[case 60473] Scan Outgoing email not working in Cpanel

re: [case 60473] Scan Outgoing email not working in Cpanel

Are you on cPanel 11.30 or on cPanel 11.32 currently?

Code:

cat /usr/local/cpanel/version

 

re: [case 60473] Scan Outgoing email not working in Cpanel

Hello all,

I have some steps so you can get those rules added to your exim configuration in 11.32, however I have been unable to get it to work for detecting SPAM (at least with the GTUBE test).

1) Log in to WHM
2) Go to Main >> Service Configuration >> Exim Configuration Manager
3) Click on the "Advanced Editor" tab
4) From the very top, scroll down until you see the button labeled "Add additional configuration setting", and click on that button
5) Type in "acl_not_smtp" in to the first box
6) Type "check_local" in to the second box
7) Scroll down until you see "acl_not_smtp"
8) In the box right after "custom_begin_not_smtp" put the following in to it:

check_local:
deny message = This message contains malware ($malware_name)
demime = *
malware = *

deny message = This message was classified as SPAM
spam = nobody

accept

(refer to the screen shot attached if you're having problems finding the right place)

9) Scroll all the way down and click on "Save"

After you do that, if you test it with the EICAR test file, you should notice that the email doesn't get send out. The error in the exim logs will look like this:

Error while reading message with no usable sender address (R=<redacted>): rejected by non-SMTP ACL: This message contains malware ()


EICAR test file - Wikipedia, the free encyclopedia

Summary:

With those steps, the malware test file gets caught, but not the spam test string.

View attachment 12062

 

re: [case 60473] Scan Outgoing email not working in Cpanel

case 60473 is planned to add official support for this functionality (as well as outgoing malware scanning of non-smtp messages .. if enabled) The support is current written and awaiting code review.