/etc
NameSizeModeActions
alternatives/-0755rm
apache2/-0755rm
audit/-0750rm
authselect/-0755rm
bash_completion.d/-0755rm
binfmt.d/-0755rm
bluetooth/-0755rm
cagefs/-0755rm
chkconfig.d/-0755rm
chkserv.d/-0755rm
cifs-utils/-0755rm
cl.selector/-0755rm
cloud/-0755rm
cpanel/-0751rm
cron.d/-0755rm
cron.daily/-0755rm
cron.hourly/-0755rm
cron.monthly/-0755rm
cron.weekly/-0755rm
crypto-policies/-0755rm
csf/-0600rm
dbus-1/-0755rm
default/-0755rm
depmod.d/-0755rm
dhcp/-0750rm
dnf/-0755rm
dovecot/-0755rm
dpkg/-0755rm
dracut.conf.d/-0755rm
environment-modules/-0755rm
exports.d/-0755rm
firewalld/-0750rm
fonts/-0755rm
fwupd/-0755rm
gcrypt/-0755rm
gnupg/-0755rm
groff/-0755rm
grub.d/-0700rm
gss/-0755rm
gssproxy/-0755rm
ImageMagick-6/-0755rm
imunify-agent-proxy/-0700rm
imunify360/-0755rm
init.d/-0755rm
iproute2/-0755rm
kdump/-0755rm
kernel/-0755rm
keyutils/-0755rm
krb5.conf.d/-0755rm
ld.so.conf.d/-0755rm
libblockdev/-0755rm
libibverbs.d/-0755rm
libnl/-0755rm
libpaper.d/-0755rm
libreport/-0755rm
libssh/-0755rm
logrotate.d/-0755rm
mail/-0755rm
microcode_ctl/-0755rm
modprobe.d/-0755rm
modulefiles/-0755rm
modules-load.d/-0755rm
motd.d/-0755rm
my.cnf.d/-0755rm
named/-0750rm
needrestart/-0755rm
NetworkManager/-0755rm
nftables/-0700rm
openldap/-0755rm
opt/-0755rm
pam.d/-0755rm
pdns/-0755rm
pkcs11/-0755rm
pki/-0755rm
pm/-0755rm
polkit-1/-0755rm
popt.d/-0755rm
profile.d/-0755rm
proftpd/-0751rm
pure-ftpd/-0755rm
qemu-ga/-0755rm
qemu-kvm/-0755rm
rc.d/-0755rm
rc0.d/-0755rm
rc1.d/-0755rm
rc2.d/-0755rm
rc3.d/-0755rm
rc4.d/-0755rm
rc5.d/-0755rm
rc6.d/-0755rm
request-key.d/-0755rm
rhsm/-0755rm
rpm/-0755rm
rsyslog.d/-0755rm
rwtab.d/-0755rm
sasl2/-0755rm
scl/-0755rm
security/-0755rm
selinux/-0755rm
skel/-0755rm
smartmontools/-0755rm
ssh/-0755rm
ssl/-0755rm
sssd/-0700rm
stunnel/-0755rm
sudoers.d/-0750rm
sw-engine/-0755rm
sysconfig/-0755rm
sysctl.d/-0755rm
systemd/-0755rm
terminfo/-0755rm
tmpfiles.d/-0755rm
tuned/-0755rm
udev/-0755rm
udisks2/-0755rm
unbound/-0755rm
valiases/-0751rm
vdomainaliases/-0751rm
vfilters/-0751rm
X11/-0755rm
xdg/-0755rm
xinetd.d/-0755rm
yum/-0755rm
yum.repos.d/-0755rm
.pwd.lock00600editdlrm
.updated2080644editdlrm
.whostmgrft00644editdlrm
adjtime160644editdlrm
agent360.ini8170600editdlrm
aliases15290644editdlrm
almalinux-release420644editdlrm
almalinux-release-upstream520644editdlrm
anacrontab5410644editdlrm
antivirus.exim106340644editdlrm
at.deny10644editdlrm
backupmxhosts00640editdlrm
bashrc37180644editdlrm
bindresvport.blacklist5350644editdlrm
blocked_incoming_email_countries00640editdlrm
blocked_incoming_email_country_ips00640editdlrm
blocked_incoming_email_domains00640editdlrm
centos-release420644editdlrm
chrony.conf10880644editdlrm
chrony.keys5400640editdlrm
cpanel_exim_system_filter121440644editdlrm
cpanel_mail_netblocks150640editdlrm
cpsources.conf.plugins.example28430644editdlrm
cpspamd.conf00644editdlrm
cpupdate.conf1110644editdlrm
cron.deny70644editdlrm
crontab4510644editdlrm
crypttab00600editdlrm
csh.cshrc16290644editdlrm
csh.login10870644editdlrm
dbowners320640editdlrm
demodomains00640editdlrm
demouids00640editdlrm
demousers00640editdlrm
digestshadow00640editdlrm
DIR_COLORS45360644editdlrm
DIR_COLORS.256color52140644editdlrm
DIR_COLORS.lightbgcolor46180644editdlrm
domainips150644editdlrm
domainusers290640editdlrm
domain_remote_mx_ips.cdb25360640editdlrm
dracut.conf1170644editdlrm
email_send_limits12330640editdlrm
environment00644editdlrm
ethertypes13620644editdlrm
exim.conf928560644editdlrm
exim.conf.dist264080644editdlrm
exim.conf.localopts21100644editdlrm
exim.conf.localopts.shadow00600editdlrm
exim.conf.mailman2.dist297290644editdlrm
exim.conf.mailman2.exiscan.dist299040644editdlrm
exim.crt56790660editdlrm
exim.key16790660editdlrm
exim.pl2310644editdlrm
exim.pl.local4989770644editdlrm
eximmailtrap00644editdlrm
eximrejects1630644editdlrm
eximrejects.rpmorig3670644editdlrm
exim_suspended_list7150640editdlrm
exim_trusted_configs240644editdlrm
exports00644editdlrm
favicon.png2260644editdlrm
filesystems660644editdlrm
fstab7210644editdlrm
ftpd-ca.pem00660editdlrm
ftpd-rsa-key.pem16790660editdlrm
ftpd-rsa.pem56790660editdlrm
GREP_COLORS940644editdlrm
greylist_common_mail_providers700220644editdlrm
greylist_trusted_netblocks00640editdlrm
group11480644editdlrm
group-11090644editdlrm
