Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

LocalHostRelay errors is there something wrong with my config or is this normal?

Discussion in 'Security' started by maestroc, Sep 23, 2014.

  1. maestroc

    maestroc Well-Known Member

    Joined:
    Aug 23, 2012
    Messages:
    56
    Likes Received:
    0
    Trophy Points:
    6
    cPanel Access Level:
    Reseller Owner
    I keep getting LOCALHOSTRELAY errors sent from my VPS when I send out a group of emails through a Joomla component called AcyMailing. The thing that I don't understand is that I have the system set up to use SMTP sending with SSL authentication and I thought I had the system locked down to not allow open relay at all. If I have the system send a single test message I don't get any errors. But when the cron runs to send out a batch of emails they go out but I get an error email back from the server as well. Here is an example of the top of one of the messages:

    ----------
    Time: Tue Sep 23 18:22:28 2014 -0700
    Type: LOCALHOSTRELAY, Remote IP - 198.71.94.xxx (US/United States/zzz.yyy.net)
    Count: 101 emails relayed
    Blocked: No

    Sample of the first 10 emails:
    ----------

    Anyone have an idea of what might be going on here and how I can either fix the error in the mailing system or if there is nothing to be concerned with to stop the system from sending me the warnings?
     
    #1 maestroc, Sep 23, 2014
  2. quizknows

    quizknows Well-Known Member

    Joined:
    Oct 20, 2009
    Messages:
    1,008
    Likes Received:
    86
    Trophy Points:
    78
    cPanel Access Level:
    DataCenter Provider
    It's probably fine, the options are in your CSF configuration under the section "Relay Tracking"


    Code:
    ###############################################################################
# SECTION:Relay Tracking
###############################################################################
# Relay Tracking. This allows you to track email that is relayed through the
# server. There are also options to send alerts and block external IP addresses
# if the number of emails relayed per hour exceeds configured limits. The
# blocks can be either permanent or temporary.
#
# The following information applies to each of the following types of relay
# check:
# RT_[relay type]_ALERT: 0 = disable, 1 = enable
# RT_[relay type]_LIMIT: the limit/hour afterwhich an email alert will be sent
# RT_[relay type]_BLOCK: 0 = no block;1 = perm block;nn=temp block for nn secs

# This option triggers for external email
RT_RELAY_ALERT = "1"
RT_RELAY_LIMIT = "100"
RT_RELAY_BLOCK = "0"

# This option triggers for email authenticated by SMTP AUTH
RT_AUTHRELAY_ALERT = "1"
RT_AUTHRELAY_LIMIT = "100"
RT_AUTHRELAY_BLOCK = "0"

# This option triggers for email authenticated by POP before SMTP
RT_POPRELAY_ALERT = "1"
RT_POPRELAY_LIMIT = "100"
RT_POPRELAY_BLOCK = "0"

# This option triggers for email sent via /usr/sbin/sendmail or /usr/sbin/exim
RT_LOCALRELAY_ALERT = "1"
RT_LOCALRELAY_LIMIT = "100"

# This option triggers for email sent via a local IP addresses
RT_LOCALHOSTRELAY_ALERT = "1"
RT_LOCALHOSTRELAY_LIMIT = "100"
    Customize as needed.
     
    #2 quizknows, Sep 23, 2014
  3. mageshm

    mageshm Well-Known Member

    Joined:
    Apr 17, 2014
    Messages:
    90
    Likes Received:
    1
    Trophy Points:
    6
    Location:
    Chennai, INDIA
    cPanel Access Level:
    DataCenter Provider
    @ maestroc,

    When you sending bulk mail from script (if any SPAM orgin from your server due to account infection) CSF send the notification to you. Its very usefull to identify whether any SPAM orgin from our server or not. So don't disable the option.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #3 mageshm, Sep 24, 2014
  4. cPanelMichael

    cPanelMichael Technical Support Community Manager Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    47,009
    Likes Received:
    2,123
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello :)

    The message you provided shows:

    Thus, as mentioned earlier in this thread, it's likely just a notification and not an actual error. Or, are messages actually failing to send out?

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #4 cPanelMichael, Sep 24, 2014
  5. maestroc

    maestroc Well-Known Member

    Joined:
    Aug 23, 2012
    Messages:
    56
    Likes Received:
    0
    Trophy Points:
    6
    cPanel Access Level:
    Reseller Owner
    It appears that the messages are indeed going out, but I have also been informed that even though my spam score is almost perfect on each email many of them are still getting marked as spam when it gets to the receiving person. Because of this I was wondering if there was something else in my configuration that might be sending up red flags making email systems (mostly gmail users) flag the messages as spam. I already have SPF and DKIM set up on the server and from what I can tell it is working properly.

    Could this localrelay thing be a possible cause of that? I've checked the email blacklists and my server is not on any of them. Sorry, I know this has now moved outside of the cpanel issue but I am just trying to figure this one out...

    My sincere thanks to all of you who have responded so far.
     
    #5 maestroc, Sep 25, 2014
  6. cPanelMichael

    cPanelMichael Technical Support Community Manager Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    47,009
    Likes Received:
    2,123
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Are you able to review the message headers of one of the messages marked as SPAM to get a better idea of how it was scored?

