Email sub-addressing (plus addressing)

benny@cpanel.net ●

cPanel & WHM v58 has just gone to CURRENT and includes this functionality. If you have any questions let me know, or if you experience any problems with it, please do submit a ticket and let us know!

https://documentation.cpanel.net/display/58Docs/58%20Release%20Notes#id-58ReleaseNotes-Emailsubaddresses

1

Guest ●

I fully support this idea. However, I'd like to expand it a bit.

I'm gonna use Gmail's plus addresses in my examples...but this applies to cPanel/WHM domains too.

Currently, with Gmail, you can give out addresses like...

"username" obviously being the username

"plusaddress" being ANY string (or "any string not including an @ (at) sign")

...this works fine, when intelligent people make websites, however -- & far too often -- some websites are written by someone that doesn't know that + (plus) is a VALID char in an E-mail address, so that website rejects "username+plusaddress@gmail.com" as being an invalid E-mail address, even when it is perfectly valid.

I've been planning on suggesting this to Google, for Gmail, but since this issue came up, I'll suggest it here 1st.

I want "plus addressing via subdomains". Continuing the Gmail example...

A user ("username") would be able to set-up...

plusaddress@username.gmail.com

...which would be exactly the same as...

username+plusaddress@gmail.com

...except, it would work on those sites with bad webmasters (where + chars are considered invalid), since in this format, there is no + char!

Following up on that, since "username.gmail.com" is simply too easy to guess/reverse-engineer (a human can figure out how to re-arrange the E-mail address & still spam the user), I'd want the user to be able to turn off "username.gmail.com" & enable "j45kd9dl4l.gmail.com"...the "j45kd9dl4l" being any random string the user wants/chooses. The point here, is that no-one can tell from "j45kd9dl4l" that it points to the "username" user. Then that person gives out an address like...

plusaddress@j45kd9dl4l.gmail.com

...or more specifically...

somebadsite.com@j45kd9dl4l.gmail.com

...that bad site has a valid E-mail, but no-one can reverse engineer it to the real E-mail address.

The user should be able to choose one of the following behaviors for the subdomains they create...

Whitelist (everything @whatever-subdomain.gmail.com is rejected {at SMTP time}, until they add a new address {part before the @ sign} to the whitelist)

Catch all (anything @whatever-subdomain.gmail.com will go to thier E-mail, unless blacklisted)

...in either case, there should be a blacklist, so if a plus address starts getting spam, they can turn it off (by deleting the whitelisted address...or, in the case of "catch all", adding a blacklisted address). Each user should be able to create (at least a few {3?}) subdomains...for example, the user "username" could create "j45kd9dl4l.gmail.com", "dfs8f9s8d0f.gmail.com" & "dgfs8f9dfsd.gmail.com" & they would all be routed to the user "username"'s E-mail box...& they can enable, disable or rename those subdomains at any time.

Remember: this example used Gmail, since this idea was originally for Gmail (& still is). Simply replace "gmail.com" above with "example-cpanel-domain.net" in the case of cPanel/WHM.

This should be a setting cPanel users can enable -- or perhaps even just webmail users -- basically anyone with an E-mail address (regardless of their cPanel/WHM account-having status) should be able to login somewhere, turn this on & manage it -- but perhaps the subdomain-allocation should be handled at the cPanel or WHM user level? -- however, when it is turned on at that level, the "subdomains" should be handled by a wildcard in DNS & then just handled by Exim (or whatever implements this new feature), so you don't need a new DNS entry for every user's subdomains.

So, a cPanel (or WHM) user turns the feature "on", or more specifically, one of the following...

Disabled (no one can use plus addresses)
Default off (people can use plus addresses, but it's not on by default)
Default on (people can use plus addresses, it's on by default, but users can turn it off for their E-mail address)

...then individual "users" (anyone in control of an E-mail address) can manage it -- or turn it off for their address.

I'd also wanna be able to enable/manage this behavior for Forwarders...in the case of Forwarders, they're not real "account"s, but they are E-mail addresses, so I'd wanna be able to manage it somewhere (probably while logged in as a cPanel user) -- so even Forwarders can be protected by plus addressing.

That was incredibly long, & perhaps it should be split to its own idea (which is fine), but it's extremely related to this, so I put it here.

I fully support this idea. However, I'd like to expand it a bit.

I'm gonna use Gmail's plus addresses in my examples...but this applies to cPanel/WHM domains too.

