exim mail queue issue

achuth

• March 04, 2020 23:17

We are using godaddy servers with cpanel and whm installed on that server from last 3 to 4 years. From last 3 days we are not able to open cpanel,whm and webmail due to disk usage full. after checking disk usage /var/spool/exim/input path consumed 170GB and i deleted all the mail queue. but after deleting mail queue also again mail queues are created. how to resolve this issue

• 

  cPanelLauren

  • March 05, 2020 23:35

  Hello, It sounds as though you may have someone spamming on the server. What is the output of the following: exim -bpc
  

  0
• 

  achuth

  • March 06, 2020 03:59

  Hello, It sounds as though you may have someone spamming on the server. What is the output of the following: exim -bpc
  

  
  Hi Lauren the output for exim -bpc 572433

  0
• 

  cPanelLauren

  • March 06, 2020 19:25

  Hello, That is a lot of mail, if that's not mail that you're aware should be sending I'd bet that you have an issue with a compromised password or script on the account. If you have one or several users receiving bouncebacks (or if all the mail is FROM the same person) I'd advise you change the password for that user's account. If the mail is from accounts which don't exist or numerous accounts I'd lean more toward a script sending mail. These are just assumptions based on my experience though, to know for sure you'll have to investigate the mail itself. We use a script internally which parses the exim_mainlog and provides us output that breaks down mail origins. You can use this as well if you'd like : perl <(curl -s https://raw.githubusercontent.com/cPanelTechs/SSE/master/sse.pl) -s
  

  0
• 

  achuth

  • March 06, 2020 19:42

  Hi After running that command I got 5 to 6 mail ids then I deleted this mail ids but still facing same issue

  0

Please sign in to leave a comment.