Skip to main content

Email accepted by EXIM when "Remote Mail Exchanger" accidentally set. Where did this mail go?

ttremain
During some mail and DNS changes the setting "Remote Mail Exchanger" accidentally got set. /var/log/exim_mainlog shows the server still accepted emails, but they seem to have disappeared, and not gotten delivered anywhere. We are trying to recover a couple hundred emails. Any advice where to look would be appreciated! Thank you!

Comments

6 comments

Date Votes
  • cPanelLauren
    If it was accepted by exim you should be able to see the full transaction in those same logs. You can run something like the following for a few of the Message ID's: exigrep MID /var/log/exim_mainlog
    0
  • ttremain
    If it was accepted by exim you should be able to see the full transaction in those same logs. You can run something like the following for a few of the Message ID's: exigrep MID /var/log/exim_mainlog

    2020-02-26 04:29:05 1j6voH-002Zaq-7y <= xx@senderdomain.com H=stdel551.appriver.com [8.31.233.163]:63403 P=esmtp S=115562 id=xx@senderdomain.com T="SOME SUBJECT" for gary@domain.com 2020-02-26 04:29:06 1j6voH-002Zaq-7y [8.19.118.108] SSL verify error: certificate name mismatch: DN="/C=US/ST=Florida/L=Gulf Breeze/O=Appriver LLC/OU=Engineering/CN=*.appriver.com" H="domain.com.1.0001.arsmtp.com" 2020-02-26 04:29:06 1j6voH-002Zaq-7y => gary@domain.com R=dkim_lookuphost T=dkim_remote_smtp H=domain.com.1.0001.arsmtp.com [8.19.118.108] X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=no C="250 5018019 message accepted for delivery" 2020-02-26 04:29:06 1j6voH-002Zaq-7y Completed
    0
  • cPanelLauren
    This indicates that the mail was accepted by gary@domain.com for delivery and the transaction completed successfully. I wouldn't want to go through the entire list but it looks like the mail made it there without issue, are you actually missing some?
    0
  • ttremain
    Interestingly enough, the email trickled in over the next few hours.
    0
  • cPanelLauren
    Glad to hear it, mailservers in cases where the host can't be reached (if configured properly) will retry several times.
    0
  • ttremain
    Glad to hear it, mailservers in cases where the host can't be reached (if configured properly) will retry several times.

    The weird thing is, it IS the host. The mail should have gone right into a local mailbox, but did not for some time. Oh well, not repeating this, so maybe it's not something I should worry about discovering the root cause of.
    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post