to Thiemo Seufer.
+ (mh) Closes: #299858
+ * apply upstream patch fixing fallback handling. Thanks to Laurent Fousse.
+ (mh) Closes: #296492
+ * add patch to allow building on kfreebsd-gnu. Thanks to Robert
+ Millan. (mh) Closes: #300967
+ * remove 10_daemon_close_fds since this might close FDs which might
+ be used by other libraries such as libnss-ldap. Thanks to Antonio
+ Kanouras for reporting and testing, and to Florian Weimer for
+ debugging. To avoid #297607 from happening again, use db_stop in
+ exim4-config.config and coordinate with the d-i team. Thanks to
+ Frans Pop for testing. (mh) Closes: #299051
+ * make pidfile paths in init script variables. (mh)
+ * Update bs (Bosnian) debconf templates. Thanks to Safir Secerovic.
+ (mh) Closes: #301940
+ * Fix update-exim4.conf to actually remove the DEBCONF stuff from
+ configuration. Thanks to Jason Spiro. (mh)
+ * correctly translate an empty debconf option visiblename to an
+ _unset_ qualify_domain, not a qualify_domain set to the empty string.
+ Thanks to Miquel van Smoorenburg. (mh) Closes: #302060
+ * update-exim4.conf ignored the setting of dc_use_split_config and
+ always used the data from split config for conftype none. (am)
+ * Document #301988 (base-config) in README.Debian to offer an
+ explanation for a long delay restarting exim right after Debian
+ installation. (mh)
+ * Fix exim4-config.NEWS and exim4-config.postinst, documenting the
+ mailname change there. This should act as a heads-up to people who
+ do funky things with their ue4.conf.conf which might overwrite the
+ fixup intrduced by the maintainer script. Thanks to Vincent
+ Lefevre. (mh) Closes: #301906
+ * Make Maildir location configurable via exim macro. Thanks to
+ Frederic Lehobey. (mh) Closes: #302215
+ * pull update-exim4.conf.conf file name in shell variables
+ * liberally use .ifdef in conf.d files which changed in this release
+ anyway. This is part of the process to fix #297603. (mh)
+ * Adapt formatting policy to conf.d files which were changed. (mh)
+ * Improve on Debconf documentation in update-exim4.conf.conf and
+ the configuration templates. This partly addresses #289959. (mh)
+ * re-work ue4.conf man page, also addressing #289959. (mh)
+ * add a comment about caseless postmaster to
+ conf.d/router/400_exim4-config_system_aliases. (mh)
+ * print script name and parameters when debugging. (mh)
+ * update-exim4.conf now gives a better error message if
+ ue4.conf.conf does not exist. (mh)
+ * ue4.conf.template: If a relative output path is given, actually
+ put the file there and not in a path relative to
+ /etc/exim4/conf.d. (mh)
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Sun, 3 Apr 2005 07:20:17 +0000
+
+exim4 (4.50-4) unstable; urgency=low
+
+ * fix 10_daemon_close_fds.dpatch to actually apply again. Sheesh.
+ Thanks to Joey Hess. (mh) Closes: #297607
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Wed, 2 Mar 2005 07:38:52 +0000
+
+exim4 (4.50-3) unstable; urgency=low
+
+ * actually enable dlopen patch, show this in package descriptions.
+ Thanks to Andrej KOLESNIKOV. (mh) Closes: #297282
+ * Have exim4-config conflict with -daemon (<<4.50), as we use
+ submission/sender_retain which is not supported by earlier daemons.
+ Thanks to Echo Nolan. (mh) Closes: #297501
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Tue, 1 Mar 2005 06:45:26 +0000
+
+exim4 (4.50-2) unstable; urgency=low
+
+ * now use WITH_OLD_DEMIME as discussed on pkg-exim4-devel. (mh)
+ * postinst: add "This is a Debian specific file" to ue4.c.c. (mh)
+ * fix exim.8 manpage to point to exim4 instead of exim.
+ (mh) Closes: #296864
+ * fix update-exim4.conf.8 man page to correctly document that
+ multiple smarthosts are supported and non-SMTP ports are not. Thanks
+ to Dan Jacobson. (mh) Closes: #283560
+ * Add --output option to update-exim4.conf.template. Thanks to Marc
+ Sherman. (mh/am) Closes: #296597
+ * Compile with cyrus_sasl authentication mechanism, add libsasl2-dev to
+ Build-Depends. Thanks to Sean Middleditch and Gergely Risko. (mh)
+ Closes: #296203, #292906.
+ * document that dc_localdelivery does not have a corresponding
+ Debconf option.
+ * Introduce ue4c_comments for /etc/exim4/update-exim4.conf.conf to
+ set default for keepcomments/removecomments from the config file.
+ Thanks to Greg Folkert. (mh) Closes: #295735
+ * Use "control = submission/sender_retain" to fixup relayed messags instead
+ of only adding a Message-ID with a warn-statement. (am) Closes: #285235
+ * Add force-stop to the init script. Thanks to Jari Aalto. (mh)
+ Closes: 271686
+ * tighten local parts checks. Thanks to Jari Aalto. (mh) Closes: #273302
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Sun, 27 Feb 2005 16:33:05 +0000
+
+exim4 (4.50-1) experimental; urgency=low
+
+ * new upstream version
+ * kill exiscan patch as it is now included upstream
+ * deliver configuration which will compile daemon-heavy with the
+ built-in exiscan
+ * convert package to svn on svn.debian.org with a debian/-only
+ layout. (mh)
+ * remove 37_kbsd-gnu patch on bug submitter's request (doesn't apply
+ cleanly). (mh)
+ * fix bad German translation of a debconf template. Thanks to Hanno
+ Wagner. (mh) Closes: #291671
+ * allow option passing to updatex-exim4.conf from init script.
+ Thanks to Stephen Gran. (mh) Closes: #285973
+ * change commented out example for reverse DNS RCPT check to catch
+ deferrals as well. Thanks to Marc Sherman. (mh) Closes: #291832
+ * Update ko (Korean) debconf templates. Thanks to Seo Sanghyeon.
+ (mh) Closes: #292607
+ * Update sq (Albanian) debconf templates. Thanks to Elian Myftiu.
+ (am) Closes: #284529
+ * New gl (Galician) debconf templates. Thanks to Jacobo Tarrío.
+ (mh) Closes: #295562
+ * use #!/bin/bash in reportbug script as a quick fix until #294954
+ is fixed one way or the other in reportbug.
+ * Minor fix to de (German) debconf templates. Thanks to Dennis
+ Stampfer. (mh) Closes: #294815
+ * add bad hack authenticator to support outlook express 4.xx. (mh)
+ * streamline server authenticator names. (mh)
+ * 60_convert4r4.dpatch: patch convert4r4 to prevent execution of the
+ script without people reading a prominent warning. (mh)
+ * re-work debian/control again, pointing people towards
+ pkg-exim4-users to make upstream a little bit less unhappy.
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Fri, 18 Feb 2005 15:31:12 +0000
+
+exim4 (4.44-2) unstable; urgency=low
+
+ * re-work debian/control to make lintian happy, make descriptions
+ more orthogonal. (mh)
+ * kill build-conflicts on libperl-dev (=5.8.4-1). (mh)
+
+ -- Andreas Metzler <ametzler@debian.org> Thu, 27 Jan 2005 13:45:45 +0100
+
+exim4 (4.44-1) experimental; urgency=low
+
+ * New upstream bugfix-only release (exiscan-acl 4.44-28).
+ - Fixes eximstats' generation of pie charts by volume. (Closes: #286074)
+ - Reset the locale to "C" after calling embedded Perl. (Closes: #283538)
+ - includes 66_cipherpreferences.dpatch,
+ 66_can2005-0021_can2005-0022.dpatch, 65_tidydb-spool.dpatch,
+ 62_statvfs.dpatch.
+ * Fix (commented) example for AUTH LOGIN with saslauthd (Thanks, Maik
+ Broemme). (Closes: #291205)
+ * tl (Tagalog) translation of debconf templates by eric pareja.
+ (Closes: #291184)
+ * Use db4.2. (Closes: #258311)
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Sun, 23 Jan 2005 15:42:20 +0000
+
+exim4 (4.43-4) unstable; urgency=low
+
+ * Change update-exim4.conf to again generate a valid return_path (instead
+ of defering any mail to remote systems) if dc_hide_mailname='true'.
+ (Closes: #290954)
+ * Fix typo in changelog and exim4-config's NEWS.
+ * Some changes (most notably changing the interfaces exim listens on)
+ require restarting exim instead of just sending HUP. Change documentation
+ and exim4-config.config accordingly. (Closes: #290945)
+
+ -- Andreas Metzler <ametzler@debian.org> Tue, 18 Jan 2005 12:57:58 +0100
+
+exim4 (4.43-3) unstable; urgency=low
+
+ * Now that 4.44 is released upload 4.43 to unstable. ;-) Merge experimental
+ and unstable changelog.
+ * More lintian overrides. ("X" in eximon4's description has to be capital,
+ and we take care to only use settitle if it is available.
+ * make nullmailer setup and the way we use mailname a lot more sensible,
+ attacking #244095 and #280207:
+ - mailname is not implicitely made a local domain, instead it is listed
+ explicitly in dc_other_hostnames, where users can easily remove it
+ from. (This is basically what postfix does, too.) When upgrading
+ existing installations mailname is automatically added _once_ to
+ dc_other_hostnames, on fresh installations mailname is the default
+ value of dc_other_hostnames. We store the fact that we have added
+ mailname to dc_other_hostnames in $dc_mailname_in_oh in
+ update-exim4.conf.conf.
+ - Make exim work correctly if dc_readhost ("visible, rewritten domain name
+ for local users") ends up as part of local_domain, which happens if
+ the same value is chosen for mailname and dc_readhost. This
+ implemented by new router, hub_user_smarthost. Previously users were
+ required to use something different (my.invalid.domain) for mailname.
+ - Special thanks to Christian Perrier for taking care of the
+ template translation updates.
+ * We did not substitute the current value into the debconf templates with
+ db_subst but showed the old ones from the previous debconf run.
+ * /etc/exim4/email-addresses is ignored now, please use /etc/email-addresses!
+ * Bosnian (bs.po) translation is complete (Thanks Adis Nezirovic).
+ * Includes de.po change suggested in #286525.
+ * One-line fix for incorrect fi.po translation by Kalle Olavi Niemitalo.
+ (Closes: #288930)
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 15 Jan 2005 19:38:16 +0100
+
+exim4 (4.43-2) experimental; urgency=low
+
+ * Resync against sarge/sid (4.34-10).
+ * Translation updates:
+ - he (Hebrew) by Lior Kaplan (am) (Closes: #281249)
+ * cy (Welsh) translation of debconf templates by Dafydd Harries.
+ (am) (Closes: #282731)
+ * sq (Albanian) translation of debconf templates by Elian Myftiu. (am)
+ (Closes: #284529)
+ * allow arbitrary Sender: and envelope headers in locally submitted
+ messages, no longer force them to be the local account name at the
+ local host name. (mh)
+ * delete /var/spool/exim4/gnutls-params in cron.daily. (mh)
+ (Closes: #224269)
+ * run debian/rules update-mtaconflicts. (mh)
+ * remove outdated info from README.SMTP-AUTH and clarify corresponding
+ comments in configuration file (Closes: #281249). (am)
+ * Add an example for AUTH LOGIN using saslauthd. (Closes: #276450). (am)
+ * exim4-base.cron.daily: Use find | xargs -0r (Closes: #279205). (am)
+ * Document /etc/email-addresses in README.Debian (Closes: #276958) (am).
+ * exim_tidydb did not work properly with split spool directory. (am)
+ * Make exim prefer stronger ciphers. (AES_256 AES_128 3DES ARCFOUR).
+ * Make the prefered local transport (maildir/mailspool) configurable in
+ update-exim4.conf.conf, attacking #250980. Document this, therefore
+ (Closes: #274597) (am)
+ * Move slightly more expensive tests in rcpt ACL further down. (This only
+ changes commented out example code.) (Closes: #267708)
+ * Fix 62_statvfs to work with older versions of dpatch. (Closes: #286302)
+ * Version dpatch build-dependency to safeguard against reintroducing this
+ bug.
+ * In comment point out that using saslauthd for SMTP AUTH requires giving
+ exim privileges to use it.
+ * New patch 66_can2005-0021_can2005-0022.dpatch from
+ http://www.exim.org/mail-archives/exim-users/Week-of-Mon-20050103/msg00028.html
+ fixing two buffer overflows labeled CAN-2005-0021 and CAN-2005-0022
+ (mh/am).
+
+ -- Andreas Metzler <ametzler@debian.org> Thu, 6 Jan 2005 12:33:27 +0100
+
+exim4 (4.43-1) experimental; urgency=low
+
+ * targeted for experimental since we need unstable to get new 4.34
+ versions in sarge. unstable upload will happen as soon as t-p-u is in
+ working condition.
+ * New upstream version. (am) (Closes: #274246, #267994)
+ - no more unescaped hyphens in exim.8. (Closes: #262592)
+ - no more warnings in exipick.8 (Closes: #277817)
+ - New option tls_on_connect_ports. (Closes: #265818)
+ - better documentation about differences in configuring for GnuTLS or
+ OpenSSL. (Closes: #241725)
+ - verify = header_sender now respects callout options. (Closes: #260114)
+ - There is now an overall timeout for performing a callout verification.
+ (Closes: #261511)
+ - Less typos in filter.txt. (Closes: #230545)
+ - New ACL: acl_smtp_predata, useful for greylisting. (Closes: #237947)
+ * exiscan patch 4.43-28 (mh)
+ * Use statvsf() instead of statfs(), fixing complete breakage on
+ alpha/ReiserFS (Closes: #280213). Thanks to John Goerzen for finding and
+ debugging this. (am)
+ * Use getconf LFS_CFLAGS instead of hardcoding -D_FILE_OFFSET_BITS=64 to
+ prevent similar bugs. (am)
+ * Translation updates:
+ - tr (Turkish) by Recai Oktas (#281840) (am)
+ * add lintian and linda overrides to get rid of warnings and errors. (mh)
+ * delete debian/files from config-custom, make config-custom's
+ debian/rules delete debian/files on clean. (mh)
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de> Sun, 21 Nov 2004 19:26:11 +0000
+
+exim4 (4.34-10) unstable; urgency=high
+
+ * urgency high because this upload fixes two minor security issues.
+ * more documentation for dc_localdelivery in update-exim4.conf.8.
+ * Move slightly more expensive tests in rcpt ACL further down. (This only
+ changes commented out example code.) (Closes: #267708)
+ * Fix 62_statvfs to work with older versions of dpatch. (Closes: #286302)
+ * Version dpatch build-dependency to safeguard against reintroducing this
+ bug.
+ * In comment point out that using saslauthd for SMTP AUTH requires giving
+ exim privileges to use it.
+ * New patch 66_can2005-0021_can2005-0022.dpatch from
+ http://www.exim.org/mail-archives/exim-users/Week-of-Mon-20050103/msg00028.html
+ fixing two buffer overflows labeled CAN-2005-0021 and CAN-2005-0022
+ (mh/am).
+
+ -- Andreas Metzler <ametzler@debian.org> Wed, 5 Jan 2005 10:39:03 +0100
+
+exim4 (4.34-9) unstable; urgency=low
+
+ * Translation updates:
+ - he (Hebrew) by Lior Kaplan (am) (Closes: #281249)
+ * cy (Welsh) translation of debconf templates by Dafydd Harries.
+ (am) (Closes: #282731)
+ * sq (Albanian) translation of debconf templates by Elian Myftiu. (am)
+ (Closes: #284529)
+ * new patch 64_pipeliningfixup pulled from 4.42. Exim was forgetting that it
+ had advertised PIPELINING for the second and subsequent messages on an
+ SMTP connection. Thanks to Christoph Barbian. (am) (Closes: #283230)
+ * allow arbitrary Sender: and envelope headers in locally submitted
+ messages, no longer force them to be the local account name at the
+ local host name. (mh)
+ * delete /var/spool/exim4/gnutls-params in cron.daily. (mh).
+ * remove outdated info from README.SMTP-AUTH and clarify corresponding
+ comments in configuration file (Closes: #283568) (am).
+ * Add an example for AUTH LOGIN using saslauthd. (Closes: #276450) (am).
+ * exim4-base.cron.daily: Use find | xargs -0r (Closes: #279205) (am).
+ * run debian/rules update-mtaconflicts
+ * Document /etc/email-addresses in README.Debian (Closes: #276958) (am).
+ * exim_tidydb did not work properly with split spool directory. (am)
+ * Make the prefered local transport (maildir/mailspool) configurable in
+ update-exim4.conf.conf, attacking #250980. Document this, therefore
+ (Closes: #274597) (am)
+
+ -- Andreas Metzler <ametzler@debian.org> Tue, 7 Dec 2004 12:40:49 +0100
+
+exim4 (4.34-8) unstable; urgency=medium
+
+ * The real-life-takes-its-toll-release.
+ * Use statvsf() instead of statfs(), fixing complete breakage on
+ alpha/ReiserFS (Closes: #280213). Thanks to John Goerzen for finding and
+ debugging this.
+ * Use getconf LFS_CFLAGS instead of hardcoding -D_FILE_OFFSET_BITS=64 to
+ prevent similar bugs.
+ * Translation updates:
+ - tr (Turkish) by Recai Oktas (Closes: #281840)
+ * new patch 63_nomorecrashongnutlserror pulled from 4.40: "If a server
+ dropped the connection unexpectedly when an Exim client was using GnuTLS
+ and trying to read a response, the client delivery process crashed while
+ trying to generate an error log message." (Closes: #280647)
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 20 Nov 2004 10:52:18 +0100
+
+exim4 (4.34-7) unstable; urgency=low
+
+ * Update README.Debian.UUCP (thanks, Andreas Barth) (Closes: #271179)
+ * The hack to fix the infinite debconf loop on woody (#246742) broke
+ dpkg-reconfigure. Add an additional [ "reconfigure" != "$1" ] condition to
+ the abort clause. (Closes: #271864) (am)
+ * apply patch fixing Italian debconf translation by Danilo
+ Piazzalunga. (mh) (Closes: #274398)
+ * ro (Romanian) translation of debconf templates by Eddy Petrisor.
+ (mh) (Closes: #275414)
+ * sl (Slovenian) translation of debconf templates by Jure Cuhalev.
+ (mh) (Closes: #275090)
+ * uk (Ukrainian) translation of debconf templates by Eugeniy
+ Meshcheryakov. (mh) (Closes: #273505)
+ * mk (Macedonian) translation of debconf templates by Georgi
+ Stanojevski. (mh) (Closes: #275772)
+ * fix encoding problem in hu.po. Thanks to Christian Perrier. (mh)
+ * Hebrew translation updated. Closes: #277682 (Lior Kaplan)
+ * Norwegian Nynorsk translation fixed (commas removed and replaced by
+ dashes). Closes: #278011 (Christian Perrier)
+ * Fix commas in Macedonian, Polish, Russian translations which broke the
+ Choices list the same way they were in Norwegian Nynorsk (Christian
+ Perrier)
+ * Fix error in README.SMTP-AUTH, thanks Jari Aalto. (Closes: #276448) (am)
+ * Make update-exim4.conf more forgiving, working with files that are missing
+ the final newline. (Closes: #273279) (am)
+ * Use procmail for delivery if /either/ etc/procmailrc or ~/.procmailrc
+ exist. (Closes: #267706) (am)
+ * Shorten overlong template in Catalan (Closes: #277686) (Jordi Mallach) and
+ Brazilian translation (Closes: #278016) (Andre Luis Lopes)
+
+ -- Andreas Metzler <ametzler@debian.org> Sun, 7 Nov 2004 19:56:01 +0100
+
+exim4 (4.34-6) unstable; urgency=low
+
+ * Uploaded to test changes before we break tpu.
+ * zh_TW translation of debconf templates by Tetralet. (Closes: #267524)
+ * bg (Bulgarian) translation of debconf templates by Ognyan Kulev
+ (Closes: #267603)
+ * updated translations:
+ - nl (Dutch) by Bart Cornelis. (Closes: #268168)
+ * remove osirusoft from dnsbl examples. Thanks to Greg Kochanski for
+ noticing. Add dnsbl disclaimer. (mh) (Closes: #269501)
+ * add an example for exim-adduser. (Thanks to Jonas Meurer for the initial
+ idea, the commited version is different, though.) (mh/am) (Closes: #267792)
+ * hr (Croatian) translation of debconf templates by Krunoslav Gernhard
+ (Closes: #270578)
+ * Do not remove the Debian-exim user in "exim4-config.postrm purge".
+ Package dependencies are only effective for packages in status installed,
+ but it is clearly not sane to remove the user until all exim4-packages
+ are purged. e.g. this can completely break logrotate (Closes: #270681).
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 11 Sep 2004 10:29:26 +0200
+
+exim4 (4.34-5) unstable; urgency=low
+
+ * The let's test the changes before we upload to tpu release.
+ * updated translations:
+ - eu (Basque) by Piarres Beobide Egaña. (Closes: #261912)
+ - ca (Catalan) by Jordi Mallach. (Closes: #264842)
+ * Fix broken permissions (not readable for group/other) in upstream tarball
+ in clean target (thanks to Steve Langasek for help with find). This fixes
+ "dpkg-buildpackage -rsudo && dpkg-buildpackage -rsudo". (Closes: #262607)
+ * Stop daemon in "exim4-base.postrm remove". - Under specific circumstances
+ apt seems to purge -base before removing the depending package (-daemon),
+ therefore the daemon would not be stopped. (Closes: #261994)
+ * Build against libgnutls11-dev. (Closes: #263665)
+
+ -- Andreas Metzler <ametzler@debian.org> Wed, 11 Aug 2004 09:17:35 +0200
+
+exim4 (4.34-4) unstable; urgency=high
+
+ * Urgency high because upgrades from woody were broken.
+ * Exim4 triggers a bug in woody's debconf. - With dialog frontend, invoked
+ by dpkg-preconfigure you are stuck in a loop, always being asked the same
+ two questions (split config, and basic configtype) again and again until
+ you give up and choose split_config=yes although being discouraged from
+ doing so. I am working around this by making the config-script abort if
+ debconf is old and we are running in preconfigure mode. (Thanks to Dan
+ Weber, Adrian Bunk and whoever else wasted brainpower on this.)
+ (Closes: #246742) (am).
+ * Arabic (ar.po) translation of debconf templates by the translation team
+ of Arabeyes.org (Abdulaziz Al-Arfaj). (Closes: #261014)
+ * Change maintainer address to a mailinglist, add myself to uploaders (am)
+ * Quote ${dc_mailname} in exim4-config.config. (am)
+ * Fix grammar error in the original English templates (found by Adam D.
+ Barratt ages ago). Duplicate fix in .po files.(am)
+ * Typo/thinko in exim4-config (two 35-clauses) prevented showing a
+ (unimportant) question for satellite config. Thanks to Fabio Massimo Di
+ Nitto for finding this.
+
+ -- Andreas Metzler <ametzler@debian.org> Tue, 27 Jul 2004 16:38:54 +0200
+
+exim4 (4.34-3) unstable; urgency=low
+
+ * updated translations:
+ - es (Spanish) by Javier Fernández-Sanguino Peña (Closes: #251987). Also
+ shorten overlong string. (Closes: #251316)
+ - tr (Turkish) by Recai Oktas, fixing overlong translations.
+ (Closes: #251932)
+ - de (German) corrected and scrutinized by Helge Kreutzmann.
+ (Closes: #254038)
+ - ru (Russian), too long templates shortened by Dmitry Beloglazov.
+ (Assuming I read Last-Translator correctly) (Closes: #259148)
+ * Hebrew (he.po) translation of debconf templates by Lior Kaplan.
+ (Closes: #254026, #257508)
+ * introduce .ifndef hacks to allow MESSAGE_SIZE_LIMIT, DCreadhost
+ and DCsmarthost to be changed by the local admin without having to
+ change dpkg-conffiles (mh).
+ * Use byname on the smarthost route list (mh). (Closes: #250367)
+ * Make build-dependency on libldap2-dev unversioned. This was just a paranoia
+ measure and the buildds are using this version anyway (am).
+ * escape some dashes in manpages (am).
+ * Replace the three test -a/-o with &&/|| constructs, and egrep with grep
+ -E (am).
+ * Use symbolic name instead of signal numbers for trap (am).
+ * Add explanation on missing SPF-support to README.Debian (am).
+ * remove MESSAGE_SIZE_LIMIT rule from DATA acl, use global
+ message_size_limit instead. Thanks to Matthias Gärtner for pointing
+ this out to me (mh).
+ * Increase MAX_NAMED_LIST to 32 for daemon-heavy (am). (Closes: #253959)
+ * add a reportbug-script to gather additional information. This way we do
+ not rely on possibly out of date information in debconf (am).
+ (Closes: #255645)
+ * Fix off-by-one error in queryprogram router (am).
+ * set "tls_tempfail_tryclear = false" on remote_smtp_smarthost transport
+ (am, Thanks to Dan Jacobson for the suggestion). (Closes: #253931)
+
+ -- Andreas Metzler <ametzler@debian.org> Mon, 19 Jul 2004 15:16:28 +0200
+
+exim4 (4.34-2) unstable; urgency=medium
+
+ * Urgency medium because CAN-2004-0400 isstill not fixed in testing and
+ because this version gets almost every single translation up to date.
+ * Norwegian nynorsk translation of debconf templates by Håvard Korsvoll.
+ (Closes: #248810)
+ * fix debug_print in remote_smtp_smarthost transport. (Closes: #248922)
+ * For minimal_dns update-exim4.conf(8) now tries to find out the primary
+ hostname itself and hardcodes this value in the generated configuration
+ file. (Closes: #241475,#248854)
+ * updated translations:
+ - ko (Korean) by Changwoo Ryu (Closes: #249026)
+ - it (Italian) by Danilo Piazzalunga
+ - lt (Lithuanian) by Gintautas Miliauskas (Closes: #249269)
+ - ru (Russian) by Nikolai Prokoschenko (Closes: #249298)
+ - es (Spanish) by Javier Fernández-Sanguino Peña
+ - nl (Dutch) by Bart Cornelis
+ - de (German) doublechecked and corrected by Dennis Stampfer
+ (Closes: #249925)
+ - fi (Finnish) by Tapio Lehtonen
+ - nb (Norwegian bokmål) by Klaus Ade Johnstad (Closes: #250344)
+ * New bugfix by upstream: "drop" in the DATA acl did not send 550 but dropped
+ the connection immediately.
+ * add a debian/watch file.
+ * Catalan (ca.po) translation of debconf templates by Aleix Badia i Bosch.
+ (Closes: #250113)
+ * Polish (pl.po) translation of debconf templates by Tomasz Z. Napierala.
+ (Closes: #250908)
+ * Rudimentary (5/58) Bosnian debconf templates translation by Safir
+ Šećerović (Closes: #251137)
+ * Document why exim tries to make an AAAA lookup at startup and how to stop
+ this in README.Debian. (Closes: #243822)
+ * Compile with -fno-strict-aliasing. Exim uses lots of casts that are not
+ allowed: "(char **)(&foo)" where foo is a pointer to unsigned char
+ (sourcecode: CSS(foo) with foo being a uchar), which results in lots of
+ "dereferencing type-punned pointer will break strict-aliasing rules".
+ Thanks to Andrew Suffield for the explanation.
+ * exim4-config uses features introduced in 4.33 - conflict with earlier
+ versions. (Closes: #249550)
+
+ -- Andreas Metzler <ametzler@debian.org> Mon, 31 May 2004 10:31:51 +0200
+
+exim4 (4.34-1) unstable; urgency=low
+
+ * remove cruft from source
+ * New upstream version 4.34, exiscan -21
+ * includes fix for buffer overflow (CAN-2004-0400) fixed in previous
+ upload
+ * Again adds a received header before local_scan() is invoked.
+ * Adds a missing fclose() that was causing scan directories not
+ to be deleted on NFS spools.
+ * add debug_print statements on various routers (mh)
+ * add docs to smarthost router regarding secondary MX setup (see
+ #248370) (mh)
+ * don't ask any more for relay_to_domains if configuring for
+ smarthost and satellite setup. (Closes: #248370) (am)
+ * straighten out remote_smtp transport by adding remote_smtp_smarthost
+ and using that in the smarthost router. (mh)
+ * add hubbed_hosts router for more flexible routing. (mh)
+ * add update-exim4.conf.template and use it in debian/rules (Closes:
+ #248338). (mh)
+ * remove debian/patches/60_upstream_fixes as the fix is already
+ included upstream now. (mh)
+ * add README.Debian-accountname (mh)
+ * updated translations:
+ - zh_CN (Simplified Chinese) by Carlos Z.F. Liu (Closes: #248464). (mh)
+ * Temporarily add a Build-Conflicts with libperl-dev 5.8.4-1. - This version
+ included a dyna-loader incompatible with programs linked against 5.8.3.(am)
+
+ -- Andreas Metzler <ametzler@debian.org> Wed, 12 May 2004 22:30:19 +0200
+
+exim4 (4.33-1) unstable; urgency=low
+
+ * new upstream version 4.33, exiscan -20:
+ - includes the patches for rewriting and sighandler.
+ - new expansion conditions to e.g. match a domain in named domainlist.
+ * updated translations:
+ - fr (French) by Christian Perrier (Closes: #245342)
+ - el (Greek) by Konstantinos Margaritis.
+ * Document known configuration variables in update-exim4.conf(8).
+ * Make use of ${if match_domain to get rid of the ugly hack (two transports
+ and two routers) to rewrite the envelope from.
+ * Apply fix for verify=header_syntax buffer overflow (CAN-2004-0400).
+
+ -- Andreas Metzler <ametzler@debian.org> Thu, 6 May 2004 18:17:05 +0200
+
+exim4 (4.32-2) unstable; urgency=low
+
+ * updated translations:
+ - pt (Portuguese) by Nuno Sénica. (Closes: #244296,#245694)
+ - el (Greek) by Konstantinos Margaritis (Closes: #244354)
+ - cs (Czech) by Miroslav Kure (Closes: #244368)
+ - da (Danish) by Claus Hindsgaul (Closes: #244508)
+ - it (Italian) by Danilo Piazzalunga (Closes: #245174)
+ - fr (French) by eric-m(at)wanadoo.fr (Closes: #245342) and Christian
+ Perrier
+ - ja (Japanese) by Kenshi Muto (Closes: #245430)
+ - hu (Hungarian) by VEROK Istvan
+ - nb (Norwegian Bokmål) by Steinar H. Gunderson
+ - pt_BR (Brazilian Portuguese) by André Luís Lopes
+ - ja (Japanese) by Kenshi Muto
+ - cs (Czech) by Miroslav Kure
+ - sv (Swedish) by André Dahlqvist (Closes: #245716)
+ * Basque (eu.po) translation of debconf templates by Piarres Beobide Egaña.
+ (Closes: #244401)
+ * Indonesian (id.po) translation of debconf templates by I Gede Wijaya S.
+ (Closes: #245120), updated (Closes: #245491)
+ * Turkish (tr.po) translation of debconf templates by Recai Oktas.
+ (Closes: #245751)
+ * Slovak translation of debconf templates by Peter Mann (Closes: #245809)
+ * Add comment in configuration file documenting that effective retry times
+ depend on _both_ retry-rules and frequency of queue running. Keep
+ default QUEUEINTERVAL at 30m because running the queue can be quite
+ expensive and because therespective RFCs suggest 30m as minimal waiting
+ time. (Closes: #242426)
+ * Installation over serial console/minicom only has a screen size of 80
+ characters x 24 lines available. Sigh. Shorten config-type question by
+ cutting down the introduction. (Closes: #244464). Shorten relay-net
+ question by replacing a unnecessarily complicated formulation with a
+ clearer one which closes: #226809.
+ * Debconf supports masquerading as a different host with rewriting not only
+ for "satellite" but also for "smarthost" system. (Closes: #229911).
+ - Introduces another but hopefully last pre-sarge template change.
+ (This includes final versions of the templates without the dead
+ references to "satellite" which closes: #229902.)
+ - Rewrite /this/ stuff at smtp transport time. /etc/email-addresses
+ rewriting still uses normal rewriting because it always has and because
+ it is easier to setup.
+ - This still does not address one basic issue, the misuse of /etc/mailname
+ for qualifying recipeints because this needs clarification in policy
+ _and_ changing MUAs to not do this. Therefore I declare this post-sarge.
+ - Thanks to Chris Cheney for the kick, and to Adam Conrad and Wouter
+ Verhelst for their help.
+ * Add two fixes from upstream:
+ - Change 4.31/55 was buggy and broke sender address rewriting and caching.
+ - Change 4.24/6 broke the SIGALRM handler with deliver_drop_privilege.
+ * README.TLS.gz and the actual configuration disagreed (Thanks, Richard
+ Lamont).
+ * Fix thinko in update-exim4defaults that made --queuetime a no-op.
+
+ -- Andreas Metzler <ametzler@debian.org> Mon, 26 Apr 2004 09:12:23 +0200
+
+exim4 (4.32-1) unstable; urgency=low
+
+ * New upstream version 4.32 (exiscan 4.32-17)
+ - includes the fix for the caching bug and uses MAIL FROM <> as default
+ value for recipient callouts again.
+ - new exiscan adds a local "Received:" header to the copy passed to
+ spamassassin tofix evaluation of DNS lists, compensating for
+ ChangeLog 4.31/66. (Closes: #242730)
+ * Remove obsolete reference to auth_over_tls_hosts from documentation.
+ (Thanks Jonas Meurer)
+ * Enable SMTP authentication (hosts_try_auth) per default when sending
+ mail to smarthost. No need to edit the configuration-file anymore if you
+ just need to forward all mail to a smarthost with AUTH. (Closes: #203307)
+ * Hungarian translation of debconf templates by VEROK Istvan.
+ (Closes: #242931)
+ * remove "exim 3 will stay default MTA for Debian sarge" from
+ README.Debian as TPTB have decided otherwise. (Closes: #243687).
+ * Rewrite "Sender:"-header for "satellite" configuration profile, too.
+ (Closes: #228978)
+ * Use the normal user account set-up during installation as default
+ destination for delivery of mail for root. (Joey Hess)
+ * Shorten exim4/dc_postmaster template to fit on console. (Joey Hess)
+ (Closes: #242303)
+ * In template suggest using real-foo to force local delivery.
+ (Closes: #229909)
+ * Template changes reviewed by debian-l10n-english. There might still be
+ more changes, translators should probably wait a little bit longer before
+ updating the translation.
+ * On fresh installations smarthost profile only listens on loopback per
+ default. - There are valid uses of "smarthost" that require listening on
+ public interfaces but the most common one (dialup) does not.
+ * Ship README.Debian.UUCP by Andreas Barth in /usr/share/doc/exim4-base. -
+ This resolves our part of #201153.
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 17 Apr 2004 18:02:42 +0200
+
+exim4 (4.31-2) unstable; urgency=low
+
+ * Fix caching bug in recipient callouts. (Nico Erfurth).
+ * Document removal of local_scan perl-plugin in NEWS.Debian file.
+ (Closes: #242227)
+
+ -- Andreas Metzler <ametzler@debian.org> Mon, 5 Apr 2004 15:55:12 +0200
+
+exim4 (4.31-1) unstable; urgency=low
+
+ * New upstream version 4.31 (exiscan 4.31-16)
+ - Supports CRL (Certificate Revocation List) (Closes: #229063)
+ - exim_dbmbuild does not crash on _very_ long RHS values.
+ (Closes: #231597)
++ - route_list does not use a fixed length buffer anymore. (Closes: #231979)
+ - An empty tls_verify_certificates file is correctly interpreted as empty
+ list instead of breaking TLS. (Closes: #236478)
+ * Korean translation of debconf templates by Changwoo Ryu (Closes: #241499)
+ * Minor changes to rcpt_acl:
+ * add missing message = qualifiers. (Closes: #240862)
+ * resync against upstream default, incorporating change 4.23/30, allowing
+ "/" and "|" in nonlocal addresses.
+
+ -- Andreas Metzler <ametzler@debian.org> Mon, 5 Apr 2004 12:00:54 +0200
+
+exim4 (4.30-8) unstable; urgency=low
+
+ * remove dc_never_users from /etc/exim4/u-ex.conf.conf and the corresponding
+ pattern DEBCONFnever_usersDEBCONF from the template. The code is
+ superfluous since 4.24 introduced FIXED_NEVER_USERS and was broken, user
+ changes were not preserved. (am)
+ * Link against libmysqlclient10 instead of libmysqlclient12 to circumvent
+ symbol-clashes when using PAM with libpam-mysql. (Closes: #235938) (am)
+ * Dump temporary build-conflict with broken po-debconf. (am)
+ * Copy ugly passwd-dependency from -base to -config. (am)
+ * Do not throw away adduser's errormessages. Together with the added
+ dependency noted above this (Closes: #237657). (am)
+ * Installed copy of default configuration-file (example.conf) refered to the
+ temporary install-directory. Ugly hotfix. (Closes: #236483)
+ * Italian translation of debconf templates by Danilo Piazzalunga.
+ (Closes: #237500)
+ * Rewrite generation of /etc/aliases because it was broken when running
+ under debbian-installer/debootstrap, which installs the packages with
+ DEBIAN_FRONTEND=nointeractive and reconfigures them later (report by
+ Florian Effenberger). (am)
+ Instead of generating it _once_ and touching it never again ask for and
+ add alias for root if it is missing. Debconf template
+ exim4/dc_noalias_regenerate is not used any more. (Closes: #237524)
+ * Norwegian Bokmål translation of debconf templates by Steinar H. Gunderson.
+ (Closes: #237680)
+ * Dump local_scan perl-plugin. Upstream development has stopped. (am)
+ * Maintainer scripts now run with -x if environment variable EX4DEBUG
+ is set (mh).
+ * Minor clarifications of debian/README (mh).
+ * rm -rf Local on debian/rules clean (mh).
+ * Swedish translation of debconf templates by André Dahlqvist.
+ (Closes: #238987)
+ * Portuguese (pt) translation of debconf templates by Nuno Sénica.