Currently, with Gmail, you can give out addresses like...

"username" obviously being the username

"plusaddress" being ANY string (or "any string not including an @ (at) sign")

...this works fine, when intelligent people make websites, however -- & far too often -- some websites are written by someone that doesn't know that + (plus) is a VALID char in an E-mail address, so that website rejects "username+plusaddress@gmail.com" as being an invalid E-mail address, even when it is perfectly valid.

I've been planning on suggesting this to Google, for Gmail, but since this issue came up, I'll suggest it here 1st.

I want "plus addressing via subdomains". Continuing the Gmail example...

A user ("username") would be able to set-up...

plusaddress@username.gmail.com

...which would be exactly the same as...

username+plusaddress@gmail.com

...except, it would work on those sites with bad webmasters (where + chars are considered invalid), since in this format, there is no + char!

Following up on that, since "username.gmail.com" is simply too easy to guess/reverse-engineer (a human can figure out how to re-arrange the E-mail address & still spam the user), I'd want the user to be able to turn off "username.gmail.com" & enable "j45kd9dl4l.gmail.com"...the "j45kd9dl4l" being any random string the user wants/chooses. The point here, is that no-one can tell from "j45kd9dl4l" that it points to the "username" user. Then that person gives out an address like...

plusaddress@j45kd9dl4l.gmail.com

...or more specifically...

somebadsite.com@j45kd9dl4l.gmail.com

...that bad site has a valid E-mail, but no-one can reverse engineer it to the real E-mail address.

The user should be able to choose one of the following behaviors for the subdomains they create...

Whitelist (everything @whatever-subdomain.gmail.com is rejected {at SMTP time}, until they add a new address {part before the @ sign} to the whitelist)

Catch all (anything @whatever-subdomain.gmail.com will go to thier E-mail, unless blacklisted)

...in either case, there should be a blacklist, so if a plus address starts getting spam, they can turn it off (by deleting the whitelisted address...or, in the case of "catch all", adding a blacklisted address). Each user should be able to create (at least a few {3?}) subdomains...for example, the user "username" could create "j45kd9dl4l.gmail.com", "dfs8f9s8d0f.gmail.com" & "dgfs8f9dfsd.gmail.com" & they would all be routed to the user "username"'s E-mail box...& they can enable, disable or rename those subdomains at any time.

Remember: this example used Gmail, since this idea was originally for Gmail (& still is). Simply replace "gmail.com" above with "example-cpanel-domain.net" in the case of cPanel/WHM.

This should be a setting cPanel users can enable -- or perhaps even just webmail users -- basically anyone with an E-mail address (regardless of their cPanel/WHM account-having status) should be able to login somewhere, turn this on & manage it -- but perhaps the subdomain-allocation should be handled at the cPanel or WHM user level? -- however, when it is turned on at that level, the "subdomains" should be handled by a wildcard in DNS & then just handled by Exim (or whatever implements this new feature), so you don't need a new DNS entry for every user's subdomains.

So, a cPanel (or WHM) user turns the feature "on", or more specifically, one of the following...

Disabled (no one can use plus addresses)
Default off (people can use plus addresses, but it's not on by default)
Default on (people can use plus addresses, it's on by default, but users can turn it off for their E-mail address)

...then individual "users" (anyone in control of an E-mail address) can manage it -- or turn it off for their address.

I'd also wanna be able to enable/manage this behavior for Forwarders...in the case of Forwarders, they're not real "account"s, but they are E-mail addresses, so I'd wanna be able to manage it somewhere (probably while logged in as a cPanel user) -- so even Forwarders can be protected by plus addressing.

That was incredibly long, & perhaps it should be split to its own idea (which is fine), but it's extremely related to this, so I put it here.

URL

3

Adam Connor ●

I don't think it's useful to go further than GMail, but I definitely think that plus addressing for cpanel would solve a lot of problems for me.

URL

1

vltech ●

Plus addressing is a powerful anti-phishing tool for users. I've been using it for about 15 years now, and I'd never go back. Gmail and Outlook.com both support it, among others. I wouldn't be willing to use a cPanel-managed domain for my email if I hadn't figured out how to implement it with baling wire, chewing gum, procmail, and perl. Subaddressing is becoming a standard feature of email systems; it's boggling to me that cPanel doesn't support it yet.

URL

1

James Hess ●

I would like to have the same thing, but Qmail-style DASH addressing, instead of using a Plus symbol.

client-465@example.comSame concept, with preference for the original "-" (hyphen as separator) instead of the "+" symbol used by Gmail.

