Bypass sender verify and dkim for single local domain

ttremain

Well-Known Member
Feb 16, 2003
286
7
243
cPanel Access Level
Root Administrator
I would like to set bypass of Sender Verify, and DKIM for a single local domain, or maybe a few local domains.
 
Last edited:

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,880
2,268
463
Hello :)

In "WHM Home » Service Configuration » Exim Configuration Manager", under the "Access Lists" tab, you can try adding the domain names to:

"Only-verify-recipient"

However, if they are local domain names, is there any reason not to setup DKIM and SPF records for them?

Thank you.
 

ttremain

Well-Known Member
Feb 16, 2003
286
7
243
cPanel Access Level
Root Administrator
You misunderstand.

The email recipients on one local domain, would not like emails directed to them, to be rejected if they fail DKIM or Sender Verify.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,880
2,268
463
Could you provide a specific example so we can better understand?

Thank you.
 

ttremain

Well-Known Member
Feb 16, 2003
286
7
243
cPanel Access Level
Root Administrator
Could you provide a specific example so we can better understand?
Okay..

Domain ABC.com is on the local server. One of their email addresses might be [email protected]

A good case, is they are supposed to be receiving certain notices from the shipper XYZ.com, and several other vendors.

XYZ.com's SMTP servers (multiple outbound servers) do not answer to Sender Verify Callouts, and multiple other sources don't either, or might have DKIM signature issues.

ABC.com wishes to receive these emails anyway, but our server admins don't want to spend hours each day whitelisting IP addresses of non-compliant SMTP servers.

ABC.com is not as worried about spam, so they would like to NOT have their inbound emails blocked by failed Sender Verify Callouts, or DKIM failures.

I would like to add ABC.com to a list of domains that will bypass these checks.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,880
2,268
463
Hello :)

The "/etc/skiprbldomains" file is designed for local domain names on your server that do not want incoming email checked against RBLs. For instance, let's say you host domain123.com, and you want to ensure it receives email from AOL.com when AOL.com is added to an RBL. You would add domain123.com to /etc/skiprbldomains so it can receive email from AOL.com.

This is documented here:

Skip RBLs on specific domains

You would have to take a similar approach with custom ACLs for checks such as "Sender Callouts". I am not aware of a single option that would exclude all checks, but you may want to research that to see if it's possible.

Thank you.