The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

cmd= on exim ?

Discussion in 'General Discussion' started by maxihost3, Oct 19, 2006.

  1. maxihost3

    maxihost3 Member
    PartnerNOC

    Joined:
    Jun 14, 2006
    Messages:
    11
    Likes Received:
    0
    Trophy Points:
    1
    Hello,

    I see that my spamd is going down very often and just realized that while tailing /var/log/exim_mainlog I can see weird messages that I never saw before on other servers

    they are:

    lots of:
    2006-10-19 17:24:10 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1GaeQq-0007Eh-21

    I saw also:
    2006-10-19 17:25:07 cwd=/ 2 args: /usr/sbin/sendmail -t

    while cleaning queue:
    cwd=/usr/local/cpanel/whostmgr/docroot 4 args: /usr/sbin/exim -v -Mrm 1GaeHG-00088k-5C

    Ps: Message IDs change, I just paste some examples

    What exactly is this ? Who is calling these commands ? Are them normal ?
     
  2. maxihost3

    maxihost3 Member
    PartnerNOC

    Joined:
    Jun 14, 2006
    Messages:
    11
    Likes Received:
    0
    Trophy Points:
    1
    I saw one saying either:

    2006-10-19 17:27:11 1GaeTt-0007lE-Mk demime acl condition: base64 line length exceeds 76 characters
     
  3. Rafaelfpviana

    Rafaelfpviana Well-Known Member

    Joined:
    Mar 12, 2004
    Messages:
    142
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Brazil
    Thease messages are complety normal.

    Notice that there is no CMD there, as you can see its CWD = Current Working Directory, meaning, where the script was sent from, this helps out to find out who sent it.

    You can track the message using the ID of the messages and the timestamps.
     
  4. nyjimbo

    nyjimbo Well-Known Member

    Joined:
    Jan 25, 2003
    Messages:
    1,125
    Likes Received:
    0
    Trophy Points:
    36
    Location:
    New York
    Do you mean spamd dying and dumping core ?. If so this is sometimes due to spamd not being able to handle a load or dying on a condition. Can you look at the headers of one of your messages and see what version of spamassassin you are running. We had a machine we thought was updating but was quite old. When we upgraded SA the dumping went away.
     
Loading...

Share This Page