URL

1

Monarobase ●

We've had some requests for this and would defenetly like plus addressing. With + and not - as - doesn't mean a folder to most users. Unless this could be an option in the email filters

URL

1

PioneerWebsites ●

As we lose email customers to Gmail for issues like plus subaddressing, we risk losing customers, let alone customers for other services.

Our loss is cPanel's loss in the end; there's good reason for this feature to be considered.

URL

1

PioneerWebsites ●

For anyone interested in a little baling wire & chewing gum, account level filtering will deliver mail to a single address if you use a rule where To Matches Regex:

admin.+

...where admin is the main address you want to accept subaddresses for. However, this only works for local mail delivery, not for mail from external servers.

URL

1

Henri ●

Some nice ideas here.

What do you think cPanel? When can we get some of it?

URL

1

Nic Jones ●

There was a script posted here:

http://forums.cpanel.net/f145/case-16578-get-serious-about-getting-subaddress-plus-addressing-support-exim-100893-p2.html#post1234072

That sortof worked, but I had CPanel complain each day about the config file having been changed.

Instead, I applied the same changes manually. I went to WHM, Exim Configuration Manager, then the Advanced Editor tab and set some of the variables as shown below.

The variables in the editor allow you to insert new rules but you can't change rules that are already in the config file. What I did to overcome this was to use .ifdef and .endif statements to effectively comment out sections between configurable variables.

The list of things I changed was:

PREFILTER:

#
# Account level filtering for everything but the main account
#
central_filter:
driver = redirect
local_part_suffix = +*
local_part_suffix_optional
allow_filter
allow_fail
forbid_filter_run
forbid_filter_perl
forbid_filter_lookup
forbid_filter_readfile
forbid_filter_readsocket
no_check_local_user
require_files = "+/etc/vfilters/${domain}"
condition = "${extract{size}{${stat:/etc/vfilters/${domain}}}}"
file = /etc/vfilters/${domain}
file_transport = address_file
directory_transport = address_directory
domains = +user_domains
pipe_transport = ${if forall{/bin/cagefs_enter:/usr/sbin/cagefsctl}{exists{$item}}{cagefs_virtual_address_pipe}{${if match{${extract{6}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}}{\N(jail|no)shell\N}{jailed_virtual_address_pipe}{virtual_address_pipe}}}}
reply_transport = address_reply
router_home_directory = ${extract{5}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}
user = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}"
no_verify
#
# Account level filtering for the main account
#
# checks /etc/vfilters/maindomain if its a localuser (ie main acct)
#
mainacct_central_user_filter:
driver = redirect
local_part_suffix = +*
local_part_suffix_optional
allow_filter
allow_fail
forbid_filter_run
forbid_filter_perl
forbid_filter_lookup
forbid_filter_readfile
forbid_filter_readsocket
check_local_user
domains = ! +user_domains
condition = ${if eq {${lookup{$local_part}lsearch{/etc/domainusers}{$value}}}{}{0}{${if exists{/etc/vfilters/${lookup{$local_part}lsearch{/etc/domainusers}{$value}}}{${extract{size}{${stat:/etc/vfilters/${lookup{$local_part}lsearch{/etc/domainusers}{$value}}}}}}{0}}}}
file = "/etc/vfilters/${lookup{$local_part}lsearch{/etc/domainusers}{$value}}"
directory_transport = address_directory
file_transport = address_file
pipe_transport = ${if forall{/bin/cagefs_enter:/usr/sbin/cagefsctl}{exists{$item}}{cagefs_address_pipe}{${if match{${extract{6}{:}{${lookup passwd{$local_part}{$value}}}}}{\N(jail|no)shell\N}{jailed_address_pipe}{address_pipe}}}}
reply_transport = address_reply
retry_use_local_part
no_verify
#
# User Level Filtering for the main account
#
central_user_filter:
driver = redirect
local_part_suffix = +*
local_part_suffix_optional
allow_filter
allow_fail
forbid_filter_run
forbid_filter_perl
forbid_filter_lookup
forbid_filter_readfile
forbid_filter_readsocket
check_local_user
domains = ! +user_domains
require_files = "+${extract{5}{::}{${lookup passwd{$local_part}{$value}}}}/etc/filter"
condition = "${extract{size}{${stat:${extract{5}{:}{${lookup passwd{$local_part}{$value}}}}/etc/filter}}}"
file = "${extract{5}{:}{${lookup passwd{$local_part}{$value}}}}/etc/filter"
router_home_directory = ${extract{5}{:}{${lookup passwd{$local_part}{$value}}}}
directory_transport = address_directory
file_transport = address_file
pipe_transport = ${if forall{/bin/cagefs_enter:/usr/sbin/cagefsctl}{exists{$item}}{cagefs_virtual_address_pipe}{${if match{${extract{6}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}}{\N(jail|no)shell\N}{jailed_virtual_address_pipe}{virtual_address_pipe}}}}
reply_transport = address_reply
retry_use_local_part
no_verify
#
# User Level Filtering for virtual users
#
virtual_user_filter:
driver = redirect
local_part_suffix = +*
local_part_suffix_optional
allow_filter
allow_fail
forbid_filter_run
forbid_filter_perl
forbid_filter_lookup
forbid_filter_readfile
forbid_filter_readsocket
no_check_local_user
domains = +user_domains
require_files = "+${extract{5}{::}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/etc/$domain/$local_part/filter"
condition = "${extract{size}{${stat:${extract{5}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/etc/$domain/$local_part/filter}}}"
file = "${extract{5}{::}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/etc/$domain/$local_part/filter"
router_home_directory = ${extract{5}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}
directory_transport = address_directory
file_transport = address_file
pipe_transport = ${if forall{/bin/cagefs_enter:/usr/sbin/cagefsctl}{exists{$item}}{cagefs_virtual_address_pipe}{${if match{${extract{6}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}}{\N(jail|no)shell\N}{jailed_virtual_address_pipe}{virtual_address_pipe}}}}
reply_transport = address_reply
user = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}"
retry_use_local_part
no_verify
.ifdef SKIP

PREVALIASNOSTAR:

.endif
virtual_aliases_nostar:
driver = redirect
local_part_suffix = +*
local_part_suffix_optional
allow_defer
allow_fail
require_files = "+/etc/valiases/$domain"
data = ${lookup{$local_part@$domain}lsearch{/etc/valiases/$domain}}
file_transport = address_file
group = mail
pipe_transport = ${if forall{/bin/cagefs_enter:/usr/sbin/cagefsctl}{exists{$item}}{cagefs_virtual_address_pipe}{${if match{${extract{6}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}}{\N(jail|no)shell\N}{jailed_virtual_address_pipe}{virtual_address_pipe}}}}
retry_use_local_part
unseen
.ifdef SKIP

PREVIRTUALUSER:

.endif
#
# Virtual User Spam Boxes
#
virtual_user_spam:
driver = accept
local_part_suffix = +*
local_part_suffix_optional
domains = +user_domains
require_files = "+${extract{5}{::}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/.spamassassinboxenable:+${extract{5}{::}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/etc/$domain/passwd"
condition = ${if eq {${lookup {$local_part} lsearch {${extract{5}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/etc/$domain/passwd}}}{}{false}{${if match{$h_X-Spam-Status:}{\N^Yes\N}{true}{false}}}}
headers_remove="x-spam-exim"
transport = virtual_userdelivery_spam
virtual_boxtrapper_user:
driver = accept
domains = +user_domains
require_files = "+/usr/local/cpanel/bin/boxtrapper:+${extract{5}{::}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/etc/$domain/passwd"
condition = ${if eq {${lookup {$local_part} lsearch {${extract{5}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/etc/$domain/passwd}}}{} {false}{${if exists {${extract{5}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/etc/$domain/$local_part/.boxtrapperenable} {true} {false}}}}
retry_use_local_part
transport = virtual_boxtrapper_userdelivery
virtual_user:
driver = accept
local_part_suffix = +*
local_part_suffix_optional
headers_remove="x-spam-exim"
domains = +user_domains
require_files = "+${extract{5}{::}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/etc/$domain/passwd"
condition = ${if eq {${lookup {$local_part} lsearch {${extract{5}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/etc/$domain/passwd}}}{} {false}{true}}
transport = virtual_userdelivery
.ifdef SKIP

PRENOALIASDISCARD:

.endif

PREVALIASSTAR:

valias_domain_file:
driver = redirect
allow_defer
allow_fail
require_files = +/etc/vdomainaliases/$domain
condition = ${lookup {$domain} lsearch {/etc/vdomainaliases/$domain}{yes}{no} }
data = $local_part@${lookup {$domain} lsearch {/etc/vdomainaliases/$domain} }
virtual_aliases:
driver = redirect
local_part_suffix = +*
local_part_suffix_optional
allow_defer
allow_fail
require_files = "+/etc/valiases/$domain"
data = ${lookup{*}lsearch{/etc/valiases/$domain}}
file_transport = address_file
group = mail
pipe_transport = ${if forall{/bin/cagefs_enter:/usr/sbin/cagefsctl}{exists{$item}}{cagefs_virtual_address_pipe}{${if match{${extract{6}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}}{\N(jail|no)shell\N}{jailed_virtual_address_pipe}{virtual_address_pipe}}}}
.ifdef SKIP

DIRECTORMIDDLE:

.endif
# This director handles forwarding using traditional .forward files.
# If you want it also to allow mail filtering when a forward file
# starts with the string "# Exim filter", uncomment the "filter" option.
# The check_ancestor option means that if the forward file generates an
# address that is an ancestor of the current one, the current one gets
# passed on instead. This covers the case where A is aliased to B and B
# has a .forward file pointing to A. The three transports specified at the
# end are those that are used when forwarding generates a direct delivery
# to a file, or to a pipe, or sets up an auto-reply, respectively.
system_aliases:
driver = redirect
local_part_suffix = +*
local_part_suffix_optional
allow_defer
allow_fail
data = ${lookup{$local_part}lsearch{/etc/aliases}}
file_transport = address_file
pipe_transport = address_pipe
retry_use_local_part
# user = exim
local_aliases:
driver = redirect
local_part_suffix = +*
local_part_suffix_optional
allow_defer
allow_fail
data = ${lookup{$local_part}lsearch{/etc/localaliases}}
file_transport = address_file
pipe_transport = address_pipe
check_local_user
.ifdef SKIP

PREDOTFORWARD:

.endif
userforward:
driver = redirect
local_part_suffix = +*
local_part_suffix_optional
allow_filter
allow_fail
forbid_filter_run
forbid_filter_perl
forbid_filter_lookup
forbid_filter_readfile
forbid_filter_readsocket
check_ancestor
check_local_user
domains = ! +user_domains
no_expn
require_files = "+$home/.forward"
condition = "${extract{size}{${stat:$home/.forward}}}"
file = $home/.forward
file_transport = address_file
pipe_transport = ${if forall{/bin/cagefs_enter:/usr/sbin/cagefsctl}{exists{$item}}{cagefs_address_pipe}{${if match{${extract{6}{:}{${lookup passwd{$local_part}{$value}}}}}{\N(jail|no)shell\N}{jailed_address_pipe}{address_pipe}}}}
reply_transport = address_reply
directory_transport = address_directory
no_verify
.ifdef SKIP

PRELOCALUSER:

.endif

There was a script posted here:

http://forums.cpanel.net/f145/case-16578-get-serious-about-getting-subaddress-plus-addressing-support-exim-100893-p2.html#post1234072

That sortof worked, but I had CPanel complain each day about the config file having been changed.

Instead, I applied the same changes manually. I went to WHM, Exim Configuration Manager, then the Advanced Editor tab and set some of the variables as shown below.

The variables in the editor allow you to insert new rules but you can't change rules that are already in the config file. What I did to overcome this was to use .ifdef and .endif statements to effectively comment out sections between configurable variables.

The list of things I changed was:

PREFILTER:

