Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Tip to track Exim / sendmail nobody mail

Discussion in 'E-mail Discussion' started by hicom, Oct 20, 2004.

  1. hicom

    hicom Well-Known Member

    Joined:
    May 23, 2003
    Messages:
    282
    Likes Received:
    2
    Trophy Points:
    168
    This will help a lot in tracking which script on your server sent what message, I don't recall the URL I got this from, so I'm posting here in hope it will be referenced in the future.

    In your EXIM configure file (on BSD: /usr/local/etc/exim/ ) just above the line:

    ######################################################################
    # Runtime configuration file for Exim #
    ######################################################################


    add the following:

    log_selector = +address_rewrite +all_parents +arguments +connection_reject +delay_delivery +delivery_size +dnslist_defer +incoming_interface +incoming_port +lost_incoming_connection +queue_run +received_sender +received_recipients +retry_defer +sender_on_delivery +size_reject +skip_delivery +smtp_confirmation +smtp_connection +smtp_protocol_error +smtp_syntax_error +subject +tls_cipher +tls_peerdn


    ## NOTE: you have to put this whole code on one line in most cases for it to work properly, don't forget to restart your EXIM
     
  2. Roy@ENHOST

    Roy@ENHOST Well-Known Member

    Joined:
    Mar 5, 2002
    Messages:
    493
    Likes Received:
    0
    Trophy Points:
    316
    Location:
    Los Angeles California
    Say we want to track a spammer, how do we go about doing that with this config?
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. bullethost696

    bullethost696 Well-Known Member

    Joined:
    Nov 23, 2003
    Messages:
    133
    Likes Received:
    0
    Trophy Points:
    166
    Location:
    England, UK
    Well it looks like it will add extra details in the exim logs by the looks of it
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. Marty

    Marty Well-Known Member

    Joined:
    Oct 10, 2001
    Messages:
    630
    Likes Received:
    1
    Trophy Points:
    318
    Yes, and you can put that entry in the first box of the Exim Advanced Configuration Editor in WHM and it will work just fine. It will tell you the actual directory that that the script is in that sent the mail.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. luisp

    luisp Well-Known Member
    PartnerNOC

    Joined:
    Jan 17, 2003
    Messages:
    57
    Likes Received:
    0
    Trophy Points:
    156
    Location:
    Portugal
    cPanel Access Level:
    DataCenter Provider
    do i see this in exim_mainlog? cause i didnt noticed any change!

    thanks in advance!
     
  6. chae

    chae Well-Known Member

    Joined:
    Apr 19, 2003
    Messages:
    145
    Likes Received:
    0
    Trophy Points:
    166
    Location:
    Auckland, New Zealand
    Seems to be doing the thing here, was watching a tail on the messages while running top and seen several users sites and the scripts (including php) showing up.

    Nice one :D
     
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice