Exim Log Massive "failed" Errors
May 19, 2009
Getting massive amounts (thousands) of these lines in exim mainlogs and gz exim rotated logs too
Quote:
2009-04-21 09:20:45 [11305] 1LwGq4-0002wL-I3 <= <> R=1LwGq3-0002vw-Fa U=mailnull P=local S=1639 T="Mail delivery failed: returning message to sender" from <> for root@server.domain.com
Of course, the time is different (several days)
How can trace who / where this is coming from?
Its a cpanel box with suphp enabled, and all the exim tweaks you can imagine (ie, prevent nobody sender, max 50 mails per domain per hour, send callouts disabled, etc)
View 5 Replies
ADVERTISEMENT
Jun 22, 2009
Is there a way I can get more error messages with exim? I'm trying to log in using plaintext smtp authentication and all I get is this:
2009-06-21 06:51:23 Start queue run: pid=8021
2009-06-21 06:51:23 End queue run: pid=8021
2009-06-21 07:07:41 no host name found for IP address 220.80.173.17
2009-06-21 07:07:42 no host name found for IP address 220.80.173.17
2009-06-21 07:21:23 Start queue run: pid=8029
2009-06-21 07:21:23 End queue run: pid=8029
2009-06-21 07:41:18 no host name found for IP address 220.80.173.17
2009-06-21 07:51:23 Start queue run: pid=8074
2009-06-21 07:51:23 End queue run: pid=8074
2009-06-21 08:20:47 no host name found for IP address 220.80.173.17
2009-06-21 08:21:23 no host name found for IP address 220.80.173.17
View 5 Replies
View Related
Apr 19, 2008
568 Temporarily rejected RCPT: lowest numbered MX record points to local host
89 Temporarily rejected RCPT: Could not complete sender verify
12 Temporarily rejected RCPT: host lookup did not complete
9 Temporarily rejected RCPT: remote host address is the local host
View 3 Replies
View Related
Feb 28, 2007
I'm getting this email errors (cpanel box)
Code:
2007-02-28 16:36:51 1HMXPn-0005P3-Ea == user@recipient.com (user@senderlocal.com) <user@senderlocal.com> R=lookuphost T=remote_smtp defer (-53): retry time not reached for any host
2007-02-28 16:41:25 1HMXTl-0005zF-C0 => user@recipient.com (user@senderlocal.com, user@senderlocal.com) <news@senderlocal.com> F=<dont@orfa.com> P=<dont@orfa.com> R=lookuphost T=remote_smtp S=11767 H=c.mx.mail.yahoo.com [xxx.142.237.182]:25 C="250 ok dirdel" QT=28s DT=1s
2007-02-28 16:41:27 1HMXPn-0005P3-Ea => user@recipient.com (user@senderlocal.com) <user@senderlocal.com> F=<bounce-flnl-35375142@mx01.castlemountains.com> P=<bounce-flnl-35375142@mx01.castlemountains.com> R=lookuphost T=remote_smtp S=5503 H=c.mx.mail.yahoo.com [xxx.142.237.182]:-1* C="250 ok dirdel" QT=4m36s DT=1s
2007-02-28 16:41:27 1HMXOJ-0005Dm-Fg == user@recipient.com (user@senderlocal.com, user@senderlocal.com) <freeclipart@senderlocal.com> R=lookuphost T=remote_smtp defer (-46): SMTP error from remote mail server after end of data: host c.mx.mail.yahoo.com [xxx.142.237.182]: 451 Message temporarily deferred - [170]
Just now I ran...
exim_tidydb -t 1m /var/spool/exim wait-remote_smtp
exim_tidydb -t 1m /var/spool/exim retry
View 5 Replies
View Related
Apr 3, 2007
I operate a small vps account that I tinker with for personal use (I host a few friends web forums).
I am a novice at Linux and trying to learn by reading and extensive Google searches but I have been stuck for several days and I hope you can help.
Exim started failing immediately upon restart after upgrades were installed. I believe it is because it won't fully install due to chattr errors I get when I try to upgrade my server.
I am running CentOS 4.4 and I just installed the latest CURRENT build of Cpanel in an attempt to fix my problems.
I have been tinkering, and fixed a few things but nothing I do fixes Exim. When I run the upgrade scripts or I use Yum, or I use cpanel.
I am logged in through SSH as root, or logged in to WHM or Virtuozzo when I perform any actions.
service cpanel status shows:
cpsrvd dead but pid file exists
entropychat is stopped
melange is stopped
stunnel is stopped
interchange is stopped
qrunner is stopped
When Exim 4.63 is installing/upgrading (I see message elsewhere too), etc I repeatedly get:
chattr: Inappropriate ioctl for device while reading flags on /etc/aliases
chattr: Inappropriate ioctl for device while reading flags on /etc/antivirus.exi m
chattr: Inappropriate ioctl for device while reading flags on /etc/exim.conf.dis t
chattr: Inappropriate ioctl for device while reading flags on /etc/exim.conf.mai lman2.dist
chattr: Inappropriate ioctl for device while reading flags on /etc/exim.conf.mai lman2.exiscan.dist
chattr: Inappropriate ioctl for device while reading flags on /etc/exim.pl
chattr: Inappropriate ioctl for device while reading flags on /etc/exim/perl/Dig est/Perl/MD5.pm
chattr: Inappropriate ioctl for device while reading flags on /etc/eximrejects
chattr: Inappropriate ioctl for device while reading flags on /etc/init.d/antire layd
chattr: Inappropriate ioctl for device while reading flags on /etc/init.d/exim
chattr: Inappropriate ioctl for device while reading flags on /etc/localaliases
chattr: Inappropriate ioctl for device while reading flags on /etc/localdomains
chattr: Inappropriate ioctl for device while reading flags on /etc/logrotate.d
chattr: Inappropriate ioctl for device while reading flags on /etc/logrotate.d/e xim
chattr: Inappropriate ioctl for device while reading flags on /etc/pam.d/exim
chattr: Inappropriate ioctl for device while reading flags on /etc/secondarymx
chattr: Inappropriate ioctl for device while reading flags on /etc/spammers
chattr: Inappropriate ioctl for device while reading flags on /etc/valiases
chattr: Inappropriate ioctl for device while reading flags on /etc/vfilters
chattr: Inappropriate ioctl for device while reading flags on /usr/lib
chattr: Inappropriate ioctl for device while reading flags on /usr/lib/sendmail
chattr: Inappropriate ioctl for device while reading flags on /usr/sbin
chattr: Inappropriate ioctl for device while reading flags on /usr/sbin/antirela yd
chattr: Inappropriate ioctl for device while reading flags on /usr/sbin/exicyclo g
chattr: Inappropriate ioctl for device while reading flags on /usr/sbin/exigrep
chattr: Inappropriate ioctl for device while reading flags on /usr/sbin/exim
chattr: Inappropriate ioctl for device while reading flags on /usr/sbin/exim_che ckaccess
chattr: Inappropriate ioctl for device while reading flags on /usr/sbin/exim_dbm build
chattr: Inappropriate ioctl for device while reading flags on /usr/sbin/exim_dum pdb
chattr: Inappropriate ioctl for device while reading flags on /usr/sbin/exim_fix db
chattr: Inappropriate ioctl for device while reading flags on /usr/sbin/exim_loc k
chattr: Inappropriate ioctl for device while reading flags on /usr/sbin/exim_tid ydb
chattr: Inappropriate ioctl for device while reading flags on /usr/sbin/eximstat s
chattr: Inappropriate ioctl for device while reading flags on /usr/sbin/exinext
chattr: Inappropriate ioctl for device while reading flags on /usr/sbin/exiqgrep
chattr: Inappropriate ioctl for device while reading flags on /usr/sbin/exiqsumm
chattr: Inappropriate ioctl for device while reading flags on /usr/sbin/exiwhat
chattr: Inappropriate ioctl for device while reading flags on /usr/sbin/runq
chattr: Inappropriate ioctl for device while reading flags on /usr/sbin/sendmail
chattr: Inappropriate ioctl for device while reading flags on /usr/share/doc/exi m-4.63
chattr: Inappropriate ioctl for device while reading flags on /usr/share/doc/exi m-4.63/README
Exim starts up - but then fails:
Apr 3 07:35:30 server exim: clamd shutdown succeeded
Apr 3 07:35:30 server exim: exim shutdown succeeded
Apr 3 07:35:30 server exim: antirelayd shutdown succeeded
Apr 3 07:35:30 server exim: spamd shutdown succeeded
Apr 3 07:35:31 server exim: clamd startup succeeded
Apr 3 07:35:31 server exim: exim startup succeeded
Apr 3 07:35:31 server exim: exim startup succeeded
Apr 3 07:35:31 server exim: antirelayd startup succeeded
Apr 3 07:35:33 server exim: spamd startup succeeded
exim has failed, please contact the sysadmin.
I understand that this is a permissions problem but I can't figure out how to fix it?
I've done alot of searches on Google, but found vagues answers I just didn.t understand.
View 0 Replies
View Related
Jun 20, 2014
All domains were offline this morning. Plesk showed the following error message. It seems we are beta testing the software. I am on Suse 13.1, clean install.
Unable to rotate dump: The dump rotation is failed with code '1' at /usr/local/psa/admin/bin/plesk_agent_manager line 1041.
Warning: domain "abc.com"
The domain 'abc.com' may be inaccessible after backup. Please, resume it manually!
Warning: domain "abc.com"
Cannot resume domain 'abc.com' (ErrorCode: 255, STDOUT [Error:].
View 4 Replies
View Related
Mar 6, 2014
While installing ppa i got the following error message, i cant understand:
Code:
...
2014-03-06 13:53:37.148 INFO Creating repo for RHEL-6-i686
2014-03-06 13:53:37.455 INFO Creating repo for RHEL-5-x86_64
2014-03-06 13:53:37.754 INFO Creating repo for RHEL-6-x86_64
2014-03-06 14:13:41.450 ERROR Exception Failed to create repositories: ['/usr/local/pem/install/tarballs/RHEL/5/i386/YUM']
2014-03-06 14:13:41.450 ERROR <type 'exceptions.Exception'>
[Code] ....
Installation was started at CentOS 6.5 x64
View 2 Replies
View Related
Jan 4, 2007
I have a busy cpanel mail server
Very often now and then, i have 2 issue coming up:
1. Unroutable E-mail bounce back message
The message looks like this:
you@gmail.com
unrouteable mail domain "gmail.com"
I have already set "unlimited" mail per hour on cpanel itself and it should not be giving me this message but it does again.
2. Exim failed by itself (SMTP Error while sending out e-mail)
I am using Outlook Express & Thunderbird, sometimes while sending out the e-mail, it gives SMTP error popup message.The e-mail was never sent out. I can only solve this problem by restarting exim manually.
What are the permenant solution for both of this issue?
View 5 Replies
View Related
Nov 15, 2007
We're on a VPS and lately we've been getting a few 'exim has failed...A restart was attempted automagicly.' messages. Support indicated that we're hitting our limits and suggested that we move to a bigger package or remove accounts. I only have 2 active sites on this account. We're new at this and don't know if there's anything else we can do.
Does anyone know what could be causing exim to fail?
View 7 Replies
View Related
Mar 23, 2015
I have only tried to "switch on" the jail item "apache-badbots" and get a red box with:
Unable to switch on the selected jails: f2bmng failed: ERROR No file(s) found for glob /var/www/*/logs/access_log
ERROR Failed during configuration: Have not found any log file for apache-badbots jail
ERROR:f2bmng:Command '['/usr/bin/fail2ban-client', 'reload']' returned non-zero exit status 255
ERROR:f2bmng:Failed to reload following jails due to errors in configuration
.Click to expand...
View 8 Replies
View Related
May 23, 2009
i have run exim -qff from SSH then i got below error let me know what to do
Code:
root@web [~]# exim -qff
sda7: write failed, user block limit reached.
sda7: write failed, user block limit reached.
sda7: write failed, user block limit reached.
View 4 Replies
View Related
Jun 24, 2009
My mail server receives tons of messages directed towards bogus, non-existant addresses at my domain. When those addresses don't exist, it creates a reply email with the subject "Mail delivery failed: returning message to sender". How do I stop exim from doing this?
View 3 Replies
View Related
Sep 16, 2007
I have a problem with a customer. For the last 48 hours he has been receiving a massive DDoS at his server. I tried blocking the darn IPs but they keep coming and with several hundreds of connections each:
104 78.157.168.98
125 83.226.157.91
126 89.103.109.65
131 89.12.150.23
135 84.251.196.78
135 86.122.0.135
135 91.127.235.86
154 84.24.14.41
160 193.216.140.101
331 89.151.8.78
419 78.0.103.64
Apache has over 14000 connections. I tried using mod_evasive but didn't do anything and the server has been out without httpd for hours now. Any advices? This is a Hsphere server (I hate it personally) with 4GB RAM and a dual optero 246. I have the mexclients setting at 550.
