The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Enabling SPF Checking

Discussion in 'E-mail Discussions' started by mixx941, May 8, 2008.

  1. mixx941

    mixx941 Well-Known Member

    Joined:
    Oct 28, 2003
    Messages:
    63
    Likes Received:
    0
    Trophy Points:
    6
    Hi everyone.

    Quick question here about enabling SPF checking in WHM. I checked the option in the Exim config editor and saved (and it's still checked when I reload the page and look), however when it restarts I still get this message:

    Any ideas?

    Thanks in advance.

    -Mark
    WHM 11.23.0
    cPanel 11.23.0-B24213 (CURRENT)
    FreeBSD 6.1-RELEASE
     
  2. greengiant

    greengiant Well-Known Member

    Joined:
    Aug 31, 2003
    Messages:
    48
    Likes Received:
    0
    Trophy Points:
    6
    I am also seeing this problem. Anyone find a solution?
     
  3. wemail

    wemail Well-Known Member

    Joined:
    Nov 28, 2006
    Messages:
    51
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    GB
    cPanel Access Level:
    Root Administrator
    I was told last week that we have to await Exim v4.69-5 to have the non-SA version of inward SPF checking. There is however some rather conflicting info in the latest "sticky" about cPanel 11.23.3, so I am a bit confused now!
     
  4. cPanelNick

    cPanelNick Administrator
    Staff Member

    Joined:
    Mar 9, 2015
    Messages:
    3,426
    Likes Received:
    2
    Trophy Points:
    38
    cPanel Access Level:
    DataCenter Provider
    The SPF enabled exim binaries are only in EDGE/CURRENT.

    They should be in RELEASE later this week once most people have upgraded.
     
  5. mixx941

    mixx941 Well-Known Member

    Joined:
    Oct 28, 2003
    Messages:
    63
    Likes Received:
    0
    Trophy Points:
    6
    Hi, thanks for the replies.

    I was (and still am) on CURRENT and cPanel updates every night, however I still get the above error about it being disabled or unavailable. From WHM's top right info:

    WHM 11.23.0 cPanel 11.23.3-C25049

    The exim version is showing as: exim-4.68-0

    Thanks again.

    -Mark
     
  6. ToddShipway

    ToddShipway Well-Known Member

    Joined:
    Nov 13, 2006
    Messages:
    300
    Likes Received:
    1
    Trophy Points:
    18
    Location:
    Houston, TX
  7. mixx941

    mixx941 Well-Known Member

    Joined:
    Oct 28, 2003
    Messages:
    63
    Likes Received:
    0
    Trophy Points:
    6
    Sure, ticket submitted.

    Thanks,

    -Mark
     
  8. wemail

    wemail Well-Known Member

    Joined:
    Nov 28, 2006
    Messages:
    51
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    GB
    cPanel Access Level:
    Root Administrator
    We have had a RELEASE upcp and are still on Exim 4.68-1. The system shows WHM 11.23.0 cPanel 11.23.3-R25133.

    Presumably "later this week" now means the week begun 8 June?
     
  9. wemail

    wemail Well-Known Member

    Joined:
    Nov 28, 2006
    Messages:
    51
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    GB
    cPanel Access Level:
    Root Administrator
    Seem this is the case. We are now on "exim-4.69-5_cpanel_maildir" since last night.

    Came as a bit of a surprise as it seems to have activated SPF checking without me changing anything in the config! Rather annoying as I am now getting reports of undeliverable email - not everybody has their SPF records set up yet, although they have had a lot of warning.

    Even more worrying, I still haven't worked out what to do to activate SRS, so all our forwarding is probably broken until I can!!
     
  10. PPNSteve

    PPNSteve Well-Known Member

    Joined:
    Mar 13, 2003
    Messages:
    393
    Likes Received:
    1
    Trophy Points:
    18
    Location:
    Somewhere in Ilex Forest
    cPanel Access Level:
    Root Administrator
    Twitter:
    we're on WHM 11.23.2 cPanel 11.23.3-C25623 and getting the same error as well.. exim (exim-4.69-6_cpanel_maildir)

    solutions yet?
     
    #10 PPNSteve, Jun 20, 2008
    Last edited: Jun 20, 2008
  11. mixx941

    mixx941 Well-Known Member

    Joined:
    Oct 28, 2003
    Messages:
    63
    Likes Received:
    0
    Trophy Points:
    6
    I'm not sure if you guys are also on FreeBSD, but the reply I got from support was that there is no automatic way to rebuild Exim with SPF checking on FreeBSD at this time like there is on Linux. The technician rebuilt the port manually with SPF checking enabled.

    Hope that helps,

    -Mark
     
  12. wemail

    wemail Well-Known Member

    Joined:
    Nov 28, 2006
    Messages:
    51
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    GB
    cPanel Access Level:
    Root Administrator
    In reply to mixx941 - we have two servers both on CENTOS Enterprise 5 i686, and we too have WHM 11.23.2 cPanel 11.23.3-R25623 with Exim 4.69-6_cpanel_maildir

    We desperately want to have SPF working to block incoming SPAM, but with SRS also activated to "mend" the fact that SPF "breaks" forwarding - we are heavily dependent on forwarding. The SRS solution in the Wiki isn't complete - doesn't work as shown, so must need some additional tweaking.

    (We are also quite interested in DomainKeys, but lets sort out one new feature at a time)!
     
  13. internetfab

    internetfab Well-Known Member
    PartnerNOC

    Joined:
    Feb 20, 2003
    Messages:
    336
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Gothenburg, Sweden
    cPanel Access Level:
    DataCenter Provider
    Anyone gotten SRS to work on cPanel yet? Isn't it included in the current/release builds?
     
  14. cPanelKenneth

    cPanelKenneth cPanel Development
    Staff Member

    Joined:
    Apr 7, 2006
    Messages:
    4,460
    Likes Received:
    22
    Trophy Points:
    38
    cPanel Access Level:
    Root Administrator
    SRS is included in the Exim 4.69-x RPMs as a convenience for those that need it. SRS itself is unsupported by cPanel, meaning all issues pertaining to configuration and integration are not handled by cPanel and are not supported at this time. As with SPF, SRS support is considered Experimental by the Exim project and may or may not work.
     
  15. wemail

    wemail Well-Known Member

    Joined:
    Nov 28, 2006
    Messages:
    51
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    GB
    cPanel Access Level:
    Root Administrator
    The problem is some ISPs are enforcing SPF checking, and rejecting legitimate email, particularly if forwarded (without SRS rewriting).

    Users are therefore saying that it isn't "experimental" any more, and asking us to activate it for their domains. (The two year trial indicated in RFC4408 expired some weeks ago).

    We will however only activate SPF when we have SRS working too - to prevent broken forwarding.
     
  16. cPanelKenneth

    cPanelKenneth cPanel Development
    Staff Member

    Joined:
    Apr 7, 2006
    Messages:
    4,460
    Likes Received:
    22
    Trophy Points:
    38
    cPanel Access Level:
    Root Administrator
    It's the implementation within Exim that is experimental, not the specification.
     
  17. wemail

    wemail Well-Known Member

    Joined:
    Nov 28, 2006
    Messages:
    51
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    GB
    cPanel Access Level:
    Root Administrator
    I believe Alex Villegas (cPanelAlex) is looking at the SPF/SRS situation currently. I sent him some information which he wanted about an implementation which I had found in the EximWiki and had initially "lost", but I found it again last week and sent it on to him.

    This post was the original contact:

    http://forums.cpanel.net/showpost.php?p=357744&postcount=5
     
  18. fenixer

    fenixer Well-Known Member

    Joined:
    Feb 23, 2007
    Messages:
    92
    Likes Received:
    0
    Trophy Points:
    6
    For me, spf check does nothing

    After updating today to RELEASE WHM 11.23.2 cPanel 11.23.4-R26118, and activated spf checking..... lines at exim.conf appears:

    Tested, modifying a domain SPF registry at dns zone so current smtp server will "fail".

    Filter just does nothing.. emails keep being received without any notice... tested sending emails to testing mail addresses (publics), and the mails are denied because of "fail"-SPF zone configured by me...

    So SPF checks to exim appears to be non-existents.
     
  19. cPanelKenneth

    cPanelKenneth cPanel Development
    Staff Member

    Joined:
    Apr 7, 2006
    Messages:
    4,460
    Likes Received:
    22
    Trophy Points:
    38
    cPanel Access Level:
    Root Administrator
    Please provide an example of the SPF record you created.
     
  20. fenixer

    fenixer Well-Known Member

    Joined:
    Feb 23, 2007
    Messages:
    92
    Likes Received:
    0
    Trophy Points:
    6
    It was my ACL.. is fixed.. thanks for your interest.

    Now, without SRS, I must consider using SPF checking......
     
    #20 fenixer, Jul 8, 2008
    Last edited: Jul 9, 2008
Loading...

Share This Page