Reading Exim logs to figure out Local relay alert

CraftyPanda

Well-Known Member
Nov 15, 2012
93
2
58
cPanel Access Level
Root Administrator
Hi all,

So i keep getting local relay alerts for just one account on the server and im trying to figure out what on the account is causing it. I have the exim logs and i can see the entries for the events, but i don't really see how thats helping me identify the culprit of the emails. Here is one of the log entries.

My question is really where do i go from here in figuring out whats relaying all this email?

2014-10-19 03:30:04 cwd=/var/spool/exim 2 args: /usr/sbin/exim -q
2014-10-19 03:30:04 Start queue run: pid=2753
2014-10-19 03:30:04 End queue run: pid=2753
2014-10-19 03:30:12 cwd=/etc/csf 2 args: /usr/sbin/exim -bpc
2014-10-19 03:31:02 cwd=/home/xAccountNamex 9 args: /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root
2014-10-19 03:31:02 1XfgGs-0000oL-3E <= [email protected] U=xAccountNamex P=local S=851 T="Cron <[email protected]> /home/xAccountNamex /public_html/templates/atomic/1.sh" for hkjbn232


Any help would be really appreciated.
Andy
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,884
2,250
463
Hello :)

I am happy to see you were able to determine the path based on the logs you provided (/home/xAccountNamex/public_html/templates/atomic/1.sh"). Thank you for updating us with the outcome.