FM / etc

/etc

Name	Size	Mode	Actions
alternatives/	-	0755	rm
apache2/	-	0755	rm
audit/	-	0750	rm
authselect/	-	0755	rm
bash_completion.d/	-	0755	rm
binfmt.d/	-	0755	rm
bluetooth/	-	0755	rm
cagefs/	-	0755	rm
chkconfig.d/	-	0755	rm
chkserv.d/	-	0755	rm
cifs-utils/	-	0755	rm
cl.selector/	-	0755	rm
cloud/	-	0755	rm
cpanel/	-	0751	rm
cron.d/	-	0755	rm
cron.daily/	-	0755	rm
cron.hourly/	-	0755	rm
cron.monthly/	-	0755	rm
cron.weekly/	-	0755	rm
crypto-policies/	-	0755	rm
csf/	-	0600	rm
dbus-1/	-	0755	rm
default/	-	0755	rm
depmod.d/	-	0755	rm
dhcp/	-	0750	rm
dnf/	-	0755	rm
dovecot/	-	0755	rm
dpkg/	-	0755	rm
dracut.conf.d/	-	0755	rm
environment-modules/	-	0755	rm
exports.d/	-	0755	rm
firewalld/	-	0750	rm
fonts/	-	0755	rm
fwupd/	-	0755	rm
gcrypt/	-	0755	rm
gnupg/	-	0755	rm
groff/	-	0755	rm
grub.d/	-	0700	rm
gss/	-	0755	rm
gssproxy/	-	0755	rm
ImageMagick-6/	-	0755	rm
imunify-agent-proxy/	-	0700	rm
imunify360/	-	0755	rm
init.d/	-	0755	rm
iproute2/	-	0755	rm
kdump/	-	0755	rm
kernel/	-	0755	rm
keyutils/	-	0755	rm
krb5.conf.d/	-	0755	rm
ld.so.conf.d/	-	0755	rm
libblockdev/	-	0755	rm
libibverbs.d/	-	0755	rm
libnl/	-	0755	rm
libpaper.d/	-	0755	rm
libreport/	-	0755	rm
libssh/	-	0755	rm
logrotate.d/	-	0755	rm
mail/	-	0755	rm
microcode_ctl/	-	0755	rm
modprobe.d/	-	0755	rm
modulefiles/	-	0755	rm
modules-load.d/	-	0755	rm
motd.d/	-	0755	rm
my.cnf.d/	-	0755	rm
named/	-	0750	rm
needrestart/	-	0755	rm
NetworkManager/	-	0755	rm
nftables/	-	0700	rm
openldap/	-	0755	rm
opt/	-	0755	rm
pam.d/	-	0755	rm
pdns/	-	0755	rm
pkcs11/	-	0755	rm
pki/	-	0755	rm
pm/	-	0755	rm
polkit-1/	-	0755	rm
popt.d/	-	0755	rm
profile.d/	-	0755	rm
proftpd/	-	0751	rm
pure-ftpd/	-	0755	rm
qemu-ga/	-	0755	rm
qemu-kvm/	-	0755	rm
rc.d/	-	0755	rm
rc0.d/	-	0755	rm
rc1.d/	-	0755	rm
rc2.d/	-	0755	rm
rc3.d/	-	0755	rm
rc4.d/	-	0755	rm
rc5.d/	-	0755	rm
rc6.d/	-	0755	rm
request-key.d/	-	0755	rm
rhsm/	-	0755	rm
rpm/	-	0755	rm
rsyslog.d/	-	0755	rm
rwtab.d/	-	0755	rm
sasl2/	-	0755	rm
scl/	-	0755	rm
security/	-	0755	rm
selinux/	-	0755	rm
skel/	-	0755	rm
smartmontools/	-	0755	rm
ssh/	-	0755	rm
ssl/	-	0755	rm
sssd/	-	0700	rm
stunnel/	-	0755	rm
sudoers.d/	-	0750	rm
sw-engine/	-	0755	rm
sysconfig/	-	0755	rm
sysctl.d/	-	0755	rm
systemd/	-	0755	rm
terminfo/	-	0755	rm
tmpfiles.d/	-	0755	rm
tuned/	-	0755	rm
udev/	-	0755	rm
udisks2/	-	0755	rm
unbound/	-	0755	rm
valiases/	-	0751	rm
vdomainaliases/	-	0751	rm
vfilters/	-	0751	rm
X11/	-	0755	rm
xdg/	-	0755	rm
xinetd.d/	-	0755	rm
yum/	-	0755	rm
yum.repos.d/	-	0755	rm
.pwd.lock	0	0600	edit dl rm
.updated	208	0644	edit dl rm
.whostmgrft	0	0644	edit dl rm
adjtime	16	0644	edit dl rm
agent360.ini	817	0600	edit dl rm
aliases	1529	0644	edit dl rm
almalinux-release	42	0644	edit dl rm
almalinux-release-upstream	52	0644	edit dl rm
anacrontab	541	0644	edit dl rm
antivirus.exim	10634	0644	edit dl rm
at.deny	1	0644	edit dl rm
backupmxhosts	0	0640	edit dl rm
bashrc	3718	0644	edit dl rm
bindresvport.blacklist	535	0644	edit dl rm
blocked_incoming_email_countries	0	0640	edit dl rm
blocked_incoming_email_country_ips	0	0640	edit dl rm
blocked_incoming_email_domains	0	0640	edit dl rm
centos-release	42	0644	edit dl rm
chrony.conf	1088	0644	edit dl rm
chrony.keys	540	0640	edit dl rm
cpanel_exim_system_filter	12144	0644	edit dl rm
cpanel_mail_netblocks	15	0640	edit dl rm
cpsources.conf.plugins.example	2843	0644	edit dl rm
cpspamd.conf	0	0644	edit dl rm
cpupdate.conf	111	0644	edit dl rm
cron.deny	7	0644	edit dl rm
crontab	451	0644	edit dl rm
crypttab	0	0600	edit dl rm
csh.cshrc	1629	0644	edit dl rm
csh.login	1087	0644	edit dl rm
dbowners	32	0640	edit dl rm
demodomains	0	0640	edit dl rm
demouids	0	0640	edit dl rm
demousers	0	0640	edit dl rm
digestshadow	0	0640	edit dl rm
DIR_COLORS	4536	0644	edit dl rm
DIR_COLORS.256color	5214	0644	edit dl rm
DIR_COLORS.lightbgcolor	4618	0644	edit dl rm
domainips	15	0644	edit dl rm
domainusers	29	0640	edit dl rm
domain_remote_mx_ips.cdb	2536	0640	edit dl rm
dracut.conf	117	0644	edit dl rm
email_send_limits	1233	0640	edit dl rm
environment	0	0644	edit dl rm
ethertypes	1362	0644	edit dl rm
exim.conf	92856	0644	edit dl rm
exim.conf.dist	26408	0644	edit dl rm
exim.conf.localopts	2110	0644	edit dl rm
exim.conf.localopts.shadow	0	0600	edit dl rm
exim.conf.mailman2.dist	29729	0644	edit dl rm
exim.conf.mailman2.exiscan.dist	29904	0644	edit dl rm
exim.crt	5679	0660	edit dl rm
exim.key	1679	0660	edit dl rm
exim.pl	231	0644	edit dl rm
exim.pl.local	498977	0644	edit dl rm
eximmailtrap	0	0644	edit dl rm
eximrejects	163	0644	edit dl rm
eximrejects.rpmorig	367	0644	edit dl rm
exim_suspended_list	715	0640	edit dl rm
exim_trusted_configs	24	0644	edit dl rm
exports	0	0644	edit dl rm
favicon.png	226	0644	edit dl rm
filesystems	66	0644	edit dl rm
fstab	721	0644	edit dl rm
ftpd-ca.pem	0	0660	edit dl rm
ftpd-rsa-key.pem	1679	0660	edit dl rm
ftpd-rsa.pem	5679	0660	edit dl rm
GREP_COLORS	94	0644	edit dl rm
greylist_common_mail_providers	70022	0644	edit dl rm
greylist_trusted_netblocks	0	0640	edit dl rm
group	1148	0644	edit dl rm
group-	1109	0644	edit dl rm
grub2-efi.cfg	-	0	edit dl rm
grub2.cfg	-	0	edit dl rm
gshadow	951	0600	edit dl rm
gshadow-	925	0000	edit dl rm
host.conf	9	0644	edit dl rm
hostname	25	0644	edit dl rm
hosts	200	0644	edit dl rm
idmapd.conf	4849	0644	edit dl rm
inittab	490	0644	edit dl rm
inputrc	942	0644	edit dl rm
ipaddrpool	0	0644	edit dl rm
ips	44	0644	edit dl rm
issue	23	0644	edit dl rm
issue.net	22	0644	edit dl rm
kdump.conf	8550	0644	edit dl rm
krb5.conf	812	0644	edit dl rm
ld.so.cache	30311	0644	edit dl rm
ld.so.conf	28	0644	edit dl rm
libaudit.conf	191	0640	edit dl rm
libuser.conf	2391	0644	edit dl rm
localaliases	24	0644	edit dl rm
localdomains	697	0640	edit dl rm
localdomains.rpmnew	0	0644	edit dl rm
locale.conf	17	0644	edit dl rm
localtime	127	0644	edit dl rm
lock_manager_local.ini	829	0644	edit dl rm
login.defs	3076	0644	edit dl rm
logrotate.conf	438	0644	edit dl rm
machine-id	33	0444	edit dl rm
magic	111	0644	edit dl rm
mail.rc	1968	0644	edit dl rm
mailbox_formats	38	0640	edit dl rm
mailcap	272	0644	edit dl rm
mailhelo	27	0640	edit dl rm
mailips	0	0640	edit dl rm
makedumpfile.conf.sample	5122	0644	edit dl rm
man_db.conf	5165	0644	edit dl rm
mime.types	60352	0644	edit dl rm
mke2fs.conf	1108	0644	edit dl rm
