How to prevent thousands of messages from entering the send queue
Dear. Often my server raises more than 10,000 emails in the outgoing queue in a matter of a few minutes. It turns out that when this happens during the day it becomes easier to monitor and prevent emails from being sent. I can stop Exim, clear the spammer's queue and change his password.
However, the problem is when this occurs at dawn. Then when dawn is already over 10,000 emails sent and we ended up listed in blacklists and poor reputation in the senderbase.
My question is: is there any way to prevent the queue from increasing more than 100 emails.
For example, some script that when the queue reaches 100 emails it sends a notification to the server administrator and soon it will stop the exim.
Is this possible or is there any better way?
-
Hello, You can enable email limits and configure the server to discard all additional outgoing messages for a domain after the domain reaches the value of the Max hourly emails per domain option. We document how to configure this at: How to Prevent Spam with Mail Limiting Features - cPanel Knowledge Base - cPanel Documentation Thank you. 0 -
Is it the fact that the above mailman option is off that allowed thousands of messages to accumulate in the queue, or is something missing?
Hello, It's possible. Can you verify the accounts in-question were using Mailman to deliver the messages? Thank you.0 -
Hello, It's possible. Can you verify the accounts in-question were using Mailman to deliver the messages? Thank you.
I just checked that there is no account using Mailman: "there are no configured mailing lists"0 -
Hello, Can you verify how the messages were sent out? For instance, was it through a PHP script using the PHP mail function? Thank you. 0 -
Hello, Can you verify how the messages were sent out? For instance, was it through a PHP script using the PHP mail function? Thank you.
Could you help me how can I get this information?0 -
Could you help me how can I get this information?
You can find one of the messages in /var/log/exim_mainlog and let us know the output. EX:exigrep user@domain /var/log/exim_mainlog
Note that you will need to replace references to real domain names and IP addresses with examples when pasting the output here, and we only need a single transaction (not the entire output of the command). See: Reading and Understanding the exim main_log Thank you.0 -
You can find one of the messages in /var/log/exim_mainlog and let us know the output. EX:
exigrep user@domain /var/log/exim_mainlog
Note that you will need to replace references to real domain names and IP addresses with examples when pasting the output here, and we only need a single transaction (not the entire output of the command). See: Reading and Understanding the exim main_log Thank you.
Example of some of the messages that have been sent: 2017-12-27 20:19:00 1eUKyR-0005jF-9K <= user@domain H=([127.0.0.1]) [189.57.228.254]:2061 P=esmtpsa X=TLSv1:ECDHE-RSA-AES256-SHA:256 CV=no A=dovecot_plain:user@domain S=924 id=1e7kn4r-tom5z2-E5@domain T="hey there" for [removed]0 -
Hello, That suggests the message was sent directly from an email account. Feel free to open a support ticket using the link in my signature if you'd like us to take a closer look at your system to ensure the email limit functionality is working as expected. Thank you. 0
Please sign in to leave a comment.
Comments
9 comments