Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Large Amount of Outbound Email

Discussion in 'E-mail Discussions' started by swbrains, Apr 2, 2018.

  1. swbrains

    swbrains Well-Known Member

    Joined:
    Sep 13, 2006
    Messages:
    63
    Likes Received:
    3
    Trophy Points:
    158
    Hi, I have checked in WHM contact manager, and this notification is set to disabled, yet I receive several of them every day (I have one legitimate customer who sends a lot of emails throughout the day). Still I'd like to disable it (or be able to configure it to a higher threshold). But why does it still send the notification if I've disabled it? screencapture_000481.png
     
  2. 63bus

    63bus Active Member

    Joined:
    Mar 31, 2007
    Messages:
    35
    Likes Received:
    0
    Trophy Points:
    156
    Yes, disabling the above turned off one message but I'm getting the email below all the time since my site sends out tons of legitimate email.

    warn [eximstats_spam_check] The system has detected an unusually large amount of outbound email. The following sender(s) may be sending spam: <removed>
     
  3. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    42,782
    Likes Received:
    1,712
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello @63bus and @swbrains,

    There's an internal case (SWAT-1036) open to address an issue where the server's root contact email address receives a notification from crond when eximstats_spam_check runs as part of the following root cron job:

    5,20,35,50 * * * * /usr/local/cpanel/scripts/eximstats_spam_check 2>&1

    This is independent of the Large Amount of Outbound Email Detected notification type. I'll monitor the case and update this thread with more information as it becomes available. In the meantime, one workaround to disable these notifications would be to modify this root cron job with the "crontab -e" command so that it's configured to only run once per year. EX:

    Code:
    0 0 1 1 * /usr/local/cpanel/scripts/eximstats_spam_check 2>&1
    However, you'd need to ensure you switched it back once a resolution is published.

    Thank you.
     
  4. swbrains

    swbrains Well-Known Member

    Joined:
    Sep 13, 2006
    Messages:
    63
    Likes Received:
    3
    Trophy Points:
    158
    Thanks. Did this change recently? I checked my trash (where these are being filtered) and these notifications only started as of 3/29/2018.

    Oh great. I just mistyped crontab -r instead of crontab -e and deleted my crontab file. Now I have bigger problems. Why does crontab -r NOT prompt for confirmation, especially since the E and R keys are right next to each other on the keyboard?

    Any ideas how to locate a backup of this file or regenerate a default crontab file?
     
  5. rclemings

    rclemings Active Member

    Joined:
    Nov 5, 2007
    Messages:
    43
    Likes Received:
    4
    Trophy Points:
    58
    Try /var/spool/cron/root for the default.
     
  6. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    42,782
    Likes Received:
    1,712
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Yes, the following case was included in the most recent cPanel & WHM version 68 build:

    Fixed case CPANEL-19455: New crontab breaking update on upgrade.

    This added the cron job on systems where it was missing.

    Here's the default root crontab for cPanel & WHM version 68:

    Code:
    0 6 * * * /usr/local/cpanel/scripts/exim_tidydb > /dev/null 2>&1
    30 5 * * * /usr/local/cpanel/scripts/optimize_eximstats > /dev/null 2>&1
    @reboot /usr/local/cpanel/bin/onboot_handler
    26 22 * * * /usr/local/cpanel/whostmgr/docroot/cgi/cpaddons_report.pl --notify
    12 3 * * * /usr/local/cpanel/scripts/upcp --cron
    0 1 * * * /usr/local/cpanel/scripts/cpbackup
    0 2 * * * /usr/local/cpanel/bin/backup
    35 * * * * /usr/bin/test -x /usr/local/cpanel/bin/tail-check && /usr/local/cpanel/bin/tail-check
    5,20,35,50 * * * * /usr/local/cpanel/scripts/eximstats_spam_check 2>&1
    45 */4 * * * /usr/bin/test -x /usr/local/cpanel/scripts/update_mailman_cache && /usr/local/cpanel/scripts/update_mailman_cache
    30 */4 * * * /usr/bin/test -x /usr/local/cpanel/scripts/update_db_cache && /usr/local/cpanel/scripts/update_db_cache
    30 */2 * * * /usr/local/cpanel/bin/mysqluserstore >/dev/null 2>&1
    15 */2 * * * /usr/local/cpanel/bin/dbindex >/dev/null 2>&1
    15 */6 * * * /usr/local/cpanel/scripts/autorepair recoverymgmt >/dev/null 2>&1
    */5 * * * * /usr/local/cpanel/scripts/dcpumon-wrapper >/dev/null 2>&1
    09,39 * * * * /usr/local/cpanel/scripts/clean_user_php_sessions > /dev/null 2>&1
    8,23,38,53 * * * * /usr/local/cpanel/whostmgr/bin/dnsqueue > /dev/null 2>&1
    Thank you.
     
  7. dfkern

    dfkern Registered

    Joined:
    Feb 20, 2008
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    50
    Location:
    Nashville, TN
    Ideally, there would be a setting that would set the warning ,
    > X where x is some adjustibla limit.
     
  8. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    42,782
    Likes Received:
    1,712
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello @dfkern

    We plan to expand upon this feature in cPanel & WHM version 72 by adding the Number of unique recipients per hour to trigger potential spammer notification. option in the Mail tab of WHM >> Home >> Server Configuration >> Tweak Settings. This setting will allow you to specify the number of emails that any account may send in one hour before the system sends an alert notification.

    Thank you.
     
  9. rclemings

    rclemings Active Member

    Joined:
    Nov 5, 2007
    Messages:
    43
    Likes Received:
    4
    Trophy Points:
    58
  10. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    42,782
    Likes Received:
    1,712
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
Loading...

Share This Page