motd	0	0644	edit dl rm
mtab	0	0444	edit dl rm
my.cnf	403	0644	edit dl rm
named.conf	5563	0644	edit dl rm
named.conf.cache	412	0600	edit dl rm
named.conf.precpanelinstall	1723	0640	edit dl rm
named.conf.prerebuilddnsconfig	3917	0644	edit dl rm
named.conf.rebuilddnsconfig	3917	0644	edit dl rm
named.conf.zonedir.cache	57	0600	edit dl rm
named.rfc1912.zones	1029	0640	edit dl rm
named.root.key	1070	0644	edit dl rm
nanorc	9450	0644	edit dl rm
neighbor_netblocks	15	0640	edit dl rm
netconfig	767	0644	edit dl rm
networks	58	0644	edit dl rm
nfs.conf	1251	0644	edit dl rm
nfsmount.conf	3606	0644	edit dl rm
nocgiusers	0	0640	edit dl rm
nscd.conf	2729	0644	edit dl rm
nsswitch.conf	2120	0644	edit dl rm
nsswitch.conf.bak	2197	0644	edit dl rm
nsswitch.conf.save_by_rpm	2215	0644	edit dl rm
odbc.ini	0	0644	edit dl rm
odbcinst.ini	1125	0644	edit dl rm
os-release	585	0644	edit dl rm
outgoing_mail_hold_users	0	0640	edit dl rm
outgoing_mail_suspended_users	0	0640	edit dl rm
papersize	68	0644	edit dl rm
passwd	2871	0644	edit dl rm
passwd-	2871	0644	edit dl rm
passwd.cache	16795	0600	edit dl rm
passwd.nouids.cache	8780	0600	edit dl rm
printcap	233	0644	edit dl rm
profile	2924	0644	edit dl rm
protocols	6568	0644	edit dl rm
pure-ftpd.conf	11065	0600	edit dl rm
pure-ftpd.pem	7358	0660	edit dl rm
rc.local	474	0644	edit dl rm
recent_authed_mail_ips	29	0644	edit dl rm
recent_authed_mail_ips_users	86	0644	edit dl rm
recent_recipient_mail_server_ips	341	0640	edit dl rm
redhat-release	42	0644	edit dl rm
relayhosts	29	0644	edit dl rm
relayhostsusers	86	0644	edit dl rm
remotedomains	0	0644	edit dl rm
request-key.conf	1787	0644	edit dl rm
resolv.conf	79	0644	edit dl rm
rpc	1634	0644	edit dl rm
rsyslog.conf	3295	0644	edit dl rm
secondarymx	0	0640	edit dl rm
senderverifybypasshosts	0	0640	edit dl rm
services	692252	0644	edit dl rm
sestatus.conf	216	0644	edit dl rm
shadow	1323	0600	edit dl rm
shadow-	1323	0600	edit dl rm
shadow.nouids.cache	8947	0600	edit dl rm
shells	128	0644	edit dl rm
skipsmtpcheckhosts	0	0640	edit dl rm
spammeripblocks	0	0640	edit dl rm
spammers	0	0644	edit dl rm
ssldomains	0	0600	edit dl rm
stats.conf	37	0644	edit dl rm
subgid	0	0644	edit dl rm
subuid	0	0644	edit dl rm
sudo-ldap.conf	3181	0640	edit dl rm
sudo.conf	1786	0640	edit dl rm
sudoers	4328	0440	edit dl rm
sysctl.conf	449	0644	edit dl rm
system-release	42	0644	edit dl rm
system-release-cpe	37	0644	edit dl rm
tcsd.conf	7046	0640	edit dl rm
trueuserdomains	29	0640	edit dl rm
trueuserowners	15	0640	edit dl rm
trusted-key.key	375	0644	edit dl rm
trustedmailhosts	0	0640	edit dl rm
trusted_mail_users	0	0640	edit dl rm
userbwlimits	37	0640	edit dl rm
userdatadomains	4340	0640	edit dl rm
userdatadomains.json	4705	0640	edit dl rm
userdomains	941	0640	edit dl rm
userips	37	0640	edit dl rm
userplans	32	0640	edit dl rm
vconsole.conf	28	0644	edit dl rm
vimrc	1982	0644	edit dl rm
virc	1204	0644	edit dl rm
webspam	0	0644	edit dl rm
wgetrc	4925	0644	edit dl rm
wwwacct.conf	289	0644	edit dl rm
wwwacct.conf.cache	322	0644	edit dl rm
wwwacct.conf.shadow.cache	322	0600	edit dl rm
xattr.conf	652	0644	edit dl rm
yum.conf	246	0644	edit dl rm

Edit: /etc/exim.conf.mailman2.exiscan.dist (29904B)

#!!# cPanel Exim 4 Config

@CONFIG@

#!!# These options specify the Access Control Lists (ACLs) that
#!!# are used for incoming SMTP messages - after the RCPT and DATA
#!!# commands, respectively.

av_scanner = clamd:/var/clamd

acl_smtp_rcpt = check_recipient
acl_smtp_data = check_message

#!!# This setting defines a named domain list called
#!!# local_domains, created from the old options that
#!!# referred to local domains. It will be referenced
#!!# later on by the syntax "+local_domains".
#!!# Other domain and host lists may follow.

domainlist local_domains = lsearch;/etc/localdomains

domainlist relay_domains = lsearch;/etc/localdomains : \
    lsearch;/etc/secondarymx
hostlist relay_hosts = lsearch;/etc/relayhosts : \
    localhost
hostlist auth_relay_hosts = *

######################################################################
#                  Runtime configuration file for Exim               #
######################################################################

# This is a default configuration file which will operate correctly in
# uncomplicated installations. Please see the manual for a complete list
# of all the runtime configuration options that can be included in a
# configuration file. There are many more than are mentioned here. The
# manual is in the file doc/spec.txt in the Exim distribution as a plain
# ASCII file. Other formats (PostScript, Texinfo, HTML) are available from
# the Exim ftp sites. The manual is also online via the Exim web sites.

# This file is divided into several parts, all but the last of which are
# terminated by a line containing the word "end". The parts must appear
# in the correct order, and all must be present (even if some of them are
# in fact empty). Blank lines, and lines starting with # are ignored.

######################################################################
#                    MAIN CONFIGURATION SETTINGS                     #
######################################################################

perl_startup = do '/etc/exim.pl'

#dns_retry = 1
#dns_retrans = 1s

# Specify your host's canonical name here. This should normally be the fully
# qualified "official" name of your host. If this option is not set, the
# uname() function is called to obtain the name.

smtp_banner = "${primary_hostname} ESMTP Exim ${version_number} \
\#${compile_number} ${tod_full} \n\
  We do not authorize the use of this system to transport unsolicited, \n\
  and/or bulk e-mail."

#nobody as the sender seems to annoy people
untrusted_set_sender = *
local_from_check = false

rfc1413_query_timeout = 2s

split_spool_directory = yes

smtp_connect_backlog = 50
smtp_accept_max = 100

# primary_hostname =
deliver_queue_load_max = 3
auto_thaw = 6d
ignore_bounce_errors_after = 7d
timeout_frozen_after = 8d

# Specify the domain you want to be added to all unqualified addresses
# here. An unqualified address is one that does not contain an "@" character
# followed by a domain. For example, "caesar@rome.ex" is a fully qualified
# address, but the string "caesar" (i.e. just a login name) is an unqualified
# email address. Unqualified addresses are accepted only from local callers by
# default. See the receiver_unqualified_{hosts,nets} options if you want
# to permit unqualified addresses from remote sources. If this option is
# not set, the primary_hostname value is used for qualification.

# qualify_domain =

# If you want unqualified recipient addresses to be qualified with a different
# domain to unqualified sender addresses, specify the recipient domain here.
# If this option is not set, the qualify_domain value is used.

# qualify_recipient =

# Specify your local domains as a colon-separated list here. If this option
# is not set (i.e. not mentioned in the configuration file), the
# qualify_recipient value is used as the only local domain. If you do not want
# to do any local deliveries, uncomment the following line, but do not supply
# any data for it. This sets local_domains to an empty string, which is not
# the same as not mentioning it at all. An empty string specifies that there
# are no local domains; not setting it at all causes the default value (the
# setting of qualify_recipient) to be used.

#!!# message_filter renamed system_filter
system_filter = /etc/antivirus.exim
message_body_visible = 5000

# If you want to accept mail addressed to your host's literal IP address, for
# example, mail addressed to "user@[111.111.111.111]", then uncomment the
# following line, or supply the literal domain(s) as part of "local_domains"
# above.

# local_domains_include_host_literals

# No local deliveries will ever be run under the uids of these users (a colon-
# separated list). An attempt to do so gets changed so that it runs under the
# uid of "nobody" instead. This is a paranoic safety catch. Note the default
# setting means you cannot deliver mail addressed to root as if it were a
# normal user. This isn't usually a problem, as most sites have an alias for
# root that redirects such mail to a human administrator.

never_users = root

# The use of your host as a mail relay by any host, including the local host
# calling its own SMTP port, is locked out by default. If you want to permit
# relaying from the local host, you should set
#
# host_accept_relay = localhost
#
# If you want to permit relaying through your host from certain hosts or IP
# networks, you need to set the option appropriately, for example
#
#
#
# If you are an MX backup or gateway of some kind for some domains, you must
# set relay_domains to match those domains. This will allow any host to
# relay through your host to those domains.
#
# See the section of the manual entitled "Control of relaying" for more
# information.

# The setting below causes Exim to do a reverse DNS lookup on all incoming
# IP calls, in order to get the true host name. If you feel this is too
# expensive, you can specify the networks for which a lookup is done, or
# remove the setting entirely.

#host_lookup = 0.0.0.0/0

# By default, Exim expects all envelope addresses to be fully qualified, that
# is, they must contain both a local part and a domain. If you want to accept
# unqualified addresses (just a local part) from certain hosts, you can specify
# these hosts by setting one or both of
#
# receiver_unqualified_hosts =
# sender_unqualified_hosts =
#
# to control sender and receiver addresses, respectively. When this is done,
# unqualified addresses are qualified using the settings of qualify_domain
# and/or qualify_recipient (see above).

