WHM EmailDesk Sender

Outbound protection for cPanel & WHM

Inspect locally.
Deliver directly.

Protect every remote Exim delivery on the WHM server, then hand approved mail directly to MailChannels or EmailDesk Gateway. Raw MIME never travels through the EmailDesk application relay.

Download pilot 0.3.33Installation guide
Mandatory no-bypass routingLocal policy evidenceGateway-priority delivery

Mail flow

One protected path for every outbound message

  1. 01

    Exim intercepts

    Every remote delivery enters the local EmailDesk Sender transport.

  2. 02

    Policy evaluates

    Sender, content, velocity, forwarding and prior delivery evidence are checked locally.

  3. 03

    Risk is contained

    Danger is blocked before delivery; uncertain mail can be held for root review.

  4. 04

    Gateway accepts

    Approved mail uses Priority 1, then Priority 2 only for a safe availability failure.

Release repository

Immutable, inspectable downloads

Machine-readable catalog
ChannelVersionTrustAvailability
StableNot publishedProduction signature requiredClosed
Pilot0.3.33SHA-256 · unsignedDownload archive

SHA-25641096029ab82a1eb067766874337657bf5dceb8b2f644a6eeb7e9efb4e418e81

Controlled installation

Download first. Verify before mutation.

The bootstrapper downloads into a private temporary directory, validates the channel, manifest, size and checksum, and only then extracts the lifecycle package. Stable builds additionally require the pinned public key and every release signature.

  • Requires root and a supported cPanel/WHM server
  • Preserves configuration during an upgrade
  • Does not activate Exim routing silently
  • Creates a recoverable lifecycle snapshot
Pilot installation
curl -fsSLo /root/emaildesk-sender-install.sh https://whmsender.emaildesk.bd/install.sh
chmod 0700 /root/emaildesk-sender-install.sh
/root/emaildesk-sender-install.sh --channel pilot --allow-unsigned-pilot

Unsigned pilot installation requires the explicit acknowledgement flag shown above.

Supply-chain security

Stable releases fail closed

01

Reproducible package

Canonical timestamps, file order, ownership and modes produce byte-identical archives.

02

Signed release contract

The archive, manifest, checksum inventory and channel pointer are independently signed.

03

Pinned trust anchor

The installer compares the release key with a fingerprint published through an independent channel.

Lifecycle

Built for safe server operations

Fresh install

./install.sh --fresh

Installs the runtime and WHM interface without silently changing Exim routing.

Upgrade

./upgrade.sh

Preserves local policy evidence, gateway credentials and active configuration.

Rollback

./rollback.sh

Restores the previous compatible release through a verified recovery snapshot.

Uninstall

./uninstall.sh

Requires explicit confirmation before removing active routing or local data.

Manual check

Verify the archive you received

sha256sum whm-emaildesk-sender-0.3.33.tar.gz