+ (Closes: #239030)
+ * Lithuanian translation of debconf templates by Kęstutis Biliūnas.
+ (Closes: #239118)
+ * Add examples for client certificate-checking by J.H.M. Dassen (Ray)
+ (Closes: #236609)
+ * Adapt README.* to /etc/exim4/exim4.conf.template (am)
+ * Update to exiscan v16
+
+ -- Andreas Metzler <ametzler@debian.org> Wed, 24 Mar 2004 15:39:35 +0100
+
+exim4 (4.30-7) unstable; urgency=low
+
+ * 4.30-6 was rejected, we use | and || for OR in dependency fields.
+ * libldap2 now uses GnuTLS10. Follow suit. (Temporarily bumped libldap2-dev
+ build-dependencies for paranoia's sake.)
+
+ -- Andreas Metzler <ametzler@debian.org> Mon, 23 Feb 2004 17:03:58 +0100
+
+exim4 (4.30-6) unstable; urgency=low
+
+ * Finnish translation of debconf templates by Tapio Lehtonen.
+ (Closes: #229792)
+ * Simplified Chinese translation of debconf templates by Carlos Z.F. Liu.
+ (Closes: #229910)
+ * Spanish translation of debconf templates by Javi Castelo. (Closes: #232207)
+ * To increase robustness set explicit "domains = +local_domains" on all the
+ routers that are supposed to be handling _only_ local mail (i.e. anything
+ after dnslookup or smarthost) instead of relying on the no_more.
+
+ If the router handling remote addresses was modified by adding a
+ precondition the address would have wrongly been handled by the later
+ routers if the precondition failed, breaking at least "verify = sender".
+ (Closes: #230403) (am)
+ * In the data ACL add a Message-ID header to mails injected with SMTP from
+ +relay_from_hosts. (Exim stopped doing this by default in 4.30.) (mh)
+ * binary-all metapackage exim4 does not depend anymore on exim4-base with
+ exactly the same version. There is no necessity for dependencies that
+ strict and it broke both binary NMUs and installability on lagging
+ architectures. (Closes: #231678) (am)
+ * Give way to the "I use sid but keep it outdated by not running apt-get
+ upgrade ever."-fraction. exim4-base now depends on working versions of
+ passwd i.e. the version in woody or the one that has been in sid
+ for more than 6 months. (Closes: #230423,#230836,#231111) (am)
+ * in source-package symlink identical maintainerscripts. (am/mh)
+ * Ship README.Debian.xinetd, explaning why we do not use (x)inetd and how to
+ use xinetd properly if you insist. (Closes: #226627)
+ * Update Build-Depencies to fit the XFree86 4.3 packages.
+ * Make new lintian happy by quoting section and needs in eximon's
+ menu-file.
+
+ -- Andreas Metzler <ametzler@debian.org> Mon, 23 Feb 2004 15:48:56 +0100
+
+exim4 (4.30-5) unstable; urgency=low
+
+ * Only use db_settitle if available (Closes: #226992) (am)
+ * Up to date debconf translations for all nine supported languages, thanks
+ to the translators: Miroslav Kure (Czech), Claus Hindsgaul (Danish),
+ Konstantinos Margaritis (Greek), Christian Perrier (French),
+ Kenshi Muto (Japanese), Bart Cornelis (Dutch), André Luís Lopes
+ (Brazilian Portuguese) and Ilgiz Kalmetev (Russian) (am)
+ * After merging translations split the configtype-template, using the
+ __Choices trick. I don't think I made any errors because podebconf's
+ output has not changed. (am)
+ * Don't use /etc/mailname (DEBCONFvisiblenameDEBCONF) as primary_hostname
+ for minimaldns option. (Closes: #225477)
+ * (Re)introduce /etc/exim4/exim4.conf.template as alternative to the
+ multiple small files in /etc/exim4/conf.d/ and make it the default choice
+ for fresh installations. This trades in a loss of comfort (you will again
+ need to merge in each small change manually) for increased stability.
+ (Closes: #224828) (am)
+ * Disable piping to programs in /etc/aliases per default, because they would
+ run as Debian-exim:Debian-exim per default. Add README.system_aliases
+ suggesting dedicated router/transport pairs (am/mh) (Closes: #228062)
+ * modify create-custom-package and adapt debian/rules to allow
+ building multiple named custom packages in a single build. (mh)
+ * "dpkg-reconfigure exim4-config" actually tells exim4 to read the updated
+ configuration. (am)
+ * Use -qqf instead of -qf in the ip-up.d file to force delivery of all
+ messages over a single SMTP connection. (Closes: #228001)
+
+ -- Andreas Metzler <ametzler@debian.org> Wed, 21 Jan 2004 15:09:00 +0100
+
+exim4 (4.30-4) unstable; urgency=low
+
+ * Updated Japanese debconf template translation by Kenshi Muto
+ (Closes: #224584)
+ * Remove bashism from update-exim4.conf (Closes: #224617) (Jochen Voss)
+ * Czech translation of debconf templates by Miroslav Kure (Closes: #225713)
+ * Fix typos in README.Debian. (Closes: #225149) (Vincent Lefevre)
+ * Replace first, too long debconf question with three short ones (Joey
+ Hess) (Closes: #222720)
+ * Use a custom debconf title. (Closes: #222715)
+ * Greek translation of debconf templates by Konstantinos Margaritis
+ (Closes: #226844)
+
+ -- Andreas Metzler <ametzler@debian.org> Fri, 9 Jan 2004 09:12:07 +0100
+
+exim4 (4.30-3) unstable; urgency=low
+
+ * update debian/copyright from NOTICE. (No substantial changes, credits
+ for new code) (am)
+ * missing \| made exim4-base.postinst configure hang. (Closes: #224294) (am)
+ * update-exim4.conf: Don't try chown if not running as root. (mh)
+ * Remove useless definition of an auth_over_tls_hosts hostlist in
+ 03_exim4-config_tlsoptions. - It was probably a leftover from somebody
+ running convert4r4. (am)
+ * Make it possible to override spooldir in another config-file snippet, too.
+ (Closes: #223973)
+
+ -- Andreas Metzler <ametzler@debian.org> Fri, 19 Dec 2003 15:27:50 +0100
+
+exim4 (4.30-2) unstable; urgency=low
+
+ * Fix exim4-base.logrotate to create logfiles accessible for the new
+ exim-user. (Closes: #223860,#223862)
+ * comment in 03_exim4-config_tlsoptions refered to the user "mail" too.
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 13 Dec 2003 15:01:20 +0100
+
+exim4 (4.30-1) unstable; urgency=low
+
+ * Exim now runs under its own uid (Debian-exim) instead of using
+ mail:mail. (am)
+
+ WARNING: You cannot downgrade this version to an older one without
+ manual chown|chgrp all files owned by Debian-exim to mail.
+
+ - control: dependency on adduser and virtual package exim4-config-2 to
+ force review of external -config packages.
+ - use a statoverride for passwd.client.
+ - different postinst scripts:
+ * adduser.
+ * chown|chgrp files/directories owned by mail (group|user) to
+ Debian-exim.
+ * update-exim4.conf does not exit immidiately if /etc/exim4/exim4.conf
+ exists AND -o is specified. (Bill Moseley)
+ * Brazilian Portuguese debconf template translation by André Luís Lopes
+ (Closes: #219781)
+ * Dutch debconf template translation by Bart Cornelis (cobaco)
+ (Closes: #220694)
+ * Pull Dansk debconf template translation from ddtp.
+ * Use a macro to make it possible to overide the value of spool_directory
+ with -DSPOOLDIR=. Needed for mailscanner, (Closes: #221468), suggested by
+ Matthias Klose.
+ * enable support for Cyrus saslauthd (package sasl2-bin,
+ /var/run/saslauthd/mux) for SMTP AUTH against /etc/shadow. (am)
+ * Christian Perrier has reviewed the debconf-templates and changed them to
+ follow the "Debconf Templates Style Guide". (Closes: #221838) Thanks to
+ the (ru|nl|fr|pt_BR) translators for updating their translations.
+ * New upstream version 4.30 with exiscan 4.30-14 (am)
+ - option table for -d in exim(8) readable (but not perfect).
+ (Closes: #214853)
+ - Messages for configuration errors now include the name of the main
+ configuration files (Closes: #202136)
+ - does not reject IPv6 address literals in EHLO/HELO anymore
+ (Closes: #222521)
+ * exim4-config.config: support going back to previous *package* when invoked
+ by base-config 2.0. (Closes: #222773). Suggested by Joey Hess. (am)
+ * exim4-config now conflicts with non-exim4 packages providing MTA, to keep
+ dselect from automatically installing it (and -base) on dist-upgrades on
+ systems that use a different MTA. (mh)
+ * exim4-base depends on netbase again because exim requires
+ /etc/services.(mh)
+ * reindent init-script with two spaces instead of tabs to fit it in 80
+ chars/line. (Closes: #221458)
+
+ -- Andreas Metzler <ametzler@debian.org> Mon, 8 Dec 2003 16:52:32 +0100
+
+exim4 (4.24-3) unstable; urgency=low
+
+ * rename create-custom-package to create-custom-config-package (mh)
+ * add create-custom-package to create renamed exim4-daemon-custom (mh)
+ * README.TLS: Don't suggest to use commands messing up the local terminal
+ (Sander Smeenk)
+ * Pull Dansk debconf translation from ddtp (not yet up to date)
+ * correct last references to uncompressed /u/s/d/e/README.Debian
+ (Closes: #216639), also kill references to exim-tls. (Closes: #216979)
+ (Kevin "Starfox" Arima). (am)
+ * add exim4-config-medium template package to sources, document (mh)
+ * Update to exiscan 4.24-13 (bugfix-release).
+ * Ask about mailname after configtype. (Closes: #217931) (am)
+ * minor thinko in debconf "local mail only"-config. (am)
+ * update-exim4.conf: now add comment indicating the source file
+ (Closes: #202040) (mh)
+ * add --confdir option to update-exim4.conf (mh)
+ * add "nodaemon" and "queueonly" option to /etc/default/exim4 and
+ init script (mh).
+ * Fix po2debconf on woody systems with old debhelper and po2debconf. (am)
+ * exim4-config does not depend on exim4-base. (am)
+ * Use "command -v" to check for existence of invoke-rc.d instead of
+ hardcoding its path. (am)
+ * Russian debconf translation by Ilgiz Kalmetev (Closes: #219101)
+
+ -- Andreas Metzler <ametzler@debian.org> Tue, 4 Nov 2003 12:18:38 +0100
+
+exim4 (4.24-2) unstable; urgency=low
+
+ * Grammar of debconf-templates rectified by Ben Foley.
+ * Handholded by Denis Barbier I have imported debconf translations from
+ postfix: fr.po (Philippe Batailler), ja.po (Kenshi Muto), nl.po (Bart
+ Cornelis) and pt_BR.po (André Luís Lopes). It is just 5 translated
+ messages, 4 fuzzy translations, but it's a start.
+ * No more first person in debconf-templates (Adam D. Barratt)
+ * README.TLS was updated.
+ * pseudopackage libxaw-dev is gone in sid (and libxaw7-dev is already
+ available in woody) - Removed from build-depends.
+ * French debconf translation by Christian Perrier (Thanks for the other
+ hints, too.)
+ * Build-Conflict with broken po-debconf (= 0.8.0). (Closes: #215432)
+ * Add menu-entry for eximon (Artur R. Czechowski) (Closes: #215579).
+ * Resolve name-clash between client- and server-side authenticators (Bug
+ found by Rob Ristroph)
+
+ -- Andreas Metzler <ametzler@debian.org> Wed, 15 Oct 2003 12:45:49 +0200
+
+exim4 (4.24-1) unstable; urgency=low
+
+ * New upstream version
+ - 55_fixesfrom-4.23.dpatch is not needed anymore.
+ - most interesting new feature: $acl_xx are now saved with the
+ message, and can be accessed later in routers, transports, and filters.
+ - Cannot run deliveries as root anymore. If you don't redirect mail for
+ root via /etc/aliases or other means to a nonpriviledged account the
+ mail will be delivered to /var/mail/mail with permissions 0600 and owner
+ mail:mail. Change to local_user router to keep it from trying to route
+ mail for root.
+ * debconf for exim4-config pointed to /u/s/d/e/README.Debian but the
+ file is available as README.Debian.gz (Closes: #211934)
+ * exim(8) manpage provides correct NAME section for mailq/runq/... to
+ generate corresponding whatis/apropos info (Thanks to Dan Jacobson
+ <jidanni@jidanni.org> for mentioning lexgrog(1))
+ * polish and crosslink documentation about SMTP AUTH in config-files,
+ documentation and debconf templates. (Closes: #202920)
+ * Ship README.SIEVE (Thanks to Ross Boylan)
+ * Sync some debconf templates against the respective ones in postfix
+ 2.0.16, to limit the work of translators.
+ * update-exim4defaults/init-script: Add a new value fuer QUEUERUNNER,
+ "ppp". - Don't run queue by daemon but still run it from
+ /etc/ppp/ip-up.d/exim4. (Dan Jacobson pointed out that this was very
+ akward to accomplish with old setup.) update-exim4defaults now exits with
+ an error if the argument for --queuerunner is invalid.
+ * Enable gettext-style localisation of debconf templates with
+ compatibility code for woody
+ * Add German debconf-translation. (Some strings were copied from Martin A.
+ Godischs translation of postfix's templates).
+
+ -- Andreas Metzler <ametzler@debian.org> Sun, 5 Oct 2003 13:41:30 +0200
+
+exim4 (4.22-5) unstable; urgency=low
+
+ * Sorry, this is not 4.23. Tom is on holidays and because 4.23 changes
+ some ACL code, exiscan needs in depth checking and not just applying the
+ patch by hand.
+ * exim4-config conflicts with bash (<< 2.05), because it cannot handle
+ aliases in functions. This does not necessarily fix dist-upgrades
+ from potato to sarge because debconf-config might happen before the
+ new bash is installed but will keep people running potato from
+ trying to install exim4-config. (Closes: #209720)
+ * sanitize /usr/sbin/exim4's permissions, building with 007 umask
+ could have installed it -rws--x--x
+ * evaluation -oP option for specifying pid-file is broken in 4.22, use fix
+ from 4.23 (Closes: #210847)
+ * "warn log_message blah" in DATA acl triggered dumping of full headers
+ to reject.log, although the message was not rejected by this acl
+ statement. Take fix from 4.23. (Closes: #208782)
+ * On cross-upgrades from exim3 unfold lines continued with a backslash
+ in the old exim3 configuration before trying to parse it to preanswer the
+ debconf-questions. (Closes: #210404) First instance of using perl in our
+ maintainer-scripts, but I could not do it with sed.
+
+ -- Andreas Metzler <ametzler@debian.org> Fri, 19 Sep 2003 13:55:07 +0200
+
+exim4 (4.22-4) unstable; urgency=low
+
+ * Update to exiscan-acl revision -12. (Emergency fix: When you were using
+ 'discard', and it was the last verb affecting a message, the mbox spool
+ files in the scan directory were not cleaned up.)
+ * Add syslog2eximlog by Martin Godisch, a script to make logfiles produced
+ with exim option "log_file_path = syslog" readable for eximstats.
+ (Closes: #208524)
+ * Enhance description of -heavy and light a little bit. (Closes: #208404)
+ * Standards-Version: 3.6.1, no changes required, we already prompt with
+ debconf.