# Exim contains support for the Realtime Blocking List (RBL) that is being
# maintained as part of the DNS. See http://maps.vix.com/rbl/ for background.
# Uncommenting the first line below will make Exim reject mail from any
# host whose IP address is blacklisted in the RBL at maps.vix.com. Some
# others have followed the RBL lead and have produced other lists: DUL is
# a list of dial-up addresses, and ORBS is a list of open relay systems. The
# second line below checks all three lists.

# rbl_domains = rbl.maps.vix.com
# rbl_domains = rbl.maps.vix.com

# If you want Exim to support the "percent hack" for all your local domains,
# uncomment the following line. This is the feature by which mail addressed
# to x%y@z (where z is one of your local domains) is locally rerouted to
# x@y and sent on. Otherwise x%y is treated as an ordinary local part.

# percent_hack_domains = *

#sender_host_accept = +include_unknown:*
#sender_host_reject = +include_unknown:lsearch*;/etc/spammers

tls_certificate = /etc/exim.crt
tls_privatekey = /etc/exim.key
tls_advertise_hosts = *

helo_accept_junk_hosts = *

smtp_enforce_sync = false

#!!#######################################################!!#
#!!# This new section of the configuration contains ACLs #!!#
#!!# (Access Control Lists) derived from the Exim 3      #!!#
#!!# policy control options.                             #!!#
#!!#######################################################!!#

#!!# These ACLs are crudely constructed from Exim 3 options.
#!!# They are almost certainly not optimal. You should study
#!!# them and rewrite as necessary.

begin acl

@BEGINACL@
%BEGINACLBLOCK%

#!!# ACL that is used after the RCPT command
check_recipient:
  # Exim 3 had no checking on -bs messages, so for compatibility
  # we accept if the source is local SMTP (i.e. not over TCP/IP).
  # We do this by testing for an empty sending host field.
  accept  hosts = :

# Accept bounces to lists even if callbacks or other checks would fail
  warn     message      = X-WhitelistedRCPT-nohdrfromcallback: Yes
           condition    = \
           ${if and {{match{$local_part}{(.*)-bounces\+.*}} \
                     {exists {/usr/local/cpanel/3rdparty/mailman/lists/${lc:$1}/config.pck}}} \
                {yes}{no}}

accept   condition    = \
           ${if and {{match{$local_part}{(.*)-bounces\+.*}} \
                     {exists {/usr/local/cpanel/3rdparty/mailman/lists/${lc:$1}/config.pck}}} \
                {yes}{no}}

accept   condition    = \
           ${if and {{match{$local_part}{(.*)-bounces\+.*}} \
                     {exists {/usr/local/cpanel/3rdparty/mailman/lists/${lc:$1}_${lc:$domain}/config.pck}}} \
                {yes}{no}}

#if it gets here it isn't mailman
                                                                                                                                           
  #sender verifications are required for all messages that are not sent to lists
                                                                                                                                           
  require verify = sender/callout
  accept  domains = +local_domains
  endpass
                                                                                                                                           
  #recipient verifications are required for all messages that are not sent to the local machine
  #this was done at multiple users requests
                                                                                                                                           
  message = "The recipient cannot be verified.  Please check all recipients of this message to verify they are valid."
  verify = recipient
                                                                                                                                           
  accept  domains = +relay_domains

warn  message = ${perl{popbeforesmtpwarn}{$sender_host_name}}
        hosts = +relay_hosts
  accept  hosts = +relay_hosts
                                                                                
  warn  message = ${perl{popbeforesmtpwarn}{$sender_host_address}}
        condition = ${perl{checkrelayhost}{$sender_host_address}}
  accept  condition = ${perl{checkrelayhost}{$sender_host_address}}

accept  hosts = +auth_relay_hosts
          endpass
          message = $sender_fullhost is currently not permitted to \
                        relay through this server. Perhaps you \
                        have not logged into the pop/imap server in the \
                        last 30 minutes or do not have SMTP Authentication turned on in your email client.
          authenticated = *

deny    message = $sender_fullhost is currently not permitted to \
                        relay through this server. Perhaps you \
                        have not logged into the pop/imap server in the \
                        last 30 minutes or do not have SMTP Authentication turned on in your email client.