grub2-efi.cfg-0editdlrm
grub2.cfg-0editdlrm
gshadow9510600editdlrm
gshadow-9250000editdlrm
host.conf90644editdlrm
hostname250644editdlrm
hosts2000644editdlrm
idmapd.conf48490644editdlrm
inittab4900644editdlrm
inputrc9420644editdlrm
ipaddrpool00644editdlrm
ips440644editdlrm
issue230644editdlrm
issue.net220644editdlrm
kdump.conf85500644editdlrm
krb5.conf8120644editdlrm
ld.so.cache303110644editdlrm
ld.so.conf280644editdlrm
libaudit.conf1910640editdlrm
libuser.conf23910644editdlrm
localaliases240644editdlrm
localdomains6970640editdlrm
localdomains.rpmnew00644editdlrm
locale.conf170644editdlrm
localtime1270644editdlrm
lock_manager_local.ini8290644editdlrm
login.defs30760644editdlrm
logrotate.conf4380644editdlrm
machine-id330444editdlrm
magic1110644editdlrm
mail.rc19680644editdlrm
mailbox_formats380640editdlrm
mailcap2720644editdlrm
mailhelo270640editdlrm
mailips00640editdlrm
makedumpfile.conf.sample51220644editdlrm
man_db.conf51650644editdlrm
mime.types603520644editdlrm
mke2fs.conf11080644editdlrm
motd00644editdlrm
mtab00444editdlrm
my.cnf4030644editdlrm
named.conf55630644editdlrm
named.conf.cache4120600editdlrm
named.conf.precpanelinstall17230640editdlrm
named.conf.prerebuilddnsconfig39170644editdlrm
named.conf.rebuilddnsconfig39170644editdlrm
named.conf.zonedir.cache570600editdlrm
named.rfc1912.zones10290640editdlrm
named.root.key10700644editdlrm
nanorc94500644editdlrm
neighbor_netblocks150640editdlrm
netconfig7670644editdlrm
networks580644editdlrm
nfs.conf12510644editdlrm
nfsmount.conf36060644editdlrm
nocgiusers00640editdlrm
nscd.conf27290644editdlrm
nsswitch.conf21200644editdlrm
nsswitch.conf.bak21970644editdlrm
nsswitch.conf.save_by_rpm22150644editdlrm
odbc.ini00644editdlrm
odbcinst.ini11250644editdlrm
os-release5850644editdlrm
outgoing_mail_hold_users00640editdlrm
outgoing_mail_suspended_users00640editdlrm
papersize680644editdlrm
passwd28710644editdlrm
passwd-28710644editdlrm
passwd.cache167950600editdlrm
passwd.nouids.cache87800600editdlrm
printcap2330644editdlrm
profile29240644editdlrm
protocols65680644editdlrm
pure-ftpd.conf110650600editdlrm
pure-ftpd.pem73580660editdlrm
rc.local4740644editdlrm
recent_authed_mail_ips290644editdlrm
recent_authed_mail_ips_users1230644editdlrm
recent_recipient_mail_server_ips3410640editdlrm
redhat-release420644editdlrm
relayhosts290644editdlrm
relayhostsusers1230644editdlrm
remotedomains00644editdlrm
request-key.conf17870644editdlrm
resolv.conf790644editdlrm
rpc16340644editdlrm
rsyslog.conf32950644editdlrm
secondarymx00640editdlrm
senderverifybypasshosts00640editdlrm
services6922520644editdlrm
sestatus.conf2160644editdlrm
shadow13230600editdlrm
shadow-13230600editdlrm
shadow.nouids.cache89470600editdlrm
shells1280644editdlrm
skipsmtpcheckhosts00640editdlrm
spammeripblocks00640editdlrm
spammers00644editdlrm
ssldomains00600editdlrm
stats.conf370644editdlrm
subgid00644editdlrm
subuid00644editdlrm
sudo-ldap.conf31810640editdlrm
sudo.conf17860640editdlrm
sudoers43280440editdlrm
sysctl.conf4490644editdlrm
system-release420644editdlrm
system-release-cpe370644editdlrm
tcsd.conf70460640editdlrm
trueuserdomains290640editdlrm
trueuserowners150640editdlrm
trusted-key.key3750644editdlrm
trustedmailhosts00640editdlrm
trusted_mail_users00640editdlrm
userbwlimits370640editdlrm
userdatadomains43400640editdlrm
userdatadomains.json47050640editdlrm
userdomains9410640editdlrm
userips370640editdlrm
userplans320640editdlrm
vconsole.conf280644editdlrm
vimrc19820644editdlrm
virc12040644editdlrm
webspam00644editdlrm
wgetrc49250644editdlrm
wwwacct.conf2890644editdlrm
wwwacct.conf.cache3220644editdlrm
wwwacct.conf.shadow.cache3220600editdlrm
xattr.conf6520644editdlrm
yum.conf2460644editdlrm
Edit: /etc/exim.conf.mailman2.exiscan.dist (29904B)
