Localhostrelay Alert
Hello,
My server exim alert is suddenly behaving abnormal. Exim gathers all mails from queue and send alert to admins like this :
and so on. My other servers does not behave like this they gives proper logs per domain. Thank You.
Time: Fri Jun 10 10:53:11 2016 +0500
Type: LOCALHOSTRELAY, IPv6 localhost - ::1
Count: 112 emails relayed
Blocked: No
Sample of the first 10 emails:
2016-06-10 10:37:13 1bBF85-0003Tn-Hy <= corporate-bounces@domain.com H=(b2b-1001.b2bhosting.net) [::1]:33742 P=esmtp S=152742 id=00cb01d1c2d9$e8e68bd0$bab3a370$@domain.com T="[Corporate] FW: Tracker Insurance Required A/C" for user@domain.com user1@domain.com user2@domain.com user3@domain.com
2016-06-10 10:38:46 1bBF9a-0003oe-Lw <= user@domain1.com H=(www.domain.com) [::1]:33875 P=esmtpa A=dovecot_login:user@domain1.com S=881 id=f3e24ae76d3c37a9665d565fdf36a459.squirrel@www.domain.com T="Sui Gas / Electricity Bills" for process_user1@domain1.com
2016-06-10 10:39:15 1bBFA3-0003th-99 <= user@domain1.com H=(www.domain.com) [::1]:33905 P=esmtpa A=dovecot_login:user@domain.com S=1102 id=f1096b7bd328792f933e5d3f2135d8e5.squirrel@www.domain.com T="Re: Sui Gas / Electricity Bills" for user1@domain1.com
2016-06-10 10:39:37 1bBFAP-0003wt-0W <= user2@domain1.com H=(www.domain.com) [::1]:33924 P=esmtpa
and so on. My other servers does not behave like this they gives proper logs per domain. Thank You.
-
Hello, It looks like this thread was missed in our initial scan of incoming threads. Are you still experiencing this issue? The message logs show an authenticated email user, so you'd want to start by changing the password for that user if the messages are SPAM. Thank you. 0
Please sign in to leave a comment.
Comments
1 comment