Email forwarders disappearing for no reason?

[|Noname|]

Hey guys, we have a customer that says a couple of his forwarders are somehow being deleted.
He contacted us about a month ago about this issue and now he says it happened again.
Did anyone hear about this happening in Cpanel?

Thanks in advance.

 

[es2alna]

Hi,

I didn't face such an issue in 50+ servers.

Check the logs for the deleting, maybe the customer is deleting them.

Thanks,

 

[|Noname|]

Hey, is this kind of activity even logged?

 

[es2alna]

I guess yes, check the logs here:

/usr/local/cpanel/logs/

 

[|Noname|]

Thanks but I already grep'd the whole directory and there is anything related.
I don't this there is a log for this.

 

[es2alna]

Grep this word "dodelfwd" without quotes in:

/usr/local/cpanel/logs/access_log

The entry in logs will be like this:

access_log:11.22.33.44 - USERNAME [04/04/2014:05:42:08 -0000] "GET /cPanel_magic_revision_1394487366/cjt/cpanel-all-min-en.js HTTP/1.1" 200 0 "https://IPADDRESS:2083/frontend/x3/mail/dodelfwd.html?email=XXXXX%40WEBSITE.COM&emaildest=EMAILTO%40WEBSITE.com"

 

[cPanelMichael]

Hello

I have not seen any cases where forwarders were deleted automatically. Are these domain email forwarders or just standard forwarders created for email accounts? Check the cPanel access logs (and archives of this log) as indicated in the previous post to see if they were manually deleted.

Thank you.

 

[|Noname|]

Thank you guys, gonna check it.