+
+ -- Andreas Metzler <ametzler@debian.org> Thu, 4 Sep 2003 19:19:25 +0200
+
+exim4 (4.22-3) unstable; urgency=low
+
+ * Add copright notice of exiscan-acl to debian/copyright.
+
+ -- Andreas Metzler <ametzler@debian.org> Wed, 27 Aug 2003 17:49:46 +0200
+
+exim4 (4.22-2) unstable; urgency=low
+
+ * Include exiscan-acl patch 4.22-10 http://duncanthrax.net/exiscan-acl/
+ in -heavy and -custom (Closes: #204698)
+ * clean up gnutls-params on purge of base-package.
+
+ -- Andreas Metzler <ametzler@debian.org> Wed, 27 Aug 2003 12:50:59 +0200
+
+exim4 (4.22-1) unstable; urgency=low
+
+ * new upstream version 4.22. Please take a look at README.UPDATING
+ and NewStuff in /usr/share/doc/exim4-base/
+
+ -- Andreas Metzler <ametzler@debian.org> Mon, 18 Aug 2003 16:51:47 +0200
+
+exim4 (4.20-5) unstable; urgency=low
+
+ * Fix EHLO/HELO buffer-overflow CAN-2003-0698 (Closes: #205716)
+ * exim-gencert was using '.' as separator for chown.
+ * "head -n 1" instead of "head -1" in scripts
+ * install /etc/exim4/passwd.client as root:mail 0640 (Closes: #205104)
+ (it needs to be readable for the exim-user or -group, i.e. mail:mail)
+ * set mode_fail_narrower = false for mail_spool and maildir_home transports
+ (Closes: #204228)
+ * Standards-Version: 3.6.0, no changes required.
+
+ -- Andreas Metzler <ametzler@debian.org> Sat, 16 Aug 2003 17:40:17 +0200
+
+exim4 (4.20-4) unstable; urgency=low
+
+ * CFILEMODE and dc_local_interfaces were not saved in update-exim4.conf.conf
+ on fresh installations.
+ * update-exim4.conf: Remove comments _after_ doing DEBCONFpatternDEBCONF
+ replacement.
+ * conf.d/auth/30_exim4-config_examples: Fix forced failure of AUTH LOGIN
+ client on non-encrypted connections.
+
+ -- Andreas Metzler <ametzler@debian.org> Tue, 5 Aug 2003 10:38:16 +0200
+
+exim4 (4.20-3) unstable; urgency=low
+
+ * hub_user router: set correct .ifdef, remove superficial condition=
+ * don't generate main/03_exim4-config_neverusers dynamically, use
+ a DEBCONF_foo pattern that is replaced by up-ex4.conf. exim4 should
+ now play nicely with readonly /etc.
+ * Enable exim-filter in .forward per default. (Closes: #201827)
+ * Enable maildrop-delivery for users with ~/.mailfilter
+ * Easier setup of client side SMTP authentification:
+ -short README file.
+ -passwd.client example shipped in CONFDIR
+ -30_exim4-config_examples:
+ +change order, prefer cram-md5.
+ +enable by default (auth-plain and -login only for TLS protected
+ connections). They remain inactive while hosts_try_auth is
+ disabled.
+ * add comments listing the filename to the files in conf.d that were
+ changed anyway. Addresses part of 202040.
+ * remove misleading comments about "bottom of file" or "see below"
+ from config-snippets. (Closes: #202165)
+ * Disable orphaned inetd-entries from exim (v3) caused by bugs #202670 and
+ #182206 in exim4-config's postinst. I'll close #201143 manually.
+ * Restructure and clarify README.Debian and polish update-exim4.conf(8).
+ Thanks to Ross Boylan for pushing me in the correct direction.
+
+ -- Andreas Metzler <ametzler@debian.org> Thu, 24 Jul 2003 10:29:19 +0200
+
+exim4 (4.20-2) unstable; urgency=low
+
+ * update-exim4.conf works without daemon-package (Closes:#195329)
+ * Add dnslookup_relay_to_domains router for "internet" config to
+ allow relaying for domains with an MX pointing to an rfc1918
+ address. (Closes: #198410) (MH)
+ * update-exim4.conf would hang if one of the subdirectories in conf.d
+ was empty. (Report and fix by Marc Merlin)
+ * Build-Depend on libgnutls7
+ * Preserve comments in update-exim4.conf.conf by first adding missing
+ items and replacing the values with sed instead of regenerating file
+ from scratch (Closes: #184099)
+ * Set return_path_add, delivery_date_add and envelope_to_add for
+ maildir-transport (Closes: #196178)
+ * Use email-addresses file in /etc/ instead of in /etc/exim4 as exim3 does,
+ exim4-config now needs to conflict with exim,exim-tls. We still include
+ code for evaluating the old file if it exist, but suggest moving the
+ contents to the new file in NEWS.Debian. postinst will remove old orphaned
+ file if it is unmodified. (Closes: #197136)
+ * Set return_fail_output instead of return_output on address_pipe transport.
+ (Closes: #201280)
+ * Stop generating rewriting rules dynamically, exim4 accepts any
+ "address-list" item as source-pattern for rewriting. (Changelog entry
+ obfuscated on purpose, read exim4debian for painful details.). Remove old
+ dynamically generated files in postinst if they were managed by upex4conf.
+ * daemon-light supports TLS (Closes: #193596)
+
+ -- Andreas Metzler <ametzler@debian.org> Wed, 16 Jul 2003 13:36:27 +0200
+
+exim4 (4.20-1) unstable; urgency=low
+
+ * New upstream
+ * Standards-version 3.5.10 (no changes required)
+ * The doc packages have got new sane names - update Suggests.
+ * Fix a endless loop (currently ownly showing when upgrading from old
+ experimental packages) - Thanks to Marc Langer for the report.
+ * introduce ${Upstream-Version} as substitution variable for
+ debian/control (MH)
+ * Make dependencies less strict, *-daemon-* 12.34-1 can be installed with
+ -base 12.34-5.
+
+ -- Andreas Metzler <ametzler@debian.org> Mon, 19 May 2003 14:14:16 +0200
+
+exim4 (4.14-1) unstable; urgency=low
+
+ * Upload to sid (Closes: #179066)
+ * Ship an (empty) acl_check_data with commented out examples. Add
+ Infrastructure to ease their activation. (MH)
+
+ -- Andreas Metzler <ametzler@debian.org> Fri, 16 May 2003 18:02:46 +0200
+
+exim4 (4.14-0.6) experimental; urgency=low
+
+ * Don't link to gnutls' (tasn,gcrypt) dependencies directly
+ (Closes: #193018)
+ * fix AUTH PLAIN server side example to work if the data is not given
+ in initial-response (exim-bug 193094)
+ * ACL-updates (MH)
+
+ -- Andreas Metzler <ametzler@debian.org> Wed, 14 May 2003 12:16:06 +0200
+
+exim4 (4.14-0.5) experimental; urgency=low
+
+ * updated version of dlopen patch (Marc Merlin)
+ * don't regenerate files managed by update-exim4.conf on package
+ updates if the local admin had deleted them.
+ * replace the listenonpublic yes/no question with one that allows one to
+ specify on which interfaces to listen to (Closes: #190498)
+ * new dc-question for dial-on-demand-users to minimize DNS lookups
+
+ -- Andreas Metzler <ametzler@debian.org> Thu, 1 May 2003 16:03:59 +0200
+
+exim4 (4.14-0.4) experimental; urgency=low
+
+ * Renamed conf.d files from *exim4-base* to *exim4-config* since
+ they can now be found in the exim4-config package.
+ WARNING, this breaks updates. After installation, execute
+ something like the following bash snipped to rename your files:
HCoop / hcoop / debian / exim4.git / commitdiff