help understanding email issue

asmithjr

Well-Known Member
Jun 13, 2003
516
8
168
I've noticed more and more issues with email in queue and bounces. I believe this is because of email forwarders but would like to know thoughts on how to resolve these issues. For example I did a "grep acevcuta.date exim_mainlog > mylog" to write the lines from my exim_mainlog file that contained acevcuta.date to a file mylog. I notice there are currently 22 lines in the file.
Oh by the way I see lots of domains ending in .date .review .praty and .faith with the same issues.
Code:
2015-08-18 08:50:04 1ZRgL5-0004dt-VK H=pd1mf4o.aagebra.date (6paea0w.acevcuta.date) [185.74.66.129]:34041 Warning: Message has been scanned: no virus or other harmful content was found
2015-08-18 08:50:04 1ZRgL5-0004du-VL H=pd1mf4o.aagebra.date (6paea0w.acevcuta.date) [185.74.66.129]:58509 Warning: Message has been scanned: no virus or other harmful content was found
2015-08-18 08:50:26 1ZRgL5-0004dt-VK H=pd1mf4o.aagebra.date (6paea0w.acevcuta.date) [185.74.66.129]:34041 Warning: "SpamAssassin as pitnerp detected message as NOT spam (0.0)"
2015-08-18 08:50:26 1ZRgL5-0004dt-VK <= [email protected] H=pd1mf4o.aagebra.date (6paea0w.acevcuta.date) [185.74.66.129]:34041 P=esmtp S=4738 [email protected] T="23-Second Dr. Created Belly Flattening Exercise TRICK..." for [email protected]
2015-08-18 08:50:26 1ZRgLS-0004fx-GJ <= <> R=1ZRgL5-0004dt-VK U=mailnull P=local S=5767 T="Mail delivery failed: returning message to sender" for [email protected]
2015-08-18 08:50:27 1ZRgLT-0004dt-37 H=pd1mf4o.aagebra.date (6paea0w.acevcuta.date) [185.74.66.129]:34041 Warning: Message has been scanned: no virus or other harmful content was found
2015-08-18 08:50:27 1ZRgLS-0004fx-GJ ** [email protected] <[email protected]> R=dkim_lookuphost T=dkim_remote_smtp H=uxu968uv.acevcuta.date [185.74.66.16]: SMTP error from remote mail server after RCPT TO:<[email protected]>: 553 5.7.1 Domain does not exists relaying not permitted
2015-08-18 08:50:28 1ZRgL5-0004du-VL H=pd1mf4o.aagebra.date (6paea0w.acevcuta.date) [185.74.66.129]:58509 Warning: "SpamAssassin as pitnerp detected message as NOT spam (0.0)"
2015-08-18 08:50:28 1ZRgL5-0004du-VL <= [email protected] H=pd1mf4o.aagebra.date (6paea0w.acevcuta.date) [185.74.66.129]:58509 P=esmtp S=4690 [email protected] T="23-Second Dr. Created Belly Flattening Exercise TRICK..." for [email protected]
2015-08-18 08:50:28 1ZRgLU-0004gK-Ft <= <> R=1ZRgL5-0004du-VL U=mailnull P=local S=5941 T="Mail delivery failed: returning message to sender" for [email protected]
2015-08-18 08:50:29 1ZRgLV-0004du-37 H=pd1mf4o.aagebra.date (6paea0w.acevcuta.date) [185.74.66.129]:58509 Warning: Message has been scanned: no virus or other harmful content was found
2015-08-18 08:50:29 1ZRgLU-0004gK-Ft ** [email protected] <[email protected]> R=dkim_lookuphost T=dkim_remote_smtp H=uxu968uv.acevcuta.date [185.74.66.16]: SMTP error from remote mail server after RCPT TO:<[email protected]>: 553 5.7.1 Domain does not exists relaying not permitted
2015-08-18 08:50:41 1ZRgLT-0004dt-37 H=pd1mf4o.aagebra.date (6paea0w.acevcuta.date) [185.74.66.129]:34041 Warning: "SpamAssassin as pitnerp detected message as NOT spam (0.0)"
2015-08-18 08:50:41 1ZRgLT-0004dt-37 <= [email protected] H=pd1mf4o.aagebra.date (6paea0w.acevcuta.date) [185.74.66.129]:34041 P=esmtp S=4711 [email protected] T="23-Second Dr. Created Belly Flattening Exercise TRICK..." for [email protected]
2015-08-18 08:50:41 1ZRgLh-0004iZ-G6 <= <> R=1ZRgLT-0004dt-37 U=mailnull P=local S=5741 T="Mail delivery failed: returning message to sender" for [email protected]
2015-08-18 08:50:41 SMTP connection from pd1mf4o.aagebra.date (6paea0w.acevcuta.date) [185.74.66.129]:34041 closed by QUIT
2015-08-18 08:50:42 1ZRgLh-0004iZ-G6 ** [email protected] <[email protected]> R=dkim_lookuphost T=dkim_remote_smtp H=uxu968uv.acevcuta.date [185.74.66.16]: SMTP error from remote mail server after RCPT TO:<[email protected]>: 553 5.7.1 Domain does not exists relaying not permitted
2015-08-18 08:50:52 1ZRgLV-0004du-37 H=pd1mf4o.aagebra.date (6paea0w.acevcuta.date) [185.74.66.129]:58509 Warning: "SpamAssassin as pitnerp detected message as NOT spam (0.0)"
2015-08-18 08:50:52 1ZRgLV-0004du-37 <= [email protected] H=pd1mf4o.aagebra.date (6paea0w.acevcuta.date) [185.74.66.129]:58509 P=esmtp S=4706 [email protected] T="23-Second Dr. Created Belly Flattening Exercise TRICK..." for [email protected]
2015-08-18 08:50:52 1ZRgLs-0004jX-9B <= <> R=1ZRgLV-0004du-37 U=mailnull P=local
 S=5985 T="Mail delivery failed: returning message to sender" for [email protected]
evcuta.date
2015-08-18 08:50:52 SMTP connection from pd1mf4o.aagebra.date (6paea0w.acevcuta.date) [185.74.66.129]:58509 closed by QUIT
2015-08-18 08:50:53 1ZRgLs-0004jX-9B ** [email protected] <[email protected]> R=dkim_lookuphost T=dkim_remote_smtp H=uxu968uv.acevcuta.date [185.74.66.16]: SMTP error from remote mail server after RCPT TO:<[email protected]>: 553 5.7.1 Domain does not exists relaying not permitted
those are some examples of the output.
What is happening here? Along with the forwarders for this account the last line in the valises file is "*: ":fail: No Such User Here"
which would cause the system to send back the message.

Is this correct? Is there any way to prevent this? Is the message being forwarded to the users in the list for example [email protected]*

Thanks in advanced for insight.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,880
2,261
463
Hello :)

Are these domain names added to your /etc/localdomains file? Have you tried sending a test message from these domain names to providers such as Google or Hotmail?

Thank you.
 

asmithjr

Well-Known Member
Jun 13, 2003
516
8
168
No those domains do not exist on my server. They seem to be sending email to someone on my server and then failing so the "fail" says to send the message back to them.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,880
2,261
463
It's normal for messages to bounce to the sender if the email account does not exist on your system. This is controlled via the "Default Address" option in cPanel for each account.

Thank you.