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #6 cPanelMichael, Sep 25, 2014
  7. maestroc

    maestroc Well-Known Member

    Joined:
    Aug 23, 2012
    Messages:
    56
    Likes Received:
    0
    Trophy Points:
    6
    cPanel Access Level:
    Reseller Owner
    Here is a copy of the headers for a recent mailing. It doesn't get marked spam for me because I have trained gmail not to, but apparently for other association members it does get marked as spam:

    Code:
                                                                                                                                                                                                                                                                   
Delivered-To: me@gmail.com
Received: by 10.170.139.197 with SMTP id g188csp75431ykc;
        Sat, 20 Sep 2014 15:06:42 -0700 (PDT)
X-Received: by 10.66.157.73 with SMTP id wk9mr13083128pab.101.1411250802550;
        Sat, 20 Sep 2014 15:06:42 -0700 (PDT)
Return-Path: <newsletter@xxx.xxx>
Received: from vps.myhosting.net (vps.myhosting.net. [198.71.94.194])
        by mx.google.com with ESMTPS id hb4si9063446pac.178.2014.09.20.15.06.42
        for <chadcriswell@gmail.com>
        (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Sat, 20 Sep 2014 15:06:42 -0700 (PDT)
Received-SPF: pass (google.com: domain of newsletter@xxx.xxx designates 198.71.94.194 as permitted sender) client-ip=198.71.94.194;
Authentication-Results: mx.google.com;
       spf=pass (google.com: domain of newsletter@xxx.xxx designates 198.71.94.194 as permitted sender) smtp.mail=newsletter@xxx.xxx;
       dkim=pass header.i=@xxx.xxx
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=xxx.xxx; s=default;
	h=Content-Transfer-Encoding:Content-Type:MIME-Version:Message-ID:Subject:Reply-To:From:To:Date; bh=ki48p1hrXNppgcNRMLc9dWTJ2HEjkuRY+u3mixlzvbA=;
	b=MLvfZzlbK4Wo13Rmj9yZ61zjRa4helxPyoawlwoiu/OLxROtOVLh+042HyMnD4ZOPXj74H3gR5b7UnVjlLS0ZAaIstFEQqhlx4p/4V+GnXVIWpABhCxr6ZSSEhDc8oaryA6e7+pHshG7gZZlWCHpc8viP/IUDj/98ZzpVelQ+ag=;
Received: from vps.straightarrowhosting.net ([198.71.94.194]:42593 helo=www.xxx.xxx)
	by vps.myhosting.net with esmtpsa (UNKNOWN:DHE-RSA-AES256-GCM-SHA384:256)
	(Exim 4.82)
	(envelope-from <newsletter@xxx.xxx>)
	id 1XVSj7-0000Gb-Fv
	for me@gmail.com; Sat, 20 Sep 2014 15:01:57 -0700
DKIM-Signature: v=1; a=rsa-sha1; q=dns/txt; l=4011; s=acy;
	t=1411250517; c=relaxed/simple; h=from:to:subject;
	d=xxx.xxx; bh=mgEa+/mL70JfuVdv0bOs6qM6mjM=;
	b=yf1ax5BGKmBUhK2E2fH6HefLA0nDsVdirj3jb9IxefBISzL723xd6LXLJ2FB
	OKe+Eu25IPRPfQqQrOkgd/jXzdSVmXjqbpGYpE2QaALxPCm9+s5B90okJ21m
	9K7yhRr8F3dFRbwAM/Pc5ST0AkB8fMxMZxC3zc5vBJFEr3BlqKg=
Date: Sun, 21 Sep 2014 02:01:57 +0400
To: Joe Smith <me@gmail.com>
From: xxxxx Association <newsletter@xxx.xxx>
Reply-To: xxxx President <president@xxx.xxx>
Subject: xxxx Online Conference Registration Now Open
Message-ID: <Mjk5OTI2MQAC526Y38BAMTQxMTI1MDUxNzE2OTMy@www.xxx.xxx>
X-Priority: 3
X-Mailer: PHPMailer 5.2.6 (https://github.com/PHPMailer/PHPMailer/)
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="b1_daefbbeb0757d6a548805646cff85321"
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - vps.myhosting.net
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - xxx.xxx
X-Get-Message-Sender-Via: vps.myhosting.net: authenticated_id: newsletter@xxx.xxx

--b1_daefbbeb0757d6a548805646cff85321
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
     
    #7 maestroc, Sep 25, 2014
  8. cPanelMichael

    cPanelMichael Technical Support Community Manager Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    47,009
    Likes Received:
    2,123
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    It's difficult to say why exactly Google marked the message as SPAM. It's possibly related to the use of the PHPMailer script, but it's something that Google controls. This document might help:

    https://support.google.com/mail/answer/81126

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #8 cPanelMichael, Sep 26, 2014
(You must log in or sign up to post here.)
Loading...
Similar Threads - LocalHostRelay errors something
  1. ipublicis

    LOCALHOSTRELAY, IPv6 localhost - ::1

    ipublicis, Nov 16, 2018, in forum: E-mail Discussion
    Replies:
    1
    Views:
    174
    cPanelLauren
    Nov 20, 2018
  2. Kikloo

    Mysql errors after upgrading to 5.7

    Kikloo, May 17, 2019, in forum: Database Discussion
    Replies:
    6
    Views:
    139
    cPanelLauren
    May 17, 2019
  3. Sunlander

    Timeout errors with Cloudflare CDN when running xml php script cron

    Sunlander, May 15, 2019, in forum: EasyApache
    Replies:
    7
    Views:
    175
    cPanelLauren
    May 20, 2019
  4. Raw333

    SOLVED SSL / TLS errors

    Raw333, May 7, 2019, in forum: Security
    Replies:
    5
    Views:
    222
    cPanelLauren
    May 9, 2019
  5. Julien Knoell

    SOLVED PHP session path errors

    Julien Knoell, May 6, 2019, in forum: General Discussion
    Replies:
    6
    Views:
    340
    Julien Knoell
    May 8, 2019

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice