Skip to main content

Not receiving certified e-mails properly

Comments

8 comments

  • cPanelMichael
    Hello Alessandro, Can you let us know the output to /var/log/exim_mainlog for one of these emails? Here's an example of a command you can run: exigrep SUBJECT /var/log/exim_mainlog
    Replace "SUBJECT" with the subject of one of the affected messages. Thank you.
    0
  • bonny3
    here is my log: 2018-05-23 16:53:05 1fLV8T-0006R2-Qg H=pecmail01-156.it.net (mail.example.com) [151.1.194.156]:56110 Warning: Message has been scanned: no virus or other harmful content was found 2018-05-23 16:53:05 1fLV8T-0006R2-Qg <= ottica---mila2@example.net H=pecmail01-156.it.net (mail.example.com) [151.1.194.156]:56110 P=esmtp S=16143 id=6DFE68E1.003B851C.8D7C9DFB.17A50A12.posta-certificata@example.com T="POSTA CERTIFICATA: Test" for info@occ---lando.it 2018-05-23 16:53:05 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1fLV8T-0006R2-Qg 2018-05-23 16:53:05 1fLV8T-0006R2-Qg cancelled by system filter: This message has been rejected because it has\na potentially executable attachment "postacert.eml"\nThis form of attachment has been used by\nrecent viruses or other malware.\nIf you meant to send this file then please\npackage it up as a zip file and resend it. 2018-05-23 16:53:05 cwd=/var/spool/exim 7 args: /usr/sbin/exim -t -oem -oi -f <> -E1fLV8T-0006R2-Qg 2018-05-23 16:53:06 1fLV8T-0006SJ-W8 <= <> R=1fLV8T-0006R2-Qg U=mailnull P=local S=17661 T="Mail delivery failed: returning message to sender" for ottica---mila2@example.net 2018-05-23 16:53:06 1fLV8T-0006R2-Qg Completed 2018-05-23 16:53:06 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1fLV8T-0006SJ-W8 2018-05-23 16:53:06 1fLV8T-0006SJ-W8 => ottica---mila2@example.net R=send_via_sendgrid T=sendgrid_smtp H=smtp.sendgrid.net [159.122.219.43] X=TLSv1.2:AES128-GCM-SHA256:128 CV=yes A=sendgrid_login C="250 Ok: queued as Znx7SMKCSreybbZ9oafd-Q" 2018-05-23 16:53:06 1fLV8T-0006SJ-W8 Completed
    0
  • cPanelMichael
    -05-23 16:53:05 1fLV8T-0006R2-Qg cancelled by system filter: This message has been rejected because it has\na potentially executable attachment "postacert.eml"\nThis form of attachment has been used by\nrecent viruses or other malware.\nIf you meant to send this file then please\npackage it up as a zip file and resend it.

    Hello @bonny3, It looks like the message was rejected because it included a .EML attachment. These messages are rejected by default for increased security. If you'd like to allow these attachments, we document how to do so at: How to Customize the Exim System Filter File - cPanel Knowledge Base - cPanel Documentation Thank you.
    0
  • bonny3
    It works! Thank you so much! I would just like to inform you that the "PEC" in Italy is mandatory for all companies It would be wise to set Default, remove the .EML files from the filters Thanks Best Regards Alessandro
    0
  • cPanelMichael
    Hello Alessandro, You're very welcome. While .EML attachments are legitimate in specific cases like the one you mentioned, it's disabled by default because of it's widespread use for malicious purposes. Thank you.
    0
  • bonny3
    Hi, I have a new Problem, has been updated yesterday cpanel, the file, cpanel_exim_system_filter has been modified by putting back .eml so I have the problem that whenever Cpanel is updated, I lose the changes on the cpanel_exim_system_filter file How can I avoid this problem? Thanks Best Regards Alessandro
    0
  • cPanelMichael
    Hello Alessandro, Can you verify that you followed the instructions referenced on the document below?
    0
  • bonny3
    I Michael, ok now I've created a new file and changed the path in the Exim Configuration Manager Thanks so much ! :)
    0

Please sign in to leave a comment.