#
# Account level filtering for everything but the main account
#
central_filter:
driver = redirect
local_part_suffix = +*
local_part_suffix_optional
allow_filter
allow_fail
forbid_filter_run
forbid_filter_perl
forbid_filter_lookup
forbid_filter_readfile
forbid_filter_readsocket
no_check_local_user
require_files = "+/etc/vfilters/${domain}"
condition = "${extract{size}{${stat:/etc/vfilters/${domain}}}}"
file = /etc/vfilters/${domain}
file_transport = address_file
directory_transport = address_directory
domains = +user_domains
pipe_transport = ${if forall{/bin/cagefs_enter:/usr/sbin/cagefsctl}{exists{$item}}{cagefs_virtual_address_pipe}{${if match{${extract{6}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}}{\N(jail|no)shell\N}{jailed_virtual_address_pipe}{virtual_address_pipe}}}}
reply_transport = address_reply
router_home_directory = ${extract{5}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}
user = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}"
no_verify
#
# Account level filtering for the main account
#
# checks /etc/vfilters/maindomain if its a localuser (ie main acct)
#
mainacct_central_user_filter:
driver = redirect
local_part_suffix = +*
local_part_suffix_optional
allow_filter
allow_fail
forbid_filter_run
forbid_filter_perl
forbid_filter_lookup
forbid_filter_readfile
forbid_filter_readsocket
check_local_user
domains = ! +user_domains
condition = ${if eq {${lookup{$local_part}lsearch{/etc/domainusers}{$value}}}{}{0}{${if exists{/etc/vfilters/${lookup{$local_part}lsearch{/etc/domainusers}{$value}}}{${extract{size}{${stat:/etc/vfilters/${lookup{$local_part}lsearch{/etc/domainusers}{$value}}}}}}{0}}}}
file = "/etc/vfilters/${lookup{$local_part}lsearch{/etc/domainusers}{$value}}"
directory_transport = address_directory
file_transport = address_file
pipe_transport = ${if forall{/bin/cagefs_enter:/usr/sbin/cagefsctl}{exists{$item}}{cagefs_address_pipe}{${if match{${extract{6}{:}{${lookup passwd{$local_part}{$value}}}}}{\N(jail|no)shell\N}{jailed_address_pipe}{address_pipe}}}}
reply_transport = address_reply
retry_use_local_part
no_verify
#
# User Level Filtering for the main account
#
central_user_filter:
driver = redirect
local_part_suffix = +*
local_part_suffix_optional
allow_filter
allow_fail
forbid_filter_run
forbid_filter_perl
forbid_filter_lookup
forbid_filter_readfile
forbid_filter_readsocket
check_local_user
domains = ! +user_domains
require_files = "+${extract{5}{::}{${lookup passwd{$local_part}{$value}}}}/etc/filter"
condition = "${extract{size}{${stat:${extract{5}{:}{${lookup passwd{$local_part}{$value}}}}/etc/filter}}}"
file = "${extract{5}{:}{${lookup passwd{$local_part}{$value}}}}/etc/filter"
router_home_directory = ${extract{5}{:}{${lookup passwd{$local_part}{$value}}}}
directory_transport = address_directory
file_transport = address_file
pipe_transport = ${if forall{/bin/cagefs_enter:/usr/sbin/cagefsctl}{exists{$item}}{cagefs_virtual_address_pipe}{${if match{${extract{6}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}}{\N(jail|no)shell\N}{jailed_virtual_address_pipe}{virtual_address_pipe}}}}
reply_transport = address_reply
retry_use_local_part
no_verify
#
# User Level Filtering for virtual users
#
virtual_user_filter:
driver = redirect
local_part_suffix = +*
local_part_suffix_optional
allow_filter
allow_fail
forbid_filter_run
forbid_filter_perl
forbid_filter_lookup
forbid_filter_readfile
forbid_filter_readsocket
no_check_local_user
domains = +user_domains
require_files = "+${extract{5}{::}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/etc/$domain/$local_part/filter"
condition = "${extract{size}{${stat:${extract{5}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/etc/$domain/$local_part/filter}}}"
file = "${extract{5}{::}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/etc/$domain/$local_part/filter"
router_home_directory = ${extract{5}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}
directory_transport = address_directory
file_transport = address_file
pipe_transport = ${if forall{/bin/cagefs_enter:/usr/sbin/cagefsctl}{exists{$item}}{cagefs_virtual_address_pipe}{${if match{${extract{6}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}}{\N(jail|no)shell\N}{jailed_virtual_address_pipe}{virtual_address_pipe}}}}
reply_transport = address_reply
user = "${lookup{$domain}lsearch* {/etc/userdomains}{$value}}"
retry_use_local_part
no_verify
.ifdef SKIP

PREVALIASNOSTAR:

.endif
virtual_aliases_nostar:
driver = redirect
local_part_suffix = +*
local_part_suffix_optional
allow_defer
allow_fail
require_files = "+/etc/valiases/$domain"
data = ${lookup{$local_part@$domain}lsearch{/etc/valiases/$domain}}
file_transport = address_file
group = mail
pipe_transport = ${if forall{/bin/cagefs_enter:/usr/sbin/cagefsctl}{exists{$item}}{cagefs_virtual_address_pipe}{${if match{${extract{6}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}}{\N(jail|no)shell\N}{jailed_virtual_address_pipe}{virtual_address_pipe}}}}
retry_use_local_part
unseen
.ifdef SKIP

