Reading Exim logs to figure out Local relay alert

CraftyPanda

• October 21, 2014 08:58

Hi all, So i keep getting local relay alerts for just one account on the server and im trying to figure out what on the account is causing it. I have the exim logs and i can see the entries for the events, but i don't really see how thats helping me identify the culprit of the emails. Here is one of the log entries. My question is really where do i go from here in figuring out whats relaying all this email? 2014-10-19 03:30:04 cwd=/var/spool/exim 2 args: /usr/sbin/exim -q 2014-10-19 03:30:04 Start queue run: pid=2753 2014-10-19 03:30:04 End queue run: pid=2753 2014-10-19 03:30:12 cwd=/etc/csf 2 args: /usr/sbin/exim -bpc 2014-10-19 03:31:02 cwd=/home/xAccountNamex 9 args: /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root 2014-10-19 03:31:02 1XfgGs-0000oL-3E <= root@host.mydomain.co.uk U=xAccountNamex P=local S=851 T="Cron /home/xAccountNamex /public_html/templates/atomic/1.sh" for hkjbn232 Any help would be really appreciated. Andy

• 

  CraftyPanda

  • October 21, 2014 15:41

  Sorted it thanks. Boom! Was right in front of me

  0
• 

  cPanelMichael

  • October 22, 2014 12:40

  Hello :) I am happy to see you were able to determine the path based on the logs you provided (/home/xAccountNamex/public_html/templates/atomic/1.sh"). Thank you for updating us with the outcome.

  0

Please sign in to leave a comment.