#!!# cPanel Exim 4 Config @CONFIG@ #!!# These options specify the Access Control Lists (ACLs) that #!!# are used for incoming SMTP messages - after the RCPT and DATA #!!# commands, respectively. av_scanner = clamd:/var/clamd acl_smtp_rcpt = check_recipient acl_smtp_data = check_message #!!# This setting defines a named domain list called #!!# local_domains, created from the old options that #!!# referred to local domains. It will be referenced #!!# later on by the syntax "+local_domains". #!!# Other domain and host lists may follow. domainlist local_domains = lsearch;/etc/localdomains domainlist relay_domains = lsearch;/etc/localdomains : \ lsearch;/etc/secondarymx hostlist relay_hosts = lsearch;/etc/relayhosts : \ localhost hostlist auth_relay_hosts = * ###################################################################### # Runtime configuration file for Exim # ###################################################################### # This is a default configuration file which will operate correctly in # uncomplicated installations. Please see the manual for a complete list # of all the runtime configuration options that can be included in a # configuration file. There are many more than are mentioned here. The # manual is in the file doc/spec.txt in the Exim distribution as a plain # ASCII file. Other formats (PostScript, Texinfo, HTML) are available from # the Exim ftp sites. The manual is also online via the Exim web sites. # This file is divided into several parts, all but the last of which are # terminated by a line containing the word "end". The parts must appear # in the correct order, and all must be present (even if some of them are # in fact empty). Blank lines, and lines starting with # are ignored. ###################################################################### # MAIN CONFIGURATION SETTINGS # ###################################################################### perl_startup = do '/etc/exim.pl' #dns_retry = 1 #dns_retrans = 1s # Specify your host's canonical name here. This should normally be the fully # qualified "official" name of your host. If this option is not set, the # uname() function is called to obtain the name. smtp_banner = "${primary_hostname} ESMTP Exim ${version_number} \ \#${compile_number} ${tod_full} \n\ We do not authorize the use of this system to transport unsolicited, \n\ and/or bulk e-mail." #nobody as the sender seems to annoy people untrusted_set_sender = * local_from_check = false rfc1413_query_timeout = 2s split_spool_directory = yes smtp_connect_backlog = 50 smtp_accept_max = 100 # primary_hostname = deliver_queue_load_max = 3 auto_thaw = 6d ignore_bounce_errors_after = 7d timeout_frozen_after = 8d # Specify the domain you want to be added to all unqualified addresses # here. An unqualified address is one that does not contain an "@" character # followed by a domain. For example, "caesar@rome.ex" is a fully qualified # address, but the string "caesar" (i.e. just a login name) is an unqualified # email address. Unqualified addresses are accepted only from local callers by # default. See the receiver_unqualified_{hosts,nets} options if you want # to permit unqualified addresses from remote sources. If this option is # not set, the primary_hostname value is used for qualification. # qualify_domain = # If you want unqualified recipient addresses to be qualified with a different # domain to unqualified sender addresses, specify the recipient domain here. # If this option is not set, the qualify_domain value is used. # qualify_recipient = # Specify your local domains as a colon-separated list here. If this option # is not set (i.e. not mentioned in the configuration file), the # qualify_recipient value is used as the only local domain. If you do not want # to do any local deliveries, uncomment the following line, but do not supply # any data for it. This sets local_domains to an empty string, which is not # the same as not mentioning it at all. An empty string specifies that there # are no local domains; not setting it at all causes the default value (the # setting of qualify_recipient) to be used. #!!# message_filter renamed system_filter system_filter = /etc/antivirus.exim message_body_visible = 5000 # If you want to accept mail addressed to your host's literal IP address, for # example, mail addressed to "user@[111.111.111.111]", then uncomment the # following line, or supply the literal domain(s) as part of "local_domains" # above. # local_domains_include_host_literals # No local deliveries will ever be run under the uids of these users (a colon- # separated list). An attempt to do so gets changed so that it runs under the # uid of "nobody" instead. This is a paranoic safety catch. Note the default # setting means you cannot deliver mail addressed to root as if it were a # normal