Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

SOLVED [CPANEL-20331] Mail failure - rejected by local scanning code

Discussion in 'E-mail Discussion' started by audrey, May 9, 2018.

  1. audrey

    audrey Well-Known Member

    Joined:
    Oct 18, 2006
    Messages:
    76
    Likes Received:
    1
    Trophy Points:
    158
    Hi

    Right after last night's upcp update to WHM 70.0.32 release tier I received an email from the server with the subject
    Mail failure - rejected by local scanning code
    saying the following:
    (name of the server is X'd out)

    >>>>>>>>>>>>>>>>>>>>>>>>>>>>>

    A message that you sent was rejected by the local scanning code that

    checks incoming messages on this system. The following error was given:



    local configuration problem



    ------ This is a copy of your message, including all the headers.

    ------ No more than 100K characters of the body are included.



    Received: from root by host.XXXXXXXXXXXX.com with local (Exim 4.89_1)

    (envelope-from <root@host.XXXXXXXXXXXX.com>)

    id 1fGIht-0000OG-Vh

    for root@host.XXXXXXXXXXXX.com; Wed, 09 May 2018 02:45:12 -0400

    From: "(Cron Daemon)" <root>

    From: "(Cron Daemon)" <root@XXXXXXXXXXXX.com >

    To: root

    To: root@host.XXXXXXXXXXXX.com

    Subject: Cron <root@host> /usr/local/cpanel/scripts/upcp --cron

    Content-Type: text/plain; charset=UTF-8

    Auto-Submitted: auto-generated

    Precedence: bulk

    X-Cron-Env: <XDG_SESSION_ID=33366>

    X-Cron-Env: <XDG_RUNTIME_DIR=/run/user/0>

    X-Cron-Env: <LANG=en_US.UTF-8>

    X-Cron-Env: <SHELL=/bin/sh>

    X-Cron-Env: <HOME=/root>

    X-Cron-Env: <PATH=/usr/bin:/bin>

    X-Cron-Env: <LOGNAME=root>

    X-Cron-Env: <USER=root>

    Message-Id: <E1fGIht-0000OG-Vh@root@XXXXXXXXXXXX.com>

    Date: Wed, 09 May 2018 02:36:09 -0400


    >>>>>>>>>>>>>>>>>>>>>>>>

    I see this in SSH

    exigrep root@host.XXXXXXXXXXXXX.com /var/log/exim_mainlog

    2018-05-09 02:45:13 1fGIqe-0001Ye-UJ <= <> R=1fGIht-0000OG-Vh U=mailnull P=local S=1400975 T="Mail failure - rejected by local scanning code" for root@host.XXXXXXXXXXXXX.com

    2018-05-09 02:45:13 1fGIqe-0001Ye-UJ => lfd <root@host.XXXXXXXXXXXX.com> R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 <xxx@XXXXXX.com> AMDOAvmY8lpJFwAA4qjuAg Saved"

    2018-05-09 02:45:13 1fGIqe-0001Ye-UJ Completed


    >>>>>>>>>>>>>>>>>>>>>>>>>>>>

    This server has been up and running fine for a few months- no configuration issues.

    I am getting other mail from root without errors - just not getting the daily upcp cron update email without the mail delivery error.

    There doesn't see to be any other email issues.

    I can send mail just fine from webmail and fromemail software

    I would normally just wait for upcp to run again or I would force it to run again and see if the problem is solved in the next update-but- I am a little concerned about running upcp or letting this server run it again tonight because my other servers say that the update was blocked
    and they did not update to WHM 70.0.32 release tier and they do not have upcp errors. All servers were set for the release update preference in WHM and before last night - they were all using WHM 68.0.38 release tier. Today - I put the other servers back to the stable update preference so that they do not update for a while.
    (What also worries me about the updates is that - The blocked update details say "Upgrade to the next LTS is blocked until Wednesday May 16, 2018" and I do not have updates set for LTS.
    This seems strange)

    The server that is having the problem - that did update to WHM 70.0.32 release tier - I turned off updates completely until I know that this issue is resolved. I can live with this issue - but - I can't afford other issues.

    Nothing else has changed on the server except for the update to WHM 70.0.32 release tier

    So - my questions
    is anyone else having the same problem?

    Is the issue resolved for tonight's update?

    Is the WHM 70.0.32 release tier having this and other issues?

    Thanks
    Audrey
     
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    43,659
    Likes Received:
    1,787
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello @audrey,

    The information you provided suggests that ClamAV rejected the message due to it's contents, however I was unable to reproduce this behavior on a test environment. Do you mind opening a support ticket using the link in my signature so we can take a closer look at an affected system? You can post the ticket number here once it's opened and I'll link it to this forums thread.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. audrey

    audrey Well-Known Member

    Joined:
    Oct 18, 2006
    Messages:
    76
    Likes Received:
    1
    Trophy Points:
    158
    Thanks Michael

    You have never steered me wrong:) I always trust your advice!!
    I submit a ticket.
    Ticket ID “9536209”

    Take care
     
  4. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    43,659
    Likes Received:
    1,787
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello @audrey,

    Thank you for taking the time to open the support ticket. I've added an internal note to the ticket linking it to this forums thread. You should receive a response from one of our Technical Analysts shortly.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. audrey

    audrey Well-Known Member

    Joined:
    Oct 18, 2006
    Messages:
    76
    Likes Received:
    1
    Trophy Points:
    158
    Hi Michael

    Thanks again

    I see that upcp ran last night and I received the email from cron and did not get any mail delivery errors from the server.

    I am sorry - apparently I missed the upcp email earlier today.
    I closed the ticket

    Hooray for all being good

    Take care
    Audrey
     
  6. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    43,659
    Likes Received:
    1,787
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello Audrey,

    My concern is that this only happens during the initial update from version 68 to version 70 due to the additional output that occurs in the cPanel update log. As part of the support ticket, we can check to see if there's anything specific to your system (that we could replicate on a test system) that's resulting in message delivery failure notification. Do you mind reopening the support ticket and granting us access to the affected system?

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  7. audrey

    audrey Well-Known Member

    Joined:
    Oct 18, 2006
    Messages:
    76
    Likes Received:
    1
    Trophy Points:
    158
    Hi Michael

    Thanks for being thorough!!
    I reopened the ticket.

    FYI - about 15 minutes ago I updated the kernel and rebooted this server

    Thanks again
     
  8. bear

    bear Well-Known Member

    Joined:
    Sep 24, 2002
    Messages:
    124
    Likes Received:
    2
    Trophy Points:
    168
    cPanel Access Level:
    Root Administrator
    We've received the same to one server (so far). Just updated to 70, had that "local configuration problem" error as well. Looking forward to hearing the results of this.
     
  9. ckh

    ckh Well-Known Member

    Joined:
    Dec 6, 2003
    Messages:
    358
    Likes Received:
    1
    Trophy Points:
    168
    Location:
    Phoenix, AZ
    cPanel Access Level:
    DataCenter Provider
    I started receiving those emails after the latest updates also, getting them from about 7 or 8 servers now. They look to be rejecting the UPCP email that is sent out.

    Same subject and has local configuration problem also, then includes the full header and the content of the UPCP email that was rejected.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  10. ckh

    ckh Well-Known Member

    Joined:
    Dec 6, 2003
    Messages:
    358
    Likes Received:
    1
    Trophy Points:
    168
    Location:
    Phoenix, AZ
    cPanel Access Level:
    DataCenter Provider
    Oops, not just the UPCP email being rejected, the output of a cron that a client has is being rejected also, so it's not just limited to the UPCP email.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  11. Michael-Inet

    Michael-Inet Well-Known Member

    Joined:
    Feb 20, 2014
    Messages:
    47
    Likes Received:
    3
    Trophy Points:
    8
    Location:
    Austin, TX, USA
    cPanel Access Level:
    Root Administrator
    Hi Michael,

    Got the same thing, but WHM is rejecting WHM update mails in my case. As I spent an hour, before finding the rejected cron job email telling me there was a WHM update, trying to see just how compromised my box was, I've opened a support ticket as well that includes full headers of the email received.

    Your Support Request ID is: 9541435

    [2018-05-11 04:47:02 -0400] Running version '11.68.0.38' of updatenow.
    [2018-05-11 04:47:10 -0400] Target version set to '11.70.0.34'

    Server has not had anything updated to it since the WHM update.

