How to I allow whitelist accept before SBL code in Exim configuration

BeDazzler · Apr 13, 2007

Hi Everyone,

We are blocking hosts on SBL's from lodging email messages with our cPanel servers.
There are some clients who need to receive messages from senders who are on the SBLs - for example particular_person@hotmail.com.

Even though the sender's email addresses are listed in the whitelists for each domain name, Exim is still blocking the message delivery.

Q: Is there a way to allow whitelisted senders to get their messages through before the SBL blocking block's their domain from sending ?

Here's the code in Exim config....

---- snip

#!!# ACL that is used after the RCPT command
check_recipient:
# Exim 3 had no checking on -bs messages, so for compatibility
# we accept if the source is local SMTP (i.e. not over TCP/IP).
# We do this by testing for an empty sending host field.
accept hosts = :

#**# Block List Configuration
#**# Last updated 10 February 2007
#
# Always accept mail to postmaster & abuse
#
accept domains = +local_domains
local_parts = postmaster:abuse
#
# Check sending hosts against DNS black lists.
# Reject message if address listed in blacklist.
deny message = ${sender_host_address} is listed at ${dnslist_domain}; See ${dnslist_text}
!hosts = +relay_hosts
!authenticated = *
dnslists = zen.spamhaus.org : bl.spamcop.net : list.dsbl.org : cbl.abuseat.org : dnsbl.sorbs.net
#**#
#**# Blocked List Configuration - ENDS HERE

-- snip

The above code works very well and we are pleased with the results.
Combined with Message Labs, this really cuts our SPAM to next to nothing.

Any ideas how we can enable the whitelists here ?

Regards,

Darren.

bmcpanel · Apr 16, 2007

BeDazzler said: ↑

Hi Everyone,

We are blocking hosts on SBL's from lodging email messages with our cPanel servers.
There are some clients who need to receive messages from senders who are on the SBLs - for example particular_person@hotmail.com.

Even though the sender's email addresses are listed in the whitelists for each domain name, Exim is still blocking the message delivery.

Q: Is there a way to allow whitelisted senders to get their messages through before the SBL blocking block's their domain from sending ?

Here's the code in Exim config....
Click to expand...

I believe this is a glitch with the whitelist that exim uses.

The whitelist will work if helo shows the correct hostname, but will not work if the hostname does not show up correctly. I believe this has to do with an incorrect dns config on the ISP side.

tail -f -n40 /var/log/exim_rejectlog

Example Where White List Fails
2007-04-16 20:09:22 H=(DCEZNFFGBB1) [216.144.210.138] F=<bm@hostmost.com> rejected RCPT <bm@hostmost.com>: Message rejected because (DCEZNFFGBB1) [216.144.210.138] is blacklisted at bl.spamcop.net . GIVE THIS ENTIRE MESSAGE TO YOUR ISP OR WEB HOSTING PROVIDER FOR DEBUGGING. See Blocked - see http://www.spamcop.net/bl.shtml?216.144.210.138 :

Example Where White List Will Work
2007-04-16 20:09:22 H=(dialup.someisp.net) [216.144.210.138] F=<bm@hostmost.com> rejected RCPT <bm@hostmost.com>: Message rejected because (dialup.someisp.net) [216.144.210.138] is blacklisted at bl.spamcop.net . GIVE THIS ENTIRE MESSAGE TO YOUR ISP OR WEB HOSTING PROVIDER FOR DEBUGGING. See Blocked - see http://www.spamcop.net/bl.shtml?216.144.210.138 :

nxds · Apr 17, 2007

Here's the blacklist/whitelist stuff I use:

In first exim editor box:

PHP:

hostlist rbl_whitelist = /etc/relayhosts : /etc/exim_rbl_whitelist : localhost

In third exim editor box:

PHP:

#if it gets here it isn't mailman deny domains = /etc/exim_deny_quotalimit message = mail to $domain has been prohibited - account size limit reached deny domains = /etc/exim_deny_domains message = mail to $domain has been administratively prohibited deny recipients = /etc/exim_deny_recipients message = mail to $local_part@$domain has been administratively prohibited accept senders = /etc/exim_accept_senders deny message = $sender_address has been denied access to this server. senders = /etc/exim_deny_senders deny message = rejected because $sender_host_address is in a blacklist at $dnslist_domain see $dnslist_text !hosts = +rbl_whitelist !authenticated = * dnslists = bl.spamcop.net : zen.spamhaus.org : list.dsbl.org

/etc/exim_rbl_whitelist is a file containing IP addresses I want to skip RBL checks for.
/etc/exim_deny_domains is a file containing domains I want to block mail to
/etc/exim_deny_recipients is a file containing e-mail addresses I want to block mail to
/etc/exim_accept_senders is a file containing e-mail addresses I want to accept mail from
/etc/exim_deny_senders is a file containing e-mail addresses I want to block mail from
/etc/exim_deny_quotalimit is a file listing domains that are at or over their quota. This stops mail for over quota domains getting into the queue. A cronjob runs every five minutes to update the list from the output of repquota.

All the files must exist (use touch to create them) or exim will complain.

Forums

The Community Forums

Interact with an entire community of cPanel & WHM users!

How to I allow whitelist accept before SBL code in Exim configuration

BeDazzler Member

bmcpanel Well-Known Member

nxds Well-Known Member

Spamassassin - blacklist all TLD allow whitelisted TLD?

allow_url_fopen Does Not Change

How to allow zip shell on a shared plan?

CSF, CC_ALLOW_FILTER, and ipset

Allow Email Access from specific IP only, block everyone else

Share This Page

Useful Searches

The Community Forums

Interact with an entire community of cPanel & WHM users!

How to I allow whitelist accept before SBL code in Exim configuration

BeDazzler Member

bmcpanel Well-Known Member

nxds Well-Known Member

Spamassassin - blacklist all TLD allow whitelisted TLD?

allow_url_fopen Does Not Change

How to allow zip shell on a shared plan?

CSF, CC_ALLOW_FILTER, and ipset

Allow Email Access from specific IP only, block everyone else

Share This Page