Emails lost or stuck in progress

[keat63]

Users complaining this morning that they've had no emails since 07:03.
I can't see anything in the mailbox, or queue.
But if i run a amil delivery report against one of the accounts, I see this.

Event: inprogress [IMG]https://xxxx.xxxxxxx.co.uk:2087/cPanel_magic_revision_0/cjt/images/icons/unknown.png[/IMG]
Sender User: myuser
Sender Domain: mydomian.co.uk
From Address: [email protected]
Sender: [email protected]
Sent Time: Mar 13, 2019, 9:01:09 AM
Sender Host: www.mydomian.co.uk
Sender IP: xxx.xxx.xxx.xxx
Authentication: dovecot_login
Recipient: unknown
Delivered To: unknown
Delivery User: unknown
Delivery Domain: unknown
Router: unknown
Transport: unknown
Out Time: Mar 13, 2019, 9:01:09 AM
ID: 1h3zlX-0003wB-PC
Delivery Host:
Delivery IP:
Size: 2.46 KB
Result: In progress

any throughts as to what's going on ?

 

[keat63]

It seems that everything is stuck in progress.
Restarted exim a few times, and now rebooting the server.

 

[keat63]

It looks like this was related to CSF MailScanner.
We ran a mailchimp campaign which went out at 07:30am.
In the space of 1.5 minutes, our server recieved 500 out of office replies, I can only assume that CSF Mailscanner was overwhelmed and possibly crashed.

 

[cPanelLauren]

Hi @keat63

This does happen occasionally with MailScanner, especially after updates. I hope all is working as expected now.

Thanks!

 

[keat63]

As a matter of interest, could exim (on a standard dedicated server), deal with this sort of influx.
500 emails in 90 seconds.
I'm aware that a number of factors will be down to resources and bandwidth etc.

 

[Infopro]

Easily, IMO.
I've ran mailscanner & MSFE for many years and never has it crashed on me. If it did, there should be logs somewhere, and/or an email to root about it.

 

[keat63]

In a blind panic, (after retsrting exim didn't resolve the issue), I just rebooted the server.
When I found the problem, there were about 150 emails awaiting processing.
I've no idea if it started processing after the reboot, as my main goal was to get it back up as quickly as possible.
So I disabled MSFE scanning and allowed the exim jobs to complete, then re-enabled MSFE scanning once caught up.

It's been fine since.

 

[cPanelLauren]

Hi @keat63

As a matter of interest, could exim (on a standard dedicated server), deal with this sort of influx.
500 emails in 90 seconds.

Theoretically, it should go over fine, though it could cause a short spike in resource usage.

Easily, IMO.
I've ran mailscanner & MSFE for many years and never has it crashed on me. If it did, there should be logs somewhere, and/or an email to root about it.

As an analyst I've seen a countless number of tickets regarding this behavior, while it may have never occurred with you it does happen. We have, internally a script that checks for its presence due to issues such as this. I'm glad you've not had any issues though.


Thanks!