Overview

Laptops are portable and end up being connected to various networks from day to day. You might connect it at the office, at home, at a friend’s house, at conferences, at random coffee houses…. For most configuration settings, you can rely on DHCP, but an exception is mail relaying.

Because SMTP doesn’t do anything about spam, many sites do not accept mail that is relayed from untrusted networks. Untrusted networks include those of a lot of ISP’s such as Comcast and BellSouth, which is irritating. Untrusted networks include those of random coffee houses, which–let’s be honest–is unavoidable. For practical purposes, you can’t use direct SMTP if you log into a large variety of networks.

The strategy I use is to have a relay out on a host that is considered to be on a trusted network by the major spam lists. The relay server requires authentication from the client, so that the client can safely connect to the relay server no matter what kind of network connection is available. The relay server can then send mail to its ultimate destination using direct SMTP as normal. Since its network is not on the spam lists, the email goes through reliably.

As an extra complication, I set the laptop-to-relay connection to avoid the standard ports 25 and 465. Many local networks, including BellSouth/DSL, block connections to standard ports completely. It’s evil, it’s aggravating, it’s understandable, there has to be a better way, etc., but again, that’s how things are, and so that’s what a practical configuration has to deal with. It turns out that exim can handle non-standard ports.

There are alternative approaches you may also want to consider:

• Use a web-based email program. If you use Hotmail or Yahoo or Gmail, then you can process your email anywhere that you have a WWW connection. You lose the ability to process email offline, however, as well as losing a lot of ability to read and to process your email using your own software.
• Use the relay provided by your ISP. I’m sure some ISP’s let you relay through their SMTP servers if you use SMTP authentication. The main reasons I don’t do this are (a) I don’t always have a current ISP subscription, and (b) I do happen to use networks where port 25 is blocked, and so I still can’t send from those networks to any server running on port 25 as usual.

Exim Configuration Files

Exim on Debian is configured in a confusing way. You can install it to use “split” or “unsplit” configuration files, and in either case, the configuration files you see are not the ones that exim itself sees. I use the unsplit version, and I edit /etc/exim4/exim4.conf.template. If you want to change between split and unsplit configurations, use dpkg-reconfigure exim4-config. Whenever you change a configuration setting, use /etc/init.d/exim4 restart.

As an aside, this situation strikes me as more complicated than is helpful. I found myself wishing there was a way to create and use a single /etc/exim/exim4.conf, but did not dig up how to do so.

Configuring the Relay Server

First the relay server needs to be set up. As you go along, you will want a way to test how the server is working. I found this short page helpful:

Testing SMTP AUTH connections

The suggestion on that page regarding the -starttls option of openssl did not work for me, but after some Googling, I found a proposed patch for openssl that appears to fix the problem. So, by the time you read this, even that might work.

Start by installing the exim4 package and configuring it to work as normal on an always-connected Internet host.

Run /usr/share/doc/exim4-base/examples/exim-gencert and answer all of its question. This will create a TLS certification that is needed to use SSL connections.

Turn on plain-text authentication by uncommenting the plain_server section of the exim configuration file. I also changed the server_condition line to have a hardcoded username and password instead of reading it from a file. The result looks like this (with USERNAME and PASSWORD substituted with the name and password I chose):

plain_server:
driver = plaintext
public_name = PLAIN
# server_condition = “${if crypteq{$3}{${extract{1}{:}{${lookup{$2}lsearch{CONF
DIR/passwd}{$value}{*:*}}}}}{1}{0}}”
server_condition = \
${if and {{eq{$2}{USERNAME}}{eq{$3}{PASSWORD}}}{yes}{no}}
server_set_id = $2
server_prompts = :

You also need to set up a couple of other things. Put the following settings near the top of your exim4.conf.template:

MAIN_TLS_ENABLE=1
daemon_smtp_ports=smtp : 26

That should be it. Your exim server on the relay machine should now:

1. Accept authentication using your chosen USERNAME and PASSWORD.
2. Listen on port 26 in addition to 25.
3. Accept SSL/TLS connections via the STARTTLS directive.

Configuring the Client

Next, set up the client to send all outgoing mail via the relay host. Install exim4 and set it to use your relay server as a smarthost. Edit /etc/exim4/passwd.client and put in your username and password, something like:

### CONFDIR/passwd.client
#
# Format:
#targetmailserver.example:login:password
#
# default entry:
### *:bar:foo
*:USERNAME:PASSWORD

Finally, hack your exim4.conf.template to use port 26 instead of 25. Find the section for remote_smtp_smarthost and add port = 26 to it. In my file it looks like this:

remote_smtp_smarthost:
debug_print = “T: remote_smtp_smarthost for $local_part@$domain”
driver = smtp
hosts_try_auth = ${if exists {CONFDIR/passwd.client}{DCsmarthost}{}}
tls_tempfail_tryclear = false
DEBCONFheaders_rewriteDEBCONF
DEBCONFreturn_pathDEBCONF
port = 26

That should be it. Now mail sent locally will get relayed via port 26 on your relay host.

exim -bpc

To check the email ID, sender and receiver of the each email:

exim -bp | more

To delete frozen emails from the mail queue, execute:

exim -bp | grep ‘frozen’ | awk ‘{print $3}’ | xargs exim -Mrm

similarly, to delete emails sent using a script’

exim -bp | grep ‘<>’ | awk ‘{print $3}’ | xargs exim -Mrm

chmod -x /usr/local/cpanel/3rdparty/mailman/mail/wrapper

If you ever want to enable it:

chmod +x /usr/local/cpanel/3rdparty/mailman/mail/wrapper

Before you begin

You can find documentation for creating custom modules your server at WHM > EasyApache > Help > Cpanel::Easy Framework POD, or and via command line at /scripts/easyapache --perldoc.

You can download a few sample custom modules below. These modules are not likely to be included in EasyApache in the near future.

Important: If you have problems building Apache with your custom modules, and you are unable to troubleshoot the problem, run /scripts/easyapache --skip-custom-optmods to build Apache and PHP without any custom modules. (Or, access the WHM equivalent found in EasyApache’s Help section).

Custom modules

Installing a custom module

To install a custom module:

1. Download and unzip it into /var/cpanel/easy/apache/custom_opt_mods/.
2. When logged into your server as root, you can install any module listed below by running the following commands. Be sure to replace $NAME.tar.gz with the filename of the module you wish to download:

wget http://easyapache.cpanel.net/optmods/$NAME.tar.gz
tar -C /var/cpanel/easy/apache/custom_opt_mods -xzf $NAME.tar.gz


Removing a custom module

In order to remove a custom module from the server, simply delete the files you created when you issued the above commands. The module will be removed from all future builds and the EasyApache interface.

Available modules

Warning: cPanel does not provide support for custom modules, including the ones linked below. The following modules are not developed by cPanel, Inc. Use them at your own risk.

mod_auth_mysql — This module allows you to authenticate users and authorize access through a MySQL database.

• Download: custom_opt_mod-mod_auth_mysql.tar.gz
• mod_auth_mysql project page.

mod_GeoIP — This module looks up the IP address of the client web user in the GeoIP database.

• Download: custom_opt_mod-mod_geoip.tar.gz
• mod_GeoIP project page

mod_python — This module embeds the Python interpreter into Apache, for faster Python applications.

• Download: custom_opt_mod-mod_python.tar.gz
• mod_python project page

GD with JIS-mapped Japanese font support — This module provides JIS-mapped Japanese font support for the GD library under PHP5.

• Download: custom_opt_mod-php5-gd_jis_mapped_japanese_font_support.tar.gz

Turkish locale patch for PHP5 — This module improves PHP5 support for Turkish.

• Download: custom_opt_mod-php5-turkish_locale_patch.tar.gz

suPHP PAM patch — This module allows you to use limits (/etc/security*.conf) with suPHP.

• Download: custom_opt_mod-suphp_pam_patch.tar.gz
• suPHP PAM patch information

Source: http://twiki.cpanel.net/twiki/bin/view/EasyApache3/CustomMods

Answer: Exim is a mail transfer agent (MTA) used on Unix-like operating systems. It aims to be a general and flexible mailer with extensive facilities for checking incoming e-mail.

To print a list of the messages in the queue, enter:

# exim -bp

To remove a message from the queue, enter:

# exim -Mrm {message-id}

To remove all messages from the queue, enter:

# exim -bp | awk '/^ *[0-9]+[mhd]/{print "exim -Mrm " $3}' | bash
Dallas Marlow, suggested following clean command:
# exim -bp | exiqgrep -i | xargs exim -Mrm

Further readings:

• man pages awk, exim
• Exim documentation