Large Exim database help.

[glenn0]

I've been away for a short time and returned to my server to find quite a large Exim database. My server isn't configured for email (no MX records etc.) so I'm wondering why the database is so large and growing.

I've attached a screenshot of some Exim related stats that I'm hoping might help somebody to shed light on what's happening for me. It seems the destination is always aspmx.l.google.com?

Thanks for any help/advice as to what these emails might be.

 

[glenn0]

Further investigation reveals that the server is sending an email every couple of minutes:

Event: success success
User: root
Domain:
Sender: [email protected]
Sent Time: Feb 4, 2013 2:02:14 PM
Sender Host: localhost
Sender IP: 127.0.0.1
Authentication: localuser
Spam Score:
Recipient: [email protected]
Delivered To: [email protected]
Delivery User: -remote-
Delivery Domain:
Router: lookuphost
Transport: remote_smtp
Out Time: Feb 4, 2013 2:02:14 PM
ID: 1U2MdJ-0008Po-29
Delivery Host: aspmx.l.google.com
Delivery IP: 74.125.142.27
Size: 709 bytes
Result: Message accepted

Any ideas where to look for what is sending these emails, what they contain, and why?

Thank you.

 

[glenn0]

Is there any other information I can supply to aid getting help? I would like to know what these emails are and how to stop them..

Thank you.

 

[Infopro]

What email addresses do you have showing here? I mean, are those filled in with a gmail account by chance?
Home » Server Contacts » Edit System Mail Preferences

Are all items listed here set to disabled?
Home » Server Contacts » Contact Manager

 

[glenn0]

Thanks for the reply, I've attached two screen grabs showing the information you asked for. My email address is not from google but my ISP addesss (Blueyonder, now Virgin) - I'm not receiving these emails by the way although they are being sent. I have no MX records for server or hosted domains configured.

Thank you for any help

 

[Infopro]

In WHM, go here:
Home » Email » Mail Delivery Reports

Click the Run Report button. In any items you see listed, click the icon to the right to view more details for clues.

 

[glenn0]

The only icon I'm seeing on the right of the report is 'Actions' and I posted the information shown from that in my second post. Anything else I could check?

Thanks again.

 

[Infopro]

So, you see this then, as I do.


This email is from the system, to root.

 

[glenn0]

Yes, it looks exactly like that

What are they, what do they contain, are they needed and why so many?

Thanks again...

 

[Infopro]

Going by the number per hour, I'd say something is wrong on your system and its trying to alert you by mail about it.

You've got mail setup somewhere, you're image shows, Message Accepted.

How about here?
Home » Server Configuration » Basic cPanel & WHM Setup


You should be able to reduce the size of the database, I think, with this setting:
Home » Server Configuration » Tweak Settings, Stats and Logs tab:

The interval, in days, to retain Exim stats in the database (minimum: 1; maximum: 365,000)

 

[glenn0]

Going by the number per hour, I'd say something is wrong on your system and its trying to alert you by mail about it.

You've got mail setup somewhere, you're image shows, Message Accepted.

How about here?
Home » Server Configuration » Basic cPanel & WHM Setup

Yes, there is an email there, as I mentioned earlier it is my main ISP email address, however, I am not receiving the emails. Also, there are no MX records at all setup up - does there have to be?

Thanks for persisting with this for me

 

[Infopro]

I'm hanging onto this one with my finger nails, ATM. :p

Emails are going out to a google email account, that much is clear.

You might want to put in a ticket via your WHM, top right corner is a Support menu, on it a link to Contact cPanel. Time to bring in an expert I think.

If you do decide to open a ticket, please post back the ticket ID here so I can follow it.

Thanks

 

[glenn0]

Thank you for sticking with it

Further research shows my ISP's email may be run by Google (although I wasn't receiving the 'sent' email) so I will empty the database, change emails and see what happens. If it continues I will enter a support request and post the ticket ID here as requested.

Thank you again for your help with this.

 

[Infopro]

Further research shows my ISP's email may be run by Google...

Thanks for that detail, makes sense I guess.

Still, it accepted the email, so it landed somewhere.

Let us know how it goes, GL!

 

[glenn0]

Well, email changed, database emptied and I'm still seeing the emails to a Google related address..

Ticket opened: Support Request Id 3718605

Thanks again.

 

[ruzbehraja]

Do you see any of these in the mail queue?

Did this get resolved?

 

[Infopro]

The email are from CSF/LFD.