The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Reading Exim logs to figure out Local relay alert

Discussion in 'E-mail Discussions' started by CraftyPanda, Oct 21, 2014.

  1. CraftyPanda

    CraftyPanda Well-Known Member

    Joined:
    Nov 15, 2012
    Messages:
    84
    Likes Received:
    1
    Trophy Points:
    8
    cPanel Access Level:
    Root Administrator
    Hi all,

    So i keep getting local relay alerts for just one account on the server and im trying to figure out what on the account is causing it. I have the exim logs and i can see the entries for the events, but i don't really see how thats helping me identify the culprit of the emails. Here is one of the log entries.

    My question is really where do i go from here in figuring out whats relaying all this email?

    2014-10-19 03:30:04 cwd=/var/spool/exim 2 args: /usr/sbin/exim -q
    2014-10-19 03:30:04 Start queue run: pid=2753
    2014-10-19 03:30:04 End queue run: pid=2753
    2014-10-19 03:30:12 cwd=/etc/csf 2 args: /usr/sbin/exim -bpc
    2014-10-19 03:31:02 cwd=/home/xAccountNamex 9 args: /usr/sbin/sendmail -FCronDaemon -i -odi -oem -oi -t -f root
    2014-10-19 03:31:02 1XfgGs-0000oL-3E <= root@host.mydomain.co.uk U=xAccountNamex P=local S=851 T="Cron <hkjbn232@host> /home/xAccountNamex /public_html/templates/atomic/1.sh" for hkjbn232


    Any help would be really appreciated.
    Andy
     
  2. CraftyPanda

    CraftyPanda Well-Known Member

    Joined:
    Nov 15, 2012
    Messages:
    84
    Likes Received:
    1
    Trophy Points:
    8
    cPanel Access Level:
    Root Administrator
    Sorted it thanks. Boom! Was right in front of me
     
  3. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,854
    Likes Received:
    676
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Hello :)

    I am happy to see you were able to determine the path based on the logs you provided (/home/xAccountNamex/public_html/templates/atomic/1.sh"). Thank you for updating us with the outcome.
     
Loading...

Share This Page