whitelisting hosts in exim

[ffeingol]

I'm trying to forward all the root mail from serveral servers onto one mailbox (on a cpanel server of course). For some of the servers we're getting the following error:

temporarily rejected RCPT <xxx@yyy.com>: Could not complete sender verify

We totally trust these servers (they are ours) and just want to whitelist the domain/host. I "think" we want to add an ACL like this:

begin acl

our_acl:
accept hosts = hostname.domain.tld

My guestion is:

- Is this a correct way to whitelist/accept from the box to bypass the rest of the exim rules
- where do we enter this in the advanced editor for exim
- how do we list multiple hosts

Thanks,

Frank

[lloyd_tennison]

I would be more worried about why they are failing, as that probably means other servers are getting the same errors from emails of your server.

[ffeingol]

Well this is the main error:

temporarily rejected RCPT <xxx@yyy.com>: Could not complete sender verify

We are totally baffeled by that on this particular domain. The domain is valid. RDNS is setup and valid. The sender of the email is a valid user.

This is all mail coming from root on various linux boxes. The main different (that we've been able to track down) is that the root mail comes from root@machine.domain.tld where a "normal user" would come from user@domain.tld

There are valid "A" records and "PTR" records for every host that is sending the mail.

Sorry, but totally baffeled by this.

Frank

[lloyd_tennison]

root@servername.domainname.com can always be a problem since it does not really exist as a domain. Making it a domain might help - but what is sending those emails as root? How about changing that? Many spam filters consider root@ anything as spam - as a normal message will not come from root.

[ffeingol]

it's things like hourly log scanners etc. that are run via cron.

Here is the "interesting" part. We run the same log scans etc. on all of our boxes. The log scans that are coming from cpanel boxes to the cpanel box work fine. The scans that are coming from our ensim boxes fail and are rejected. The are running the exact same log scanning routines etc.

We looked at the headers for both sets of emails and both are coming from root@host.domain.tld.

Really scratching head,

Frank

[big]

i have the same problem and found this http://www.exim.org/mail-archives/ex.../msg00257.html

might want to give it a try, although i didnt yet just waiting for a confirmation from support to avoid breaking my server