Suddnly server load reach to 130 and when run top -ic i see more than 15 exim process running as mailnull user then i restart exim service and load went to normal again.
server specs:
Quad Xeon 3.6
RAM 2G
Centos 4.4
CPanel/WHM
How I can control it?
I had to bump a server we have over at the planet, but I cannot seem to determine the cause of its unresponsiveness (everything down to even simple ping). I checked APF logs and it didn't show anything except its normal periodic refresh of rules and such. I also see an selinux warning about proftpd trying to get to proftpd.conf and I saw something about selinux blocking mysql from using mysql.sock as well - I temporarily disabled SELINUX all together (it was in targeted mode). In the log files, it did log the fact though that it received SIGTERM and was going to runlevel 0, so it wasn't completely dead. I've gone through quite a few other logs and have come up empty handed. Is there anything else I can do? I want to get to the bottom of this.
View 0 Replies View RelatedI am having issues in receieving emails. For some reason, the rbl lists I had setup are causing the server to reject emails (retry - timeout). So, I need to take this rbl list completely. How can I do that? exim.conf is locked and using the advanced editor is no fun even though I tried it putting the dnslists without the rbl causing the problem.
View 3 Replies View RelatedI noticed that server load up to 80 and it's cut of "top -ic"
Code:
8050 nobody 16 0 25908 10m 2092 D 0 0.5 0:56.61 /usr/local/apache/bin/httpd -DSSL
8085 nobody 16 0 22612 10m 2156 D 0 0.5 0:40.63 /usr/local/apache/bin/httpd -DSSL
16765 nobody 15 0 24092 10m 2172 D 0 0.5 0:21.80 /usr/local/apache/bin/httpd -DSSL
27915 mailnull 16 0 8172 2716 1768 D 0 0.1 0:00.04 /usr/sbin/exim -bd -q60m
27974 mailnull 15 0 8168 2712 1772 D 0 0.1 0:00.03 /usr/sbin/exim -bd -q60m
28121 mailnull 16 0 7364 1812 1480 D 0 0.1 0:00.00 /usr/sbin/sendmail -t -i
28166 mailnull 16 0 8144 3784 2756 D 0 0.2 0:00.02 /usr/sbin/exim -Mc 1HCL5W-0007Iq-H9
28178 root 17 0 7360 1676 1376 D 0 0.1 0:00.00 /usr/sbin/exim -Mc 1HCL5l-0007JV-1A
28197 mailnull 16 0 8152 3784 2752 D 0 0.2 0:00.03 /usr/sbin/exim -Mc 1HCL5W-0007Is-H9
28202 root 18 0 7352 1672 1376 D 0 0.1 0:00.00 /usr/sbin/exim -Mc 1HCL5l-0007Jb-17
28207 mailnull 15 0 8168 2700 1760 D 0 0.1 0:00.03 /usr/sbin/exim -bd -q60m
28217 mailnull 16 0 8148 3788 2756 D 0 0.2 0:00.03 /usr/sbin/exim -Mc 1HCL5W-0007Io-H9
28241 root 17 0 7364 1676 1376 D 0 0.1 0:00.00 /usr/sbin/exim -Mc 1HCL5l-0007JU-1D
28258 root 17 0 7360 1676 1376 D 0 0.1 0:00.00 /usr/sbin/exim -Mc 1HCL5l-0007Ja-17
Then i located a message on queue
and it's content
Code:
2007-01-31 14:26:39 Received from nobody@SERVER_NAME U=nobody P=local S=883
When SERVER_NAME=name.domain.com
So how i can determine problem from this data?
Exim server - being used to relay spam?
Hoping someone can help here. I have a web server running a couple of sites, has been for a couple of years now. With one of the domains, I have an email forwarder setup through cpanel to forward mail sent to a specific address at that domain to my gmail account (it's a "contact us" type address). I don't think the email address is listed on the web anywhere.
Anyway, I am noticing a lot of spam emails being sent to that address, from that same address and they all appear to be relayed through my exim server legitimately. Obviously they aren't (as I am not sending them).
I am only familiar with sendmail, and am unsure about where to look for any possible hacks to my exim server. Can someone point me in the right direction? I want to stop these spam messages being sent, asap.
how to move all existing e-mail accounts including passwords, current e-mails on the server etc from one server to another (both running Exim)? No control panel.
View 1 Replies View RelatedToday my server started to go off-line and each time i restarted it went down within couple minutes. So i looked into it and found that i had over 7000 emails in Exim Mail Queue. All of them are spam. I deleted them through WHM and now everything seems good again but....
My question is how can i check what caused this problem? Has one of my domains been compromised with and sending out spam? What can i do?
how to set up exim on a bare linux server to not allow more than one recipient per command?
I don't want to allow, for example, mail lists.
Example of exim command
2008-11-19 20:14:11 [2135] cwd=/path/to/account 3 args: /usr/sbin/sendmail -t -i
2008-11-19 20:14:11 [2135] 3L5JXP-0001bH-MF <= apache@server.com U=apache P=local S=1091 T="Bla bla" from <apache@server.com> for mail1@ee.com mail2@dd.com mail3@dfffg.com ETC ETC ETC
Does anyone know if it is possible to implement DKIM (DomainKeys Identified Mail) on a Linux server that uses cPanel/Exim? I am interested in getting this implemented but not sure how, or if it's even possible yet on my setup.
View 14 Replies View RelatedWhenever I send mail, it never gets sent and I get the following error under "View Mail Statistics" in WHM:
1 xxx@aol.com R=fail_remote_domains: unrouteable
mail domain "aol.com"
I have only recently noticed these errors, as my mail was working before.
Anybody done this like one or two email server running especially Exim and all other cPanel servers are using them as email proxies to send email?
View 6 Replies View RelatedBroadcast message from root (Sat Jan 6 15:52:08 2007):
cPanel Layer 2 Update Commencing
Broadcast message from root (Sat Jan 6 16:01:09 2007):
cPanel Layer 2 Install Complete
I got this message while leaving my computer on over the weekend. And suddenly find that my mail server aint' working. So i tried to restart exim
root@kuching [~]# service exim restart
Shutting down exim: [FAILED]
Shutting down antirelayd: [ OK ]
Shutting down spamd: [ OK ]
Starting exim: 2007-01-07 20:47:43 non-existent configuration file(s): /etc/exim.conf
[FAILED]
Starting exim-smtps: 2007-01-07 20:47:43 non-existent configuration file(s): /etc/exim.conf
[FAILED]
Starting antirelayd: [ OK ]
Starting spamd: [ OK ]
I tried to reinstall exim by # /scripts/exim4 --force
It doesn't work again, so I tried to update again # /scripts/upcp --force
Hi, today i was banned from hotmail aparently someone enter our server to one account of one client and sent spam all over the net...
platinumservermanagement already told us the name of the account used and we change the password,
can you please tell me where can i check the out mail logs (am using centos & exim) to see if anyone else is sending out spam? or the number of emails sent?
Just started to have problems sending emails out but no problem receiving.
Seems to be a exim problem.. tried updating it but the problem still exist but everytime I restart exim then it works for a few hours before the problem comes back.
I have two servers running cPanel/WHM, with BIND and Exim. I have my main domain running on one server (gizmo.mywebhost.net) and wish to host a seperate helpdesk on a subdomain support.mydomain.com (on a second server, stripe.mywebhost.net).
The subdomain mail account test@support.mydomain.com works fine with hotmail, i can send and reveive between my stripe.mywebhost.net server and hotmail without any issue.
The problem is when i try and send mails from accounts hosted on gizmo.mywebhost.net, to the subdomain server stripe.mywebhost.net, i get the following unroutable address error fired back by the local exim process:
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed:
test@support.mydomain.com
Unrouteable address
------ This is a copy of the message, including all the headers. ------
......