#!!# ACL that is used after the DATA command
check_message:
#  Enabling this will make the server non-rfc compliant      
#  require verify = header_sender

deny message = This message contains a virus or other harmful content ($malware_name)
       malware = *
       demime = *

%ENDACLBLOCK%
@ENDACL@

begin authenticators

fixed_plain:
driver = plaintext
public_name = PLAIN
server_prompts = : 
server_condition = "${perl{checkuserpass}{$1}{$2}{$3}}"
server_set_id = $2

fixed_login:
driver = plaintext 
public_name = LOGIN 
server_prompts = "Username:: : Password::" 
server_condition = "${perl{checkuserpass}{$1}{$2}}"
server_set_id = $1

@AUTH@

######################################################################
#                      REWRITE CONFIGURATION                         #
######################################################################

# There are no rewriting specifications in this default configuration file.

begin rewrite

@REWRITE@

#!!#######################################################!!#
#!!# Here follow routers created from the old routers,   #!!#
#!!# for handling non-local domains.                     #!!#
#!!#######################################################!!#

begin routers

#!!# If we are trying to deliver to a remote mailman domain that is on the localhost
#!!# let it go though even if its not in /etc/localdomains since mailman will eat
#!!# up 100% of the cpu if we don't

mailman_virtual_router:
    driver = accept
    require_files = /usr/local/cpanel/3rdparty/mailman/lists/${lc::$local_part}_${lc::$domain}/config.pck
    local_part_suffix_optional
    local_part_suffix = -admin     : \
			-bounces   : -bounces+* : \
                        -confirm   : -confirm+* : \
			-join      : -leave     : \
			-owner	   : -request   : \
			-subscribe : -unsubscribe
    transport = mailman_virtual_transport

mailman_virtual_router_nodns:
    driver = accept
    require_files = /usr/local/cpanel/3rdparty/mailman/lists/${lc::$local_part}/config.pck
    condition    = \
           ${if or {{match{$local_part}{.*_.*}} \
                     {eq{$local_part}{mailman}}} \
                {1}{0}}
    local_part_suffix_optional
    local_part_suffix = -admin     : \
			-bounces   : -bounces+* : \
                        -confirm   : -confirm+* : \
			-join      : -leave     : \
			-owner	   : -request   : \
			-subscribe : -unsubscribe
    domains = +local_domains
    transport = mailman_virtual_transport_nodns

######################################################################
#                      ROUTERS CONFIGURATION                         #
#            Specifies how remote addresses are handled              #
######################################################################
#                          ORDER DOES MATTER                         #
#  A remote address is passed to each in turn until it is accepted.  #
######################################################################

# Remote addresses are those with a domain that does not match any item
# in the "local_domains" setting above.

democheck:
  driver = redirect
  condition = "${perl{democheck}}"
  data = :fail: demo accounts are not permitted to relay email

@ROUTERSTART@

# This router routes to remote hosts over SMTP using a DNS lookup with
# default options.

lookuphost:
  driver = dnslookup
  condition = "${perl{checkspam}}"
  domains = ! +local_domains
#ignore verisign to prevent waste of bandwidth
  ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8 : 64.94.110.0/24
  headers_add = "${perl{mailtrapheaders}}"
  transport = remote_smtp

# This router routes to remote hosts over SMTP by explicit IP address,
# given as a "domain literal" in the form [nnn.nnn.nnn.nnn]. The RFCs
# require this facility, which is why it is enabled by default in Exim.
# If you want to lock it out, set forbid_domain_literals in the main
# configuration section above.

literal:
  driver = ipliteral
  condition = "${perl{checkspam}}"
  domains = ! +local_domains
  headers_add = "${perl{mailtrapheaders}}"
  transport = remote_smtp

#!!# This new router is put here to fail all domains that
#!!# were not in local_domains in the Exim 3 configuration.

fail_remote_domains:
  driver = redirect
  domains = ! +local_domains
  allow_fail
  data = :fail: unrouteable mail domain "$domain"

@ROUTEREND@

#!!#######################################################!!#
#!!# Here follow routers created from the old directors, #!!#
#!!# for handling local domains.                         #!!#
#!!#######################################################!!#

######################################################################
#                      DIRECTORS CONFIGURATION                       #
#             Specifies how local addresses are handled              #
######################################################################
#                          ORDER DOES MATTER                         #
#   A local address is passed to each in turn until it is accepted.  #
######################################################################

# Local addresses are those with a domain that matches some item in the
# "local_domains" setting above, or those which are passed back from the
# routers because of a "self=local" setting (not used in this configuration).

# This director handles aliasing using a traditional /etc/aliases file.
# If any of your aliases expand to pipes or files, you will need to set
# up a user and a group for these deliveries to run under. You can do
# this by uncommenting the "user" option below (changing the user name
# as appropriate) and adding a "group" option if necessary. Alternatively, you
# can specify "user" on the transports that are used. Note that those
# listed below are the same as are used for .forward files; you might want
# to set up different ones for pipe and file deliveries from aliases.

