Exim option "callouts"

prixone

Well-Known Member
Mar 4, 2004
111
3
168
cPanel Access Level
Root Administrator
Use callouts to verify the existance of email senders.

what would be the difference of a server using and a server not using this option and what is the basicly action of it ?

this option is at:
Service Configuration -> Exim Configuration Editor


regards;
 

rvskin

Well-Known Member
PartnerNOC
Feb 19, 2003
399
1
168
Callout provided by cPanel is not sufficient. I would suggest ccreate 2 whitelists and update the exim acl similar below. Some of mail servers don't response to the callout SMTP. You need to maintain the whitelist manually.

.........
.........
........
domainlist rv_callout_sender_domain_whitelist = lsearch;/usr/local/cpanel/base/eximacl/rv_callout_sender_domain_whitelist
domainlist rv_callout_receiver_domain_whitelist = lsearch;/usr/local/cpanel/base/eximacl/rv_callout_receiver_domain_whitelist
.........
.........
........
##
# Callout (create SMTP connection to test the sender address
# Deny unless the sender address can be verified.
# Testing only the sender that not listed in the callout whitelist and dsn.rfc-ignorant.org
##
deny message = From email address must be valid
# do not check address for lists or bounces
# or people in our company contact database
!senders = ^.*-request@.*:\
^bounce-.*@.*:\
^.*-bounce@.*:\
^owner-.*@.*:\
^listmaster@.*
!domains = +rv_callout_receiver_domain_whitelist
!sender_domains = +rv_callout_sender_domain_whitelist
# do not check for DSN-ignorant domains
# those that don't accept MAIL FROM:<>
!dnslists = dsn.rfc-ignorant.org/$sender_address_domain
!verify = sender/callout=10s,defer_ok

##
# Check that there is a MX record for those that do not
# meet the deny statement requirements - ie bounces
# No cost as previous lookup is cached if executed
##
require verify = sender
 

benito

Well-Known Member
Jan 8, 2004
442
26
178
Mar del Plata - Argentina
cPanel Access Level
Root Administrator
Twitter
rvskin said:
Callout provided by cPanel is not sufficient. I would suggest ccreate 2 whitelists and update the exim acl similar below. Some of mail servers don't response to the callout SMTP. You need to maintain the whitelist manually.

.........
.........
........
domainlist rv_callout_sender_domain_whitelist = lsearch;/usr/local/cpanel/base/eximacl/rv_callout_sender_domain_whitelist
domainlist rv_callout_receiver_domain_whitelist = lsearch;/usr/local/cpanel/base/eximacl/rv_callout_receiver_domain_whitelist
.........
.........
........
##
# Callout (create SMTP connection to test the sender address
# Deny unless the sender address can be verified.
# Testing only the sender that not listed in the callout whitelist and dsn.rfc-ignorant.org
##
deny message = From email address must be valid
# do not check address for lists or bounces
# or people in our company contact database
!senders = ^.*-request@.*:\
^bounce-.*@.*:\
^.*-bounce@.*:\
^owner-.*@.*:\
^listmaster@.*
!domains = +rv_callout_receiver_domain_whitelist
!sender_domains = +rv_callout_sender_domain_whitelist
# do not check for DSN-ignorant domains
# those that don't accept MAIL FROM:<>
!dnslists = dsn.rfc-ignorant.org/$sender_address_domain
!verify = sender/callout=10s,defer_ok

##
# Check that there is a MX record for those that do not
# meet the deny statement requirements - ie bounces
# No cost as previous lookup is cached if executed
##
require verify = sender
Exactly how we can add this whitelist to callouts ? Thanks.