SRS (Sender Rewriting Scheme) can't be enabled

Answered

udayasl

• October 03, 2025 11:30
• Edited

In WHM panel, under Exim Configuration, there is option to Enable SRS (Sender Rewriting Scheme). But actually it doesn't enable SRS even after restarting EXIM service. Please check this issue.

Cpanel version: 130.0.14

AlmaLinux 8 VPS

• 

  cPRex Jurassic Moderator

  • October 03, 2025 17:16

  Hey there!  I checked a version 130.0.14 server and compared the differences before and after enabling that option in the WHM >> Exim Configuration Manager and here were my results:

  # diff -s /etc/exim.conf /etc/exim.conf.original 
  4d3
  < .include_if_exists /var/cpanel/exim_hidden/srs_config
  2491,2507c2490
  < .ifdef SRSENABLED
  < 
  < srs_router_pre:
  <   driver=redirect
  <   condition = ${if inbound_srs {$local_part} {SRS_SECRET}}
  <   data=${srs_recipient}
  < 
  < 
  < 
  < srs_router_pre_failure:
  <   driver    =    redirect
  <   # detect inbound bounces which look SRS'd but are invalid
  <   condition = ${if inbound_srs {$local_part} {}}
  <   allow_fail
  <   data      = :fail: Invalid SRS recipient address
  < 
  < .endif
  ---
  > # srs is disabled
  2682,2697c2665
  < .ifdef SRSENABLED
  < srs_router:
  <   driver=redirect
  <   condition = ${if inbound_srs {$local_part} {SRS_SECRET}}
  <   data=${srs_recipient}
  < 
  < 
  < 
  < srs_router_failure:
  <   driver    =    redirect
  <   # detect inbound bounces which look SRS'd but are invalid
  <   condition = ${if inbound_srs {$local_part} {}}
  <   allow_fail
  <   data      = :fail: Invalid SRS recipient address
  < 
  < .endif
  ---
  > # srs is disabled
  2991,3121c2959
  < .ifdef SRSENABLED
  < remote_forwarded_smtp:
  <     driver      = smtp
  <     interface = <; ${if > \
  <     {${extract \
  <         {size} \
  <         {${stat:/etc/mailips}} \
  <     }} \
  <     {0} \
  <     {${lookup \
  <         {${lc:${perl{get_message_sender_domain}}}} \
  <         lsearch{/etc/mailips} \
  <         {$value} \
  <         {${lookup \
  <             {${if match_domain \
  <                 {$original_domain} \
  <                 {+relay_domains} \
  <                 {${lc:$original_domain}} \
  <                 {} \
  <             }} \
  <             lsearch{/etc/mailips} \
  <             {$value} \
  <             {${lookup \
  <                 {${perl{get_sender_from_uid}}} \
  <                 lsearch*{/etc/mailips} \
  <                 {$value} \
  <                 {} \
  <             }} \
  <         }} \
  <     }} \
  < }
  <     helo_data = ${if > \
  <     {${extract{size}{${stat:/etc/mailhelo}}}} \
  <     {0} \
  <     {${lookup \
  <         {${lc:${perl{get_message_sender_domain}}}} \
  <         lsearch{/etc/mailhelo} \
  <         {$value} \
  <         {${lookup \
  <             {${if match_domain \
  <                 {$original_domain} \
  <                 {+relay_domains} \
  <                 {${lc:$original_domain}} \
  <                 {} \
  <             }} \
  <             lsearch{/etc/mailhelo} \
  <             {$value} \
  <             {${lookup \
  <                 {${perl{get_sender_from_uid}}} \
  <                 lsearch*{/etc/mailhelo} \
  <                 {$value} \
  <                 {$primary_hostname} \
  <             }} \
  <         }} \
  <     }} \
  <     {$primary_hostname} \
  < }
  <     max_rcpt    = 1
  <     return_path = ${srs_encode {SRS_SECRET} {$return_path} {$original_domain}}
  <     # Disable chunking with empty list:
  <     hosts_try_chunking = :
  <     message_linelength_limit = 65536
  < 
  < 
  < 
  < dkim_remote_forwarded_smtp:
  <     driver = smtp
  <     interface = <; ${if > \
  <     {${extract \
  <         {size} \
  <         {${stat:/etc/mailips}} \
  <     }} \
  <     {0} \
  <     {${lookup \
  <         {${lc:${perl{get_message_sender_domain}}}} \
  <         lsearch{/etc/mailips} \
  <         {$value} \
  <         {${lookup \
  <             {${if match_domain \
  <                 {$original_domain} \
  <                 {+relay_domains} \
  <                 {${lc:$original_domain}} \
  <                 {} \
  <             }} \
  <             lsearch{/etc/mailips} \
  <             {$value} \
  <             {${lookup \
  <                 {${perl{get_sender_from_uid}}} \
  <                 lsearch*{/etc/mailips} \
  <                 {$value} \
  <                 {} \
  <             }} \
  <         }} \
  <     }} \
  < }
  <     helo_data = ${if > \
  <     {${extract{size}{${stat:/etc/mailhelo}}}} \
  <     {0} \
  <     {${lookup \
  <         {${lc:${perl{get_message_sender_domain}}}} \
  <         lsearch{/etc/mailhelo} \
  <         {$value} \
  <         {${lookup \
  <             {${if match_domain \
  <                 {$original_domain} \
  <                 {+relay_domains} \
  <                 {${lc:$original_domain}} \
  <                 {} \
  <             }} \
  <             lsearch{/etc/mailhelo} \
  <             {$value} \
  <             {${lookup \
  <                 {${perl{get_sender_from_uid}}} \
  <                 lsearch*{/etc/mailhelo} \
  <                 {$value} \
  <                 {$primary_hostname} \
  <             }} \
  <         }} \
  <     }} \
  <     {$primary_hostname} \
  < }
  <     dkim_domain = ${perl{get_dkim_domain}}
  <     dkim_selector = default
  <     dkim_private_key = "/var/cpanel/domain_keys/private/${dkim_domain}"
  <     dkim_canon = relaxed
  <     max_rcpt    = 1
  <     return_path = ${srs_encode {SRS_SECRET} {$return_path} {$original_domain}}
  <     # Disable chunking with empty list:
  <     hosts_try_chunking = :
  <     message_linelength_limit = 65536
  < .endif
  ---
  > # remote_forwarded_srs absent due to SRS support being disabled
  
  

  Are you not seeing those changes being applied to your Exim file when you enable that option in the interface?

   

  0
• 

  udayasl

  • October 04, 2025 17:32
  • Edited

  Sorry, I was misunderstood.

  SRS is working fine.

  0
• 

  cPRex Jurassic Moderator

  • October 06, 2025 13:57

  I'm glad to hear things are working well for you now!

  0

Please sign in to leave a comment.