#spam_filter:
#  driver = forwardfile
#  file = /etc/spam.filter
#  no_check_local_user
#  no_verify
#  filter
#  allow_system_actions

@DIRECTORSTART@

virtual_sa_user:
  driver = accept 
  headers_add="${perl{gensaheader_virtual}{$domain}}"
  condition = "${perl{checksa_deliver}{$domain}{$local_part}{$received_protocol}}"
  domains = lsearch;/etc/userdomains
  retry_use_local_part
  transport = virtual_sa_userdelivery

sa_localuser:
  driver = accept
  check_local_user
  headers_add="${perl{gensaheader}{$local_part}}"
  condition = "${perl{checkusersa}{$local_part}{$received_protocol}}"
  domains = ! lsearch;/etc/userdomains
  transport = local_sa_delivery

central_filter:
#!!# filter renamed allow_filter
  driver = redirect
  allow_filter
  no_check_local_user
  file = /etc/vfilters/${domain}
  file_transport = address_file
  pipe_transport = virtual_address_pipe
  reply_transport = address_reply
  retry_use_local_part
  user = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}"
  no_verify

central_user_filter:  
  driver = redirect  
  allow_filter  
  check_local_user  
  domains = ! lsearch;/etc/userdomains
  condition = "${perl{hasfilterfile}{$local_part}}"  
  file = "${perl{getfilterfile}{$local_part}}"  
  file_transport = address_file  
  pipe_transport = virtual_address_pipe  
  reply_transport = address_reply  
  retry_use_local_part  
  no_verify

virtual_aliases_nostar:
  driver = redirect
  allow_defer
  allow_fail
  data = ${if exists{/etc/valiases/$domain}{${lookup{$local_part@$domain}lsearch{/etc/valiases/$domain}}}}
  file_transport = address_file
  group = mail
  pipe_transport = virtual_address_pipe
  retry_use_local_part
  domains = lsearch;/etc/localdomains
  unseen

virtual_user_spam:
  driver = accept
  condition = "${perl{check_deliver_spam}{$domain}{$local_part}}"
  headers_remove="x-spam-exim"
  domains = lsearch;/etc/userdomains
  retry_use_local_part
  transport = virtual_userdelivery_spam

virtual_user:
  driver = accept
  condition = "${perl{check_deliver}{$domain}{$local_part}}"
  headers_remove="x-spam-exim"
  domains = lsearch;/etc/userdomains
  retry_use_local_part
  transport = virtual_userdelivery

has_alias_but_no_mailbox_discarded_to_prevent_loop:
	driver = redirect
        condition = "${perl{checkvalias}{$domain}{$local_part}}"
 	domains = lsearch;/etc/localdomains
	data="#Exim Filter\nseen finish"
  	group = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}"
	user = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}"
	allow_filter
	disable_logging = true

virtual_aliases:
  driver = redirect
  allow_defer
  allow_fail
  data = ${if exists{/etc/valiases/$domain}{${lookup{*}lsearch{/etc/valiases/$domain}}}}
  file_transport = address_file
  group = mail
  pipe_transport = virtual_address_pipe
  domains = lsearch;/etc/localdomains
  retry_use_local_part

@DIRECTORMIDDLE@

# This director handles forwarding using traditional .forward files.
# If you want it also to allow mail filtering when a forward file
# starts with the string "# Exim filter", uncomment the "filter" option.
# The check_ancestor option means that if the forward file generates an
# address that is an ancestor of the current one, the current one gets
# passed on instead. This covers the case where A is aliased to B and B
# has a .forward file pointing to A. The three transports specified at the
# end are those that are used when forwarding generates a direct delivery
# to a file, or to a pipe, or sets up an auto-reply, respectively.

system_aliases:
  driver = redirect
  allow_defer
  allow_fail
  data = ${lookup{$local_part}lsearch{/etc/aliases}}
  file_transport = address_file
  pipe_transport = address_pipe
  retry_use_local_part
# user = exim

local_aliases:
  driver = redirect
  allow_defer
  allow_fail
  data = ${lookup{$local_part}lsearch{/etc/localaliases}}
  file_transport = address_file
  pipe_transport = address_pipe
  check_local_user

userforward:
#!!# filter renamed allow_filter
  driver = redirect
  allow_filter
  check_ancestor
  check_local_user
  domains = ! lsearch;/etc/userdomains
  no_expn
  file = $home/.forward
  file_transport = address_file
  pipe_transport = address_pipe
  reply_transport = address_reply
  no_verify

localuser_spam:
  driver = accept
  headers_remove="x-spam-exim"
  condition = "${perl{checkuserspambox}{$local_part}}"
  check_local_user
  domains = ! lsearch;/etc/userdomains
  transport = local_delivery_spam

localuser:
  driver = accept
  headers_remove="x-spam-exim"
  check_local_user
  domains = ! lsearch;/etc/userdomains
  transport = local_delivery

# This director matches local user mailboxes.

@DIRECTOREND@

######################################################################
#                      TRANSPORTS CONFIGURATION                      #
######################################################################
#                       ORDER DOES NOT MATTER                        #
#     Only one appropriate transport is called for each delivery.    #
######################################################################

# A transport is used only when referenced from a director or a router that
# successfully handles an address.

# This transport is used for delivering messages over SMTP connections.

begin transports

@TRANSPORTSTART@

remote_smtp:
  driver = smtp

# This transport is used for local delivery to user mailboxes. By default
# it will be run under the uid and gid of the local user, and requires
# the sticky bit to be set on the /var/mail directory. Some systems use
# the alternative approach of running mail deliveries under a particular
# group instead of using the sticky bit. The commented options below show
# how this can be done.