View 14 Replies
View Related
Jul 9, 2009
How can I better monitor and trace down I/O spikes? I've noticed the wait hit 60% every now and again... could someone be running a rapidleech script and if so, how can i find it?
View 2 Replies
View Related
Jul 14, 2006
I want to prepare myself for getting dugg and whatnot, so I want to mirror my site ahead of tiem. The problem is that it's very db-intensive so there's a db that all mirrors would have to query. What's the best way to deal with multiple dedicated servers in order to spread traffic load and not crash my site?
View 3 Replies
View Related
Jun 7, 2007
I have a dedicated windows server. I have it protected to the best of my ability (disabling administrative shares, anti-virus, anti-spyware, disabled remoted desktop, firewall, etc.). The purpose for the server is to host game servers. Over the past month, ive noticed massive amounts of bandwidth being used. For example Windows reports the bandwidth usage at a little over 2 GB in 1 day, yet on my control panel which reads the traffic from the switch, it shows that 9 GB have been transferred. I asked the colo what's happening and they said that traffic that is blocked by the firewall is still counted toward my monthly limit. But how can there be 7 GB of blocked traffic, keeping in mind i never had this problem months ago. As a test, last night i disabled all game servers and applications that use bandwidth. In the past day over 9GB has been transferred, despite the fact that i have nothing running that takes more then 50KB of bandwidth.
Aside from these bandwidth issues, everything is running fine, my passwords are still the same, etc. Is there anyway detect security holes, so that i may patch them when i reinstall the OS? I asked my colo for a security audit.
My question is, do you think my server has been compromised?
View 8 Replies
View Related
Nov 4, 2009
I've noticed that vBulletin and one of my directories is getting hit hard for the same file by sites in the Netherlands, Russia, Vietnam and China.
The lines typically state the same, trying to hit a file that isn't there, which may be in a forum/ or forums/ directory instead of the root.
'/home/mysite/public_html/forumdisplay.php' not found or unable to stat
'/home/mysite/public_html/newthread.php' not found or unable to stat
What have you guys done for this? I'm assuming an .htaccess edit may be in order. I'm also hoping to track IP addresses so that I can keep adding them easily. I wish it was more simple to do it on the server level using whm since it's usually accessible everywhere.
View 3 Replies
View Related
Jun 4, 2008
I've gotten several messages from cpanel like this:
5 login failures attempts to account mysql (system) -- too many attempts from this ip
View 2 Replies
View Related
Oct 7, 2008
Can any suggestion a host, and incidently perhaps the best album script, to host as much as 100,000 photos? I'm not sure size yet, but 10-15 gigs is expected. Currently there's 40k photos, but I'm leaving room for expansion.
View 13 Replies
View Related
Feb 3, 2007
I have a server , and it look like have a litle problem by sending mails , becase IT IS SENDING A LOT OF MAILS ... this is the stats:
User - Domain - Messages Sent - Total Bytes Sent
nobody - - 3430 - 2407677
Anybody know some tool that could alert me in case some scripts send X mails ?? and say me the file of that script?
I know that nobody are sending a lot of mails , but where is the scripts that produce it?
View 3 Replies
View Related
Jun 2, 2009
I am trying to figure out what file system to use for my server. It has 24 hard drives, 2 run the OS in RAID 1, and the other 22 are in RAID 10. When I was installing the OS (Ubuntu 8), I kept on getting problems when I tried to partition and format the second drive (the one with the 22 disks in RAID 10) and it keeps failing on me. I then changed the file system type from ext3 to XFS and it worked fine. I also gave it another try and did not partition/format the second drive and decided to do it manually once the OS was installed. When I did it it told me that the file system was too large for ext3. So my guess is that ext3 has a limit on the size of the file system it is being installed on.
Anyway, so I am wondering, is there any other file system that will get me the best performance, mainly I/O performance, that I can install? I would like to stick with Ubuntu OS. This server will mainly serve large files for download over HTTP.
View 14 Replies
View Related
Nov 18, 2007
how to handle the file storage of a youtube clone?
Is it just a matter of getting more servers with a few hdds or are there specialized companies that one can upload files over a distributed file streaming network?
The reason I ask is because I have thousands of gigabytes of videos and it appears to be impossible to upload it on 1 dedicated server or even a few.
View 6 Replies
View Related
Jun 20, 2007
to change all passwords for user account on cpanel server. Is it possible to do it automatically by using some cpanel script? Also I need this information stored in one file in order to know new passwords.
View 4 Replies
View Related
Feb 13, 2007
I'm noticed I was getting bounced email errors from a company I was sending email through and I further investigated this by running a dnsreport on my domain.
Turns out that it fails at Acceptance of NULL <> sender, Acceptance of postmaster address, and Acceptance of abuse address. The domain that I ran a test on is using a new IP that I had recently added to my Direct Admin server. None of the other domains on my server are having issues like this.
Is is possible that I need to do something to enable these new IP addresses in exim? I mean, exim obviously responds to that IP address, but it seems to be having some issues with it.
View 5 Replies
View Related
May 2, 2007
I am having issues in receieving emails. For some reason, the rbl lists I had setup are causing the server to reject emails (retry - timeout). So, I need to take this rbl list completely. How can I do that? exim.conf is locked and using the advanced editor is no fun even though I tried it putting the dnslists without the rbl causing the problem.
View 3 Replies
View Related
Apr 1, 2009
I am doing the Security Check provided by Config Server Firewall.
It is giving me 3 errors, and I want to fix them, so here they are.
Check /dev/shm is mounted noexec,nosuid
/dev/shm is not mounted with the noexec,nosuid options (currently: none). You should modify the mountpoint in /etc/fstab for /dev/shm with those options and remount
On this one I actually went and added the noexec,no suid options. Here is what i've got configured and what it looks like. (it's most likely not correct so help correct it.)
[url]
Check /etc/named.conf for DNS recursion restrictions
You have a local DNS server running but do not have any recursion restrictions set in /etc/named.conf. If the named process is using this configuration file, then this is a security and performance risk and you should look at restricting recursive lookups to the local IP addresses only
Check dovecot weak SSL/TLS Ciphers (ssl_cipher_list)
Cipher list []. Due to weaknesses in the SSLv2 cipher you should disable SSLv2 in WHM > MailSever Configuration > SSL Cipher List > Remove +SSLv2 or Add -SSLv2
Alright so this one I followed the instructions, and i've got everything set correctly but it still shows up on the thing. I don't think the ssl_cipher_list is even available in WHM
View 3 Replies
View Related
May 30, 2008
I don't know much of anything about server settings or errors, so I need your help. Recently one of my servers have been getting a lot of 500 error messages, and I can't pinpoint the reason or replicate the error on my end. I did some Google searching and although I found out in general what a 500 error is, I still am not clear on what exactly causes them or how to reduce them. Could it be caused by intense amounts of traffic? Is the server just being overloaded?
Also, I see that my server is throwing a lot of 404 errors for a variety of URLs on my site, however when I visit the URLs specified by the error log they work fine for me - seems like only sometimes for whatever reason the server can't find/access them and throws a 404. Again, I can't replicate it and have no clue how to fix it since the list of 404 URLs work fine when I type them in.
View 4 Replies
View Related
May 29, 2008
I have a VPS account with an hosting site. For the past 2 days i have done a lot of uploads. I have 25+ sites on this account. Today when i try to login into my sites via ftp, its showing ftp login failed for all sites.
The hosting company is still sleeping on my queries regarding this matter.
Interestingly logins for WHM & cpanel for all sites are working fine.
Any experienced members plz guide me on how to get the ftp working to upload files to my sites.
View 4 Replies
View Related
Nov 25, 2008
I see this in the domain error logs...
[25-Nov-2008 16:49:03] PHP Warning: PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_mysql.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_mysql.so: undefined symbol: php_pdo_get_dbh_ce in Unknown on line 0
[25-Nov-2008 16:49:04] PHP Warning: PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_mysql.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_mysql.so: undefined symbol: php_pdo_get_dbh_ce in Unknown on line 0
[25-Nov-2008 16:49:05] PHP Warning: PHP Startup: Unable to load dynamic library '/usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_mysql.so' - /usr/local/lib/php/extensions/no-debug-non-zts-20060613/pdo_mysql.so: undefined symbol: php_pdo_get_dbh_ce in Unknown on line 0
[25-Nov-2008 16:49:10] PHP Warning: PHP Startup: Unable to load dynamic library ...
Using php 5.2.6 / mysql pdo module (compiled via whm > apache update) / mysql 5
View 4 Replies
View Related
