exim forwarding root mail to wrong address ( ignoring alias )

walterdevos

Member
Apr 30, 2011
15
2
53
Some time ago cPanel stopped sending me mails.
I checked WHM basic cPanel & WHM Setup and there contact information is set to
[email protected]
I checked WHM Server Contacts -> Edit System Mail Preferences and there the "root's mail" is set to [email protected]
I changed these and saved, but still nothings happening.

I went into shell and did this:
mail -s "test mail" root
Then I did:
tail exim_mainlog
That gave me this:
2013-08-08 17:35:03 cwd=/ 2 args: /usr/sbin/exim -bpu
2013-08-08 17:35:21 cwd=/var/log 3 args: send-mail -i root
2013-08-08 17:35:21 1V7SFF-0004JX-LV <= [email protected] U=root P=local S=370 T="test mail" for root
2013-08-08 17:35:21 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1V7SFF-0004JX-LV
2013-08-08 17:35:22 1V7SFF-0004JX-LV => [email protected] <[email protected]> R=lookuphost T=remote_smtp H=aspmx.l.google.com [173.194.xx.xxx] X=TLSv1:RC4-SHA:128
2013-08-08 17:35:22 1V7SFF-0004JX-LV Completed
Somewhere earlyer in the log I also found this:
2013-08-08 15:43:18 1V7QUo-0004Nl-E1 <= <> H=mail-ee0-f65.google.com [74.125.xx.xxx]:44464 P=esmtps X=TLSv1:RC4-SHA:128 S=5239 [email protected] T="Delivery Status Notification (Failure)" for [email protected]
It seems the forwarding address [email protected] is only used as the "display name" in the SMTP command.
This forces google to try [email protected] which of-course fails.

My .forward has the correct address.

Anyone know how i can fix this?

( CENTOS 5.9 x86_64 vmware – www WHM 11.38.1 (build 15) )
 
Last edited:

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,913
2,203
363
Hello :)

The root contact address is only designed to forward email to an actual email account. It appears this is working as intended based on your email logs because it shows the message delivery to the address you have configured root email to forward to.

I'm not sure if that is your actual hostname, or an example, but note that you should not use an actual domain name with the "www" prefix as your hostname.

Thank you.
 

walterdevos

Member
Apr 30, 2011
15
2
53
Hi

I'm confused. Maybe my question is not clear.

The mail should be send to [email protected] , but it is send to [email protected] because that is what is said between the brackets. It should be [email protected] <[email protected]> , or just [email protected] (without the brackets). Note that it already knows it should contact the SMTP server of Google, which it does: T=remote_smtp H=aspmx.l.google.com , but it then should tell google to send it to the forward address I configured, not the original root address.

it is the "added" <[email protected]> that is not correct and shouldn't be there.

I configured forwarding the way I found plenty examples in this forum.

Every other e-mail adress is just [email protected] without the <somethingelse>

My host-name is a FQDN, shouldn't it be?

Any advice? Do you need more info, logs, config files?
 
Last edited:

quietFinn

Well-Known Member
Feb 4, 2006
1,222
87
178
Finland
cPanel Access Level
Root Administrator
2013-08-08 17:35:03 cwd=/ 2 args: /usr/sbin/exim -bpu
2013-08-08 17:35:21 cwd=/var/log 3 args: send-mail -i root
2013-08-08 17:35:21 1V7SFF-0004JX-LV <= [email protected] U=root P=local S=370 T="test mail" for root
2013-08-08 17:35:21 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1V7SFF-0004JX-LV
2013-08-08 17:35:22 1V7SFF-0004JX-LV => [email protected] <[email protected]> R=lookuphost T=remote_smtp H=aspmx.l.google.com [173.194.70.26] X=TLSv1:RC4-SHA:128
2013-08-08 17:35:22 1V7SFF-0004JX-LV Completed
That tells that the email is coming [email protected] ("<=" tells that) and it's sent ("=>") to [email protected]
 

walterdevos

Member
Apr 30, 2011
15
2
53
I know.
But look carefully:
It said => [email protected] <[email protected]> <-- including the <root...> , which then results in "Delivery Status Notification (Failure)" for [email protected]

2013-08-08 17:35:22 1V7SFF-0004JX-LV => [email protected] <[email protected]> R=lookuphost T=remote_smtp H=aspmx.l.google.com [173.194.70.26] X=TLSv1:RC4-SHA:128
I don't want the <[email protected]> added to the FROM: line, because it confuses google.

PS: if it would say: [email protected] <[email protected]> THAT would work, but not vice versa.
 

quietFinn

Well-Known Member
Feb 4, 2006
1,222
87
178
Finland
cPanel Access Level
Root Administrator
The email in your 1st post:

2013-08-08 17:35:03 cwd=/ 2 args: /usr/sbin/exim -bpu
2013-08-08 17:35:21 cwd=/var/log 3 args: send-mail -i root
2013-08-08 17:35:21 1V7SFF-0004JX-LV <= [email protected] U=root P=local S=370 T="test mail" for root
2013-08-08 17:35:21 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1V7SFF-0004JX-LV
2013-08-08 17:35:22 1V7SFF-0004JX-LV => [email protected] <[email protected]> R=lookuphost T=remote_smtp H=aspmx.l.google.com [173.194.xx.xxx] X=TLSv1:RC4-SHA:128
2013-08-08 17:35:22 1V7SFF-0004JX-LV Completed
It did not fail.

This
simply means that the email was originally sent to [email protected] but forwarded to [email protected]