local_delivery:
  driver = appendfile
  delivery_date_add
  envelope_to_add
  directory = "${extract{5}{:}{${lookup passwd{$local_part}{$value}}}}/mail"
  maildir_format
  group = mail
  mode = 0660
  return_path_add
  user = $local_part

local_delivery_spam:
  driver = appendfile
  delivery_date_add
  envelope_to_add
  directory = "${extract{5}{:}{${lookup passwd{$local_part}{$value}}}}/mail/.spam"
  maildir_format
  group = mail
  mode = 0660
  return_path_add
  user = $local_part

local_sa_delivery:
  driver = pipe
  command = /usr/sbin/sendmail -bS
  use_bsmtp = true
  transport_filter = "/usr/bin/spamc"
  user = $local_part
  group = mail
  log_output = true
  current_directory = "/tmp"
  home_directory = "/tmp"
  return_fail_output = true
  return_path_add = false
  message_prefix = 
  message_suffix = 
  timeout_defer = true
  transport_filter_timeout = 5m
  temp_errors = 2

@TRANSPORTMIDDLE@

# This transport is used for handling pipe deliveries generated by alias
# or .forward files. If the pipe generates any standard output, it is returned
# to the sender of the message as a delivery error. Set return_fail_output
# instead of return_output if you want this to happen only when the pipe fails
# to complete normally. You can set different transports for aliases and
# forwards if you want to - see the references to address_pipe below.

address_pipe:
  driver = pipe
  return_output

virtual_address_pipe:
  driver = pipe
  group = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}"
  return_output
  user = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}"

# This transport is used for handling deliveries directly to files that are
# generated by aliassing or forwarding.

address_file:
  driver = appendfile
  delivery_date_add
  envelope_to_add
  return_path_add

# This transport is used for handling autoreplies generated by the filtering
# option of the forwardfile director.

virtual_sa_userdelivery:
  driver = pipe
  command = /usr/sbin/sendmail -bS
  use_bsmtp = true
  transport_filter = "/usr/bin/spamc"
  user = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}"
  group = mail
  log_output = true
  current_directory = "/tmp"
  home_directory = "/tmp"
  return_fail_output = true
  return_path_add = false
  message_prefix = 
  message_suffix = 
  timeout_defer = true
  transport_filter_timeout = 5m
  temp_errors = 2

virtual_userdelivery_spam:
  driver = appendfile
  delivery_date_add
  envelope_to_add
  directory = "${extract{5}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/mail/${domain}/${local_part}/.spam"
  maildir_format
  group = mail
  mode = 0660
  quota = "${if exists{${extract{5}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/etc/${domain}/quota} {${lookup{$local_part}lsearch*{${extract{5}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/etc/${domain}/quota}{$value}}} {}}"
  quota_directory = "${extract{5}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/mail/${domain}/${local_part}"
  return_path_add
  user = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}"

virtual_userdelivery:
  driver = appendfile
  delivery_date_add
  envelope_to_add
  directory = "${extract{5}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/mail/${domain}/${local_part}"
  maildir_format
  group = mail
  mode = 0660
  quota = "${if exists{${extract{5}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/etc/${domain}/quota} {${lookup{$local_part}lsearch*{${extract{5}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/etc/${domain}/quota}{$value}}} {}}"
  quota_directory = "${extract{5}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/mail/${domain}/${local_part}"
  return_path_add
  user = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}"

address_reply:
  driver = autoreply

mailman_virtual_transport:
    driver = pipe
    command = /usr/local/cpanel/3rdparty/mailman/mail/mailman \
              '${if def:local_part_suffix \
                    {${sg{$local_part_suffix}{-(\\w+)(\\+.*)?}{\$1}}} \
                    {post}}' \
              ${lc:$local_part}_${lc:$domain}
    current_directory = /usr/local/cpanel/3rdparty/mailman
    home_directory = /usr/local/cpanel/3rdparty/mailman
    user = mailman
    group = mailman

mailman_virtual_transport_nodns:
    driver = pipe
    command = /usr/local/cpanel/3rdparty/mailman/mail/mailman \
              '${if def:local_part_suffix \
                    {${sg{$local_part_suffix}{-(\\w+)(\\+.*)?}{\$1}}} \
                    {post}}' \
              ${lc:$local_part}
    current_directory = /usr/local/cpanel/3rdparty/mailman
    home_directory = /usr/local/cpanel/3rdparty/mailman
    user = mailman
    group = mailman

@TRANSPORTEND@

######################################################################
#                      RETRY CONFIGURATION                           #
######################################################################

# This single retry rule applies to all domains and all errors. It specifies
# retries every 15 minutes for 2 hours, then increasing retry intervals,
# starting at 1 hour and increasing each time by a factor of 1.5, up to 16
# hours, then retries every 8 hours until 4 days have passed since the first
# failed delivery.

# Domain               Error       Retries
# ------               -----       -------

begin retry

@RETRYSTART@

*                      *           F,2h,15m; G,16h,1h,1.5; F,4d,8h

@RETRYEND@

# End of Exim 4 configuration

cmd: