Skip to main content

Can't receive mail

Comments

11 comments

  • Spork Schivago
    I'd like to add, it's not just one account I cannot get e-mail for, it's all of them. Every account on my domain that receives mail, the mail just disappears. With a spam score of 0, I think we can rule out SpamAssassin. I'm losing some important e-mails here. This sucks. Here's a copy of one of the delivery event details:
    Event: success https://www.mydomain.com:2087/cPanel_magic_revision_0/cjt/images/icons/success.png
    Sender User: -remote- Sender Domain: Sender: bounces+2621923-ea0f-sporkschivago=mydomain.com@mailsend.attracta.com Sent Time: Dec 4, 2016 10:13:22 PM Sender Host: o1.mailer1.attracta.com Sender IP: 167.89.93.200 Authentication: localdelivery Spam Score: 0 Recipient: sporkschivago@mydomain.com Delivered To: sporkschivago@mydomain.com Delivery User: nobody Delivery Domain: mydomain.com Router: localuser Transport: dovecot_delivery Out Time: Dec 4, 2016 10:13:22 PM ID: 1cDjio-0005dr-Ps Delivery Host: localhost Delivery IP: 127.0.0.1 Size: 7.7 KB Result: Accepted

    I restarted Exim and then sent myself another e-mail from GMail. It disappeared as well, but here's a copy of /var/log/exim_mainlog since it was restarted:
    2016-12-04 23:20:12 exim 4.87 daemon started: pid=24657, -q1h, listening for SMTP on port 25 (IPv6 and IPv4) port 587 (IPv6 and IPv4) and for SMTPS on port 465 (IPv6 and IPv4) 2016-12-04 23:20:12 cwd=/var/spool/exim 2 args: /usr/sbin/exim -q 2016-12-04 23:20:12 Start queue run: pid=24658 2016-12-04 23:20:12 End queue run: pid=24658 2016-12-04 23:21:43 SMTP connection from [2607:f8b0:400d:c09::22c]:35968 (TCP/IP connection count = 1) 2016-12-04 23:21:53 cwd=/etc/csf 2 args: /usr/sbin/exim -bpc 2016-12-04 23:22:21 SMTP connection from [127.0.0.1]:35058 (TCP/IP connection count = 2) 2016-12-04 23:22:21 SMTP connection from localhost [127.0.0.1]:35058 closed by QUIT 2016-12-04 23:22:23 1cDknH-0006Q8-QX H=mail-qk0-x22c.google.com [2607:f8b0:400d:c09::22c]:35968 Warning: Message has been scanned: no virus or other harmful content was found 2016-12-04 23:22:23 1cDknH-0006Q8-QX <= myrealemailaddress@gmail.com H=mail-qk0-x22c.google.com [2607:f8b0:400d:c09::22c]:35968 P=esmtps X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 CV=no S=2517 id=CAEeNszZ4PpOhEF-R_wnnGd8WWzXUbL3Fri1_Tk5sduDzXJjmAA@mail.gmail.com T="Hello" for Spork@mydomain.com 2016-12-04 23:22:23 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1cDknH-0006Q8-QX 2016-12-04 23:22:23 SMTP connection from mail-qk0-x22c.google.com [2607:f8b0:400d:c09::22c]:35968 closed by QUIT 2016-12-04 23:22:23 1cDknH-0006Q8-QX => sporkschivago R=localuser T=dovecot_delivery C="250 2.0.0 MWm4NX/rRFgOYQAAXjtNxg Saved" 2016-12-04 23:22:23 1cDknH-0006Q8-QX Completed
    Any ideas at all what might be happening and how to fix it? To me, it looks like it should be going through. I don't see where it's getting deleted. Thanks!
    0
  • Spork Schivago
    This is a bit odd. I found the e-mails, but there in my other account. I have multiple e-mail addresses for my server. I'll give an example, I have SporkSchivago@mydomain.com[/EMAIL] and I have Spork@mydomain.com[/EMAIL] I just found all the e-mails that have been being sent to Spork@mydomain.com[/EMAIL] in the SporkSchivago@mydomain.com[/EMAIL] account. How does that happen? Is there some auto-forward option that I somehow mistakenly setup or something? I've checked the Forwarder options in cPanel and they're not set. I don't see anything in WHM. There's no .forward in spork's home directory....
    0
  • cPanelMichael
    Hello, Do you have any filters or global filters configured within cPanel for that domain name? Also, do both email accounts exist on their own? What's the output from /var/log/exim_mainlog for one of the specific messages that's affected? EX:
    exigrep test@remote-server /var/log/exim_mainlog
    Thank you.
    0
  • Spork Schivago
    Hello, Do you have any filters or global filters configured within cPanel for that domain name? Also, do both email accounts exist on their own? What's the output from /var/log/exim_mainlog for one of the specific messages that's affected? EX:
    exigrep test@remote-server /var/log/exim_mainlog
    Thank you.

    I've checked the filters and global filters and didn't see any. To my knowledge, none are setup. Also, both e-mail accounts exist. Not sure what you mean by on their own though. But I've always been able to send and receive from both. When I originally setup the VPS on Linode, I sent and received test messages. However, now, when I log into webmail as, for example, spork, and I try to send an e-mail to myself, spork@mydomain.com[/EMAIL] or to sporkschivago@mydomain.com[/EMAIL], I receive an error message saying the account doesn't exist. It doesn't even try to send the message. It prevents me from sending it. I can post the /var/log/exim_mainlog file again if you'd like. I copied and pasted it earlier for one account. I restarted Exim and then sent an e-mail to spork@mydomain.com[/EMAIL] and then copied and pasted everything from when Exim restarted till the end of the file. That was in post #2 ( Can't receive mail ). Here's the content of the command you asked for though:
    root@franklin:[/var/log]# exigrep spork@mydomain.com /var/log/exim_mainlog 2016-12-04 19:51:52 1cDhVT-0003SM-1v H=nm1-vm6.bullet.mail.ne1.yahoo.com [98.138.91.253]:44041 Warning: Message has been scanned: no virus or other harmful content was found 2016-12-04 19:51:52 1cDhVT-0003SM-1v <= myfriend@somedomain.com H=nm1-vm6.bullet.mail.ne1.yahoo.com [98.138.91.253]:44041 P=esmtps X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 CV=no S=2373462 id=AFC0AD58B8334314A999AD8465072BEA@DESKTOPKEP2DO2 T="Emailing: Setup1129_64_uk" for spork@mydomain.com 2016-12-04 19:51:52 1cDhVT-0003SM-1v => sporkschivago R=localuser T=dovecot_delivery_no_batch C="250 2.0.0 6UT3Nii6RFj8MwAAXjtNxg Saved" 2016-12-04 19:51:52 1cDhVT-0003SM-1v Completed 2016-12-04 21:40:55 1cDjD5-00058L-UA <= Spork@mydomain.com H=(franklin.mydomain.com) [::1]:53784 P=esmtpsa X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 CV=no A=dovecot_plain:spork@mydomain.com S=860 id=20161204214055.Horde.3xAUira3b_L52lCEaZiI02g@www.mydomain.com T="A test." for sporkschivago@franklin.mydomain.com 2016-12-04 21:40:56 1cDjD5-00058L-UA => sporkschivago R=localuser T=dovecot_delivery C="250 2.0.0 EcNdAbjTRFjZTAAAXjtNxg Saved" 2016-12-04 21:40:56 1cDjD5-00058L-UA Completed 2016-12-04 21:44:32 1cDjGa-0005AZ-DS <= Spork@mydomain.com H=(franklin.mydomain.com) [::1]:53796 P=esmtpsa X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 CV=no A=dovecot_plain:spork@mydomain.com S=880 id=20161204214432.Horde.TPbLaaEvJJy6DPYo4ee-7vS@www.mydomain.com T="A test" for myrealemail@gmail.com 2016-12-04 21:44:32 1cDjGa-0005AZ-DS SMTP connection outbound 1480905872 1cDjGa-0005AZ-DS mydomain.com myrealemail@gmail.com 2016-12-04 21:44:32 1cDjGa-0005AZ-DS => myrealemail@gmail.com R=dkim_lookuphost T=dkim_remote_smtp H=gmail-smtp-in.l.google.com [74.125.29.26] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 CV=yes C="250 2.0.0 OK 1480905872 r186si7954123qkc.41 - gsmtp" 2016-12-04 21:44:32 1cDjGa-0005AZ-DS Completed 2016-12-04 21:46:15 1cDjIF-0005E5-PF H=mail-qt0-x231.google.com [2607:f8b0:400d:c0d::231]:35277 Warning: Message has been scanned: no virus or other harmful content was found 2016-12-04 21:46:15 1cDjIF-0005E5-PF <= myrealemail@gmail.com H=mail-qt0-x231.google.com [2607:f8b0:400d:c0d::231]:35277 P=esmtps X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 CV=no S=2544 id=CAEeNszaxt0hefVSWYZZAjU-qGxLFRaNJYd4R=V7a5OzvZogMWw@mail.gmail.com T="Can you read this?" for Spork@mydomain.com 2016-12-04 21:46:15 1cDjIF-0005E5-PF => sporkschivago R=localuser T=dovecot_delivery C="250 2.0.0 SdmNMvfURFirTgAAXjtNxg Saved" 2016-12-04 21:46:15 1cDjIF-0005E5-PF Completed 2016-12-04 23:22:23 1cDknH-0006Q8-QX H=mail-qk0-x22c.google.com [2607:f8b0:400d:c09::22c]:35968 Warning: Message has been scanned: no virus or other harmful content was found 2016-12-04 23:22:23 1cDknH-0006Q8-QX <= myrealemail@gmail.com H=mail-qk0-x22c.google.com [2607:f8b0:400d:c09::22c]:35968 P=esmtps X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 CV=no S=2517 id=CAEeNszZ4PpOhEF-R_wnnGd8WWzXUbL3Fri1_Tk5sduDzXJjmAA@mail.gmail.com T="Hello" for Spork@mydomain.com 2016-12-04 23:22:23 1cDknH-0006Q8-QX => sporkschivago R=localuser T=dovecot_delivery C="250 2.0.0 MWm4NX/rRFgOYQAAXjtNxg Saved" 2016-12-04 23:22:23 1cDknH-0006Q8-QX Completed 2016-12-04 23:48:31 1cDlCZ-0006vc-PW H=(franklin.mydomain.com) [::1]:54622 Warning: Message has been scanned: no virus or other harmful content was found 2016-12-04 23:48:31 1cDlCZ-0006vc-PW <= Spork@mydomain.com H=(franklin.mydomain.com) [::1]:54622 P=esmtpsa X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 CV=no A=dovecot_plain:spork@mydomain.com S=938 id=20161204234831.Horde.ZjF68Ng_ud9Eao4WST0m1DK@www.mydomain.com T="A test" for myrealemail@gmail.com 2016-12-04 23:48:31 1cDlCZ-0006vc-PW SMTP connection outbound 1480913311 1cDlCZ-0006vc-PW mydomain.com myrealemail@gmail.com 2016-12-04 23:48:32 1cDlCZ-0006vc-PW => myrealemail@gmail.com R=dkim_lookuphost T=dkim_remote_smtp H=gmail-smtp-in.l.google.com [74.125.29.27] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 CV=yes C="250 2.0.0 OK 1480913312 v127si8136034qkh.28 - gsmtp" 2016-12-04 23:48:32 1cDlCZ-0006vc-PW Completed 2016-12-04 23:49:36 1cDlDc-0006vw-PI H=mail-qk0-x231.google.com [2607:f8b0:400d:c09::231]:32867 Warning: Message has been scanned: no virus or other harmful content was found 2016-12-04 23:49:36 1cDlDc-0006vw-PI <= myrealemail@gmail.com H=mail-qk0-x231.google.com [2607:f8b0:400d:c09::231]:32867 P=esmtps X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 CV=no S=3574 id=CAEeNszasVMFD=DQ-6TrqZSUpffeFHzM+1E4hYHciHxkcUVkQsw@mail.gmail.com T="Re: A test" for Spork@mydomain.com 2016-12-04 23:49:36 1cDlDc-0006vw-PI => sporkschivago R=localuser T=dovecot_delivery C="250 2.0.0 JycSM+DxRFhWaAAAXjtNxg Saved" 2016-12-04 23:49:36 1cDlDc-0006vw-PI Completed 2016-12-05 01:14:17 1cDmXZ-0007qK-Tq H=mail-qk0-x241.google.com [2607:f8b0:400d:c09::241]:33092 Warning: Message has been scanned: no virus or other harmful content was found 2016-12-05 01:14:17 1cDmXZ-0007qK-Tq <= myrealemail@gmail.com H=mail-qk0-x241.google.com [2607:f8b0:400d:c09::241]:33092 P=esmtps X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 CV=no S=2487 id=CAEeNszYaXVgLuKaiqHsx0hhRkCv8KFBOqraUoP+hB8+iAm=N8g@mail.gmail.com T="Hello, test 1293" for Spork@mydomain.com 2016-12-05 01:14:18 1cDmXZ-0007qK-Tq => sporkschivago R=localuser T=dovecot_delivery C="250 2.0.0 4nUQO7kFRVjodQAAXjtNxg Saved" 2016-12-05 01:14:18 1cDmXZ-0007qK-Tq Completed 2016-12-05 01:49:48 H=(franklin.mydomain.com) [::1]:55532 sender verify fail for : Unrouteable address 2016-12-05 01:49:48 H=(franklin.mydomain.com) [::1]:55532 X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 CV=no F= A=dovecot_plain:spork@mydomain.com rejected RCPT : Sender verify failed 2016-12-05 01:50:14 H=(franklin.mydomain.com) [::1]:55538 sender verify fail for : Unrouteable address 2016-12-05 01:50:14 H=(franklin.mydomain.com) [::1]:55538 X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 CV=no F= A=dovecot_plain:spork@mydomain.com rejected RCPT : Sender verify failed 2016-12-05 01:50:45 H=(franklin.mydomain.com) [::1]:55552 sender verify fail for : Unrouteable address 2016-12-05 01:50:45 H=(franklin.mydomain.com) [::1]:55552 X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 CV=no F= A=dovecot_plain:spork@mydomain.com rejected RCPT : Sender verify failed
    The very last few, the sender verify fail unrouteable address ones, I tried sending a few e-mails from webmail.mydomain.com from the user spork@mydomain.com to spork@mydomain.com and to sporkschivago@mydomain.com. Both wouldn't even go. I posted the message in the post below this.
    0
  • Spork Schivago
    If I log into Horde as spork@mydomain.com[/EMAIL] and try to send a message to SporkSchivago@mydomain.com[/EMAIL] or to Spork@mydomain.com[/EMAIL], I receive the following message:
    There was an error sending your message: Message could not be delivered - the address was not found, is unknown, or is not receiving messages.
    Do you think that has anything to do with it? I was reading up on what could cause the sender verify fail message. I'm wondering if this has anything to do with my MX Record. My hostname is franklin. So, I have franklin.mydomain.com. I have a sub-domain setup for webmail. webmail.mydomain.com, but webmail is running on franklin. I setup the MX Record to point to webmail.mydomain.com. I also setup a Reverse DNS PTR record to point to webmail.mydomain.com. Should I really have the Reverse PTR record and the MX record pointing to hostname.mydomain.com? I don't see why it worked before but all of a sudden, stopped though. That's a bit odd. It would probably help if I knew when it actually stopped working. I have no idea what I was doing when it stopped. I know I was playing with the Reverse DNS PTR records a bit not too long ago....configuring IPv6, changing my DNS entries (for the IPv6 stuff). I wonder if that had something to do with it.
    0
  • cPanelMichael
    sender verify fail for : Unrouteable address

