The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Sent mails not counted (Email relayers Error)

Discussion in 'E-mail Discussions' started by Bahram0110, Oct 19, 2011.

  1. Bahram0110

    Bahram0110 Well-Known Member

    Joined:
    Dec 12, 2007
    Messages:
    45
    Likes Received:
    0
    Trophy Points:
    6
    lfd on hostname...: LOCALHOSTRELAY Alert for 127.0.0.1
    Type: LOCALHOSTRELAY, localhost - 127.0.0.1
    Count: 119 emails relayed

    Sample of the first 10 emails:

    2011-10-19 20:16:50 1RGYLy-0005r9-6c <= abc@sitename.com H=localhost (webmail.sitename.com) [127.0.0.1] P=esmtpa A=courier_login:abc@sitename.com S=1489 id=7aa2d3d5dd589b177934b1b680deacc4@sitename.com T="Fwd: Fw: \330\253\330\261\331\210\330\252 \332\251\331\210\330\261\331\210\330\264 \332\251\330\250\333\214\330\261 \331\276\330\247\330\257\330\264\330\247\331\207 \331\207\330\256\330\247\331\205\331\206\330\264\333\214" for [SOME EMAILS HERE]

    This is a csf alert sent to me.
    I think all emails sent from webmail are not counted :(

    whm View Relayers section shows that this user (sitename) sent only 8 emails!!!
    So any account can simply send spam from webmail.
     
  2. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,623
    Likes Received:
    21
    Trophy Points:
    38
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
    Emails sent from webmail should be counted as part of the emails being sent out, since they have to login (you can see the login via "courier_login" portion.

    The relayers sections can be time delayed, so you would want to view either /var/cpanel/maxemailstracker or /var/cpanel/maxemailsperdomain folders for each domain. The maxemailstracker domain file determines how many emails were sent that hour by the domain, while the maxemailsperdomain domain file determines how many emails are allowed to be sent by the domain.

    As for sending spam via webmail, limiting the emails per hour doesn't prevent an account from sending spam, since the content of the message is not related to the number of messages.
     
  3. Bahram0110

    Bahram0110 Well-Known Member

    Joined:
    Dec 12, 2007
    Messages:
    45
    Likes Received:
    0
    Trophy Points:
    6
    Problem not solved yet:

    As you can see, user "cpuser" is sending maiy emails (spam) via webmail.
    I restricted hourly emails to 50 for all domains many days ago and there is not any custom setup for anybody.

    But emails sent via webmail is not counted for anybody.
    How can I restrict this problem?
     
  4. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,623
    Likes Received:
    21
    Trophy Points:
    38
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
    Please submit a ticket so we can investigate why it isn't being restricted. WHM > Support Center > Contact cPanel or using the link in my signature. Webmail should be limiting the messages per hour due to the fact they must authenticate.
     
  5. Bahram0110

    Bahram0110 Well-Known Member

    Joined:
    Dec 12, 2007
    Messages:
    45
    Likes Received:
    0
    Trophy Points:
    6
    I think I found the problem:
    User eximstat has no password set!!
    I think eximstat is not working correctly.

    I try to solve this, if not I submit ticket.

    Thank you
     
  6. Bahram0110

    Bahram0110 Well-Known Member

    Joined:
    Dec 12, 2007
    Messages:
    45
    Likes Received:
    0
    Trophy Points:
    6
    OK!
    Eximstats replaced with tailwatchd
    when service cpanel restart:
    I think tailwatchd is not working properly.
    perl and perl5.8.8 has chmod 700 (I know cpanel fails to change password if chmod is 700, no problem!)


    Can You please say what user is running tailwatchd process?
    Is perl access required to run tailwatchd?

    Thank you
     
  7. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,623
    Likes Received:
    21
    Trophy Points:
    38
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
    Many things will not work properly with cPanel if /usr/local/bin/perl is chmod to 700, so please put it back at 755 file permissions. cPanel and WHM are perl-based, so perl must be usable without "securing" it to the point it does not allow services to function.

    As for what user runs tailwatchd, it is root:

    Code:
    root     30366  0.0  0.3  42764  7596 ?        S    Nov17   0:01 tailwatchd
    You can check if tailwatchd is running if you look at the log files for it:

    Code:
    tail -f /usr/local/cpanel/logs/tailwatchd_log
    Check this on a restart of cPanel. Also, I suggest following the directions indicated in that alert which tells you to move the unprocessed stats, restart cPanel again and move them back to process. The exact steps are noted in the restart of cPanel.
     
Loading...

Share This Page