Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Unable to stop exim

Discussion in 'E-mail Discussion' started by Mugoma, Apr 20, 2017.

  1. Mugoma

    Mugoma Well-Known Member

    Joined:
    Aug 1, 2016
    Messages:
    74
    Likes Received:
    4
    Trophy Points:
    8
    Location:
    Nairobi
    cPanel Access Level:
    Root Administrator
    Hello,

    We want to stop exim to do some housekeeping then restart but not working as expected.

    We do:
    # service exim stop
    # service exim status
    # ps -aux | grep exim

    This shows exim is not running. So far so good.

    But:
    1. When we open webmail we can see new emails coming in.
    2. WHM service status shows exim is UP
    3. Process list (via top or WHM) shows exim running

    Obviously it appears exim is till running though the command prompt shows otherwise. Why?
     
    #1 Mugoma, Apr 20, 2017
  2. SysSachin

    SysSachin Well-Known Member

    Joined:
    Aug 23, 2015
    Messages:
    604
    Likes Received:
    42
    Trophy Points:
    28
    Location:
    India
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    Go to "Service Manager" in WHM, uncheck exim. Save your changes. Log onto SSH and stop exim using below command

    service exim stop

    Once you have disabled in Service Manager, chkservd won't restart it
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #2 SysSachin, Apr 21, 2017
  3. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,303
    Likes Received:
    1,847
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    The previous post is correct. You can disable the service in "WHM >> Service Manager" to ensure it's not automatically restarted by Chkservd. Let us know if that helps.

    Thanks!
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #3 cPanelMichael, Apr 21, 2017
  4. Mugoma

    Mugoma Well-Known Member

    Joined:
    Aug 1, 2016
    Messages:
    74
    Likes Received:
    4
    Trophy Points:
    8
    Location:
    Nairobi
    cPanel Access Level:
    Root Administrator
    My understanding is that Chkservd checks and restarts services after 5 minutes. So, that's not the issue.

    Why would Chkservd start a service after a second or two and why would that not show on command prompt?

    If Chkservd started the service wouldn't it show status as running on the command prompt?

    Basically, the question is why there's contradictions between what's happening on the system and what command prompt shows.
     
    #4 Mugoma, Apr 21, 2017
  5. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,303
    Likes Received:
    1,847
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    The status in "WHM >> Server Status" stems from the most recent status report from Chkservd. When stopping Exim manually, do you notice any output in /var/log/chkservd.log before Exim starts running again?

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #5 cPanelMichael, Apr 21, 2017
  6. Mugoma

    Mugoma Well-Known Member

    Joined:
    Aug 1, 2016
    Messages:
    74
    Likes Received:
    4
    Trophy Points:
    8
    Location:
    Nairobi
    cPanel Access Level:
    Root Administrator
    This is still not working.

    I have exim disabled. On the command prompt exim status shows as stopped. But I can still see exim on the process list.
     
    #6 Mugoma, Apr 22, 2017
  7. 24x7server

    24x7server Well-Known Member

    Joined:
    Apr 17, 2013
    Messages:
    1,834
    Likes Received:
    85
    Trophy Points:
    78
    Location:
    India
    cPanel Access Level:
    Root Administrator
    Hi,

    You can rename the exim restart script. Make sure you have disabled the exim in the service manager section completely.
    rename /etc/init.d/exim and also /scripts/restartsrv_eximd.

    See if that helps.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #7 24x7server, Apr 23, 2017
  8. Mugoma

    Mugoma Well-Known Member

    Joined:
    Aug 1, 2016
    Messages:
    74
    Likes Received:
    4
    Trophy Points:
    8
    Location:
    Nairobi
    cPanel Access Level:
    Root Administrator
    Wouldn't this interfere with normal operation of exim?
     
    #8 Mugoma, Apr 23, 2017
  9. 24x7server

    24x7server Well-Known Member

    Joined:
    Apr 17, 2013
    Messages:
    1,834
    Likes Received:
    85
    Trophy Points:
    78
    Location:
    India
    cPanel Access Level:
    Root Administrator
    It is a service start and stop script, so once you are done with your housekeeping, you can rename it back again.. It is only to make sure that the system monitoring does not track it and restart it when you housekeeping it.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #9 24x7server, Apr 24, 2017
  10. Mugoma

    Mugoma Well-Known Member

    Joined:
    Aug 1, 2016
    Messages:
    74
    Likes Received:
    4
    Trophy Points:
    8
    Location:
    Nairobi
    cPanel Access Level:
    Root Administrator
    Actually there's nothing wrong with start script.

    Our suspicion is that there's a spammer who's invoking exim directly. That's why the process shows in process list even if service is stopped.

    We have tried changing permission on exim to allow allow root to execute but this seems to stops exim altogether.

    So, at the moment what we need ways to block exim from being directly executed.
     
    #10 Mugoma, Apr 24, 2017
  11. Mugoma

    Mugoma Well-Known Member

    Joined:
    Aug 1, 2016
    Messages:
    74
    Likes Received:
    4
    Trophy Points:
    8
    Location:
    Nairobi
    cPanel Access Level:
    Root Administrator
    We decided to raise support ticket as it's taking too long to get solution from forum:

    Support ticket: 8405145
     
    #11 Mugoma, Apr 24, 2017
(You must log in or sign up to post here.)
Loading...
Similar Threads - Unable stop exim
  1. David_spm

    Unable to stop large xmlrpc spam attack

    David_spm, Jul 24, 2018, in forum: Security
    Replies:
    6
    Views:
    152
    cPanelMichael
    Jul 27, 2018
  2. Tassilo

    Unable to access user's web dir

    Tassilo, Aug 11, 2018 at 6:40 AM, in forum: General Discussion
    Replies:
    1
    Views:
    35
    cPanelLauren
    Aug 13, 2018 at 2:00 PM
  3. Tarak Nath

    In Progress [ALTPHP-557] quickhash extension unable to load with alt-php

    Tarak Nath, Aug 9, 2018 at 1:44 AM, in forum: CloudLinux
    Replies:
    5
    Views:
    146
    cPanelMichael
    Aug 13, 2018 at 11:05 AM
  4. Krystian Kolasa

    Unable to install WordPress Plugins

    Krystian Kolasa, Aug 7, 2018, in forum: EasyApache
    Replies:
    1
    Views:
    46
    cPanelMichael
    Aug 7, 2018
  5. Cyber911

    In Progress [CPANEL-21358] Unable to validate rsync backup destination

    Cyber911, Aug 2, 2018, in forum: Data Protection
    Replies:
    5
    Views:
    146
    cPanelMichael
    Aug 13, 2018 at 9:56 AM

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice