#exim — Public Fediverse posts

RE: https://ehlo.exim.org/@bernardq/116851178355484115

This is an excellent stance:

"[Security] Reports we believe are LLM generated will either be rejected outright or if thought to be plausible will be credited to the unnamed and uncredited authors whose works were ingested as the training corpus."

Yes, credit the people who did the actual work. I like this very much.

#noai #exim #linux

Бесплатная защита от спама на почте с помощью ИИ фильтрации без VPN: многоуровневый метод с BERT и 550 МБ RAM

Вас тоже достаёт спам и реклама? Рекламу я блокирую через свой DNS сервер и локальными CSS фильтрами, а вот для почты пришлось придумать что-то другое. Схема многоступенчатая. Первыми срабатывают фильтры Яндекса и Mail — что-то они отсеивают сами, ещё до пересылки. То, что прошло через них, падает на мой сервер, где стоит SpamAssassin. Ловит ещё часть. Но после двух уровней всё равно что-то просачивается, спамеры же не сидят без дела. И вот этот остаток доезжает до Gmail и что-то оседает в папке Спам, а что-то попадает во входящие и приходит раздражающее уведомление. Хотелось, чтобы со временем не накапливался мусор в папках, который надо разгребать вручную. Особенно важно заблокировать то, что не является полностью спамом: приглашения на конференции, партнёрские предложения, кредиты — формально не нарушение, поэтому байесовский фильтр такие вещи плохо ловит. Локальная BERT-модель закрыла обе проблемы. Взял ruBert-base-antispam с HuggingFace — файн-тюн на базе DeepPavlov/rubert-base-cased-conversational. 177 миллионов параметров, 12 слоёв трансформера, 768 hidden size. Физически не принимает больше 512 токенов на вход. В памяти занимает около 550 МБ, ответ приходит за 100-200 миллисекунд. Бинарный классификатор — текст на входе, 0 или 1 на выходе, никаких промптов и reasoning. Идеально!

https://habr.com/ru/articles/1055518/

#спам #email #BERT #AI #exim #dovecot #spamassassin #фильтрация #python #почта

The #exim project got it right (emphasis mine):

https://lists.exim.org/lurker/message/20260702.154351.3598aba6.en.html

Reports we believe are LLM generated will either be rejected outright or if thought to be plausible will be credited to the unnamed and uncredited authors whose works were ingested as the training corpus.

#Debian LTS contributors released 56 DLAs fixing 877 CVEs in May, a larger number than usual. The Kernel team deserves a special mention for handling the disclosed vulnerabilities on #linux regarding Local Privilege Escalation with public proof-of-concept exploits. On the LTS side, the Front Desk team also triaged a significant flow of high severity CVEs and notable security updates were released for exim, gnutls28, krb5, lemonldap-ng, imagemagick, openjdk-11, openjdk-17, php7.4, python3.9 and more.

Several patches were prepared by Catalyst for #Samba 4.17 shipped with Debian 12, to fix vulnerabilities disclosed in May, thanks to Freexian's partnership with them to extend the support.

LTS team also contributed with updates to the latest Debian releases, #bookworm and #trixie.

Read the details in our full report at https://www.freexian.com/blog/debian-lts-report-2026-05/?utm_source=mastodon&utm_medium=social

This work is funded by Freexian's Debian LTS offering. Become a sponsor of Debian LTS (https://www.freexian.com/lts/debian/?utm_source=mastodon&utm_medium=social) and enjoy the benefits (https://www.freexian.com/lts/debian/details/#benefits).

#debianlts #freexian #exim #imagemagick #linuxkernel #LPE

#Exim 4.99.4 has been released ( #SMTP / #SimpleMailTransferProtocol / #Mail / #MailServer / #MTA / #MailTransportAgent / #MessageTransferAgent / #CVE / #SecurityVulnerability ) https://exim.org/

Did a quick merge of a testing branch into main for my #gmail API based MTA, then heading out to lunch and shopping.

Totally should have done a quick test, as no email is arriving, so I assume #exim is busy queuing it while the MTA throws errors.

Bad ScottE. Now I have to login again when we get home, rather than just making a drink and relaxing. Grrr.

We are very close to a new OpenBSD release. "You Have Installed OpenBSD. Now For The Daily Tasks." https://nxdomain.no/~peter/openbsd_installed_now_for_the_daily_tasks.html can help you prepare for the upgrade.

If you are using exim as your MTA (or any other non-base system MTA), "OpenSMTPD Is The Mail Server For The Future" https://nxdomain.no/~peter/time_for_opensmtpd.html contains useful pointers for a better mail future.

#openbsd #newrelease #openbsd79 #opensmtpd #email #smtp #rspamd #antispam #spam #exim

Repost for the Sunday crowd:

Migrating mail servers from exim to OpenSMTPD (smtpd) is fun and useful https://www.undeadly.org/cgi?action=article;sid=20260516064650 #openbsd #opensmtpd #smtpd #exim #email #smtp #mail #spam #antispam #greylisting #greytrapping #mailmigration

Is there some "test kit" for #exim for mail deliveries, i.e. I have a bunch of mails and want to make sure they get correctly accepted (or refused)?

Krytyczna podatność w Eximie – serwerze pocztowym obsługującym pół Internetu. Znaleziona ze wsparciem AI.

W 2023 roku około 59% publicznych serwerów pocztowych to właśnie Exim. Właśnie załatano oraz opublikowano szczegóły podatności o ksywce Dead Letter, dzięki której atakujący mogą wykonywać kod na serwerze (RCE), bez uwierzytelnienia, w pełni zdalnie. Luka CVE-2026-45185 otrzymała “wycenę” 9.8/10 w skali CVSS. Podatne są Eximy w wersjach od 4.97...

#WBiegu #Ai #Exim #Podatność #Rce

https://sekurak.pl/krytyczna-podatnosc-w-eximie-serwerze-pocztowym-obslugujacym-pol-internetu-znaleziona-ze-wsparciem-ai/

🚀 Ah, another day, another #CVE nobody asked for. Humans vs. #AI in a race to exploit #Exim, because *obviously* that's what we need—Skynet learning to hack email servers. 😂 But hey, at least the buzzwords and pentest pitches are here to save us from the tedium of actual #security work. 📉
https://xbow.com/blog/dead-letter-cve-2026-45185-xbow-found-rce-exim #Skynet #Hacking #HackerNews #ngated

Dead.letter (CVE-2026-45185) Humans vs. LLM for Unauthenticated RCE Race on Exim

https://xbow.com/blog/dead-letter-cve-2026-45185-xbow-found-rce-exim

#HackerNews #DeadLetter #CVE202645185 #UnauthenticatedRCE #Exim #LLMVsHumans

Any recommendations for #mail server config (templates/examples)? Goal is to have again a config that should do for another 20 years or so. Would it be wise to change to #postfix, or is cleaning up the #exim config better? Should I start with Debians config and just add options?

Still trying to determine if #Crowdsec is useful for me or not. I thought it was "plug and play" as a selling point, but I seem to have to do a lot of farting around with log parsers and such to get basic things like #exim logs looked at.

#gentoo

Its been 9 years since I last published a #blog post on my personal site. I've moved VM at least once since.
Anyway have a blog post about how I am testing and refactoring my #exim filter file with some help from a #LLM. ( I should write a post about how and why I use LLMs)
https://randomness.org.uk/2026/02/01/refactoring-my-exim-filter.html

Decided to have #claude help me solve my problem of #gmailify going away by writing a tool to submit messages to #gmail via their REST API.

So far working okay for me. #Exim calls it for some specific delivery needs, and poof, message shows up in Gmail, filters applied and everything.

https://github.com/ScottESanDiego/gmail-api-client

@stefano

In fairness, it is not "just booting". The screenshot shows exim and an unattended-upgrades script started up.

The world has still yet to shake the idea that every single server in the normal case needs a standalone, monolithic, local queue/delivery, mail system running; it seems.

I wonder why systemd-timesyncd has a larger VIRT value than anything else there.

#Debian #systemd #exim #MorrisWorm

@r1y Self-hosting e-mail just needs #exim and #dovecot, both of which are services directly configurable in #guix. The hard part is establishing a new address, and decommissioning the old one.

I've got this exact set-up myself, and give every organization that needs e-mail contact with me a unique, hard to guess, address. But I don't generally advertise myself as available by e-mail, and insist on contact through https://khleedril.org/dale-mellor/contact.

#Exim still requires setuid to be able deliver mail? That is a HUGE red flag! Especially with all the alternatives available on #Linux nowadays. I guess these guys like to live dangerously: https://changelog.complete.org/archives/13814-a-mail-delivery-mystery-exim-systemd-setuid-and-docker-oh-my #smtp #infosec

In which I identify and work around, but don't solve, a mystery involving broken #email delivery, #exim, #systemd, #docker, and #Debian #trixie. https://changelog.complete.org/archives/13814-a-mail-delivery-mystery-exim-systemd-setuid-and-docker-oh-my

Charla sobre servidores de correo en #Linux #exim https://www.galpon.org/content/obradoiro-instalacion-dun-servidor-de-correo-electronico-propio

Don’t suppose I know anyone who has migrated (recently) from exim to postfix? After 20+ years, I’m getting sick of exim‘s abstruse config and general faffiness and postfix is probably the only workable alternative (given how many special things have been accumulated and must be kept.)

Suggestions for alternate mail daemons gratefully received if they can be coerced into shenanigans.

(But not sendmail. I did my time in the sendmail mines and I am not returning.)

#Exim #Postfix

Как обеспечить отказоустойчивость почтового сервера Exim под нагрузкой 1 000 000 писем/мин. с помощью FUSE и Tarantool

Привет, Хабр! Меня зовут Максим Уймин, в этой статье я расскажу про почту, про распределенные очереди, немножко про FUSE и файловые системы.

https://habr.com/ru/companies/vk/articles/943134/

#отказоустойчивость #highload #fuse #tarantool #k8s #mail #exim #си #lua #катастрофоустойчивость