Possible? (Exchange smart host/relay with spam filter)

I am looking for the same config

I would like the same type of setup.

Does anyone have an idea how to set this up?

 

I set up a similar configuration for my employer

You need:

• MailScanner (Configserver do this cheaply and well)
• Exim configuration changes - nickpack.com - Using Exim as a smarthost
• Either a mail account for each exchange server or global allow their IP (For outbound relay)
• Some extra exim ACL's for verifying the existance of the exchange users (to prevent backscatter)

You basically configure mailscanner to scan inbound and outbound mail, set up the staticroute driver for exim, then add your relay to hosts for each domain to the config file for the staticroute driver.

Add your own acl's to exim to verify the exchange recipients and reject messages at SMTP time if the recipient doesnt exist, but with defer=ok in the acl conditions to allow for the exchange servers being down (this means that all mail for the domain in question will queue if the exchange server is down - this leads to a tiny bit of backscatter in some instances, but I havent found a more reliable way of doing it yet). - there is an example of remote recipient verification in the exim faq somewhere - dont have it to hand

 

I do this same thing for several clients, but a bit differently than it seems others do it.

What I want is for cpanel to be a spam scanner for a domain, but for the client to be fully Exchange, with no settings on the cpanel server.

Here is how to do it. It doesn't matter if the domain is hosting web on the cpanel server or not, basically it works either way.


Setup a static route for the domain


For accounts that have remote DNS:
/etc/staticroutes
domain.com: mailad.domain.com

For accounts that are using a static IP:
/etc/staticroutes
domain.com: 00.00.00.00

Add the domain to /etc/secondarymx

Reinit mailscanner to add spam scanning (or wait over night)
/usr/mscpanel/mscpanel.pl -i


It is best to add the Exchange server to the whitelists in the Exim configuration so that no mail is blocked.

If you are having problems with mail being spam scanned when it is totally internal, then add a whitelist entry to your spam rules like this:


whitelist_from_rcvd *@domain.com 00-00-00-00.where.fdn.com

where "00-00-00-00.where.fdn.com" is the fdn that shows up in mailscanner when the mail is sent.

Once everything is setup, just point the mail to the cPanel server and it will forward it to Exchange.

You can setup OWA by using a subdomain, such as exchange.domain.com and forward it that to the https://00.00.00.00/exchange address you would access OWA by.

 

NICK - rbl checker is nice

Nick - you might want to add - your RBL plugin is nice for whm

nickpack.com - WHM RBL Checker Plugin