Mail Archive brakes SRS in 94 and 96.

[lukasz_webd]

Hello,
The mail archive brakes SRS in cpanel 94 and 96.
I have tested this on clean cpanel 96 installation with only changes to exim/tweak settings configuration to enable SRS and mail archiving.

It seems to be caused by behaviour change of exim 4.94 or incorrectly pack/unpack address_data in archive routing which has been changed since cpanel 86 where SRS works well with mail archive.
When mail archiving in user cpanel is disabled, SRS works correctly.

Log fragment:

2021-06-14 12:03:36 1lsjRL-00079P-EF H=SENDER_HOST [SENDER_IP]:40902 Warning: "SpamAssassin as USERNAME detected message as NOT spam (0.8)"
2021-06-14 12:03:36 1lsjRL-00079P-EF <= [email protected] H=SENDER_HOST [SENDER_IP]:40902 P=esmtps X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=no S=2800 [email protected]_DOMAIN T="Testing" for RCPT_ADDR
2021-06-14 12:03:36 1lsjRL-00079P-EF check_mail_permissions could not determine the sender domain [routed_domain=FWD_DOMAIN message_exim_id=1lsjRL-00079P-EF sender_host_address=SENDER_IP recipients_count=1]
2021-06-14 12:03:36 1lsjRL-00079P-EF => test (RCPT_ADDR) <RCPT_ADDR> R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 <RCPT_ADDR> +PYFLHgpx2CLawAAUroaJQ Saved"
2021-06-14 12:03:36 1lsjRL-00079P-EF => test (FWD_ADDR, RCPT_ADDR, RCPT_ADDR) <RCPT_ADDR> SRS=<[email protected]_DOMAIN> R=archive_outgoing_email T=archiver_outgoing
2021-06-14 12:03:36 1lsjRL-00079P-EF => test <RCPT_ADDR> R=archive_incoming_email_domain_method T=archiver_incoming_domain_method
2021-06-14 12:03:36 1lsjRL-00079P-EF ** FWD_ADDR (FWD_ADDR, RCPT_ADDR, RCPT_ADDR) <RCPT_ADDR> R=dkim_lookuphost T=dkim_remote_smtp H=FWD_DOMAIN [FWD_IP] X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=yes: SMTP error from remote mail server after pipelined MAIL FROM:<[email protected]> SIZE=3887: 550 [SPF] RCPT_IP is not allowed to send mail from SENDER_DOMAIN
2021-06-14 12:03:36 1lsjRL-00079P-EF Completed

 

[cPRex]

Hey there! Thanks for letting me know about this issue. In order for me to do some testing on my end, can you let me know how the SRS is configured on your side? Once I can replicate that I'll start testing on my end.

 

[lukasz_webd]

Hey, it has been already confirmed by support. Case ID CPANEL-37411 and link to article:
SRS doesn't work when email archiving is enabled – cPanel

Support confirmed this for version 96, but I stumble upon this on 94 too.

Replication steps:

1. Turn on Email Archiving in Tweak Settings
2. Turn on SRS in Exim Configuration Manager (Exim Basic Editor)
3. Create one cPanel account
4. Create an email account under the test account and enable mail archiving
5. Create a forwarder to external mailbox
6. Send a message from another external mailbox - this address is on domain with SPF that not allow sending mails from ip of cPanel server
7. Receive mail delivery error message with information about SPF
8. Examine the logs

I wrote the thread for other people who might encounter this problem and try to find a solution on the forum or just google it.

 

[cPRex]

Nice catch! I added your details about version 94 to the internal case so we have that on record as well.