Excluding domains from callout verification

[ashokjp]

At certain times, there mails which are valid being rejected by callout verification, now thing is how do we go about excluding certain domains from callouts.

This is my current setup
In WHM >> Service Configuration >> Exim Configuration Editor

domainlist whitelist_domains = lsearch;/etc/whitelist_domains

After #sender verifications are required for all messages that are not sent to lists

require verify = sender/callout
accept  domains = +local_domains : +whitelist_domains
endpass

But the above doesnt seem to work

when the below change is done to second code
#sender verifications are required for all messages that are not sent to lists

 require verify = sender/callout=10s,defer_ok
 accept  domains = +local_domains : +whitelist_domains
 endpass

what it does is even if callout verification is failed it still accepts mail


ANY IDEAS ?

 

[RickG]

There are very good instructions in this thread (which if you follow, read the whole thing first as there are some corrections towards the end). Compare this to what you have and I think you'll see the corrections you need to make.

http://forums.cpanel.net/showthread.php?p=215336#post215336

 

[ashokjp]

I am sorry RickG, i had already tried that too and dint work.
I had gone through these topics in cPanel forum and since it dint work for me i had contacted here.

 

[RickG]

It might be worthwhile to revisit this thread and look at the instructions again. I have used these directions mutiple times and they have always worked without error. They end result is quite different from the sample you posted so it might be worthwhile to print the thread and compare to your exim file.

 

[ashokjp]

RickG
it does exactly what my current code does, and since you told i had tried again
I tried testing a callout rejected server on it,
on testing with exim i got this in between
>>> SMTP timeout
>>> ----------- end verify ------------
>>> verify defer overridden by callout_defer_ok
>>> deny: condition test failed
>>> processing "accept"
>>> check domains = +local_domains


and the mail is accepted
same way
the way it goes is
all servers ARE verified for callouts but as they fail -- STILL mail comes in because of defer_ok
and in a sense its like disabling callout

that is why i wanted a solution.

To add -- the server i tried was not listed on my whitelist file and still it was accepted. ALTHOUGH that is the domain which was being rejected by callouts.

 

[ashokjp]

Any solutions ??

 

[levelsupport]

Instead of

require verify = sender/callout=10s,defer_ok

change to

accept sender_domains = +whitelist_domains
require verify = sender/callout