BCC recipients showing up in Envelope-to:

Michael-Inet

Well-Known Member
Feb 20, 2014
117
15
68
Nashville, TN, USA
cPanel Access Level
Root Administrator
Before I submit a bug, checking with the community ...

From both Drupal and KMail an email from/through one of my WHN/cPanel servers with:

From: [email protected][domain]
To: [email protected][domain]
BCC: [email protected][mydomain]
BCC: [email protected][mydomain]


Are showing all BCCs in the email Envelope-to: headers upon receipt, e.g.:

Return-path: [email protected][domain]
Envelope-to: [email protected][mydomain],
[email protected][mydomain]
Delivery-date: Fri, 28 Jul 2017 12:05:58 -0400
Received: from [cPanel account] by [cPanel server] with local (Exim 4.89)
(envelope-from <[email protected][domain]>)
id [removed]; Fri, 28 Jul 2017 12:05:58 -0400


Is this a bug?
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,904
2,226
463
Hello Michael,

It's possible the BCC address was transmitted by the email client (or the script using sendmail). Here's a link that explains this further:

Q5004 · Exim/exim Wiki · GitHub

Could you verify if you can reproduce this behavior from a different email client (e.g. Outlook, Thunderbird)? Also, what version of cPanel is installed on the system?

Thank you.
 

Michael-Inet

Well-Known Member
Feb 20, 2014
117
15
68
Nashville, TN, USA
cPanel Access Level
Root Administrator
Hi Michael,

> From both Drupal and KMail

It's doing it with both KMail and through a Drupal 7 site hosted on the server. Further testing seems to confirm that sending to 2 emails to an off box domain, does not have the issue. Definite “maybe” though, the mails went through MS and a chain of outlook.com servers and my skills understanding “Received: from” headers are not the best, but there weren’t both of the recipients in one mail, so...

So, it tentatively seems explicitly an issue with sending to multiple BCCs to a single domain hosted upon WHM/cPanel.

The cPanel install is set for auto-update. Exim was just updated (21-Jun-2017). The only real box abnormality is PHP is stuck at an older version for comparability reasons.

Probably more than you want ;) but pasting version info below.

Best,
Michael

>>Edit:
I actually don’t know how to get the cPanel version number, copy/pasting stuff...

CENTOS 6.9 x86_64 virtuozzo – srv04 cPanel & WHM 64.0 (build 36)

Change Log for 64.0.36
Entry: 2017-07-25, 17:30 (UTC)
Edit:<<

Exim version 4.89 #1 built 21-Jun-2017 15:43:43
Copyright (c) University of Cambridge, 1995 - 2017
(c) The Exim Maintainers and contributors in ACKNOWLEDGMENTS file, 2007 - 2017
Berkeley DB: Berkeley DB 4.7.25: (September 12, 2013)
Support for: crypteq iconv() IPv6 PAM Perl OpenSSL Content_Scanning DKIM DNSSEC Event OCSP PRDR Experimental_SPF Experimental_SRS
Lookups (built-in): lsearch wildlsearch nwildlsearch iplsearch dbm dbmjz dbmnz dnsdb passwd sqlite
Authenticators: cram_md5 dovecot plaintext spa
Routers: accept dnslookup ipliteral manualroute queryprogram redirect
Transports: appendfile/maildir autoreply lmtp pipe smtp

CentOS release 6.9 (Final)
Linux [removed] 2.6.32-042stab120.18 #1 SMP Fri Jan 13 10:32:04 MSK 2017 x86_64 x86_64 x86_64 GNU/Linux

Server version: Apache/2.2.27 (Unix)
Server built: Aug 27 2014 20:57:01
Cpanel::Easy::Apache v3.26.6 rev9999

PHP 5.3.29 (cli) (built: Aug 27 2014 21:04:20)
Copyright (c) 1997-2014 The PHP Group
Zend Engine v2.3.0, Copyright (c) 1998-2014 Zend Technologies
with eAccelerator v0.9.6.1-ea, Copyright (c) 2004-2012 eAccelerator, by eAccelerator
with the ionCube PHP Loader v4.6.1, Copyright (c) 2002-2014, by ionCube Ltd., and
with Zend Guard Loader v3.3, Copyright (c) 1998-2010, by Zend Technologies

# kmail -v
Qt: 3.5.0
TDE: R14.0.4
KMail: 1.9.10 (enterprise35 0.20100827.1168748)

Drupal core version: 7.56
Mass Contact (mass_contact) 7.x-1.1
Mime Mail (mimemail) 7.x-1.0
Token (token) 7.x-1.7
 
Last edited:

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,904
2,226
463
So, it tentatively seems explicitly an issue with sending to multiple BCCs to a single domain hosted upon WHM/cPanel.
Exim will not remove the "BCC" entry from the message header for incoming SMTP or command-line mail if it's included by the email client. Thus, it's likely the behavior you notice is by-design. This is explained in more-detail on the following URL:

Q5004 · Exim/exim Wiki · GitHub

Feel free to open a support ticket using the link in my signature if you'd like us to verify that's what's happening on the affected system.

Thank you.
 

Michael-Inet

Well-Known Member
Feb 20, 2014
117
15
68
Nashville, TN, USA
cPanel Access Level
Root Administrator
Thanks for the info Michael,

If that's how Exim works, then that's how it works...

*shrug* It only seems to happen if it's on box, so probably not worth any more time figuring out.