Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Exim Server-wide Filters: Best way?

Discussion in 'General Discussion' started by erick_paper, Jun 18, 2005.

  1. erick_paper

    erick_paper Well-Known Member

    Joined:
    Apr 19, 2005
    Messages:
    245
    Likes Received:
    0
    Trophy Points:
    166
    Hi,

    I would like to block certain email addresses from sending email to ANY of the domains on my WHM. Not IP addresses so I cannot add them to an IP deny list or anything.

    The rule I am thinking of is something like this:

    What should my condition look like, and where should it go? This is not in domain-specific cpanel accounts (for which a .filter file is usually enough) but for server-wide banning of sender addresses.

    Thx for any thoughts!
     
    #1 erick_paper, Jun 18, 2005
  2. RickG

    RickG Well-Known Member

    Joined:
    Feb 28, 2005
    Messages:
    238
    Likes Received:
    2
    Trophy Points:
    168
    Location:
    North Carolina
    #2 RickG, Jun 18, 2005
  3. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,470
    Likes Received:
    21
    Trophy Points:
    463
    Location:
    Go on, have a guess
    That's a somwhat convoluted way of doing it, though does work. If it's just for the odd email address you can simply go into WHM > Exim Configuration Editor > Advanced Mode > Scroll down to the first set of 3 textareas and in the middle one (the ACL stuff) put the following after the accept hosts = : line with clear blank lines around it:
    Code:
     drop senders = baduser@baddomain.com
       message = Spam or Mail Bombing activity
     
    #3 chirpy, Jun 18, 2005
  4. erick_paper

    erick_paper Well-Known Member

    Joined:
    Apr 19, 2005
    Messages:
    245
    Likes Received:
    0
    Trophy Points:
    166
    Thanks Chirpy!

    For now I have set up this rule in the /etc/antivirus.exim file:
    Is this less advisable than having an ACL? Yes, I only have 1 or 2 email addresses so I don't mind the drop command you suggested, but I don't want the sender to know that their messages are being dropped, so I don't want them to receive any bounce message. Would "drop" do this?

    Also, I have a bit of your suggested code in my ACL already. But I have a question. I keep getting bounce messages from people to "adam@MYDOMAIN.COM" or "eve@MYDOMAIN.COM" etc, as if adam and eve had sent them an email from MYDOMAIN.COM (my domain) but they are bouncing. But adam and eve obviously do not exist on my server, so they could not have sent the message in the first place! How can I block such messages from my server? What would the ACL code be?

    Thanks!
     
    #4 erick_paper, Jun 18, 2005
  5. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,470
    Likes Received:
    21
    Trophy Points:
    463
    Location:
    Go on, have a guess
    Hi,

    Putting it in that file, the system_filter, is fine.

    The second part is most likely bounces from spam or viruses sent out from an infected PC with forged headers and nothing to do with you. There's little you can do other that using Filters, except of course making sure that you have your Default Address set to :fail: and only create accounts/aliases that you actually use.
     
    #5 chirpy, Jun 19, 2005
  6. erick_paper

    erick_paper Well-Known Member

    Joined:
    Apr 19, 2005
    Messages:
    245
    Likes Received:
    0
    Trophy Points:
    166
    Thanks Chirpy, that's great. For second question, do you know if I can create any filter that says: "If TO header contains an address that I have not specifically created on my domain, then bounce the email"?
     
    #6 erick_paper, Jun 19, 2005
  7. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,470
    Likes Received:
    21
    Trophy Points:
    463
    Location:
    Go on, have a guess
    That's exactly what setting the Default Address to :fail: does.
     
    #7 chirpy, Jun 19, 2005
(You must log in or sign up to post here.)
Loading...
Similar Threads - Exim Server wide
  1. informatica rme

    SMTP Exim Servers vulnerability detected

    informatica rme, Mar 14, 2018, in forum: Security
    Replies:
    4
    Views:
    163
    cPanelMichael
    Mar 14, 2018
  2. diracuser

    Problems with Exim mailserver and TLS

    diracuser, Jul 12, 2017, in forum: E-mail Discussions
    Replies:
    3
    Views:
    911
    cPanelMichael
    Jul 14, 2017
  3. roni777

    SOLVED exim route_list for 2 remote servers

    roni777, Jul 10, 2017, in forum: E-mail Discussions
    Replies:
    3
    Views:
    518
    cPanelMichael
    Jul 11, 2017
  4. sahostking

    Exim dictionary attack to non existant domain on server

    sahostking, Aug 26, 2016, in forum: E-mail Discussions
    Replies:
    6
    Views:
    854
    sahostking
    Sep 21, 2016
  5. OooLong

    Exim Mail Server disable but still send mail

    OooLong, Jun 16, 2016, in forum: E-mail Discussions
    Replies:
    7
    Views:
    1,799
    cPanelMichael
    Jun 23, 2016

Share This Page