SOLVED CPANEL-42936 - BoxTrapper Setting Question:

Amiga500

Well-Known Member
May 24, 2023
159
14
18
USA
cPanel Access Level
Root Administrator
BoxTrapper Question. Under Configure Settings, "Email addresses for this account:" I see that it auto fills the email address associated with the mailbox that you are currently logged into. But what happens when you add other email addresses to this box? The manual says to add addresses that forwards emails to this account. So if I have an address that forwards emails to this account and I add that forwarding address to this box, what happens exactly? Doesn't BoxTrapper filter all incoming emails whether it's being forwarded or not? Thank you for the help!
 

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
17,470
2,843
363
cPanel Access Level
Root Administrator
Hey there! My best guess is that this is a list of emails to tell BoxTrapper to just completely ignore. However, I can't find any documentation that specifically outlines what this does, so I've created an inquiry with our development team through case number CPANEL-42936. I'll be sure to send you a response as soon as I hear back, and then I'll also get our docs updated with those details too.
 
  • Like
Reactions: Amiga500

Amiga500

Well-Known Member
May 24, 2023
159
14
18
USA
cPanel Access Level
Root Administrator
Hey there! My best guess is that this is a list of emails to tell BoxTrapper to just completely ignore. However, I can't find any documentation that specifically outlines what this does, so I've created an inquiry with our development team through case number CPANEL-42936. I'll be sure to send you a response as soon as I hear back, and then I'll also get our docs updated with those details too.
I did a test. I added an address to that box, sent an email from that address to my account with BoxTrapper enabled. My test email was not delivered. I did not receive a verification notification. The test email was however pending in the Queue. So, not sure what the advantage of adding addressed to this box are. I guess it allows your forwarding address to be able to send emails without the verification process since no one may be at the other end to monitor the mailbox and approve the verification email especially if it's just set up as an alias/mail forwarding with no mailbox. You still have to check your Queue and process the forwarding emails. But why is the email address associated with the BoxTrapper account added automatically by default to this box? Any emails sent to your address should be going through the verification process unless of course the sender was whitelisted etc... What happens if you remove your addresses? Just trying to understand how things work. :)
 
  • Like
Reactions: cPRex

Amiga500

Well-Known Member
May 24, 2023
159
14
18
USA
cPanel Access Level
Root Administrator
I did a test. I added an address to that box, sent an email from that address to my account with BoxTrapper enabled. My test email was not delivered. I did not receive a verification notification. The test email was however pending in the Queue. So, not sure what the advantage of adding addressed to this box are. I guess it allows your forwarding address to be able to send emails without the verification process since no one may be at the other end to monitor the mailbox and approve the verification email especially if it's just set up as an alias/mail forwarding with no mailbox. You still have to check your Queue and process the forwarding emails. But why is the email address associated with the BoxTrapper account added automatically by default to this box? Any emails sent to your address should be going through the verification process unless of course the sender was whitelisted etc... What happens if you remove your addresses? Just trying to understand how things work. :)
So, the address I added to the box in the example above, wasn't an actual forwarding address. I just added the address to the box, sent an email from that address and it was caught in the Queue but no verification email sent. I then created an alias that forwards emails to my C-Panel Boxtrapper account, added that forwarding address to that box, sent an email to that forwarding address and it was delivered, so verification email..... So, we can assume that by adding any forwarding addresses to this box, emails are automatically approved and delivered without being challenged. Not sure why you can't just add your forwarding address to the whitelist. Not sure what the difference is there.
 

Amiga500

Well-Known Member
May 24, 2023
159
14
18
USA
cPanel Access Level
Root Administrator
So, the address I added to the box in the example above, wasn't an actual forwarding address. I just added the address to the box, sent an email from that address and it was caught in the Queue but no verification email sent. I then created an alias that forwards emails to my C-Panel Boxtrapper account, added that forwarding address to that box, sent an email to that forwarding address and it was delivered, so verification email..... So, we can assume that by adding any forwarding addresses to this box, emails are automatically approved and delivered without being challenged. Not sure why you can't just add your forwarding address to the whitelist. Not sure what the difference is there.
One more test. I removed the forwarding address from that box and added it to the whitelist. I sent a test email to the forwarding address and it was delivered. No verification challenge. So, not sure what advantage if any there is in adding the forwarding address to that box vs. adding it to the whitelist.
 

Amiga500

Well-Known Member
May 24, 2023
159
14
18
USA
cPanel Access Level
Root Administrator
One more test. I removed the forwarding address from that box and added it to the whitelist. I sent a test email to the forwarding address and it was delivered. No verification challenge. So, not sure what advantage if any there is in adding the forwarding address to that box vs. adding it to the whitelist.
And one more thought... If you add the forwarding address to this box or to the whitelist, what if someone sends your forwarding address an email and it is a sender that you do not want to receive emails from, you will receive it regardless because the forwarding address is whitelisted. I'm assuming there's no way to blacklist the actual sender since the sender in this case is the forwarding address? If it is SPAM then I'm assuming Spam Assasin is still filtering these forwarded emails.......?
 

Amiga500

Well-Known Member
May 24, 2023
159
14
18
USA
cPanel Access Level
Root Administrator
And one more thought... If you add the forwarding address to this box or to the whitelist, what if someone sends your forwarding address an email and it is a sender that you do not want to receive emails from, you will receive it regardless because the forwarding address is whitelisted. I'm assuming there's no way to blacklist the actual sender since the sender in this case is the forwarding address? If it is SPAM then I'm assuming Spam Assasin is still filtering these forwarded emails.......?
One last test.... I noticed that the reason why the emails I sent were delivered was that the sending address was whitelisted in BoxTrapper. So, I used another account to send the forwarding address an email and that email was put in the Queue and no verification email was received. I tried this without the forwarding address in that box or in the whitelist and the same thing happened.... The email was put in the queue but no verification email was received. So, I'm not sure what the purpose is of adding the forwarding address to that box because whether it's in the box or not, emails sent to a forwarding address are put in the Queue without a verification email sent. That seems a bit odd. So, back to our original question... What does adding an address to that box actually do? :) Thank you.
 

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
17,470
2,843
363
cPanel Access Level
Root Administrator
The official answer from the developers - "it is a list of 'to' addresses to trigger boxtrapper action on. In this way you could have it properly function even if you had some aliases or forwarders configured that sent mail to the account in question."

Does that help?
 

Amiga500

Well-Known Member
May 24, 2023
159
14
18
USA
cPanel Access Level
Root Administrator
It makes sense in theory, although the outcome is the same whether or not you put the forwarding address in that box, BoxTrapper processes the email either way.

So whether someone emails your mailbox directly or if it comes from a forwarding address the recipient address is the address associated with the mailbox so all emails would be processed by BoxTrapper anyway, unless of course the sending address is whitelisted.

So, I don't see what the benefit is of adding addresses which forwards emails to this mailbox. Do you?
 

Amiga500

Well-Known Member
May 24, 2023
159
14
18
USA
cPanel Access Level
Root Administrator
I received a response from my ticket and this feature is explained as such:

"This configuration you are referring to in BoxTrapper is specifically for forwarders that are created on your cPanel server here, and not forwarders from a remote server.

A forwarded message that is from a remote server is processed just as any other SMTP transaction from a remote source. While the email content may indicate that the message was forwarded, this is irrelevant to the actual delivery process as the connection must still go through all validation processes. Your server is not inherently aware that the message being delivered is a forward, nor does it need to so long as the remote server passes validation during the connection. As such, these remote messages forwarded to your server here are processed via BoxTrapper when the account has it enabled.

Instead, this configuration is to ensure that any "Forwarders" that you create in your cPanel account on this domain are processed correctly with a BoxTrapper-enabled account."

Here is an example the tech provided: (I replaced my email addresses and replaced them with examples)

For example: if you created a forwarder named "[email protected]" which forwards messages to "[email protected]" in your cPanel, then you will want to ensure that "[email protected]" is defined in your BoxTrapper configuration for "[email protected]". This is to ensure that messages sent to "[email protected] are handled correctly when being processed by BoxTrapper, as local alias delivery takes a different router in Exim than normal SMTP transactions.
 
  • Like
Reactions: cPRex