How do I configure cPanel to use Spam Experts?

Question

How do I configure cPanel to use Spam Experts?

Answer

Spam Experts can be configured using the following steps:

CPANEL_INFO: The basic setup below relays all outgoing mail through SpamExperts using IP - based authentication and supports Dkim signing.

1. Connect to your server using WHM as the root user.
2. Navigate to Home / Service Configuration / Exim Configuration Manager and open the Advanced Editor.

3. Locate the section labelled POSTMAILCOUNT and enter the following:

   CPANEL_WARN: Replace all instances of SMARTHOST with your SMTP hostname

   CONFIG_TEXT: smarthost_dkim:
   driver = manualroute
   domains = !+local_domains
   require_files = "+/var/cpanel/domain_keys/private/${lookup{$sender_address_domain}dsearch{/var/cpanel/domain_keys/private/}}"
   # Exclude null sender messages from relaying via the smarthost
   condition = ${if or {{!eq{$sender_address}{}} {!eq{$sender_host_address}{}}}}
   transport = remote_smtp_smart_dkim
   route_list = $domain SMARTHOST::587
   
   smarthost_regular:
   driver = manualroute
   domains = !+local_domains
   # Exclude null sender messages from relaying via the smarthost
   condition = ${if or {{!eq{$sender_address}{}} {!eq{$sender_host_address}{}}}}
   transport = remote_smtp_smart_regular
   route_list = $domain SMARTHOST::587

4. Locate the section labelled TRANSPORTSTART and add the following:

   CONFIG_TEXT: remote_smtp_smart_dkim:
   driver = smtp
   hosts_require_tls = *
   interface = ${if exists {/etc/mailips}{${lookup{$sender_address_domain}lsearch*{/etc/mailips}{$value}{}}}{}}
   helo_data = ${if exists {/etc/mailhelo}{${lookup{$sender_address_domain}lsearch*{/etc/mailhelo}{$value}{$primary_hostname}}}{$primary_hostname}}
   dkim_domain = $sender_address_domain
   dkim_selector = default
   dkim_private_key = "/var/cpanel/domain_keys/private/${lookup{$dkim_domain}dsearch{/var/cpanel/domain_keys/private/}}"
   dkim_canon = relaxed
   headers_add = "${perl{check_mail_permissions_headers}}"
   
   remote_smtp_smart_regular:
   driver = smtp
   hosts_require_tls = *
   interface = ${if exists {/etc/mailips}{${lookup{$sender_address_domain}lsearch*{/etc/mailips}{$value}{}}}{}}
   helo_data = ${if exists {/etc/mailhelo}{${lookup{$sender_address_domain}lsearch*{/etc/mailhelo}{$value}{$primary_hostname}}}{$primary_hostname}}
   headers_add = "${perl{check_mail_permissions_headers}}"

5. Save the configuration to commit your changes.

Additional rescources

Spam Experts User Guide: cPanel/WHM IP-based Authentication