delivery event explain

[upsforum]

Dear all,


you can explain me as read explain event log of WHM?

for example, this message generate a "LOCALHOSTRELAY Alert for 127.0.0.1", but I don't understand who or what sent


Event: success
User: hostuser
Domain: domainuser.it
Sender: info2013 @ yahoo.co.uk
Sent Time: Jun 25, 2013 12:02:12 PM
Sender Host: localhost
Sender IP: 127.0.0.1
Authentication: dovecot_login
Spam Score:
Recipient: dushi_ama @ hotmail.com
Delivered To: dushi_ama @ hotmail.com
Delivery User: -remote-
Delivery Domain:
Router: lookuphost
Transport: remote_smtp
Out Time: Jun 25, 2013 12:02:12 PM
ID: 1UrQ53-00007a-CG
Delivery Host: mx4.hotmail.com
Delivery IP: 65.54.188.126
Size: 1.78 KB
Result: Message accepted

 

[ThinIce]

Generally speaking, these fields tell you the account

User: hostuser
Domain: domainuser.it

These indicate the message was sent via webmail

Sender IP: 127.0.0.1
Authentication: dovecot_login

 

[cPanelMichael]

Hello

Yes, the user/domain field will typically indicate which account was used to send the message. You can also search for the recipient address in the Exim log file. EX:

exigrep [email protected] /var/log/exim_mainlog

Thank you.