The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Email resent headers 5 months later

Discussion in 'E-mail Discussions' started by Wade John Beckett, May 29, 2017.

  1. Wade John Beckett

    Joined:
    May 29, 2017
    Messages:
    5
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    South Africa
    cPanel Access Level:
    Root Administrator
    Hi,
    I hope everyone is well.

    I am trying to determine the reason a mail appeared in my clients Outlook inbox 5 months after the mail was originally sent.

    Mail header:

    Code:
    Return-Path: <username@myserverhostname>
    
    Delivered-To: recipient@domainname.com
    Received: from myserverhostname by myserverhostname (Dovecot) with LMTP id i2aaAfzo7ViPtgcAMIJ*** for <recipient@domainname.com>; Wed, 12 Apr 2017 10:44:44 +0200
    Return-path: <username@myserverhostname>
    Envelope-to: recipient@domainname.com
    Delivery-date: Wed, 12 Apr 2017 10:44:44 +0200
    Received: from [::1] (port=47698 helo=myserverhostname) by myserverhostname with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.89) (envelope-from <username@myserverhostname>) id 1cy***-0027Uv-Io for recipient@domainname.com; Wed, 12 Apr 2017 10:44:44 +0200
    Resent-Date: Wed, 12 Apr 2017 10:44:44 +0200
    Resent-From: username@myserverhostname
    Resent-To: recipient <recipient@domainname.com>
    Resent-Message-ID: <20170412104444.Horde.Zlr-JQrnT54QyXjf7o0dBy5@myserverhostname>
    Delivered-To:username@myserverhostname
    Received: from myserverhostname by myserverhostname (Dovecot) with LMTP id gfRWOayAIFhNlwoAMIJW9Q for <username@myserverhostname>; Mon, 07 Nov 2016 15:25:00 +0200
    Received: from rrba-ip-smtp-3-3.saix.net ([196.25.240.213]:38984) by myserverhostname with esmtps (TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256) (Exim 4.87) (envelope-from <sender@sendersdomain.com>) id 1c3juy-002uYq-9E for recipient@domainname.com; Mon, 07 Nov 2016 15:25:00 +0200
    Received: from SenderPC (unknown [105.184.**.**]) by rrba-ip-smtp-3-3.saix.net (Postfix) with ESMTP id 1DB651041 for <recipient@domainname.com>; Mon, 7 Nov 2016 15:24:08 +0200 (SAST)
    From: "Sender Name " <sender@sendersdomain.com>
    To: <recipient@domainname.com>
    Subject: Purchase Order POA34334
    Date: Mon, 7 Nov 2016 15:24:07 +0200
    Message-ID: <019901d238fa$3a48ba70$aeda2f50$@sendersdomain.com>
    MIME-Version: 1.0
    Content-Type: multipart/mixed; boundary="----=_NextPart_000_019A_01D2390A.FDD18A70"
    X-Mailer: Microsoft Outlook 14.0
    X-Spam-Status: No, score=1.8
    X-Spam-Score: 18
    X-Spam-Bar: +
    X-Ham-Report: Spam detection software, running on the system "myserverhostname", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details.
    

    What I have determined thus far:

    The original mail was sent and received Mon, 7 Nov 2016

    At some point somehow, the mail was "resent" Wed, 12 Apr 2017, but not by the original sender. It looks to me that my server resent the mail at the new date for whatever reason (Although I could be wrong).

    My question is, why was this mail resent (if it was), and was is resent by a human, or by the server?
     
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    37,064
    Likes Received:
    1,288
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    You can search for the message in /var/log/exim_mainlog to see how Exim processed the delivery. EX:

    Code:
    exigrep MSGID /var/log/exim_mainlog
    Thank you.
     
  3. Wade John Beckett

    Joined:
    May 29, 2017
    Messages:
    5
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    South Africa
    cPanel Access Level:
    Root Administrator
    Hi @cPanelMichael,

    Thank you for answering so quickly.

    How long does the exim_mainlog keep entries for?

    I attempted the command and nothing was returned.

    Thank you
     
  4. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    37,064
    Likes Received:
    1,288
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    The log is pruned when it reaches the threshold size configured for your log rotation. You can try appending * to the end of the log file name to have it search the archives. EX:

    Code:
    exigrep MSGID /var/log/exim_mainlog*
    Thank you.
     
Loading...

Share This Page