    Could you verify if this domain name exists in the /etc/localdomains file on the system? Thank you.
    0
  • Spork Schivago
    /etc/localdomains shows:
    mydomain.com cpanel.mydoman.com whm.mydomain.com webmail.mydomain.com webdisk.mydomain.com cpcalendars.mydomain.com cpcontacts.mydomain.com franklin.mydomain.com
    franklin is my hostname. /etc/userdomains shows:
    *: nobody cpanel.mydomain.com: sporkschivago cpcalendars.mydomain.com: sporkschivago cpcontacts.mydomain.com: sporkschivago mydomain.com: nobody webdisk.mydomain.com: sporkschivago webmail.mydomain.com: sporkschivago whm.mydomain.com: sporkschivago
    But it lacks franklin.mydomain.com and /etc/trueuserdomains shows:
    mydomain.com: sporkschivago
    0
  • cPanelMichael
    Hello, The entries in those files look correct. Could you open a support ticket using the link in my signature so we can take a closer look at this server's configuration to determine what's happening? Please post the ticket number here and we will update this thread with the outcome. Thank you.
    0
  • Spork Schivago
    I opened a ticket. When I opened it, there was a message asking if I wanted to try support through the company I bought the cPanel license from or from cPanel directly. I wasn't sure which one to pick so I picked the cPanel one. It said if I didn't try the support from buycpanel.com first, there might be a longer delay. I didn't try them first, so there's probably going to be a longer delay. Here's the ID: 8038849 Thanks.
    0
  • Spork Schivago
    The problem is fixed! /etc/userdomains shows mydomain.com was owned by the user nobody. Running:
    root@franklin:/home # /scripts/whoowns mydomain.com nobody
    confirmed it. The tech support person made a backup of /etc/userdomains and rebuilt the file.
    root@franklin:/home # mv -v /etc/userdomains /etc/userdomains.BAK root@franklin:/home # /scripts/updateuserdomains root@franklin:/home # /scripts/whoowns mydomain.com sporkschivago
    This fixed the problem!!! I can now receive e-mails once again!!!! Thank you guys!!!!!!!!
    0
  • cPanelMichael
    Hello, I'm happy to see the issue is now resolved. Thank you for updating us with the outcome.
    0

Please sign in to leave a comment.