Skip to main content

Email box as well as forwarding the email

Comments

5 comments

  • cPanelLauren
    Hello, For emails that you believe are not being forwarded was is noted for them specifically in the exim logs? You can find these at /var/log/exim_mainlog
    0
  • Marc Witteveen
    I see two email messages when I look for the senders' email (aaaaaa@gmail.com). However only one went to zendesk, but both are in the mailbox. 2020-03-23 11:01:51 1jGOaN-000DQI-Nr <= aaaaaa@gmail.com H=mail-aaa-bbbb.google.com [xxx.yyy.160.175]:38065 P=esmtps X=TLS1.2:CCCCC-RSA-AES128-GCM-SHA256:128 CV=no S=16326 id=123AAA-AAAA-BBBB-8DAD-2E72468DA3CA@gmail.com T="UNSUBSCRIBE ME FROM YOUR LIST" for support@domain.com 2020-03-23 11:03:07 1jGObb-000DS0-OW <= aaaaaa@gmail.com H=mail-aaa-bbbb.google.com [xxx.yyy.160.175]:45819 P=esmtps X=TLS1.2:CCCCC-RSA-AES128-GCM-SHA256:128 CV=no S=3128 id=123AAA-AAAA-BBBB-97E7-46B0E1E11516@gmail.com T="Re: \360\237\222\234 Just Checking In..." for support@domain.com
    0
  • cPanelLauren
    For the one that isn't in zendesk, can you show me that entire transaction? For which ever one it is you can do this by running the following: exigrep MessageID /var/log/exim_mainlog
    The Message ID's for the two messages you're showing are: 1jGOaN-000DQI-Nr and 1jGObb-000DS0-OW
    0
  • Marc Witteveen
    2020-03-23 11:01:51 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1jGOaN-000DQI-Nr 2020-03-23 11:01:51 1jGOaN-000DQI-Nr H=mail-aaa-bbbb.google.com [209.85.160.175]:38065 Warning: Message has been scanned: no virus or other harmful content was found 2020-03-23 11:01:51 1jGOaN-000DQI-Nr <= aaaaa@gmail.com H=mail-aaa-bbbb.google.com [209.85.160.175]:38065 P=esmtps X=TLS1.2:ECDHE-RSA-AES128-GCM-SHA256:128 CV=no S=16326 id=123AAAAA-AAAA-BBBB-8DAD-2E72468DA3CA@gmail.com T="UNSUBSCRIBE ME FROM YOUR LIST" for support@domain.com 2020-03-23 11:01:51 1jGOaN-000DQI-Nr SMTP connection identification D=domain.com O=support@domain.com E=support@domain.zendesk.com M=1jGOaN-000DQI-Nr U=domain ID=516 B=redirect_resolver 2020-03-23 11:01:51 1jGOaN-000DQI-Nr Sender identification U=domain D=domain.com S=support@domain.com 2020-03-23 11:01:51 1jGOaN-000DQI-Nr SMTP connection outbound 1584975711 1jGOaN-000DQI-Nr domain.com support@domain.zendesk.com 2020-03-23 11:01:51 1jGOaN-000DQI-Nr => support R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 mJUVNV/PeF5vwQAAbxhYMg Saved" 2020-03-23 11:01:52 1jGOaN-000DQI-Nr => support@domain.zendesk.com (support@domain.com) R=lookuphost T=remote_smtp H=mail-pod-14.int.zendesk.com [3.213.182.240] X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=yes C="250 2.0.0 Ok: queued as 48mHf814rjz3hhTD" 2020-03-23 11:01:52 1jGOaN-000DQI-Nr Completed
    0
  • cPanelLauren
    Hi @Marc Witteveen Thanks! So from that excerpt we can see it forwards it to zendesk: 2020-03-23 11:01:52 1jGOaN-000DQI-Nr => support@domain.zendesk.com (support@domain.com) R=lookuphost T=remote_smtp H=mail-pod-14.int.zendesk.com [3.213.182.240] X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=yes C="250 2.0.0 Ok: queued as 48mHf814rjz3hhTD" 2020-03-23 11:01:52 1jGOaN-000DQI-Nr Completed
    It's received by them with a success message of 250 and queued as *their* message ID 48mHf814rjz3hhTD
    anything that happens afterward has to be occurring at zendesk's end. I believe they have a suspended tickets/spam section. You might find this article helpful: Understanding and managing suspended tickets and spam
    0

Please sign in to leave a comment.