    Best,
    Michael
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #11 Michael-Inet, May 11, 2018
    Last edited: May 11, 2018
  12. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    43,659
    Likes Received:
    1,787
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello Everyone,

    Thank you for the continued feedback. We are now tracking reports of this issue as part of internal case CPANEL-20331. I'll monitor this case and update this thread with more information as it becomes available.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  13. rhm.geerts

    rhm.geerts Well-Known Member

    Joined:
    Jul 29, 2008
    Messages:
    93
    Likes Received:
    6
    Trophy Points:
    58
    Location:
    Maastricht
    cPanel Access Level:
    Root Administrator
    I'll follow this thread too since I had the exact same errors (and some more amongst which an update_db_cache and a Dovecot error) since the update to v70.0.30 last night.
     
  14. MajorLancelot

    MajorLancelot Active Member

    Joined:
    Dec 17, 2014
    Messages:
    26
    Likes Received:
    4
    Trophy Points:
    78
    Location:
    Shinjuku-ku, Tokyo, Japan
    cPanel Access Level:
    Root Administrator
    Following this thread.
     
  15. PeteS

    PeteS Well-Known Member

    Joined:
    Jun 8, 2017
    Messages:
    99
    Likes Received:
    14
    Trophy Points:
    18
    Location:
    Oregon
    cPanel Access Level:
    Root Administrator
    Following...

    I had the same experience as the OP (UPCP ran and 15 minutes later the report email was rejected, the next UPCP, 24 hours later was normal).
     
  16. klpang

    klpang Registered

    Joined:
    Feb 26, 2014
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Website Owner
    Following this thread.
    Also encounter same issue. After upgrade from version 68 to 70 today. Cpanel version v70.0.41
     
  17. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    43,659
    Likes Received:
    1,787
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello Everyone,

    We are continuing to track reports of this happening upon the initial update from version 68 to version 70, but have yet to reproduce the issue internally. Can anyone that experienced this issue run the following commands and let us know the output?

    Code:
    grep '' /etc/redhat-release /var/cpanel/envtype
    cat /etc/exim.conf.localopts
    Also, let us know of any specific third-party plugins (e.g. CSF/LFD, MailScanner) or custom Exim configurations that are enabled on affected systems.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  18. rhm.geerts

    rhm.geerts Well-Known Member

    Joined:
    Jul 29, 2008
    Messages:
    93
    Likes Received:
    6
    Trophy Points:
    58
    Location:
    Maastricht
    cPanel Access Level:
    Root Administrator
    It looks like this only happens during the update, not afterwards. We are now a couple of days later and until now the issue did not re-occur anymore. Which might explain why you can't reproduce it.
    It did not re-occur after the update from 11.70.0.30 to 11.70.0.42.
    This is the result of the command on our systems:
     
  19. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    43,659
    Likes Received:
    1,787
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    To update, this was confirmed to happen during email delivery attempts while the exim.pl.local file was in the process of updating. This is solved in cPanel & WHM version 70.0.46:

    Fixed case CPANEL-20331: Avoid transient error when installing exim.pl.local.

    Version 70.0.46 is now published to the CURRENT build tier. I'll update this thread again once it's published to the RELEASE build tier.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    PeteS and rhm.geerts like this.
  20. Michael-Inet

    Michael-Inet Well-Known Member

    Joined:
    Feb 20, 2014
    Messages:
    47
    Likes Received:
    3
    Trophy Points:
    8
    Location:
    Austin, TX, USA
    cPanel Access Level:
    Root Administrator
    I should have posted this earlier, but got busy with other things ;)

    Adding it here in case something similar crops up again, so the great G can help us find it...

    Kevin (cPanel tickets) reported to me that he found this error on my server during the investigation:


    I was able to see in the logs that the message failed for the below message.

    ==
    2018-05-11 04:00:17 1fH3hn-0004ej-PW F=<root@{removed}.com> rejected by non-SMTP ACL: failed to expand ACL string "${if eq{$originator_uid}{${perl{user2uid}{nobody}}}{1}{0}}": Undefined subroutine &main::user2uid called.
    ==


    Best,
    Michael
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #20 Michael-Inet, May 25, 2018
    Last edited: May 25, 2018
    cPanelMichael likes this.
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice