after of use "whmapi1 suspend_outgoing_email user=cpaneluser" user continue sending email

[000]

hi,

we run:

grep usercPanel /var/log/exim_mainlog | grep -E '<=' | wc -l
3475

(becouse we don't use date then get values of TODAY, true?

from How to Mass suspend or unsuspend mailboxes of a domain we get

If you wish to suspend the entire domain, you can use

whmapi1 unsuspend_outgoing_email user=example

then we run

whmapi1 suspend_outgoing_email user=usercPanel

and 1 hour after:

grep usercPanel /var/log/exim_mainlog | grep -E '<=' | wc -l
5286

and 10 minutes after:

grep usercPanel /var/log/exim_mainlog | grep -E '<=' | wc -l
5311

how we can STOP output of email for domain complet?


Thanks

 

[andrew.n]

After you suspend the account restart exim and dovecot as well from WHM just to be sure. If the spamming continues then the spam is coming from another account

 

[000]

After you suspend the account restart exim and dovecot as well from WHM just to be sure. If the spamming continues then the spam is coming from another account

Thanks @andrew.n cPanel say this is LOG of messages, no LOG of output.

Please, some command to get record of real OUTPUT messages?

 

[andrew.n]

I would just see the total of number of emails with "exim -bpc" and monitor if it increasing or not. If you see high number of messages there then the spam is still ongoing.

 

[cPRex]

It's possible that you're seeing failed messages being retried, which would add a new entry to the log file. The "exim -bpc" command would show the total number of messages in the queue, so that would let you know if new messages are really being added.

 

[000]

thanks,with wich command we can get "total of MESSAGES really OUTGOING of server" ?

 

[andrew.n]

exim -bpc is listing the currently in queue total messages which are waiting to be sent out by exim.

 

[000]

exim -bpc is listing the currently in queue total messages which are waiting to be sent out by exim.

Tanks by your help Andrew.n.

grep usercPanel /var/log/exim_mainlog | grep -E '<=' | wc -l
1500

return 1500, but that no't is correct becouse 1490 messages have:

Domain user.com.co has an outgoing mail suspension.  Message discarded.

then really we want obtain value 10, by example, becouse the others 1490 messages is stopped by exim becouse:

Domain user.com.co has an outgoing mail suspension.  Message discarded.

. . . some command to we get the value 10 ? (that is "real messages outgoing").

 

[cPRex]

There isn't going to be a way to differentiate between those with any standard commands.

 

[000]

then how we can obtain the REAL COUNT of emails outgoing without include the emails RETAINED by system?,
no is possible?

 

[cPRex]

The counts you're seeing are correct, they just don't differentiate between what is spam and what isn't. I'm not aware of a way to do that with any simple exim commands.