I keep getting this error..
Code:
Message 1H8DAL-0003Dq-9e is not frozen
delivering 1H8DAL-0003Dq-9e
LOG: MAIN
== scribby@scribbytech.net R=central_filter defer (-17): error in filter file: unrecognized condition word """" near line 7 of filter file
I've tried upcp --force, fixeverything & upexim --force
I getting this error when our clients are sending mail from outlook but they are able to send mail from webmail.
we are using exim mail server and whm . i can't understand where is problem , anybody can help me ?
Sending' reported error (0x800CCC6A) : 'Your
outgoing (SMTP) e-mail server has reported an internal error. If you
continue to receive this message, contact your server administrator or
Internet service provider (ISP). The server responded: 451 Please try again
later.
Under WHM ( Main >> Email >> View Mail Statistics ) there are mail statistics.
My stats is too poor, I see only 1 hour first.. other hour is all 0.. how can I set the size of log for make bigger and store all day value?
problem with incoming spam to my server. Causing high load that eventually take down the server.
Since I don't use the server for my mail (I use Gmail), can anyone let me know the easiest way to stop/block all incoming mails to the server? I still need outgoing mail, though. Some of my PHP forms need it.
Right now, I stopped Exim to save the server (if it runs, load can get to 900+).
According to tutorial [url]
You need to have this files
domainlist rbl_blacklist = lsearch;/etc/rblblacklist
domainlist rbl_bypass = lsearch;/etc/rblbypass
hostlist rbl_whitelist = lsearch;/etc/relayhosts : net-iplsearch;/etc/rblwhitelist
Ok one do permanent blacklist, other bypass rbl scanning and the other whitelist rbl scanning. Right now I´m whitelisting using CIDR net format (note that net-iplsearch will allow that).
Is there a way to add other rule to whitelist per e-mail address? I dont know if there sender = can be applied.
domains = +rbl_bypass -> do the domain bypass
hosts = +rbl_whitelist -> do the whitlist
I get dozens of these per minute in exim mail queue
Quote:
1J4neJ-0001DS-Ns-H
mailnull 47 12
<>
1198027383 0
-ident mailnull
-received_protocol local
-body_linecount 33
-max_received_linelength 115
-allow_unqualified_recipient
-allow_unqualified_sender
-localerror
XX
1
root@server.mydomain.com
154P Received: from mailnull by server.mydomain.com with local (Exim 4.68)
id 1J4neJ-0001DS-Ns
for root@server.mydomain.com; Tue, 18 Dec 2007 19:23:03 -0600
038 X-Failed-Recipients: admin@domain.com
029 Auto-Submitted: auto-replied
063F From: Mail Delivery System <Mailer-Daemon@server.mydomain.com>
029T To: root@server.mydomain.com
059 Subject: Mail delivery failed: returning message to sender
052I Message-Id: <E1J4neJ-0001DS-Ns@server.mydomain.com>
038 Date: Tue, 18 Dec 2007 19:23:03 -0600
1J4neJ-0001DS-Ns-D
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
admin@domain.com
SMTP error from remote mail server after RCPT TO:<admin@domain.com>:
host sentry.domainbank.com [64.85.73.28]: 553 sorry, that domain isn't in my list of allowed rcpthosts (#5.7.1)
------ This is a copy of the message, including all the headers. ------
Return-path: <root@server.mydomain.com>
Received: from root by server.mydomain.com with local (Exim 4.68)
(envelope-from <root@server.mydomain.com>)
id 1J4neI-0001D9-4I
for admin@domain.com; Tue, 18 Dec 2007 19:23:02 -0600
To: admin@domain.com
Subject: Services(2) failed
From: monitor@domain.com
Message-Id: <E1J4neI-0001D9-4I@server.mydomain.com>
Date: Tue, 18 Dec 2007 19:23:02 -0600
Address:mydomain.com
Following services are down:
SSH(22)
MySQL(3306)
Do not reply to this!
For further details please contact your provider!
