I have been seeing so many exim mail queue on server. I would like to clear for every one hour throuh crontab entry. So that I have used following script to run.
file path : /root/eximQueue.sh
Script:
#!bin/bash
exim -bpu |awk '{print $3}'|xargs exim -Mrm
crontab entry:
0 * * * * /bin/bash /root/eximQueue.sh
but the crontab is running every 1 hour but no mails cleared. Please guide to work this.
can I delete certain emails from mail queue manager in SSH?
for example we have many emails for trying to send to email@email.com and I would like delete this emails.
We have running exim mail service in cpanel web server. Exim consumed some CPU% memory and lots of threads are opening. More than 2000 mails in queue everyday. How can we optimize the exim mail service?
top - 06:33:12 up 23:12, 1 user, load average: 0.03, 0.08, 0.08
PID USER PR NI %CPU TIME+ %MEM VIRT RES SHR S COMMAND
4777 mailnull 15 0 1 0:00.02 0.2 9324 3936 2680 S exim
1809 mailnull 16 0 0 0:00.09 0.1 8192 1156 808 S exim
1815 mailnull 24 0 0 0:00.00 0.1 8428 1100 764 S exim
4779 mailnull 16 0 0 0:00.00 0.0 8200 684 336 S exim
how to setup hourly cronjob to kill exim mail queues on the cpanel server?
I know this question may sounds a little tedious as I have tried to find an answer to this but still have no clue yet.
I get an alert that The exim delivery queue size currently has 3000 emails in it waiting to be processed.
View 5 Replies View Relatedi'm running a windows 2003 server to host a number of websites.
unfortunatly it looks like i didn't correctly protect the SMTP mail server
i checked the 'badmail' folder in the inetpub and found there were upwards of 250,000 bounced mails there... some spammers were obviously having a field day with my smtp server...
i've now changed the settings so that realys are only accepted from 127.0.0.1 and anonymous access is now disallowed.
my problem is that when i start up the SMTP server again spam is continuing to be sent out because the Queue folder is apparently full of junk waiting to go out...
i've tried entering this folder but the computer hangs, presumably because there are so many there...
i've tried deleting and renaming the folder but even with the smtp server turned off i get an 'Access Denied' error...
what can i do to flush or empty the queue folder ?
Due to spammer activity, I find myself with 20,000 messages in the queue and I'd really like to remove those emails from the queue as it is causing delays to good messages.
Can you give me the SSH command to remove messages by subject line please?
I have already used
exim -bpru|grep frozen|awk {'print $3'}|xargs exim -Mrm
and
exiqgrep -i -f '<>' | xargs exim -Mrm
and
exim -bpu |awk '/nobody/ {print $3} ' |xargs exim -Mrm
But there are still 11,000 messages left in the queue.
The spammer messages have the following subject lines:
IS THIS TRUE?
PAYMENT UPDATE
Online Banking Account Is Locked !
Online Banking has been locked
ARE STILL ALIVE /THIS A SAD NEWS ABOUT YOU
Version 12.0.18. Using QMail.
If I attempt to remove even a small message from the mail queue, using the panel interface, the screen grays slightly but nothing happens. If I refresh the screen after several minutes, I'll sometimes get the following message:
"This operation is taking too long. Check the results in a few minutes."
Switching to Postfix eliminated the problem. But with Postfix, all of my Mailman lists (scores of them) broke, so I had to switch back -- and the problem reappeared.
how I can create a cron job that runs every 10minutes or so to clear my /tmp folder on one of my servers?
Reason I ask is, it keeps getting filled up and doesn't delete the fiels in it and stops certain scripts from running.
Also, again, I need step by step instructions, such as:
1) what, where the file is I need to place the cron job in
2) what line of code would I put in that file (what does the cron job line look like for every 10min every day)
3) do I need to restart anything, and if so, what command do I run in shell?
How can I set a command that it will delete all bounce and frozen emails every 12 hours?
I have a server like this:
WHM 10.8.0 cPanel 10.9.0-S9966
CentOS 3.8 i686 - WHM X v3.1.0
My cron files are like this: var/spool/cron/
Quote:
33 4 * * * /scripts/upcp
0 1 * * * /scripts/cpbackup
*/15 * * * * /usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1
2,58 * * * * /usr/local/bandmin/bandmin
24 5 * * * /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify
0 0 * * * /usr/local/bandmin/ipaddrmap
0 */1 * * * /usr/local/nobody_check/nobody_check >/dev/null 2>&1
0 6 * * * /scripts/exim_tidydb > /dev/null 2>&1
*/5 * * * * perl /root/rvadmin/rvmultiupdate.pl >/dev/null 2>&1
14 6 * * * perl /root/rvadmin/auto_rvskin.pl
*/5 * * * * /usr/local/cpanel/bin/dcpumon >/dev/null 2>&1
But e-mails like tha is coming to me
Quote:
Cron <root@mavi> /usr/local/cpanel/bin/dcpumon >/dev/null 2>&1
/bin/sh: line 1: 1
: ambiguous redirect
Quote:
Cron <root@mavi> perl /root/rvadmin/rvmultiupdate.pl >/dev/null 2>&1
/bin/sh: line 1: 1
: ambiguous redirect
This feels like an unusually newbie question for me, but... I think my exim queue isn't running. I was born and raised on qmail :-)
I discovered on a relatively new server that the message queue was backed up nearly a month with messages. Fortunately it wasn't a crazy amount, some were double-bounces, and with the help of exiqgrep I got it caught up manually in about a day on and off.
But today it's obvious messages that fail the first time (ex: greylisted) NEVER get retried. Is this a missing cron job? Or command-line param for exim? I would think a relatively stock cPanel install wouldn't suffer from this but... where do I start checking?
Code:
/usr/sbin/exim -bd -oX 587
2008-03-09 04:02:15 exim 4.68 daemon started: pid=13511, no queue runs, listening for SMTP on port 25 (IPv4) port 587 (IPv4) [127.0.0.1]:10025
I mean, that seems fairly obvious right there, but I want to make sure I fix it the right way... in case this is merely a checkbox in cPanel or something...
I get dozens of these per minute in exim mail queue
Quote:
1J4neJ-0001DS-Ns-H
mailnull 47 12
<>
1198027383 0
-ident mailnull
-received_protocol local
-body_linecount 33
-max_received_linelength 115
-allow_unqualified_recipient
-allow_unqualified_sender
-localerror
XX
1
root@server.mydomain.com
154P Received: from mailnull by server.mydomain.com with local (Exim 4.68)
id 1J4neJ-0001DS-Ns
for root@server.mydomain.com; Tue, 18 Dec 2007 19:23:03 -0600
038 X-Failed-Recipients: admin@domain.com
029 Auto-Submitted: auto-replied
063F From: Mail Delivery System <Mailer-Daemon@server.mydomain.com>
029T To: root@server.mydomain.com
059 Subject: Mail delivery failed: returning message to sender
052I Message-Id: <E1J4neJ-0001DS-Ns@server.mydomain.com>
038 Date: Tue, 18 Dec 2007 19:23:03 -0600
1J4neJ-0001DS-Ns-D
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
admin@domain.com
SMTP error from remote mail server after RCPT TO:<admin@domain.com>:
host sentry.domainbank.com [64.85.73.28]: 553 sorry, that domain isn't in my list of allowed rcpthosts (#5.7.1)
------ This is a copy of the message, including all the headers. ------
Return-path: <root@server.mydomain.com>
Received: from root by server.mydomain.com with local (Exim 4.68)
(envelope-from <root@server.mydomain.com>)
id 1J4neI-0001D9-4I
for admin@domain.com; Tue, 18 Dec 2007 19:23:02 -0600
To: admin@domain.com
Subject: Services(2) failed
From: monitor@domain.com
Message-Id: <E1J4neI-0001D9-4I@server.mydomain.com>
Date: Tue, 18 Dec 2007 19:23:02 -0600
Address:mydomain.com
Following services are down:
SSH(22)
MySQL(3306)
Do not reply to this!
For further details please contact your provider!
Then I get this also
Quote:
1J4nhC-0001Kn-2T-H
root 0 0
<root@server.mydomain.com>
1198027562 0
-ident root
-received_protocol local
-body_linecount 13
-max_received_linelength 77
-auth_id root
-auth_sender root@server.mydomain.com
-allow_unqualified_recipient
-allow_unqualified_sender
-local
XX
1
root@server.mydomain.com
194P Received: from root by server.mydomain.com with local (Exim 4.68)
(envelope-from <root@server.mydomain.com>)
id 1J4nhC-0001Kn-2T
for root@server.mydomain.com; Tue, 18 Dec 2007 19:26:02 -0600
025* From: root (Cron Daemon)
045F From: root@server.mydomain.com (Cron Daemon)
009* To: root
029T To: root@server.mydomain.com
077 Subject: Cron <root@server> lynx --dump [url]
028 X-Cron-Env: <SHELL=/bin/sh>
025 X-Cron-Env: <HOME=/root>
033 X-Cron-Env: <PATH=/usr/bin:/bin>
027 X-Cron-Env: <LOGNAME=root>
024 X-Cron-Env: <USER=root>
052I Message-Id: <E1J4nhC-0001Kn-2T@server.mydomain.com>
038 Date: Tue, 18 Dec 2007 19:26:02 -0600
1J4nhC-0001Kn-2T-D
Not Found
The requested URL /agent/cron.php was not found on this server.
Additionally, a 404 Not Found error was encountered while trying to use an
ErrorDocument to handle the request.
_________________________________________________________________
Apache/2.2.6 (Unix) mod_ssl/2.2.6 OpenSSL/0.9.7a mod_auth_passthrough/2.1
mod_bwlimited/1.4 FrontPage/5.0.2.2635 mod_jk/1.2.25 PHP/5.2.5 Server at
mydomain.com Port 80
centos
2gigs ram
cpanel whm
Anyway after complaints of "mail not being sent" I looked at a few things, found over 25,000 messages stuck in the queue. The messages no being sent thing is yahoo blocking me because of too many mails sent to their servers without a valid recipient.
When I empty the queue it gathers about 200 mails an hour. Looks like it is coming from all over the world and they are using a valid ip from one of the domains hosted for sending.
Bear with me I was reselling for years and this is my first real dedicated server.
Reverse DNS is set up. I need a couple clues.
Today my server started to go off-line and each time i restarted it went down within couple minutes. So i looked into it and found that i had over 7000 emails in Exim Mail Queue. All of them are spam. I deleted them through WHM and now everything seems good again but....
My question is how can i check what caused this problem? Has one of my domains been compromised with and sending out spam? What can i do?
[1] Removing Bad Mail
for i in `exiqgrep -i -f nobody`; do exim -Mrm $i; done >> Removes Nobody Mail
for i in `exiqgrep -i -o 259200`; do exim -Mrm $i; done >> Removes Mail Older than 3 Days
for i in `exiqgrep -i -f "^<>$"`; do exim -Mrm $i; done >> Removes Mail with Weird Characters (Spam)
[2] Delete Mail by a Domain
for i in `exiqgrep -i -f domain.com`; do exim -Mrm $i; done
[3] Delete Mail for a Domain
for i in `exiqgrep -i -r domain.com`; do exim -Mrm $i; done
[4] Remove Whole Mail Queue
for i in `exiqgrep -i -f `; do exim -Mrm $i; done
[5] Run Mail Queue
runq -qqff&
1) What would you guys say is average in terms of the # of emails in the Mail Queue?
2) What steps can be taken to tighten it up? If I start with a clean slate, it only takes about a week or less for my mail queue to reach 1000 or more. Most of it seems like junk mail.
In my Exim mail queue, there are around 33,000 messages, all of which appear to be "Mail delivery failed: returning message to sender" messages.
The reason for these bounces is because spam is being continuously sent to non-existent addresses on my domain.
can it be done? because a dumb customer sent an email with like 500 recipients... and its stucked on the queue. So i wanna delete it... but when i go to Mail queue manager (i use WHM) i got this:
Message 1KRTsr-0006tc-F6 is locked
So what can i do? should i just sit and wait until its "unlocked"?
can i kill any process? i already tried restarting exim... but its still there... and btw the size of that message is of about 500 mb >.<
my Exim mail outgoing queue is getting stuck and i cannot receive emails. Under WHM i have 50 odd emails, some 7 days old.
A small dump from /var/log/exim-mainlog is below:
2007-11-19 04:40:45 H=(H®) [202.57.142.156] sender verify defer for <jqyuehutmqluz@epilot.com>: could not connect to mail02.interchangeusa.com [63.251.210.81]: Connection timed out
2007-11-19 04:40:45 H=(H®) [202.57.142.156] F=<jqyuehutmqluz@epilot.com> temporarily rejected RCPT <morleyc@myemail.net>: Could not complete sender verify callout
2007-11-19 04:40:45 unexpected disconnection while reading SMTP command from (H®) [202.57.142.156]
2007-11-19 04:40:51 no IP address found for host 202.57.142.156.sta.isp-thailand.com (during SMTP connection from [202.57.142.156])
2007-11-19 04:40:57 no IP address found for host 202.57.142.156.sta.isp-thailand.com (during SMTP connection from [202.57.142.156])
2007-11-19 04:41:01 no IP address found for host 202.57.142.156.sta.isp-thailand.com (during SMTP connection from [202.57.142.156])
2007-11-19 04:41:04 no IP address found for host 202.57.142.156.sta.isp-thailand.com (during SMTP connection from [202.57.142.156])
2007-11-19 04:41:43 no host name found for IP address 77.94.106.13
2007-11-19 04:41:49 1ItxNu-0007E6-4s mail.global.frontbridge.com [207.46.51.86] Connection timed out
2007-11-19 04:41:49 1ItxNu-0007E6-4s == hmt@someaddress.com <HMT@someaddress.com> R=lookuphost T=remote_smtp defer (110): Connection timed out
2007-11-19 04:41:49 1ItxNu-0007E6-4s == jog@someaddress.com <JOG@someaddress.com> R=lookuphost T=remote_smtp defer (110): Connection timed out
2007-11-19 04:41:49 1ItxNu-0007E6-4s == mrl@someaddress.com <MRL@someaddress.com> R=lookuphost T=remote_smtp defer (110): Connection timed out
2007-11-19 04:42:29 H=(client-200.121.46.74.speedy.net.pe) [200.121.46.74] sender verify defer for <tecat@yahoo.de>: Could not complete sender verify callout
2007-11-19 04:42:29 H=(client-200.121.46.74.speedy.net.pe) [200.121.46.74] F=<tecat@yahoo.de> temporarily rejected RCPT <morleyc@myemail.net>: Could not complete sender verify callout
2007-11-19 04:42:29 unexpected disconnection while reading SMTP command from (client-200.121.46.74.speedy.net.pe) [200.121.46.74]
Everything was fine until about 7 days ago, i dont know why the config didnt change but since then its been dropping received emails and queueing on sends.
I read this post:
[url]
I should delete older than 5 days emails, how can I do it? (on cpanel and exim)
I recently got a server from leaseweb with directadmin on it, I have a big problem sending e-mails .
Most of my e-mails remains in queue:
Is there any way to check why the e-mail stays on queue , any log file i can read?
can i get my e-mails using imap?
we have a freebsd/cpanel box what seems to be trouble prone combination, specially for exim.
After cpanel upgrade, exim simple has stopped. Somehow I managed receiving on this way:
# /etc/init.d/exim start
/libexec/ld-elf.so.1: Shared object "libperl.so" not found, required by "sendmail"
I checked which perl version is running: perl -v
This is perl, v5.10.0 built for i386-freebsd-64int
then applied:
unix1# ln -s /usr/local/lib/perl5/5.10.*/mach/CORE/libperl.so /usr/local/lib
unix1# /etc/init.d/exim start
exim exim antirelaydunix1#
unix1#
but this solved only half of a problem, now we can receive e-mails, but not send them, what is really frustrating.
Here is the error which cpanel sends on each 5 min:
exim failed @ Fri May 1 16:06:15 2009. A restart was attempted automatically.
Service Check Method: [tcp connect]
Failure Reason: TCP Transaction Log:
<< 220-xxxxxxxxxx.xxxx ESMTP Exim 4.69 #3 Fri, 01 May 2009 16:06:41 +0200 << <<
>> EHLO localhost
<< 250-xxxx.xxxx.xxx Hello localhost [127.0.0.1] << << << << <<
>> AUTH PLAIN
>> AF9fY3BhbmVsX19zZXJ2aWNlX19hdXRoX19leGltX19Nd2NxU1pyUng1S3R5YTl2enZaV
>> zN4R3Q1MU5WdTh1MHBZcnI4NDhqaWVtWFhSY3VraERTSGZnZU1tQkpiVXNWAFRkbzNpY3
>> ZVTUg1N1Z0R0t5c2VLYW82T1U1UFlqRDEwVThpVXlGSUpFMkZDRWVFaWxzTTNZMHVaRGd
>> UWXM1WnU=
<<
exim: ** [ != 2]
and I can not find the solution for this almost two days (!), no help for host support either. Closest what I have found on net is this topic:
[url]
I have a customer that wants to send emails using Exim and SMTP (using outlook), withouth authentication. Now.. the big question is ... how can I configure the Exim server to work withouth any authentication?
I know the risks of this withouth any authentication, but is my customer's server and he want to work in this way.
He is also asking if he is able to send emails withouth authentication using SMTP for certain IP addresses.. is that possible? Can be done for only 1 domain, or for the entire server?
Im using Exim 4.6.8 and RHE 4 + cPanel.
