Mail Delivery Reports

czerdrill

• August 10, 2015 17:05

Trying to understand my mail delivery reports. I got a bounceback message saying that my domain has exceeded the max emails allowed per hour. So I checked the delivery reports. I see multiple sent emails with the sender user as an actual user on my system. The sender IP and sender host show Godaddy IP and URL. Not sure I understand how that is happening? Is someone sending spam from my server?

• 

  cPanelMichael

  • August 11, 2015 12:54

  I see multiple sent emails with the sender user as an actual user on my system. The sender IP and sender host show Godaddy IP and URL.

  
  Hello :) Could you elaborate on how you found this data? Is this from the message headers, or have you also reviewed the entries in /var/log/exim_mainlog to see if more information is available? Thank you.

  0
• 

  czerdrill

  • October 01, 2015 10:24

  Hello :) Could you elaborate on how you found this data? Is this from the message headers, or have you also reviewed the entries in /var/log/exim_mainlog to see if more information is available? Thank you.

  
  Hi Michael, I looked in WHM Mail Delivery Reports. That's where I see it. The "Sender User" Column is a valid user on my server. The "Sender" column is an email address that is not on my server.

  0
• 

  cPanelMichael

  • October 05, 2015 17:17

  Try searching the sender email address in the /var/log/exim_mainlog file to see if you notice any emails that you do not recognize. EX:
  exigrep user@domain /var/log/exim_mainlog
  Thank you.

  0

Please sign in to leave a comment.