%RETRYBLOCK%
*                               *                               F,8h,3m; G,16h,1h,1.5; F,4d,8h
@AUTH@

@BEGINACL@

@CONFIG@
chunking_advertise_hosts=""
daemon_smtp_ports = 25 : 26 : 465 : 587
log_selector = +smtp_confirmation +sender_on_delivery +all_parents +lost_incoming_connection +tls_cipher +received_sender +delay_delivery +subject +queue_run +retry_defer +dnslist_defer +incoming_interface +smtp_protocol_error +incoming_port +size_reject +smtp_connection +connection_reject +delivery_size +received_recipients +skip_delivery +tls_peerdn +address_rewrite +arguments
deliver_queue_load_max = 40
perl_startup = do '/etc/exim.pl'
smtp_receive_timeout = 7m
timeout_frozen_after = 1d
openssl_options = +no_compression +no_sslv2 +no_sslv3 +no_tlsv1 +no_tlsv1_1 +cipher_server_preference
tls_require_ciphers = HIGH:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:!ECDHE-RSA-AES256-SHA384:!DHE-RSA-AES256-SHA256:!AES256-GCM-SHA384:!AES256-SHA256:!ECDHE-RSA-AES128-SHA256:!DHE-RSA-AES128-SHA256:!AES128-GCM-SHA256:!AES128-SHA256:!ADH:!aNULL:!3DES:!SSLv2:!SSLv3
smtp_accept_max = 200
smtp_connect_backlog = 100
smtp_accept_max_per_connection = 50
system_filter_file_transport = address_file

@DIRECTOREND@

@DIRECTORMIDDLE@

@DIRECTORSTART@

@ENDACL@

@POSTMAILCOUNT@

@PREDOTFORWARD@

@PREFILTER@

@PRELOCALUSER@

@PRENOALIASDISCARD@

@PREROUTERS@

@PREVALIASNOSTAR@

@PREVALIASSTAR@

@PREVIRTUALUSER@

@RETRYEND@

@RETRYSTART@

@REWRITE@

@ROUTEREND@

@ROUTERMIDDLE@

@ROUTERSTART@
boxtrapper_autowhitelistHG:
  driver = accept
  condition = ${if eq {$authenticated_id}{}{0}{${if eq {$sender_address}{$local_part@$domain}{0}{${if match{$received_protocol}{local}{${perl{checkbx_autowhitelist}{$authenticated_id}}}{${if match{$received_protocol}{\N^e?smtps?a$\N}{${perl{checkbx_autowhitelist}{$authenticated_id}}}{0}}}}}}}}
  require_files = "+/usr/local/cpanel/bin/boxtrapper"
  transport = boxtrapper_autowhitelist
  unseen

fightspamHG:
    driver = redirect
    domains = ! +local_domains
    condition = "${perl{spam_fighter}}"
    data = /dev/null
    file_transport = address_file
    no_more

check_mailpermissions:
    domains = ! +local_domains
    condition = "${perl{check_mail_permissions}}"
    driver = redirect
    ignore_target_hosts = +loopback : 64.94.110.0/24
    allow_filter
    reply_transport = address_reply
    user = mailnull
    expn = false
    data = "${perl{check_mail_permissions_results}}"

enforce_mail_permissionsHG:
    domains = ! +local_domains
    condition = "${perl{enforce_mail_permissions}}"
    driver = redirect
    ignore_target_hosts = +loopback : 64.94.110.0/24
    allow_fail
    allow_defer
    expn = false
    data = "${perl{enforce_mail_permissions_results}}"


increment_max_emails_per_hour:
    domains = ! +local_domains
    condition = "${perl{increment_max_emails_per_hour_if_needed}}"
    driver = redirect
    ignore_target_hosts = +loopback : 64.94.110.0/24
    allow_fail
    no_verify
    one_time
    expn = false
    data = ":unknown:"

blockeddomains:
    driver = redirect
    require_files = "+/etc/blockeddomains"
    domains = "/etc/blockeddomains"
    allow_fail
    data = :fail: "Sorry, you are sending to/from an address that has been blacklisted"

deliver_through_cm_smtp:
   condition = ${if !eq{$original_domain}{$domain}}
   driver = manualroute
   domains = ! +local_domains
   #ignore verisign to prevent waste of bandwidth
   ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8 : 64.94.110.0/24
   headers_add = "${perl{mailtrapheaders2}}"
   transport = remote_smtp
   hosts_randomize = true 
   route_data = eig-east.smtp.a.cloudfilter.net:eig-west.smtp.a.cloudfilter.net:+:3.228.35.199:18.215.58.191:+:34.223.136.48:34.217.196.71

dkim_lookuphostHG:
    driver = manualroute
    domains = ! +local_domains
    #ignore verisign to prevent waste of bandwidth
    ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8 : 64.94.110.0/24
    require_files = "+/var/cpanel/domain_keys/private/${sender_address_domain}"
    headers_add = "${perl{mailtrapheaders2}}"
    transport = dkim_remote_smtp
    hosts_randomize = true 
    route_data = eig-east.smtp.a.cloudfilter.net:eig-west.smtp.a.cloudfilter.net:+:3.228.35.199:18.215.58.191:+:34.223.136.48:34.217.196.71

send_to_cm:
   driver = manualroute
   condition = "${perl{checkspam3}}"
   domains = ! +local_domains
   #ignore verisign to prevent waste of bandwidth
   ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8 : 64.94.110.0/24
   headers_add = "${perl{mailtrapheaders2}}"
   transport = remote_smtp
   hosts_randomize = true 
   route_data = eig-east.smtp.a.cloudfilter.net:eig-west.smtp.a.cloudfilter.net:+:3.228.35.199:18.215.58.191:+:34.223.136.48:34.217.196.71

send_to_gateway:
   driver = manualroute
   domains = ! +local_domains
   #ignore verisign to prevent waste of bandwidth
   ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8 : 64.94.110.0/24
   headers_add = "${perl{mailtrapheaders2}}"
   transport = remote_smtp
   hosts_randomize = true 
   route_data = eig-east.smtp.a.cloudfilter.net:eig-west.smtp.a.cloudfilter.net:+:3.228.35.199:18.215.58.191:+:34.223.136.48:34.217.196.71

@TRANSPORTEND@

@TRANSPORTMIDDLE@

@TRANSPORTSTART@