The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Tip to track Exim / sendmail nobody mail

Discussion in 'E-mail Discussions' started by hicom, Oct 20, 2004.

  1. hicom

    hicom Well-Known Member

    Joined:
    May 23, 2003
    Messages:
    275
    Likes Received:
    0
    Trophy Points:
    166
    This will help a lot in tracking which script on your server sent what message, I don't recall the URL I got this from, so I'm posting here in hope it will be referenced in the future.

    In your EXIM configure file (on BSD: /usr/local/etc/exim/ ) just above the line:

    ######################################################################
    # Runtime configuration file for Exim #
    ######################################################################


    add the following:

    log_selector = +address_rewrite +all_parents +arguments +connection_reject +delay_delivery +delivery_size +dnslist_defer +incoming_interface +incoming_port +lost_incoming_connection +queue_run +received_sender +received_recipients +retry_defer +sender_on_delivery +size_reject +skip_delivery +smtp_confirmation +smtp_connection +smtp_protocol_error +smtp_syntax_error +subject +tls_cipher +tls_peerdn


    ## NOTE: you have to put this whole code on one line in most cases for it to work properly, don't forget to restart your EXIM
     
  2. Roy@ENHOST

    Roy@ENHOST Well-Known Member

    Joined:
    Mar 5, 2002
    Messages:
    493
    Likes Received:
    0
    Trophy Points:
    316
    Location:
    Los Angeles California
    Say we want to track a spammer, how do we go about doing that with this config?
     
  3. bullethost696

    bullethost696 Well-Known Member

    Joined:
    Nov 23, 2003
    Messages:
    133
    Likes Received:
    0
    Trophy Points:
    166
    Location:
    England, UK
    Well it looks like it will add extra details in the exim logs by the looks of it
     
  4. Marty

    Marty Well-Known Member

    Joined:
    Oct 10, 2001
    Messages:
    630
    Likes Received:
    1
    Trophy Points:
    318
    Yes, and you can put that entry in the first box of the Exim Advanced Configuration Editor in WHM and it will work just fine. It will tell you the actual directory that that the script is in that sent the mail.
     
  5. luisp

    luisp Well-Known Member
    PartnerNOC

    Joined:
    Jan 17, 2003
    Messages:
    57
    Likes Received:
    0
    Trophy Points:
    156
    Location:
    Portugal
    cPanel Access Level:
    DataCenter Provider
    do i see this in exim_mainlog? cause i didnt noticed any change!

    thanks in advance!
     
  6. chae

    chae Well-Known Member

    Joined:
    Apr 19, 2003
    Messages:
    145
    Likes Received:
    0
    Trophy Points:
    166
    Location:
    Auckland, New Zealand
    Seems to be doing the thing here, was watching a tail on the messages while running top and seen several users sites and the scripts (including php) showing up.

    Nice one :D
     
Loading...

Share This Page