The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

server generating emails

Discussion in 'E-mail Discussions' started by PabloC, Jul 11, 2016.

Tags:
  1. PabloC

    PabloC Member

    Joined:
    Mar 24, 2015
    Messages:
    14
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Mar del Plata - Argentina
    cPanel Access Level:
    Website Owner
    Hi,

    Hope you can help me. I can't figure out what is generating these mails. I get thousands.
    Are not send cause are originated and destinated to my own server.

    Could anyone guide me about what could be causing this and how to stop it?


    Code:
    Received: from mailnull by server3.example.com with local (Exim 4.87)
    id 1bMl7K-0006R9-Np
    for root@server3.example.com; Tue, 12 Jul 2016 00:00:05 +0000
    X-Failed-Recipients: root@server3.example.com
    Auto-Submitted: auto-replied
    From: Mail Delivery System <Mailer-Daemon@server3.example.com>
    To: root@server3.example.com
    Content-Type: multipart/report; report-type=delivery-status; boundary=1468281602-eximdsn-567111591
    MIME-Version: 1.0
    Subject: Mail delivery failed: returning message to sender
    Message-Id: <E1bMl7K-0006R9-Np@server3.example.com>
    Date: Tue, 12 Jul 2016 00:00:02 +0000
    X-OutGoing-Spam-Status: No, score=-1.9
    
    --1468281602-eximdsn-567111591
    Content-type: text/plain; charset=us-ascii
    
    This message was created automatically by mail delivery software.
    
    A message that you sent could not be delivered to one or more of its
    recipients. This is a permanent error. The following address(es) failed:
    
    root@server3.example.com
    The mail server could not deliver mail to root@server3.example.com. The account or domain may not exist, they may be blacklisted, or missing the proper dns entries.
    
    --1468281602-eximdsn-567111591
    Content-type: message/delivery-status
    
    Reporting-MTA: dns; server3.example.com
    
    Action: failed
    Final-Recipient: rfc822;root@server3.example.com
    Status: 5.0.0
    
    --1468281602-eximdsn-567111591
    Content-type: message/rfc822
    
    Return-path: <root@server3.example.com>
    Received: from root by server3.example.com with local (Exim 4.87)
    (envelope-from <root@server3.example.com>)
    id 1bMl7K-0006Na-Kj
    for root@server3.example.com; Tue, 12 Jul 2016 00:00:02 +0000
    To: root@server3.example.com
    Subject: lfd on server3.example.com: Excessive resource usage: ublicida (5478 (Parent PID:2308))
    From: <root@server3.example.com>
    Message-Id: <E1bMl7K-0006Na-Kj@server3.example.com>
    Date: Tue, 12 Jul 2016 00:00:02 +0000
    
    Time: Tue Jul 12 00:00:02 2016 +0000
    Account: ublicida
    Resource: Process Time
    Exceeded: 3256 > 1800 (seconds)
    Executable: /usr/bin/php
    Command Line: /usr/bin/php
    PID: 5478 (Parent PID:2308)
    Killed: No
    
    --1468281602-eximdsn-567111591-- 
    
     
    #1 PabloC, Jul 11, 2016
    Last edited by a moderator: Jul 11, 2016
  2. twhiting9275

    twhiting9275 Well-Known Member

    Joined:
    Sep 26, 2002
    Messages:
    538
    Likes Received:
    15
    Trophy Points:
    18
    cPanel Access Level:
    Root Administrator
    Twitter:
    Take a look through the mail logs. These should help you ascertain where this is coming from
     
  3. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,854
    Likes Received:
    676
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Hello,

    The initial notification is coming from CSF/LFD to your server's root contact address. Ensure you are using a valid root contact email address at:

    "WHM Home » Server Contacts » Edit System Mail Preferences"

    Or, access the CSF/LFD interface in Web Host Manager and change the contact address used for these notifications.

    Thank you.
     
Loading...

Share This Page