Built-in SRS support under Advanced Exim Configuration Editor in WHM.

4u123 ●

Like

URL

Tony Kammerer ●

Would love to see this implemented soon. SRS support is already included in the cPanel Exim RPM but the configuration options need added to Advanced Exim Configuration Editor in WHM (or even a simple checkbox in Basic Editor).

Without SRS, email forwarders to any mail server that follows SPF will either discard (hard fail) or likely place in spam folder (soft fail) any mails that were originally sent from a domain specifying SPF records.

URL

1

Mary Wilslake ●

at least just add these lines by default in exim configuration file

http://mg.iceni.pl/archives/11

URL

2

Ben Tasker ●

I'd like to see this implemented too, more and more hosts are enabling SPF so the forwarder feature is soon going to be completely useless unless we can enable SRS

URL

1

Th om ●

Request: SRS checkbox in Exim > Basic > Security

URL

1

theG ●

Waiting to see the feature implemented in next release !

URL

1

ethical ●

yes this is a must with SPF starting to be used more widely.

URL

1

Denver Prophit Jr. ●

I'd also like the zone file to add RP much easier like a wizard and possibly HINFO

URL

1

David Demers ●

Really looking forward to when this will be added as a feature. Definitly a must have for an SPF world.

URL

1

Joe B ●

Would definitely like to see this feature added to help prevent forwarding issues.

URL

1

Monarobase ●

We would like this feature too.

URL

1

MediaServe ●

This needs to be implemented yesterday!

URL

1

mtindor ●

This feature request is a must. SRS is extremely effective, and a must if you really want people to be able to use forwarders.

URL

1

Scott Neader ●

Yes, this is needed. See http://www.openspf.org/SRS if you want to understand what SRS is and why it is a requirement today.

URL

1

openaccess ●

SPF and other anti-spam circumvention/domain verification methods are extremely vital, and SRS must be in place to allow forwarders to behave normally.

URL

1

John Hamann ●

Please add SRS!

URL

1

SOHO Prospecting (sohopros) ●

Yes - we had dkim problems until installing SRS (sender rewrite). please add to the framework.

URL

1

rob furness ●

Plus One, this would help me keep details of where may mails are forwarded private

URL

1

Studio4web ●

SRS is definitely needed, please add this option. We have many clients that are using forwarders and they have problems because SPF check does not pass without SRS. So only option for us is to disable SPF check (and increase number of spoofed spam mails).

URL

1

psnabe ●

SRS is really needed. Hope you will soon get this feature.

URL

1

kdean ●

This should really be implemented as soon as possible since forwarding as it stands now is becoming more and more of an issue. I've had to block my user's ability to forward to certain email services because they were blocking us as spammers due to forwarded email. Get on this pronto!

URL

1

double a ron ●

+1, native SRS support needed.

URL

1

mtindor ●

For nearly a year I've had SRS enabled on the cPanel servers I maintain. Of course, when Exim gets updated I have to redo the configuration.

But it only takes adding seven lines of code to Exim, and I have never had a single problem with forwarded emails not being delivered / being rejected since implementation. I really can't think of any good reason why SRS support is not available in cPanel at this point.

A search engine search for "cpanel SRS support" will yield instructions for manually activating SRS within Exim on a cPanel server.

M

URL

1

Post ●

Would be nice to have SRS enabled by default or by using an option in WHM. Many of my clients have problems with their email forwarders to other domains which have SPF configured. This is more and more common nowadays.

URL

1

spellinn ●

I agree. A major ISP in the UK have implemented strict SPF checking which is breaking email for anyone using email forwarding. SRS would help keep those users happy.

URL

1

Zed Six ●

Would be nice if this was added

URL

1

Keith Rocheck ●

People who use their personal Gmail for POP3/SMTP of a cPanel account see SPF softfails a lot and legitimate email goes to their Gmail SPAM. We really need SRS enabled by default in order for SPF/DKIM to be useful on cPanel installs.

URL

1

Al Gilson ●

Like to add my name to this request. Our mail forwarders have been rejecting SPF mail as:

SMTP error from remote mail server after MAIL FROM:<<someuser>@hotmail.com> SIZE=4498: 550 Unable to relay for hotmail.com

URL

1

Ben Blakely ●

This issue of SRS support keeps coming up on various cPanel servers I help to administer. The changes in exim.conf are pretty simple, and it would be extremely useful for this to be a built-in feature, rather than something I have to keep patching for after updates. Email forwarding is basically broken without SRS these days, so I would hope this could be prioritized.

URL

1

Darryl Tse ●

Support for this is well overdue really, would be great to have it implemented from cPanel side.

URL

2

Manuel Sousa ●

Like many have said before this is really easy to setup and a problem is cpanel reseting changes on update. Here's my configuration that's been running for more than one year without issues.

@/scripts/postbuildeximconf

#!/bin/bash
echo "/etc/exim.conf: Adding srs forward to virtual_aliases and virtual_aliases_nostar"
sed -i "/$virtual_aliases_nostar\|virtual_aliases$:/{
N
s/$ *$driver = redirect/\1driver = redirect\n\1srs = forward/g
}" /etc/exim.conf

@/etc/exim.conf.local (can use advanced exim editor to change it). Replace <SECRET_CHANGEME>

...
@CONFIG
hide srs_config = <SECRET_CHANGEME>
...
@DIRECTORMIDDLE@
srs_router:
driver=redirect
srs=reverseandforward
data=${srs_recipient}
...

Think that's it, and this should really be a Cpanel setting instead of a workaround.

URL

1

Al Gilson ●

Manuel, if that works, you've saved me hours of work. Thank you. +1 from me.

URL

1

Zed Six ●

It does work, the only problem is that it will be removed after each cPanel update :/ cPanel will update quite regularly as-well, unless ofcourse if you turn off automatic updates which isn't ideal...

URL

1

Manuel Sousa ●

Zed, that's why i've put the script for: /scripts/postbuildeximcon

That persists on Cpanel updates.

URL

1

mtindor ●

I've been doing this all manually for two years now [or however long Ben has had the info on his site]. Works fine manually.

If /etc/exim.conf.local options persist across Exim updates and if, as you say, /scripts/postbuildeximconf persists across updates, that'll really be great.

Worse case: Doesn't persist. Manuel's instructions certainly work fine for setting it up.

Best case: does persist

However, and this goes without saying, cPanel should have incorporated this in a long time ago. they've known about it -- but I suspect the 'feature request' didn't get enough hits to earn their time. But considering how easy it is to implement, there is no good reason why it hasn't already been put in there by cPanel.

m

URL

1

Zed Six ●

Thanks Manual, adding exim.conf to the top of the file:

hide srs_config = KEY

If you were to go back into the 'Exim Configuration Editor' in WHM -> Save the settings it will remove the line at the top of the exim.conf file - I am presuming you're not updating this file directly via the Exim Configuration Editor?

Reason I ask is because we have several staff members whom generally access/modify settings, so making things as 'straight' forward as possible is ideal.

URL

1

Scott Neader ●

No, do NOT edit exim.conf. Use the Exim Advanced Editor! This is working fine for me and will survive Exim changes/rebuilds. Many thanks, Manuel!!

1) First, edit or create /scripts/postbuildeximconf (chmod 755) and add this:

#!/bin/bash
echo "/etc/exim.conf: Adding srs forward to virtual_aliases and virtual_aliases_nostar"
sed -i "/$virtual_aliases_nostar\|virtual_aliases$:/{
N
s/$ *$driver = redirect/\1driver = redirect\n\1srs = forward/g
}" /etc/exim.conf

2) Next, open Exim Advanced Editor. At the end of the CONFIG section, but before the next section, BEGINACL, click the "Add additional configuration setting" button. This created a new line into the CONFIG section with two form fields with an = between them. In the first field, put "hide srs_config" (no quotes) and in the second field, put your key (64 random chars).

