The service “exim” appears to be down. after disabling port 25

3awh

Well-Known Member
Sep 1, 2008
60
5
58
WWW
I disabled port 25 due to a spammer.
Now I get emails about

I did not use Exim Mail Server (on another port) setting in the Service Manager section. I used the Exim Configuration Manager Advanced editor daemon_smtp_ports setting and left just Ports 465 & 587 active.
I also dissabled port 25 in the firewall CSF

Now I'm getting these emails
The service “exim” appears to be down.




Server​
jds1.3alienswebhosting.com​
Primary IP Address​
66.85.xx.xxx​
Service Name​
exim​
Service Status​
failed ⛔
Notification​
The service “exim” appears to be down.​
Service Check Method​
The system failed to connect to this service’s TCP/IP port.​
Reason​
Service check failed to complete
Unable to connect to port 25 on 127.0.0.1: Connection refused: Died​
Number of Restart Attempts​
44​
Service Check Raw Output​
The 'exim' service passed the check: exim (/usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid) is running as mailnull with PID 732359 (systemd+/proc check method).​
Startup Log​
Jun 23 11:00:03 jds1.3aliensxxxxx.com systemd[1]: Starting Exim is a Mail Transport Agent, which is the program that moves mail from one machine to another....
Jun 23 11:00:03 jds1.3alienswebhosting.com systemd[1]: Started Exim is a Mail Transport Agent, which is the program that moves mail from one machine to another..​
Log Messages​
2022-06-23 11:00:03 exim 4.95 daemon started: pid=732359, -q15m, listening for SMTP on port 587 (IPv6 and IPv4) and for SMTPS on port 465 (IPv6 and IPv4)​
Memory Information​
Used​
10.85 GB
Available​
36.04 GB
Installed​
46.89 GB
Load Information​
0.92 0.89 0.92
Uptime​
96 days, 19 hours, 36 minutes, and 52 seconds
IOStat Information​
avg-cpu: %user %nice %system %iowait %steal %idle 2.08 0.07 0.62 0.10 0.00 97.13 Device tps kB_read/s kB_wrtn/s kB_read kB_wrtn sdb 2.69 10.54 39.52 88178578 330613272 sda 30.56 83.87 301.11 701544134 2518769404 scd0 0.00 0.00 0.00 3 0 dm-0 21.50 18.12 170.40 151592099 1425380247 dm-1 0.13 0.34 0.62 2875280 5227864 dm-2 10.38 65.33 149.87 546521681 1253669872 loop0 1.34 0.01 6.47 77145 54110018
Top Processes​
PIDOwnerCPU %Memory %Command
699113root7.910.03 ./scan 1.74 user.txt pass 700
3013589root7.032.79 /usr/local/cpanel/3rdparty/bin/clamd -F
3014061mysql5.244.51 /usr/sbin/mariadbd
3013841root1.090.04 /usr/sbin/db_governor
197562root0.910.01 SCREEN




Mitch

cP
 
Last edited by a moderator:

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
14,399
2,255
363
cPanel Access Level
Root Administrator
Hey there! That is expected behavior as our monitoring tools check for connectivity over port 25. If that port is closed, it would be best to disable monitoring for the Exim service in WHM >> Service Manager so you don't continue to receive those notifications.