John Hesch

Echoing my thoughts and interests

Archive for April, 2007

Whitelist For Exim Sender Verify Callout

Recently a user called and said that he was not receiving emails from a particular person. The email was being sent, but not received by the user. After verifying that the email was not getting caught up in a spam filter, I looked through the Exim logs located at /var/log/exim_mainlog. I found the email was being rejected with the error

could not complete sender verify callout

Exim by default, will check the senders email address and send a callback to the sending server to check and see if the users email address actually exists. In this case the senders email server was not verifying the email address actually exists and so the email was being rejected.

I didn't want to turn off callouts to verify the existence of email senders so I did some digging and found that Exim allows the callout feature to check with a whitelist to see if a callout instruction should be ignored. The instructions were locked within the cPanel forums which require registration and so my Google check didn't find these instructions.

I'm posting them here in hopes that others can find them easily. The original forum post is located here.

Create a file that will be the actual whitelist. In this example it is /etc/whitelist_senders - the addresses need to be listed one entry per line, either the email address or use the wildcard to do an entire domain. To create the file:

CODE:
  1. touch /etc/whitelist_senders

In WHM, in the top most edit box add (if there is anything else in the text box add this bellow it):

CODE:
  1. addresslist whitelist_senders = wildlsearch;/etc/whitelist_senders

Still in WHM. scroll down to where there are three text boxes together. This is the begin ACL section. In the middle box scroll down until you find:

CODE:
  1. #sender verifications are required for all messages that are not sent to lists
  2. require verify = sender/callout
  3. accept domains = +local_domains
  4. endpass

and change it to:

CODE:
  1. #sender verifications are required for all messages that are not sent to lists
  2. deny
  3. !verify   = sender/callout
  4. !senders  = +whitelist_senders
  5. accept domains = +local_domains
  6. endpass

Still in the middle box scroll down to the end and change:

CODE:
  1. #!!# ACL that is used after the DATA command
  2. check_message:
  3. require verify = header_sender
  4. accept

to this:

CODE:
  1. #!!# ACL that is used after the DATA command
  2. check_message:
  3. deny
  4. !verify   = header_sender
  5. !senders  = +whitelist_senders
  6. accept

Save and exit. Now try to send and receive email to make sure everything is still working. If all is ok add the address in question to the whitelist and see if it works.

Then put the sender addresses in the file /etc/whitelist_senders, one per line, e.g.

CODE:
  1. someone@domain1.tld
  2. *@domain2.tld 
04-19-07

Virus Alert

Posted by John

I have been receiving some strange emails lately. The latest one goes like so

Do not reply to this message

Dear Customer,

Our robot has fixed an abnormal activity from your IP address on sending e-mails.
Probably it is connected with the last epidemic of a worm which does not have patches at the moment.
We recommend you to install a firewall module and it will stop e-mail sending. Otherwise your account will be blocked until you do not eliminate
malfunction.

Customer support center robot

A zipped file is attached. I didn't unzip the file but this has all the characteristics of an email virus. As always, never open a file attachment from someone you don't know.

04-18-07

Chuckle of the Day

Posted by John
04-12-07

Want a Good Laugh?

Posted by John

View and update Google Calendar with Thunderbird

If you use Google Calendar and Thunderbird check out the above tutorial for keeping the two in sync. I was able to delete events in Thunderbird and see the changes in GCal, but I wasn't able to move an event to a different day in Thunderbird and have it moved in GCal. The tutorail uses Mozilla Lightning and Thunderbird 2 RC1, so there are bound to be a few problems up front.

Internet ad spending to grow 28.2% globally in 2007

ZenithOptimedia forecasts that worldwide spending on internet advertising will grow 28.2% in 2007, compared with a rise of just 3.7% in the rest of the advertising market.

activeCollab is an easy to use, web based, open source collaboration and project management tool. Set up an environment where you, your team and your clients can collaborate on active projects using a set of simple, functional tools. 100% free.

I've been using activeCollab for a month or so and it is the most adaptable, easy-to-use project management application I've ever used. Unfortunately the developer is closing up the source as of v1.0, but 0.71 is still open source and hopefully some developers will take that code and begin a new branch of activeCollab.

There is a close-knit active community that is hacking the 0.71 code to add functionality but it hasn't taken off like I'd hoped.

phpsh -- an interactive shell for php

phpsh is an interactive shell for php that features readline history, tab completion, quick access to documentation. It was developed at Facebook and ironically, is written mostly in python. It is open source.

Graytone | Design: Tenant Report