3) Also in Exim Advanced Editor, find "Section: DIRECTORMIDDLE" and add this to the first empty box under it:

srs_router:
driver=redirect
srs=reverseandforward
data=${srs_recipient}

4) Save. This will Rebuild Exim and then Restart.

I did this on a machine that has NEVER had SRS before, and instantly, forwarding tests confirm that it's all working exactly as it should be.

Of note... I never touched any exim conf file. This WILL survive future rebuilds. Try it! Thanks again, Manuel, for the postbuildeximconf idea!!!

- Scott

URL

1

Zed Six ●

Perfect, that worked for me Scott!

URL

1

reholmes27 ●

Scott / Manuel

I've followed your instructions and points 2 & 3 work fine but the postbuildeximconf script doesn't take any effect so the srs = forward doesn't get added. I don't want to edit the exim.conf file directly, any thoughts on why this may be failing?

Thanks

Richard

URL

1

Manuel Sousa ●

Does the script have execute permissions? What happens if you run it manually?

URL

1

reholmes27 ●

Sorry should have tried it manually. I get the following error:

sed: couldn't open temporary file /etc/sedwGKKr9: Permission denied

Running it as root doesn't return an error. It's got 755 permission but I guess it needs to have a different group / owner?

Thanks

Richard

URL

1

reholmes27 ●

Actually it is working it's just the Advanced Editor page doesn't show the changes for some reason. If I open the exim.conf file I can see srs = forward has been added. I also tested by removing those lines and saving again via the advanced editor, when I opened exim.conf the srs = forward was there. I guess it's just not pulling through the updates on the advanced editor page.

Thanks for responding.

Richard

URL

1

Manuel Sousa ●

It doesn't show the change because that script is run after the configuration is saved. This is to ensure that the template from advanced editor gets "fixed".

Glad it worked

URL

1

Hedley Phillips ●

I see this has changed to In Progress which is fantastic news. I stumbled across this issue today and am in the process of manually fixing it as per the previous comments and can't believe that this isn't already in the GUI.

But thank you. Hoping my up vote today tipped the scales!

URL

1

Hedley Phillips ●

Confirm that the manual fix above works. Thank you.

URL

1

bejbi ●

wow. "in progress". Great information.

URL

1

Al Gilson ●

Now that this is completed, do I need to back out the manual changes above? Also, where do I find this in the exim advanced config editor. We're now running 11.52.2.1

URL

1

webmastergreg ●

Hi

you'll find it in the 54 changelog, this is not part of 11.52.2.1

Implemented case CPANEL-2746: Implement SRS support for the Basic Exim Config editor.

URL

1

Alexandre T. ●

Same question, and same major version here (11.52.1).

Before I upgrade to 11.54, should I rollback my custom config?

Anyway, Thanks cPanel for this feature.

URL

1

Al Gilson ●

I just tried to enable this this morning and it killed my exim as there is now:

Error message from syntax check:

2016-02-03 10:41:45 Exim configuration error:

there are two routers called "srs_router"

I'll dig in to it.

URL

1

Al Gilson ●

In the end I did have to back out Manuel's changes above and then disable SRS via the Basic Exim config, save, re-enable SRS, save, and it worked.

URL

1

Manuel Sousa ●

I suggest you disable SRS on cpanel 11.54 before making the changes and then:

1. You'll need to remove the postbuildeximconf created before (or remove the lines if you had it doing something else)

rm /scripts/postbuildeximconf

2. Remove the changed made in advanced director

2.1. Remove the hide_srs line (at top)

hide srs_config = ......

2.2. Remove this srs_router

srs_router:
driver=redirect
srs=reverseandforward
data=${srs_recipient}

3. Activate SRS in basic configuration

URL

Built-in SRS support under Advanced Exim Configuration Editor in WHM.

Replies (35)