The Community Forums

Interact with an entire community of cPanel & WHM users.
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

how is this user circumventing email rate limits?

Discussion in 'E-mail Discussions' started by JamesWard, Oct 23, 2012.

  1. JamesWard

    JamesWard Registered

    Joined:
    Oct 23, 2012
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Root Administrator
    I've been working with WHM for about a year now and these forums have been a valuable asset. I finally hit an issue that I couldn't find a write up about so I registered to ask the community their thoughts on this.

    I have a user who is using Exim to send out emails at a rate that exceeds the global emails per domain per hour throttle and I can't figure out how. Here is a basic rundown of my troubleshooting.

    First I wanted to see the rate for this domain:

    #exigrep domainname /var/log/exim_mainlog | grep -i completed | wc -l
    33974

    I then checked to see what window of time the logs cover.

    #tail -1 /var/log/exim_mainlog
    2012-10-23 18:44:52

    #head -1 /var/log/exim_mainlog
    2012-10-21 04:02:01

    This is an approximately 62 hour window. Lets see the ratelimit for this server:
    #cat /var/cpanel/maxemailsperhour
    150

    and then we need to check for user specific setting:

    #cat /var/cpanel/users/user | grep -i email | egrep -vi contact
    #If you edit MAX_EMAIL_PER_HOUR or MAX_EMAIL_PER_HOUR-[domain] you must run /usr/local/cpanel/scripts/updateuserdomains
    notify_email_quota_limit=1

    This user appears able to send about triple the imposed limit. Does anyone have any thoughts on how I can pursue this? I ran /usr/local/cpanel/scripts/updateuserdomains just in case but it doesn't appear to have helped.

    Thanks in advance for anyone who has a link or idea.
     
    #1 JamesWard, Oct 23, 2012
    Last edited: Oct 23, 2012
  2. SoftDux

    SoftDux Well-Known Member

    Joined:
    May 27, 2006
    Messages:
    983
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Johannesburg, South Africa
    cPanel Access Level:
    Root Administrator
    Could he be using a PHP script, which is not limited by the EXIM limit?
     
  3. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,623
    Likes Received:
    21
    Trophy Points:
    38
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
    Additionally, checking for the domain and completed doesn't mean the user is sending out. Incoming emails are also logged into /var/log/exim_mainlog and your exigrep didn't check for the domain sending out which is <= for the entry. You'll need to revise your exigrep to account for only emails sent out by the domain. Right now, it's both incoming and outgoing you are getting for the return.
     
Loading...

Share This Page