On of our clients use an MS Exchange 2003 SBS server, with exchange for their internal email. We provide them with a domain, ADSL (which uses dynamic DNS) and POP3 email. They don't have an spam filter program on the exchange server itself due to costs, so I have setup each user on the Exim server, which runs ASSPX for anti-virus / spam filter / etc.
Then I setup the SBS 2003 server to pull the email via POP3, but this doesn't seem to work too well, cause the exchange server doesn't always download the POP3 email, and then the users often sit without email until I go there to manually download the mail again.
I have tried changing the MX record to point to their DynDNS address, and it works well, but then they get a lot of spam. And the cost of a server-side spam solution is just too expensive, and they also pay for the bandwidth uses when spam comes in. So, I moved their MX record back to the Linux server. But now I sit with the problem of the POP3 connector failing from time to time.
So, I would like to know, is there a way to "push" (not forward) mail from the Linux server, after it has arrived and spam been blocked, to another domain, but with the same email address? i.e. the domain in question is attorneys.co.za and I've setup attorneys.dyndns.net as the dynamic domain, but the exchange serves email for attorneys.co.za Forwarding email doesn't work, since there's no such user as bob@attorneys.dyndns.net, but rather bob@attorneys.co.za.
I getting this error when our clients are sending mail from outlook but they are able to send mail from webmail.
we are using exim mail server and whm . i can't understand where is problem , anybody can help me ?
Sending' reported error (0x800CCC6A) : 'Your
outgoing (SMTP) e-mail server has reported an internal error. If you
continue to receive this message, contact your server administrator or
Internet service provider (ISP). The server responded: 451 Please try again
later.
this is often happening on my new servers, with FreeBSD and exim 4.69
2 exim process start using a lot of CPU (that's not 100%, but it's like 40% for one process and 35% for other) for hours...
but, as soon as I restart exim, that stops
so it's not a high mail load on server, nor anything like that
I even checked logs to see if it was on some kind of infinite loop (auto-auto-auto-auto-reply), etc, but can't find anything out of ordinary
anyone experiencing something similar?
I have a dedicated server with WHM installed on it, but recently I've been having problems with emails, specifically exim.
The main issue appears to be a huge number of exim processes all running at the same time. It pushes the server load higher and higher (and when I say high I mean over 100), and basically locks everything else up until I can get a command through to kill exim.
After a bit more investigation I found that the mail queue in WHM appears to be seperate to the one I can find with the exom -bpc command, and gets full of email sent to non existant domains or accounts. So my first theory is that at some point exim tries to deliver all of these at once and that causes the massive load spikes. I don't know if that's possible, or probable, but there isn't enough legitimate email coming into the server that there ought to be any issues.
i've read about how to control the mail q from exim, but that doesn't appear to make a different to the q shown in whm. Currently the server is being held up by a cron running every half hour to restart exim automatically, but at peak times this doesn't appear to be doing enough, and at one point yesterday exim had 400 running processes.
Obviously this is causing a few problems. I don't have the technical knowledge to diagnose or fix the problem past the guesswork i've already done, so i'd appreciate any suggestions
I have some clients who own large forums, and during usage Mass Mail CPU goes up to 100%. Is there any way to re-configure the exim so not to distrupt the CPU that much?
View 4 Replies View RelatedI got a mail "spamd failed @ Fri Jan 11 04:34:53 2008. A restart was attempted automatically".And I checked the server.Then I found that spamd is not working.Its a cpanel server.I've tried to restart exim but spamd is not starting.
View 4 Replies View RelatedI'm trying to diagnose some server load spikes, and I've noticed that my exim log files are getting huge (5 gigs, plus 4 gzips at 1.7gigs)...my server status shows the gzips and greps on these log files putting my cpu load at 99.9%...how do i keep these from getting so huge and/or keep them from maxing out my server?
I'm running CentOS and cpanel...