user. This isn't usually a problem, as most sites have an alias for # root that redirects such mail to a human administrator. never_users = root # The use of your host as a mail relay by any host, including the local host # calling its own SMTP port, is locked out by default. If you want to permit # relaying from the local host, you should set # # host_accept_relay = localhost # # If you want to permit relaying through your host from certain hosts or IP # networks, you need to set the option appropriately, for example # # # # If you are an MX backup or gateway of some kind for some domains, you must # set relay_domains to match those domains. This will allow any host to # relay through your host to those domains. # # See the section of the manual entitled "Control of relaying" for more # information. # The setting below causes Exim to do a reverse DNS lookup on all incoming # IP calls, in order to get the true host name. If you feel this is too # expensive, you can specify the networks for which a lookup is done, or # remove the setting entirely. #host_lookup = 0.0.0.0/0 # By default, Exim expects all envelope addresses to be fully qualified, that # is, they must contain both a local part and a domain. If you want to accept # unqualified addresses (just a local part) from certain hosts, you can specify # these hosts by setting one or both of # # receiver_unqualified_hosts = # sender_unqualified_hosts = # # to control sender and receiver addresses, respectively. When this is done, # unqualified addresses are qualified using the settings of qualify_domain # and/or qualify_recipient (see above). # Exim contains support for the Realtime Blocking List (RBL) that is being # maintained as part of the DNS. See http://maps.vix.com/rbl/ for background. # Uncommenting the first line below will make Exim reject mail from any # host whose IP address is blacklisted in the RBL at maps.vix.com. Some # others have followed the RBL lead and have produced other lists: DUL is # a list of dial-up addresses, and ORBS is a list of open relay systems. The # second line below checks all three lists. # rbl_domains = rbl.maps.vix.com # rbl_domains = rbl.maps.vix.com # If you want Exim to support the "percent hack" for all your local domains, # uncomment the following line. This is the feature by which mail addressed # to x%y@z (where z is one of your local domains) is locally rerouted to # x@y and sent on. Otherwise x%y is treated as an ordinary local part. # percent_hack_domains = * #sender_host_accept = +include_unknown:* #sender_host_reject = +include_unknown:lsearch*;/etc/spammers tls_certificate = /etc/exim.crt tls_privatekey = /etc/exim.key tls_advertise_hosts = * helo_accept_junk_hosts = * smtp_enforce_sync = false #!!#######################################################!!# #!!# This new section of the configuration contains ACLs #!!# #!!# (Access Control Lists) derived from the Exim 3 #!!# #!!# policy control options. #!!# #!!#######################################################!!# #!!# These ACLs are crudely constructed from Exim 3 options. #!!# They are almost certainly not optimal. You should study #!!# them and rewrite as necessary. begin acl @BEGINACL@ %BEGINACLBLOCK% #!!# ACL that is used after the RCPT command check_recipient: # Exim 3 had no checking on -bs messages, so for compatibility # we accept if the source is local SMTP (i.e. not over TCP/IP). # We do this by testing for an empty sending host field. accept hosts = : # Accept bounces to lists even if callbacks or other checks would fail warn message = X-WhitelistedRCPT-nohdrfromcallback: Yes condition = \ ${if and {{match{$local_part}{(.*)-bounces\+.*}} \ {exists {/usr/local/cpanel/3rdparty/mailman/lists/${lc:$1}/config.pck}}} \ {yes}{no}} accept condition = \ ${if and {{match{$local_part}{(.*)-bounces\+.*}} \ {exists {/usr/local/cpanel/3rdparty/mailman/lists/${lc:$1}/config.pck}}} \ {yes}{no}} # Accept bounces to lists even if callbacks or other checks would fail warn message = X-WhitelistedRCPT-nohdrfromcallback: Yes condition = \ ${if and {{match{$local_part}{(.*)-bounces\+.*}} \ {exists {/usr/local/cpanel/3rdparty/mailman/lists/${lc:$1}_${lc:$domain}/config.pck}}} \ {yes}{no}} accept condition = \ ${if and {{match{$local_part}{(.*)-bounces\+.*}} \ {exists {/usr/local/cpanel/3rdparty/mailman/lists/${lc:$1}_${lc:$domain}/config.pck}}} \ {yes}{no}} #if it gets here it isn't mailman #sender verifications are required for all messages that are not sent to lists require verify = sender/callout accept domains = +local_domains endpass #recipient verifications are required for all messages that are not sent to the local machine #this was done at multiple users requests message = "The recipient cannot be verified. Please check all recipients of this message to verify they are valid." verify = recipient accept domains = +relay_domains warn message = ${perl{popbeforesmtpwarn}{$sender_host_name}} hosts = +relay_hosts accept hosts = +relay_hosts warn message = ${perl{popbeforesmtpwarn}{$sender_host_address}} condition = ${perl{checkrelayhost}{$sender_host_address}} accept condition = ${perl{checkrelayhost}{$sender_host_address}} accept hosts = +auth_relay_hosts endpass message = $sender_fullhost is currently not permitted to \ relay through this server. Perhaps you \ have not logged into the pop/imap server in the \ last 30 minutes or do not have SMTP Authentication turned on in your email client. authenticated = * deny message = $sender_fullhost is currently not permitted to \ relay through this server. Perhaps you \ have not logged into the pop/imap server in the \ last 30 minutes or do not have SMTP Authentication turned on in your email client. #!!# ACL that is used after the DATA command check_message: # Enabling this will make the server non-rfc compliant # require verify = header_sender deny message = This message contains a virus or other harmful content ($malware_name) malware = * demime = * accept %ENDACLBLOCK% @ENDACL@ begin authenticators fixed_plain: driver = plaintext public_name = PLAIN server_prompts = : server_condition = "${perl{checkuserpass}{$1}{$2}{$3}}" server_set_id = $2 fixed_login: driver = plaintext public_name = LOGIN server_prompts = "Username:: : Password::" server_condition = "${perl{checkuserpass}{$1}{$2}}" server_set_id = $1 @AUTH@ ###################################################################### # REWRITE CONFIGURATION # ###################################################################### # There are no rewriting specifications in this default configuration file. begin rewrite @REWRITE@ #!!#######################################################!!# #!!# Here follow routers created from the old routers, #!!# #!!# for handling non-local domains. #!!# #!!#######################################################!!# begin routers #!!# If we are trying to deliver to a remote mailman domain that is on the localhost #!!# let it go though even if its not in /etc/localdomains since mailman will eat #!!# up 100% of the cpu if we don't mailman_virtual_router: driver = accept require_files = /usr/local/cpanel/3rdparty/mailman/lists/${lc::$local_part}_${lc::$domain}/config.pck local_part_suffix_optional local_part_suffix = -admin : \ -bounces : -bounces+* : \ -confirm : -confirm+* : \ -join : -leave : \ -owner : -request : \ -subscribe : -unsubscribe transport = mailman_virtual_transport mailman_virtual_router_nodns: driver = accept require_files = /usr/local/cpanel/3rdparty/mailman/lists/${lc::$local_part}/config.pck condition = \ ${if or {{match{$local_part}{.*_.*}} \ {eq{$local_part}{mailman}}} \ {1}{0}} local_part_suffix_optional local_part_suffix = -admin : \ -bounces : -bounces+* : \ -confirm : -confirm+* : \ -join : -leave : \ -owner : -request : \ -subscribe : -unsubscribe domains = +local_domains transport = mailman_virtual_transport_nodns ###################################################################### # ROUTERS CONFIGURATION # # Specifies how remote addresses are handled # ###################################################################### # ORDER DOES MATTER # # A remote address is passed to each in turn until it is accepted. # ###################################################################### # Remote addresses are those with a domain that does not match any item # in the "local_domains" setting above. democheck: driver = redirect condition = "${perl{democheck}}" data = :fail: demo accounts are not permitted to relay email @ROUTERSTART@ # This router routes to remote hosts over SMTP using a DNS lookup with # default options. lookuphost: driver = dnslookup condition = "${perl{checkspam}}" domains = ! +local_domains #ignore verisign to prevent waste of bandwidth ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8 : 64.94.110.0/24 headers_add = "${perl{mailtrapheaders}}" transport = remote_smtp # This router routes to remote hosts over SMTP by explicit IP address, # given as a "domain literal" in the form [nnn.nnn.nnn.nnn]. The RFCs # require this facility, which is why it is enabled by default in Exim. # If you want to lock it out, set forbid_domain_literals in the main # configuration section above. literal: driver = ipliteral condition = "${perl{checkspam}}" domains = ! +local_domains headers_add = "${perl{mailtrapheaders}}" transport = remote_smtp #!!# This new router is put here to fail all domains that #!!# were not in local_domains in the Exim 3 configuration. fail_remote_domains: driver = redirect domains = ! +local_domains allow_fail data = :fail: unrouteable mail domain "$domain" @ROUTEREND@ #!!#######################################################!!# #!!# Here follow routers created from the old directors, #!!# #!!# for handling local domains. #!!# #!!#######################################################!!# ###################################################################### # DIRECTORS CONFIGURATION # # Specifies how local addresses are handled # ###################################################################### # ORDER DOES MATTER # # A local address is passed to each in turn until it is accepted. # ###################################################################### # Local addresses are those with a domain that matches some item in the # "local_domains" setting above, or those which are passed back from the # routers because of a "self=local" setting (not used in this configuration). # This director handles aliasing using a traditional /etc/aliases file. # If any of your aliases expand to pipes or files, you will need to set # up a user and a group for these deliveries to run under. You can do # this by uncommenting the "user" option below (changing the user name # as appropriate) and adding a "group" option if necessary. Alternatively, you # can specify "user" on the transports that are used. Note that those # listed below are the same as are used for .forward files; you might want # to set up different ones for pipe and file deliveries from aliases. #spam_filter: # driver = forwardfile # file = /etc/spam.filter # no_check_local_user # no_verify # filter # allow_system_actions @DIRECTORSTART@ virtual_sa_user: driver = accept headers_add="${perl{gensaheader_virtual}{$domain}}" condition = "${perl{checksa_deliver}{$domain}{$local_part}{$received_protocol}}" domains = lsearch;/etc/userdomains retry_use_local_part transport = virtual_sa_userdelivery sa_localuser: driver = accept check_local_user headers_add="${perl{gensaheader}{$local_part}}" condition = "${perl{checkusersa}{$local_part}{$received_protocol}}" domains = ! lsearch;/etc/userdomains transport = local_sa_delivery central_filter: #!!# filter renamed allow_filter driver = redirect allow_filter no_check_local_user file = /etc/vfilters/${domain} file_transport = address_file pipe_transport = virtual_address_pipe reply_transport = address_reply retry_use_local_part user = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}" no_verify central_user_filter: driver = redirect allow_filter check_local_user domains = ! lsearch;/etc/userdomains condition = "${perl{hasfilterfile}{$local_part}}" file = "${perl{getfilterfile}{$local_part}}" file_transport = address_file pipe_transport = virtual_address_pipe reply_transport = address_reply retry_use_local_part no_verify virtual_aliases_nostar: driver = redirect allow_defer allow_fail data = ${if exists{/etc/valiases/$domain}{${lookup{$local_part@$domain}lsearch{/etc/valiases/$domain}}}} file_transport = address_file group = mail pipe_transport = virtual_address_pipe retry_use_local_part domains = lsearch;/etc/localdomains unseen virtual_user_spam: driver = accept condition = "${perl{check_deliver_spam}{$domain}{$local_part}}" headers_remove="x-spam-exim" domains = lsearch;/etc/userdomains retry_use_local_part transport = virtual_userdelivery_spam virtual_user: driver = accept condition = "${perl{check_deliver}{$domain}{$local_part}}" headers_remove="x-spam-exim" domains = lsearch;/etc/userdomains retry_use_local_part transport = virtual_userdelivery has_alias_but_no_mailbox_discarded_to_prevent_loop: driver = redirect condition = "${perl{checkvalias}{$domain}{$local_part}}" domains = lsearch;/etc/localdomains data="#Exim Filter\nseen finish" group = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}" user = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}" allow_filter disable_logging = true virtual_aliases: driver = redirect allow_defer allow_fail data = ${if exists{/etc/valiases/$domain}{${lookup{*}lsearch{/etc/valiases/$domain}}}} file_transport = address_file group = mail pipe_transport = virtual_address_pipe domains = lsearch;/etc/localdomains retry_use_local_part @DIRECTORMIDDLE@ # This director handles forwarding using traditional .forward files. # If you want it also to allow mail filtering when a forward file # starts with the string "# Exim filter", uncomment the "filter" option. # The check_ancestor option means that if the forward file generates an # address that is an ancestor of the current one, the current one gets # passed on instead. This covers the case where A is aliased to B and B # has a .forward file pointing to A. The three transports specified at the # end are those that are used when forwarding generates a direct delivery # to a file, or to a pipe, or sets up an auto-reply, respectively. system_aliases: driver = redirect allow_defer allow_fail data = ${lookup{$local_part}lsearch{/etc/aliases}} file_transport = address_file pipe_transport = address_pipe retry_use_local_part # user = exim local_aliases: driver = redirect allow_defer allow_fail data = ${lookup{$local_part}lsearch{/etc/localaliases}} file_transport = address_file pipe_transport = address_pipe check_local_user userforward: #!!# filter renamed allow_filter driver = redirect allow_filter check_ancestor check_local_user domains = ! lsearch;/etc/userdomains no_expn file = $home/.forward file_transport = address_file pipe_transport = address_pipe reply_transport = address_reply no_verify localuser_spam: driver = accept headers_remove="x-spam-exim" condition = "${perl{checkuserspambox}{$local_part}}" check_local_user domains = ! lsearch;/etc/userdomains transport = local_delivery_spam localuser: driver = accept headers_remove="x-spam-exim" check_local_user domains = ! lsearch;/etc/userdomains transport = local_delivery # This director matches local user mailboxes. @DIRECTOREND@ ###################################################################### # TRANSPORTS CONFIGURATION # ###################################################################### # ORDER DOES NOT MATTER # # Only one appropriate transport is called for each delivery. # ###################################################################### # A transport is used only when referenced from a director or a router that # successfully handles an address. # This transport is used for delivering messages over SMTP connections. begin transports @TRANSPORTSTART@ remote_smtp: driver = smtp # This transport is used for local delivery to user mailboxes. By default # it will be run under the uid and gid of the local user, and requires # the sticky bit to be set on the /var/mail directory. Some systems use # the alternative approach of running mail deliveries under a particular # group instead of using the sticky bit. The commented options below show # how this can be done. local_delivery: driver = appendfile delivery_date_add envelope_to_add directory = "${extract{5}{:}{${lookup passwd{$local_part}{$value}}}}/mail" maildir_format group = mail mode = 0660 return_path_add user = $local_part local_delivery_spam: driver = appendfile delivery_date_add envelope_to_add directory = "${extract{5}{:}{${lookup passwd{$local_part}{$value}}}}/mail/.spam" maildir_format group = mail mode = 0660 return_path_add user = $local_part local_sa_delivery: driver = pipe command = /usr/sbin/sendmail -bS use_bsmtp = true transport_filter = "/usr/bin/spamc" user = $local_part group = mail log_output = true current_directory = "/tmp" home_directory = "/tmp" return_fail_output = true return_path_add = false message_prefix = message_suffix = timeout_defer = true transport_filter_timeout = 5m temp_errors = 2 @TRANSPORTMIDDLE@ # This transport is used for handling pipe deliveries generated by alias # or .forward files. If the pipe generates any standard output, it is returned # to the sender of the message as a delivery error. Set return_fail_output # instead of return_output if you want this to happen only when the pipe fails # to complete normally. You can set different transports for aliases and # forwards if you want to - see the references to address_pipe below. address_pipe: driver = pipe return_output virtual_address_pipe: driver = pipe group = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}" return_output user = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}" # This transport is used for handling deliveries directly to files that are # generated by aliassing or forwarding. address_file: driver = appendfile delivery_date_add envelope_to_add return_path_add # This transport is used for handling autoreplies generated by the filtering # option of the forwardfile director. virtual_sa_userdelivery: driver = pipe command = /usr/sbin/sendmail -bS use_bsmtp = true transport_filter = "/usr/bin/spamc" user = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}" group = mail log_output = true current_directory = "/tmp" home_directory = "/tmp" return_fail_output = true return_path_add = false message_prefix = message_suffix = timeout_defer = true transport_filter_timeout = 5m temp_errors = 2 virtual_userdelivery_spam: driver = appendfile delivery_date_add envelope_to_add directory = "${extract{5}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/mail/${domain}/${local_part}/.spam" maildir_format group = mail mode = 0660 quota = "${if exists{${extract{5}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/etc/${domain}/quota} {${lookup{$local_part}lsearch*{${extract{5}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/etc/${domain}/quota}{$value}}} {}}" quota_directory = "${extract{5}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/mail/${domain}/${local_part}" return_path_add user = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}" virtual_userdelivery: driver = appendfile delivery_date_add envelope_to_add directory = "${extract{5}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/mail/${domain}/${local_part}" maildir_format group = mail mode = 0660 quota = "${if exists{${extract{5}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/etc/${domain}/quota} {${lookup{$local_part}lsearch*{${extract{5}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/etc/${domain}/quota}{$value}}} {}}" quota_directory = "${extract{5}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/mail/${domain}/${local_part}" return_path_add user = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}" address_reply: driver = autoreply mailman_virtual_transport: driver = pipe command = /usr/local/cpanel/3rdparty/mailman/mail/mailman \ '${if def:local_part_suffix \ {${sg{$local_part_suffix}{-(\\w+)(\\+.*)?}{\$1}}} \ {post}}' \ ${lc:$local_part}_${lc:$domain} current_directory = /usr/local/cpanel/3rdparty/mailman home_directory = /usr/local/cpanel/3rdparty/mailman user = mailman group = mailman mailman_virtual_transport_nodns: driver = pipe command = /usr/local/cpanel/3rdparty/mailman/mail/mailman \ '${if def:local_part_suffix \ {${sg{$local_part_suffix}{-(\\w+)(\\+.*)?}{\$1}}} \ {post}}' \ ${lc:$local_part} current_directory = /usr/local/cpanel/3rdparty/mailman home_directory = /usr/local/cpanel/3rdparty/mailman user = mailman group = mailman @TRANSPORTEND@ ###################################################################### # RETRY CONFIGURATION # ###################################################################### # This single retry rule applies to all domains and all errors. It specifies # retries every 15 minutes for 2 hours, then increasing retry intervals, # starting at 1 hour and increasing each time by a factor of 1.5, up to 16 # hours, then retries every 8 hours until 4 days have passed since the first # failed delivery. # Domain Error Retries # ------ ----- ------- begin retry @RETRYSTART@ * * F,2h,15m; G,16h,1h,1.5; F,4d,8h @RETRYEND@ # End of Exim 4 configuration