The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Exim is Sucking....

Discussion in 'General Discussion' started by vishal, Jun 28, 2003.

  1. vishal

    vishal Well-Known Member

    Joined:
    Jan 28, 2003
    Messages:
    340
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    India
    Exim is Sucking....identified spam (5.7/5.0) for user:32117

    Hello,

    WHM 6.4.2
    Cpanel 6.4.2-S75
    RedHat 7.2

    I have a weired problem with Exim 3.36
    #uptime
    6:33am up 14 days, 3:16, 1 user, load average: 23.53, 23.90, 22.60

    # ps aux
    root 19025 3.7 0.5 4856 2692 ? D 06:34 0:00 [sendmail]
    root 19033 4.1 0.5 4856 2692 ? D 06:34 0:00 [sendmail]
    root 19041 5.0 0.5 4856 2692 ? S 06:34 0:00 [sendmail]
    root 19044 5.4 0.5 4860 2696 ? D 06:34 0:00 [sendmail]
    root 19050 1.5 0.2 4360 1440 ? R 06:34 0:00
    /usr/sbin/exim -t -oem -oi -f <> -E19WD2N-0004x
    root 19051 6.5 0.5 4860 2696 ? D 06:34 0:00 [sendmail]
    root 19054 4.5 0.4 4604 2376 ? D 06:34 0:00
    /usr/sbin/exim -t -oem -oi -f <> -E19WD2J-0004w
    root 19056 12.5 0.5 4860 2696 ? S 06:34 0:00 [sendmail]
    root 19057 3.0 0.2 4360 1444 ? D 06:34 0:00 [sendmail]
    root 19059 4.0 0.4 4540 2328 ? D 06:34 0:00
    /usr/sbin/exim -t -oem -oi -f <> -E19WD1q-0004t
    root 19062 4.0 0.4 4540 2328 ? D 06:34 0:00
    /usr/sbin/exim -t -oem -oi -f <> -E19WD1u-0004t
    root 19063 3.0 0.3 4388 1528 ? S 06:34 0:00
    /usr/sbin/exim -t -oem -oi -f <> -E19WD1u-0004u

    # tail -f /var/log/exim_mainlog
    2003-06-28 06:35:20 19WD3S-000538-00 ** nobody@server.domain.net: retry
    timeout exceeded
    2003-06-28 06:35:20 19WD3T-00053I-00 Completed
    2003-06-28 06:35:20 19WD3S-000538-00 nobody@server.domain.net: error ignored
    2003-06-28 06:35:20 19WD3U-00053S-00 ** hamay06@yahoo.co.au: unrouteable
    mail domain "yahoo.co.au"
    2003-06-28 06:35:20 19WD3V-00053b-00 <= nobody@server.domain.net U=nobody
    P=local S=586
    2003-06-28 06:35:21 19WD3V-00053X-00 ** hamay06@yahoo.co.au: unrouteable
    mail domain "yahoo.co.au"
    2003-06-28 06:35:21 19WD3S-000538-00 Completed

    #tail -f /var/log/maillog

    Jun 28 06:58:17 server spamd[26636]: info: setuid to submissi succeeded
    Jun 28 06:58:17 server spamd[26636]: processing message <i16$3$v3c$g3qb-a7i3k-y4@t2yy.e6fk> for submissi:32117.
    Jun 28 06:58:23 server spamd[26636]: identified spam (19.6/5.0) for submissi:32117 in 6.1 seconds, 1959 bytes.
    Jun 28 06:58:33 server imapd[26683]: Logout user=??? domain=??? host=localhost [127.0.0.1]
    Jun 28 07:00:06 server spamd[18492]: connection from localhost [127.0.0.1] at port 34902
    Jun 28 07:00:06 server spamd[26995]: info: setuid to submissi succeeded
    Jun 28 07:00:06 server spamd[26995]: processing message <ca0701c33d64$1777d6a1$c1a85466@v7kwpvs> for submissi:32117.
    Jun 28 07:00:06 server spamd[26995]: identified spam (5.7/5.0) for submissi:32117 in 0.6 seconds, 2592 bytes.

    Are these users two users jakob and submissi spamming the server or they are getting spammed ?


    I have symlinked /usr/sbin/sendmail--> exim*

    I tried to kill the process and even stopped exim but still the log continues.

    It also seems that the PIDs are changing and i can't kill them. It says no such PID when try to kill any process of sendmail. and next time it assigns a new PID to it and same thing goes on.

    Any comments on why is this happening ?

    Regards,
    :confused: :eek: :mad: :(

    cPanel.net Support Ticket Number:
     
    #1 vishal, Jun 28, 2003
    Last edited: Jun 28, 2003
Loading...

Share This Page