PREVIRTUALUSER:

.endif
#
# Virtual User Spam Boxes
#
virtual_user_spam:
driver = accept
local_part_suffix = +*
local_part_suffix_optional
domains = +user_domains
require_files = "+${extract{5}{::}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/.spamassassinboxenable:+${extract{5}{::}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/etc/$domain/passwd"
condition = ${if eq {${lookup {$local_part} lsearch {${extract{5}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/etc/$domain/passwd}}}{}{false}{${if match{$h_X-Spam-Status:}{\N^Yes\N}{true}{false}}}}
headers_remove="x-spam-exim"
transport = virtual_userdelivery_spam
virtual_boxtrapper_user:
driver = accept
domains = +user_domains
require_files = "+/usr/local/cpanel/bin/boxtrapper:+${extract{5}{::}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/etc/$domain/passwd"
condition = ${if eq {${lookup {$local_part} lsearch {${extract{5}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/etc/$domain/passwd}}}{} {false}{${if exists {${extract{5}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/etc/$domain/$local_part/.boxtrapperenable} {true} {false}}}}
retry_use_local_part
transport = virtual_boxtrapper_userdelivery
virtual_user:
driver = accept
local_part_suffix = +*
local_part_suffix_optional
headers_remove="x-spam-exim"
domains = +user_domains
require_files = "+${extract{5}{::}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/etc/$domain/passwd"
condition = ${if eq {${lookup {$local_part} lsearch {${extract{5}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}/etc/$domain/passwd}}}{} {false}{true}}
transport = virtual_userdelivery
.ifdef SKIP

PRENOALIASDISCARD:

.endif

PREVALIASSTAR:

valias_domain_file:
driver = redirect
allow_defer
allow_fail
require_files = +/etc/vdomainaliases/$domain
condition = ${lookup {$domain} lsearch {/etc/vdomainaliases/$domain}{yes}{no} }
data = $local_part@${lookup {$domain} lsearch {/etc/vdomainaliases/$domain} }
virtual_aliases:
driver = redirect
local_part_suffix = +*
local_part_suffix_optional
allow_defer
allow_fail
require_files = "+/etc/valiases/$domain"
data = ${lookup{*}lsearch{/etc/valiases/$domain}}
file_transport = address_file
group = mail
pipe_transport = ${if forall{/bin/cagefs_enter:/usr/sbin/cagefsctl}{exists{$item}}{cagefs_virtual_address_pipe}{${if match{${extract{6}{:}{${lookup passwd{${lookup{$domain}lsearch*{/etc/userdomains}{$value}}}{$value}}}}}{\N(jail|no)shell\N}{jailed_virtual_address_pipe}{virtual_address_pipe}}}}
.ifdef SKIP

DIRECTORMIDDLE:

.endif
# This director handles forwarding using traditional .forward files.
# If you want it also to allow mail filtering when a forward file
# starts with the string "# Exim filter", uncomment the "filter" option.
# The check_ancestor option means that if the forward file generates an
# address that is an ancestor of the current one, the current one gets
# passed on instead. This covers the case where A is aliased to B and B
# has a .forward file pointing to A. The three transports specified at the
# end are those that are used when forwarding generates a direct delivery
# to a file, or to a pipe, or sets up an auto-reply, respectively.
system_aliases:
driver = redirect
local_part_suffix = +*
local_part_suffix_optional
allow_defer
allow_fail
data = ${lookup{$local_part}lsearch{/etc/aliases}}
file_transport = address_file
pipe_transport = address_pipe
retry_use_local_part
# user = exim
local_aliases:
driver = redirect
local_part_suffix = +*
local_part_suffix_optional
allow_defer
allow_fail
data = ${lookup{$local_part}lsearch{/etc/localaliases}}
file_transport = address_file
pipe_transport = address_pipe
check_local_user
.ifdef SKIP

PREDOTFORWARD:

.endif
userforward:
driver = redirect
local_part_suffix = +*
local_part_suffix_optional
allow_filter
allow_fail
forbid_filter_run
forbid_filter_perl
forbid_filter_lookup
forbid_filter_readfile
forbid_filter_readsocket
check_ancestor
check_local_user
domains = ! +user_domains
no_expn
require_files = "+$home/.forward"
condition = "${extract{size}{${stat:$home/.forward}}}"
file = $home/.forward
file_transport = address_file
pipe_transport = ${if forall{/bin/cagefs_enter:/usr/sbin/cagefsctl}{exists{$item}}{cagefs_address_pipe}{${if match{${extract{6}{:}{${lookup passwd{$local_part}{$value}}}}}{\N(jail|no)shell\N}{jailed_address_pipe}{address_pipe}}}}
reply_transport = address_reply
directory_transport = address_directory
no_verify
.ifdef SKIP

PRELOCALUSER:

.endif

URL

1

bsich ●

There is a significant need for this function. Any chance it can make it into a release.

