how debug this relay smtp - find the reason for this? Alma Linux 8.10
I have problems with a domain email relays SMTP in cPanel/WHM OVER 7000+ RELAYS in just 2 days - blocked for overload[5000/day] the other domains till next day relay reset....
https://docs.cpanel.net/knowledge-base/email/how-to-set-email-send-limits/
https://docs.cpanel.net/whm/account-functions/modify-an-account/
how debug this - find the reason for this? Alma Linux 8.10
I am lower intermediate Linux Server Admin...
I already Modified Account: // well?
-
Hey there! Modifying the values there will just change the limits on the account - it won't fix anything related to the email system.
You would want to check the logs in /var/log/exim_mainlog and see if you can find more details on the failed message. That would tell you who is sending them.
0 -
can I check the Logs from cPanel/WHM GUI way? But Non from the CLI/Terminal....
0 -
There isn't a way to do that, unfortunately. It's possible a third-party tool like https://configserver.com/configserver-mail-queues-cmq/ may provide enough detail to help, but this isn't something we create or support.
You can always submit a ticket so someone can examine the system for you.
0 -
OK
I am Lower-Intermediate in Linux Server Admin.
I can do this in Terminal from the browser in WHM...?
What type of files look for file.log???
0 -
Yes, the Terminal application in WHM is exactly the same thing as connecting to the terminal with a tool like Putty.
I'm not entirely sure what to look for in the logs, but inside /var/log/exim_mainlog if there have been more than 7000 entries in less than 2 days you are sure to find them in there.
0 -
yes found, it...
here we talk is this a public view forum?
Or can post CLI copy from Terminal without worries as is it is private, is it?
0 -
We can't include any public domains or IP addresses on the Forum, but you're welcome to share screenshots if you think that will help!
0 -
[root@115 log]# cd /var/log/
[root@115 log]# ls -la | grep exim_mainlog
-rw-r----- 1 mailnull mail 50593422 May 29 22:07 exim_mainlog
-rw-r----- 1 mailnull mail 3597023 May 5 03:46 exim_mainlog-20240505.gz
-rw-r----- 1 mailnull mail 2107216 May 12 03:45 exim_mainlog-20240512.gz
-rw-r----- 1 mailnull mail 3047591 May 19 03:07 exim_mainlog-20240519.gz
-rw-r----- 1 mailnull mail 2901035 May 26 03:11 exim_mainlog-20240526.gz
[root@115 log]# ^C
[root@115 log]# hostname
ipipipip.host.secureserver.net
[root@115 log]# ^Cep exim_mainlog
[root@115 log]# ^C
[root@115 log]# ^C
[root@115 log]#1 -
You'll want the current one, which is just exim_mainlog. The others are zipped backups are part of the server's log rotation.
0 -
0
-
can I see lines in the log file from 07:00-17:00... happened actions... how?
0 -
[root@115 log]# date
Wed May 29 22:24:06 EEST 2024
when reset the SMTP relays counter???
0 -
We need to focus on one issue at a time here. The main problem isn't the relay counter, but finding *what* is specifically sending so many messages. You'd want to be looking for repeated entries in the logs from the same account or email address that are triggering that protection.
The options you show in WHM in your initial screenshot are reset hourly.
0 -
The file is 50593422 Bytes.
Can I download it... to my PC for review? how?
host.xyz.net:2083/cpsess000000/frontend/jupiter/filemanager/index.html
Accessing from Terminal the /var/log/ ... how can do in WHM...? LIKE ^ IN cPanel...
0 -
You can't access it *in* cPanel or WHM, that's just not how it works.
I suppose you could do one of the two following things to connect to the server and download it:
-connect as root using sFTP so you can see all areas of the server and download the file
or
-create a copy of the file in the directory of a website you control, like /home/userame/ and then use File Manage through that specific cPanel account to view or download the file.0 -
OK
after download file --- it will be for one day 24h...?
0 -
if in VPS:
[root@115 log]# date
Wed May 29 22:24:06 EEST 2024
When has it reset the SMTP relays counter??? Same time created a new file: exim_mainlog ... or....?
0 -
When you download the file it will contain whatever entries are in the file from when it started being written. You can check that with the following command, as that will show the date on the first line:
head -n 1 /var/log/exim_mainlog
The SMTP relay reset is unrelated to the log files in any way.
0 -
I put here: /tmp but can not download over FTP / FILEZILLA FREE.... FIND IT BUT RESULT>>>
COULD NOT BE TRANSFERRED
0 -
RELAYS SMTP 1000 messages
=
0 -
couldn't transferred
TRANSFERRED=downloaded
I am using FZ
Well
0 -
I wouldn't use /tmp
0
Please sign in to leave a comment.
Comments
22 comments