The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Tip to track Exim / sendmail nobody mail

Discussion in 'E-mail Discussions' started by hicom, Oct 20, 2004.

  1. hicom

    hicom Well-Known Member

    Joined:
    May 23, 2003
    Messages:
    272
    Likes Received:
    0
    Trophy Points:
    16
    This will help a lot in tracking which script on your server sent what message, I don't recall the URL I got this from, so I'm posting here in hope it will be referenced in the future.

    In your EXIM configure file (on BSD: /usr/local/etc/exim/ ) just above the line:

    ######################################################################
    # Runtime configuration file for Exim #
    ######################################################################


    add the following:

    log_selector = +address_rewrite +all_parents +arguments +connection_reject +delay_delivery +delivery_size +dnslist_defer +incoming_interface +incoming_port +lost_incoming_connection +queue_run +received_sender +received_recipients +retry_defer +sender_on_delivery +size_reject +skip_delivery +smtp_confirmation +smtp_connection +smtp_protocol_error +smtp_syntax_error +subject +tls_cipher +tls_peerdn


    ## NOTE: you have to put this whole code on one line in most cases for it to work properly, don't forget to restart your EXIM
     
  2. Roy@ENHOST

    Roy@ENHOST Well-Known Member

    Joined:
    Mar 5, 2002
    Messages:
    495
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Los Angeles California
    Say we want to track a spammer, how do we go about doing that with this config?
     
  3. bullethost696

    bullethost696 Well-Known Member

    Joined:
    Nov 23, 2003
    Messages:
    133
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    England, UK
    Well it looks like it will add extra details in the exim logs by the looks of it
     
  4. Marty

    Marty Well-Known Member

    Joined:
    Oct 10, 2001
    Messages:
    630
    Likes Received:
    1
    Trophy Points:
    18
    Yes, and you can put that entry in the first box of the Exim Advanced Configuration Editor in WHM and it will work just fine. It will tell you the actual directory that that the script is in that sent the mail.
     
  5. luisp

    luisp Well-Known Member
    PartnerNOC

    Joined:
    Jan 17, 2003
    Messages:
    57
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    Portugal
    cPanel Access Level:
    DataCenter Provider
    do i see this in exim_mainlog? cause i didnt noticed any change!

    thanks in advance!
     
  6. chae

    chae Well-Known Member

    Joined:
    Apr 19, 2003
    Messages:
    145
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Auckland, New Zealand
    Seems to be doing the thing here, was watching a tail on the messages while running top and seen several users sites and the scripts (including php) showing up.

    Nice one :D
     
Loading...

Share This Page