Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

server generating emails

Discussion in 'E-mail Discussion' started by PabloC, Jul 11, 2016.

Tags:
  1. PabloC

    PabloC Active Member

    Joined:
    Mar 24, 2015
    Messages:
    40
    Likes Received:
    1
    Trophy Points:
    8
    Location:
    Mar del Plata - Argentina
    cPanel Access Level:
    Website Owner
    Hi,

    Hope you can help me. I can't figure out what is generating these mails. I get thousands.
    Are not send cause are originated and destinated to my own server.

    Could anyone guide me about what could be causing this and how to stop it?


    Code:
    Received: from mailnull by server3.example.com with local (Exim 4.87)
    id 1bMl7K-0006R9-Np
    for root@server3.example.com; Tue, 12 Jul 2016 00:00:05 +0000
    X-Failed-Recipients: root@server3.example.com
    Auto-Submitted: auto-replied
    From: Mail Delivery System <Mailer-Daemon@server3.example.com>
    To: root@server3.example.com
    Content-Type: multipart/report; report-type=delivery-status; boundary=1468281602-eximdsn-567111591
    MIME-Version: 1.0
    Subject: Mail delivery failed: returning message to sender
    Message-Id: <E1bMl7K-0006R9-Np@server3.example.com>
    Date: Tue, 12 Jul 2016 00:00:02 +0000
    X-OutGoing-Spam-Status: No, score=-1.9
    
    --1468281602-eximdsn-567111591
    Content-type: text/plain; charset=us-ascii
    
    This message was created automatically by mail delivery software.
    
    A message that you sent could not be delivered to one or more of its
    recipients. This is a permanent error. The following address(es) failed:
    
    root@server3.example.com
    The mail server could not deliver mail to root@server3.example.com. The account or domain may not exist, they may be blacklisted, or missing the proper dns entries.
    
    --1468281602-eximdsn-567111591
    Content-type: message/delivery-status
    
    Reporting-MTA: dns; server3.example.com
    
    Action: failed
    Final-Recipient: rfc822;root@server3.example.com
    Status: 5.0.0
    
    --1468281602-eximdsn-567111591
    Content-type: message/rfc822
    
    Return-path: <root@server3.example.com>
    Received: from root by server3.example.com with local (Exim 4.87)
    (envelope-from <root@server3.example.com>)
    id 1bMl7K-0006Na-Kj
    for root@server3.example.com; Tue, 12 Jul 2016 00:00:02 +0000
    To: root@server3.example.com
    Subject: lfd on server3.example.com: Excessive resource usage: ublicida (5478 (Parent PID:2308))
    From: <root@server3.example.com>
    Message-Id: <E1bMl7K-0006Na-Kj@server3.example.com>
    Date: Tue, 12 Jul 2016 00:00:02 +0000
    
    Time: Tue Jul 12 00:00:02 2016 +0000
    Account: ublicida
    Resource: Process Time
    Exceeded: 3256 > 1800 (seconds)
    Executable: /usr/bin/php
    Command Line: /usr/bin/php
    PID: 5478 (Parent PID:2308)
    Killed: No
    
    --1468281602-eximdsn-567111591-- 
    
     
    #1 PabloC, Jul 11, 2016
    Last edited by a moderator: Jul 11, 2016
  2. twhiting9275

    twhiting9275 Well-Known Member

    Joined:
    Sep 26, 2002
    Messages:
    556
    Likes Received:
    16
    Trophy Points:
    168
    cPanel Access Level:
    Root Administrator
    Twitter:
    Take a look through the mail logs. These should help you ascertain where this is coming from
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,802
    Likes Received:
    1,896
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    The initial notification is coming from CSF/LFD to your server's root contact address. Ensure you are using a valid root contact email address at:

    "WHM Home » Server Contacts » Edit System Mail Preferences"

    Or, access the CSF/LFD interface in Web Host Manager and change the contact address used for these notifications.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice