exim config : 2 sender verify options

[bignose]

[ Checkbox ] Verify the existence of email senders.
[ Checkbox ] Use callouts to verify the existence of email senders.

I understand the second item, where it does an SMTP probe of the sending addres'es MX or host record etc.

I'm curious if that box is not checked, but the first one is, what methodology does exim use to verify the sender ?

---

Also : A few weeks ago I changed exim.conf using the advanced editor. I followed the steps to white list domains, and that worked fine.

Now I'm finding that keeping up with white lists, is like swatting mosquitoes. So I want to turn off sender verify. So I turned it off in the exim configurator. It said it restarted, however /var/log/exim/rejectlog says exim is still rejecting mail because Sender verify is failing...

So either it didn't restart , and cpanel jsut said it did, or my changes from a few weeks ago are conflicting..with the natural order of things..

Tips ?

 

[bignose]

follow up to myself:

I have 2 cpanel machines, so after doing a diff, i copied the exim.conf from the one without the whitelist changes, to the one with the changes..

Retarted exim, and it's still doing sender verifification..

 

[chirpy]

If you're having problems with sender callout verification even though you disabled it, go into WHM > Exim Configuration Editor > Advanced Mode Editor > Scroll down to the ACL section ( a group of 3 textareas) and in the middle textarea look for the line:

verify = sender/callout

and change it to:

verify = sender

Then Save at the bottom of the page. There seems to be a bug in the code somewhere where it sometimes fails to reconfigure it correctly. If you want to disable all sender verification then remove the line mentioned above completely.

 

[fenixer]

If you're having problems with sender callout verification even though you disabled it, go into WHM > Exim Configuration Editor > Advanced Mode Editor > Scroll down to the ACL section ( a group of 3 textareas) and in the middle textarea look for the line:

verify = sender/callout

and change it to:

verify = sender

Then Save at the bottom of the page. There seems to be a bug in the code somewhere where it sometimes fails to reconfigure it correctly. If you want to disable all sender verification then remove the line mentioned above completely.

That's right, but:

- What is the difference between "verify sender", and "verify = sender/callout"......... there is someone better than the other? they are simply two ways of doing the same?

- Why I can change, tick or untick options at "WHM > Exim Configuration Editor", and it will not be any change having a look at "Advanced Mode Editor"? Is it any bug? Does the options at Exim Configuration Editor have something to do with ACLs written in exim.conf.local ("Advanced Mode Editor")??

Thanks.

 

[chirpy]

1. IIRC, sender = verfiy simply checks that the DNS for the sender is setup correctly. sender =verify/callout performs a callout, which means it connects to the sending SMTP server and attempts to initiate an SMTP session sending to the senders address. If that fails, then so does the email transaction.

2. It's a bug