Cant receive an email, not filtered
I cant receive a message, sender is whitelisted and there are no filters. Exim shows "completed" but there are no destination, message just disappeared.
Any ideias?
2020-02-06 19:34:47 SMTP connection from [200.142.128.52]:14897 (TCP/IP connection count = 1)
2020-02-06 19:34:49 H=darth.vivo.com.br [200.142.128.52]:14897 Warning: xxxxxxx@inweb.com.br
2020-02-06 19:34:52 1izpjX-0005f5-0k H=darth.vivo.com.br [200.142.128.52]:14897 Warning: "SpamAssassin as inweb detected message as NOT spam (-96.9)"
2020-02-06 19:34:52 1izpjX-0005f5-0k <= login@vivo.com.br H=darth.vivo.com.br [200.142.128.52]:14897 P=esmtps X=TLSv1.2:AES128-SHA256:128 CV=no S=6474 id=726742521.16073.1581028480651.JavaMail.meuvivo@vivo.com.br T="Recupera\347\343o de Senha" for xxxxxxx@inweb.com.br
2020-02-06 19:34:52 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1izpjX-0005f5-0k
2020-02-06 19:34:52 1izpjX-0005f5-0k Completed
2020-02-06 19:34:52 SMTP connection from darth.vivo.com.br [200.142.128.52]:14897 closed by QUIT
-
SOLVED. Hmmmm, I found the problem but appears to be a bug. There was a GLOBAL filter to "vivo.com.br" (if "from" contains... redirect to another email). BUT, the email does not exist anymore. Exim should bounce, or at least log the exclusion... but it just ignore, no log, no bounce, nothing. Not even a "unknown user on redirect" log... 0 -
Well I wouldn't think this is a bug, if from contains X and it did in fact contain X it would get forwarded no matter the status of the recipient mailbox What is the output of the following: exigrep 1izpjX-0005f5-0k /var/log/exim_mainlog
And standard logging should log filters but you could enable more logging by addinglog_selector = +al
l to/etc/exim.conf.local0 -
Hello @cPanelLauren Exim should, at least, log something... to help find out what happened. [root@h1 ~]# exigrep 1izpjX-0005f5-0k /var/log/exim_mainlog 2020-02-06 19:34:52 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1izpjX-0005f5-0k 2020-02-06 19:34:52 1izpjX-0005f5-0k H=darth.vivo.com.br [200.142.128.52]:14897 Warning: "SpamAssassin as inweb detected message as NOT spam (-96.9)" 2020-02-06 19:34:52 1izpjX-0005f5-0k <= login@vivo.com.br H=darth.vivo.com.br [200.142.128.52]:14897 P=esmtps X=TLSv1.2:AES128-SHA256:128 CV=no S=6474 id=726742521.16073.1581028480651.JavaMail.meuvivo@vivo.com.br T="Recupera\347\343o de Senha" for xxxxxx@inweb.com.br 2020-02-06 19:34:52 1izpjX-0005f5-0k Completed0 -
Based on the SpamAssassin score it appears that the originating domain/ip is whitelisted. Also based on the log output you're showing I do not see a cPanel or WHM filter or forward involved. As I mentioned before, this is logged in the standard log output - In the event you receive an email that activates one of your filters, the standard logging does output this. This transaction doesn't look like a full mail transaction either the login is usually sent when you're sending a message, not when receiving one and there are several lines of the transaction not being shown. 0
Please sign in to leave a comment.
Comments
4 comments