ConfigServer Services Blog

Recipient/Sender verification issue from older cPanel v11 CURRENT

If you are finding :fail: messages ending up in the exim queue, then the cause is most likely a bug that was in an older cPanel v11 CURRENT release that introduced a miss-configuration in exim.conf. This has been fixed in the latest builds, but if you were an early v11 adopter your exim.conf may be incorrect.You can check this by going into the WHM > Exim Configuration Editor > Advanced Mode and scrolling down to the ACL section. Then check for the following lines:require verify = recipientand:require verify = senderBoth lines will probably have related message and comments around them. You need to ensure that the recipient verification comes before the sender verification. If it doesn’t, switch the blocks around and save the configuration.This problem is also responsible for root email delivery failures for the root crontab jobs and with the global abuse and postmaster /etc/myaliases file setup that we perform.

New ClamAV v0.90.3

Changes:

This release fixes some security bugs in libclamav and improvesstability under Solaris. Please see ChangeLog for complete list of changes.

You can upgrade through the WHM UI or from:http://www.configserver.com/cp/upgrade.html

New csf v2.73

Changes:

  • Modified SMTP_BLOCK warning on VPS servers to only display if the option is enabled
  • Modifed the Server Services Check text to omit using -del with chkconfig and better explain that a process is enabled even if it is not currently running and needs to be disabled to prevent startup on boot
  • Removed reliance on wget for updates and version checks
  • Coding improvements in csf.pl and addon_csf.cgi
  • Added /var/log/lfd.log tail automatic refresh to WHM UI

New csf v2.72

Changes:

  • Fixed problem with DENY_IP_LIMIT not counting all IP entries in csf.deny correctly
  • Ignore and issue a warning if SMTP_BLOCK is enabled on a Vituozzo VPS since the Virtuozzo VPS kernel does not support ipt_owner
  • Remove Shell/Fork Bomb Protection check (if a VPS) in Server Check as the option breaks a Virtuozzo VPS if enabled
  • Added more processes to check in Server Services Check
  • Removed restriction on outbound source port rule construction

New Vipul's Razor Released v2.84

A new version of Vipul’s Razor has been released:http://sourceforge.net/project/shownotes.php?release_id=510715Those running MailScanner should upgrade to benefit from the changes.Upgrade instructions:

wget http://prdownloads.sourceforge.net/razor/razor-agents-2.84.tar.bz2tar -xjf razor-agents-*cd razor-agents-*perl Makefile.PL makemake installcd ..razor-admin -createrazor-admin -register/bin/rm -Rf razor-agents-*

New cmq v1.09

Changes:

  • Added support for MailScanner option to only scan incoming email
  • Added option to Bcc selected queued email to a specific email address

New MailScanner Front-End (MSFE) v4.12

Changes:

  • Added support for MailScanner option to only scan incoming email. The new option can be enabled or disabled in the MailScanner Performance section of MSFE in WHM

Note: This update to MSFE is only available to those running cPanel v11 and later

New MailScanner Script v2.56 (including BETA support for Incoming Scanning installation)

Changes:

  • Added BETA support for MailScanner option to only scan incoming email
  • New version of MailScanner v4.59.4

The new Incoming Scanning only option is now available within this package. After upgrading MailScanner you can easily switch to use Incoming Scanning Only with:

usr/mscpanel/msswitch.pl in

You can switch back at any time to In/Out Scanning using:

usr/mscpanel/msswitch.pl inout

Limitations on In Scanning Only option:

  • If you use cmq you need to upgrade it to at least v1.09 (which has been released)
  • If you use MSFE then it will currently always show as “Disabled” and will show the incorrect information in “View Queues”
  • If you use MSFE outbound emails will not show in MailWatch (since they’re not being scanned!)
  • The required change to the exim startup is implemented/maintained using /scripts/postexim4install at present