The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Email Delivery Failure Messages

Discussion in 'E-mail Discussions' started by Project 18, Sep 28, 2015.

  1. Project 18

    Project 18 Registered

    Joined:
    Sep 28, 2015
    Messages:
    3
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Atlanta
    cPanel Access Level:
    Root Administrator
    From the Mail Delivery Reports, we notice that we average a handful of failures that reference the following message "SMTP error from remote mail server after RCPT TO:: 550-Verification failed for \n550-The mail server could not deliver mail to NAME@server.DOMAINNAME.com". (For the interest in privacy, I have removed the actual name and domain name, but in all cases that address is the same.)

    This email address uses the domain of the website hosted on this server. We do not have that subdomain set up and therefore obviously not that email address. What is confusing, is this error only occurs on some email transactions. Most are successful. Do we have to simply set up this subdomain and email address, or can this be remedied some other way? Any help would be appreciated.
     
  2. Jcats

    Jcats Well-Known Member

    Joined:
    May 25, 2011
    Messages:
    275
    Likes Received:
    31
    Trophy Points:
    28
    Location:
    New Jersey
    cPanel Access Level:
    DataCenter Provider
    Hello,

    This usually occurs when an email is sent from a PHP script that doesn't use SMTP authentication, the return path is set to the mentioned email, if there is some kind of bounce back or automated reply, it will go to that returnpath which doesn't exist and will just sit in your mail queue until its unfrozen and removed. If you see lots of these, it could be an indication of a malicious script sending out spam. You can trace them in SSH using:
    Code:
    # head -1 /var/log/exim_mainlog | awk '{print $1}' ; awk '$3 ~ /^cwd/{print $3}' /var/log/exim_mainlog | sort | uniq -c | sed "s|^ *||g" | sort -nr | head --lines 15 | egrep -v ' cwd=(/$|/etc/csf|/var/spool/exim)' ; tail -1 /var/log/exim_mainlog | awk '{print From $1}'
    Either way, its always best to configure the script to send out using SMTP authentication, it usually results in better delivery in terms of ending up in spam, etc.
     
  3. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,736
    Likes Received:
    661
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Hello :)

    Yes, as mentioned, this is likely the result of returned email from PHP scripts using the PHP mail function. Some users disable the PHP mail function and require their users to send from PHP scripts with SMTP authentication to avoid this issue.

    Thank you.
     
Loading...

Share This Page