Then I get this also
Quote:
1J4nhC-0001Kn-2T-H
root 0 0
<root@server.mydomain.com>
1198027562 0
-ident root
-received_protocol local
-body_linecount 13
-max_received_linelength 77
-auth_id root
-auth_sender root@server.mydomain.com
-allow_unqualified_recipient
-allow_unqualified_sender
-local
XX
1
root@server.mydomain.com
194P Received: from root by server.mydomain.com with local (Exim 4.68)
(envelope-from <root@server.mydomain.com>)
id 1J4nhC-0001Kn-2T
for root@server.mydomain.com; Tue, 18 Dec 2007 19:26:02 -0600
025* From: root (Cron Daemon)
045F From: root@server.mydomain.com (Cron Daemon)
009* To: root
029T To: root@server.mydomain.com
077 Subject: Cron <root@server> lynx --dump [url]
028 X-Cron-Env: <SHELL=/bin/sh>
025 X-Cron-Env: <HOME=/root>
033 X-Cron-Env: <PATH=/usr/bin:/bin>
027 X-Cron-Env: <LOGNAME=root>
024 X-Cron-Env: <USER=root>
052I Message-Id: <E1J4nhC-0001Kn-2T@server.mydomain.com>
038 Date: Tue, 18 Dec 2007 19:26:02 -0600
1J4nhC-0001Kn-2T-D
Not Found
The requested URL /agent/cron.php was not found on this server.
Additionally, a 404 Not Found error was encountered while trying to use an
ErrorDocument to handle the request.
_________________________________________________________________
Apache/2.2.6 (Unix) mod_ssl/2.2.6 OpenSSL/0.9.7a mod_auth_passthrough/2.1
mod_bwlimited/1.4 FrontPage/5.0.2.2635 mod_jk/1.2.25 PHP/5.2.5 Server at
mydomain.com Port 80
centos
2gigs ram
cpanel whm
Anyway after complaints of "mail not being sent" I looked at a few things, found over 25,000 messages stuck in the queue. The messages no being sent thing is yahoo blocking me because of too many mails sent to their servers without a valid recipient.
When I empty the queue it gathers about 200 mails an hour. Looks like it is coming from all over the world and they are using a valid ip from one of the domains hosted for sending.
Bear with me I was reselling for years and this is my first real dedicated server.
Reverse DNS is set up. I need a couple clues.
Today my server started to go off-line and each time i restarted it went down within couple minutes. So i looked into it and found that i had over 7000 emails in Exim Mail Queue. All of them are spam. I deleted them through WHM and now everything seems good again but....
My question is how can i check what caused this problem? Has one of my domains been compromised with and sending out spam? What can i do?
I have often seen the entry mailnull in the mail logs of exim.
I don't understand it. What is meant by mailnull? where can i get information about it?
1) What would you guys say is average in terms of the # of emails in the Mail Queue?
2) What steps can be taken to tighten it up? If I start with a clean slate, it only takes about a week or less for my mail queue to reach 1000 or more. Most of it seems like junk mail.
I installed exim and have been able to successfully use it as an smtp server. My test setup was as follows:
email client uses smtp.MYSERVER.com, my login, and password
The email is successfully forwarded to the appropriate recipient. However, when I create a new user, and test it's email capabilities, it does not work. I get a 535 error:
535 Incorrect authentication data
I have double checked the login and password, and I've tried this on multiple accounts. Is there an issue with how I'm creating the users? (useradd)
In my Exim mail queue, there are around 33,000 messages, all of which appear to be "Mail delivery failed: returning message to sender" messages.
The reason for these bounces is because spam is being continuously sent to non-existent addresses on my domain.
exim queue is always being filled by millions of spam mails...
In 5 minutes more than 1000 messages..
I have removed all several times but they insist in coming back..
In 1 one min:
1Ju7q6-00039t-031mDeleteDeliver Now
ALEXNSONIA@MSN.COM
1Ju7q6-00039w-161mDeleteDeliver Now
ALEXNSTEPH4-1-98@MSN.COM
1Ju7q6-0003A0-2s1mDeleteDeliver Now
ALEXIA27@BELLSOUTH.NET ...
Whenever I send mail, it never gets sent and I get the following error under "View Mail Statistics" in WHM:
1 xxx@aol.com R=fail_remote_domains: unrouteable
mail domain "aol.com"
I have only recently noticed these errors, as my mail was working before.