Forwards not working and exim mainlog not logging incoming mail.
So a customer has a domain, lets call it example.com.
Now he has created forwarders and every mail send to info@example.com is automatically forwarded to john@example.com and foobar@example.com.
This has been working for a long time, but suddenly it's not working anymore. Mails send directly to the accounts is working, but mails forwarded stopped working, at least since this afternoon.
So I decided to send a test message to the info account while tailing the exim mainlog. Nothing was to be seen, but the customer did get my mail in the spamfolder of the info account, but nothing was forwarded to the John or foobar account.
Normally, incoming e-mails should also be visible in the exim_mainlog file so why is this not working and why is suddenly forwarding not working anymore?
I know about the Exim RCE vulnerability [CVE-2023-42115], I don't see any update for this on cPanel either.
At this moment we're on cPanel 110.0.12 as the owner does not want to go to Alma 8 yet.
-
Hey there! 110.0.12 has the Exim patches, so you're all set for that. If there isn't *anything* in the Exim log, are we certain the message is reaching your server? It seems there may be a DNS change or something else that is routing the mail to a different location. 0 -
If there isn't *anything* in the Exim log,
Yes there is. Outgoing messages are all logged. But all outgoing but not all incoming. I just tested again and send to 1 domain on the server and I didn't see anything happen in the mail log. This is the domain the owner uses for mail. Even when he uses a forward for his mail address (which he doesn't if I'm correct) my connection to the mailserver should be logged anyway and that did not happen. And I often use this address to mail him. Then I send an e-mail to the main domain on the server, and now the message is logged. Something odd is going on as not all incoming mail attempts are logged for some reason.0 -
If the connection isn't getting logged, you really aren't connecting to that machine, so there must be another explanation. 0 -
you really aren't connecting to that machine,
Yep seen it, admin changed one of the mails to outlook. Pffff..... Anyway, it does not explain the first situation that the forwarders are not working on the other address. So I check that. Same situation. Mails are all present on the server, but I didn't check the MX address, all is set to office 365 without telling me. ;) Solved.0
Please sign in to leave a comment.
Comments
4 comments