URL

1

TCB13 ●

Yeah WHM/cPanel team, please make this happen.

URL

1

tekoa ●

When applying the work-around posted by Nic Jones, be aware that WHM's Exim Configuration Manager advanced editor complains about multiple errors in the work-around, but save it anyway.

After I applied the work-around exim allows the "plus addressed" messages to get through, but it also bounces a "Mail delivery failed: returning message to sender" message back to the sender.

cPanel Team, you really should come up with a better solution for this. As far as I'm concerned, without a working configuration option to make this work easily, cPanel's mail system is "broken". If it stays broken, I'll have to move my servers away from cPanel.

URL

1

Rüdiger Lincke ●

Hello! We are having the same needs. Our Swedish provider is using cPanel and we have to look for alternatives in case we cannot get this feature any time soon (i.e. first two quarters 2015). Thank you in advance!

Best,

Rüdiger

URL

1

myusername ●

...this works fine, when intelligent people make websites, however -- & far too often -- some websites are written by someone that doesn't know that + (plus) is a VALID char in an E-mail address, so that website rejects "username+plusaddress@gmail.com" as being an invalid E-mail address, even when it is perfectly valid.

I think you are mistaking smart guys with stupid guys.

Unintelligent people would have no validation on their web forms. Those forms would accept the "+" symbol even when their email server does NOT support it, and then would deal with tickets and bug reports all day because of it. Then they would complain about it on forums and wherever they could.

The smart ones would never allow their sites to collect addresses that cannot be served. Then they'd make a feature request like this. And then, once it was deployed on the server-side of life, they could easily change the validation on their site to accept the "+"

Cngratulations on making the first step.

URL

2

Chuck Benslay ●

This feature is absolutely necessary nowadays. Too many people are used to this functionality in gmail and try to use it on my server. I can sign them up for a google apps account and charge them more I suppose, but i don't want to do that...

URL

2

Mikhail Pashkov ●

Copy of my email to support:

You know what is funny? Funny is that you're using subaddressing in your own ticket system (like i'm getting emails with sender address like - 6722469+***HIDDEN***@tickets.cpanel.net). But you're still wondering if your customers need that feature? Are this for real? :)

Correct me if i'm wrong - that means that your ticket system hosted not on the WHM/Cpanel servers? Otherwise you cannot use "plus-emails" in your ticket system because CPanel doesn't support it.

If I'm right - do you think you still need to ask your customers if this feature should be implemented in CPanel?! It should! Asap.

URL

1

Monarobase ●

They forward all e-mails to their ticketing system script. You can already do that in cPanel.

It is true tough that for webmail and imap users this could be nice.

URL

2

bsich ●

Mailman is able to use plus addressing in Cpanel. Can't be that hard for Cpanel to implement.

URL

1

Lluís Forns ●

Would it be possible to use "default address" and a perl or php script to catch the mails and redirect them to the correct address?

URL

1

Henry Weismann ●

A hack to do it: http://geek.michaelgrace.org/2015/05/setup-gmail-like-plus-addressing-on-shared-cpanel-hosting/

I am voting for this feature.

URL

1

Chip Runner ●

This feature has been standard on GMail for over a decade. It should not require a "hack" or external script, it should be a core feature. I'll be seeking alternatives to cPanel based hosting for my domains until plus addressing is implemented. Thanks.

URL

2

Lluís Forns ●

Workaround no longer needed, as this is live in v58
This information is shared privately in spoiler and not visible!

Hope it helps somebody.

URL

3

cpanelnick ●

This functionality will be included in v58 and is available in EDGE

URL

1

benny@cpanel.net ● ●

cPanel & WHM v58 has just gone to CURRENT and includes this functionality. If you have any questions let me know, or if you experience any problems with it, please do submit a ticket and let us know!

https://documentation.cpanel.net/display/58Docs/58%20Release%20Notes#id-58ReleaseNotes-Emailsubaddresses

URL

Email sub-addressing (plus addressing)

Replies (23)