Exim - Migration (CVE related) - virtual_aliases - all forwarders broken

[LeviathanX]

Good day,

I got a huge problem. It seems that all forwardes on the server now are broken after I migrated to the latest patch (it's apparently been like that for over two weeks now, but I was on a business trip and had no time for it).

I did indeed try all the usual scripts like

/scripts/mailperm
/scripts/updateuserdomains
/scripts/fixvalias

checked

/etc/valiases (directory)
/etc/remotedomains
/etc/localdomains
/etc/userdomains

(looked all fine)

I did, for testing purposes, remove one forwarder and created it again. No success either.
Now, what really is strange, the mail IS delivered, but along with that another mail is sent to the sender stating Mail delivery failed: returning message to sender - no such person at this address

So here is what an exim_mainlog entry looks like - censored the addresses of course.

2019-06-26 08:34:59 1hg1WF-00044v-JI <= receiverH=(elysium.example.net) [::1]:40856 P=esmtpsa X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 CV=no A=dovecot_plain:[email protected] S=790 id=20190626083459.Horde.3t9WxkqNcuQBs2oaunY_ZKL@webmail.somedomain.net T="Test" for [email protected]
2019-06-26 08:34:59 1hg1WF-00044v-JI ** [email protected] R=virtual_aliases: No such person at this address
2019-06-26 08:34:59 1hg1WF-00044v-JI => receiver ([email protected]) <[email protected]> R=virtual_user T=virtual_userdelivery
2019-06-26 08:36:39 1hg1Xr-0004BF-2b <= [email protected] H=(elysium.example.net) [::1]:40904 P=esmtpsa X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 CV=no A=dovecot_plain:[email protected] S=792 id=20190626083639.Horde.JJ6_iuKWsQoeTujugZz1WXy@webmail.somedomain.net T="Test 2" for [email protected]
2019-06-26 08:36:39 1hg1Xr-0004BF-2b ** [email protected] R=virtual_aliases: No such person at this address
2019-06-26 08:36:39 1hg1Xr-0004BF-2b => receiver ([email protected]) <fo[email protected]> R=virtual_user T=virtual_userdelivery

Basically I sent two mails from the account that the mail is forwarded to. Both times it got delivered, both times I got the "no such person"-feedback from the server.

Since I have not touched anything in that regards in the server configuration, I'd like to know how to fix that behavior without breaking more stuff.

Thanks.

Kind regards,

 

[cPanelLauren]

Can you please open a ticket using the link in my signature? Once open please reply with the Ticket ID here so that we can update this thread with the resolution once the ticket is resolved.


Thanks!

 

[LeviathanX]

12714975

 

[cPanelLauren]

Hi @LeviathanX

Thanks for opening the ticket, it looks like exim configuration file updates were excluded by the following in the /etc/cpanelsync.exclude file: /usr/local/cpanel/etc/exim/distconfig/exim.conf.dist

removing this and allowing the exim configuration to update properly allowed the forwarders to begin working again.