View Sent Summary - biggest user is -remote-

[driansmith]

Not sure if this is the right place to ask for advice - but here goes.

In my WHM at Home »Email »View Sent Summary
I get a report which lists emails from my various accounts on the server. Fine.
BUT, the top 2 users are:
-remote-
root

I attach a screenshot to dramatise the situation.
Can anyone explain what these users are and what these 2 numbers represent?

Many thanks for any help

 

[cPanelMichael]

Hello

The "-remote-" user is used for incoming and outgoing mails that are not local. Effectively, it's used for when an email is sent out of the server or when an email is sent to the server and the sender or recipient are remote. The "root" user indicates the email was sent directly from the "root" user on the server (e.g. server alerts).

You should be able to click on the "-Remote-" or "root" users to see the specific emails it's showing statistics for to determine if they are legitimate.

Thank you.

 

[quietFinn]

"-remote-" is a link, click it and you see a list.
Also if you click the word "root" you see a list of emails sent by root.

 

[driansmith]

Hello
The "-remote-" user is used for incoming and outgoing mails that are not local. Effectively, it's used for when an email is sent out of the server or when an email is sent to the server and the sender or recipient are remote. The "root" user indicates the email was sent directly from the "root" user on the server (e.g. server alerts).
You should be able to click on the "-Remote-" or "root" users to see the specific emails it's showing statistics for to determine if they are legitimate.
Thank you.

Many thanks cPanelMichael . Can I ask further?

1. " it's used for when an email is sent out of the server or when an email is sent to the server and the sender or recipient are remote". I cannot grasp this. All emails are remote? All emails are coming from somewhere else?
Successful - 2790
Deferrals - 10
Failures - 1063

Does that look correct?

2. All the roots emails are from the server to the server??????? It is normal for the server to talk to itself? I would be sectioned if I did that! . Seriously, in the past 24 hours, the root has sent 49 Deferrals, and 50 Failures. So it does not want to listen to itself?

By the way, the reason I am trying to grasp this is so I can determine which accounts are sending out emails that are being sent to email addresses that do not exist and hence impact on my SenderScore https://www.senderscore.org/.

Many thanks again.

 

[cPanelMichael]

I recommend clicking on the username that you see in the "View Sent Summary" interface. It will give you a better idea of the emails this list is referencing with those values.

Thank you.

 

[driansmith]

I recommend clicking on the username that you see in the "View Sent Summary" interface. It will give you a better idea of the emails this list is referencing with those values.
Thank you.

So you are saying to ignore the data for '-remote-' and 'root'? Just look at the individual accounts?
My worry is that the server is not correctly set up and I am missing a ton of important data by it being mis-configured.

Regards

 

[cPanelMichael]

So you are saying to ignore the data for '-remote-' and 'root'? Just look at the individual accounts?
My worry is that the server is not correctly set up and I am missing a ton of important data by it being mis-configured.

No, for instance, you should be able to click on the actual entries that say "-remote-" or "root". Browsing the mouse over them should highlight the link.

Thank you.

 

[driansmith]

I am aware of those links cPanelMichael.
The issue is that 90% of all emails seem to be categorized under '-remote-'.
And 98% of Failures are categorized under '-remote-'.
................as shown in my image in my opening post.

This cannot be right surely?
Thanks for the help by the way.

 

[cPanelMichael]

You can browse onto a new page (different from the screenshot you provided) when clicking on "-Remote-" or "root". It will show you the emails that are classified under those two entries. Are the emails within that secondary interface in the wrong category?

Thank you.

 

[driansmith]

You can browse onto a new page (different from the screenshot you provided) when clicking on "-Remote-" or "root". It will show you the emails that are classified under those two entries. Are the emails within that secondary interface in the wrong category?

That is my problem I suppose - There are so many where the information is (to me) quite simply Gobbledy Gook

Most of the recipients seems to be non-existent email addresses on my clients accounts?
And most seem to be senders from elsewhere (off server)?

That would signify the emails originate from off my server?
If that is the case, why are they categorised as '-remote-' when the the page is clearly a report on SENT EMAILS
"This feature shows the total number of message delivery attempts for each domain. This information is divided into successful and failed attempts, and shows the total number of bytes sent by each domain."

Am I making sense?
Thanks.

 

[cPanelMichael]

It's difficult to say why those specific emails are classified under the "-Remote-" user. Feel free to open a support ticket so we can take a closer look and provide you with that information:

Submit A Ticket

You can post the ticket number here so we can update this thread with the outcome.

Thank you.

 

[driansmith]

You can post the ticket number here so we can update this thread with the outcome.

Thank you.

Thanks. I've done that.

 

[driansmith]

It's difficult to say why those specific emails are classified under the "-Remote-" user. Feel free to open a support ticket so we can take a closer look and provide you with that information:
Submit A Ticket
You can post the ticket number here so we can update this thread with the outcome.
Thank you.

I did this 2 days ago Michael? Not received any response? Or is this the normal timescale?
Thanks.

 

[cPanelMichael]

Could you verify your ticket number? I do see one ticket with this thread referenced, but it has a reply from us, and a reply from the ticket submitter regarding providing authentication details.

Thank you.

 

[driansmith]

Could you verify your ticket number? I do see one ticket with this thread referenced, but it has a reply from us, and a reply from the ticket submitter regarding providing authentication details.
Thank you.

Thanks. Trying t0 provide appropriate access via your system.
Hopefully done it this time.

Regards

 

[cPanelMichael]

To update, it was determined the information in "View Sent Summary" is accurate. The remote users were confirmed to be senders from outside the server sending to local recipients.

Thank you.

 

[driansmith]

To update, it was determined the information in "View Sent Summary" is accurate. The remote users were confirmed to be senders from outside the server sending to local recipients.
Thank you.

Many thanks Michael. Good to be certain. So '-remote-' user is emails sent by other persons to the users on the server.
For completeness of understanding. Can I also ask about the 'root' user? They are also accurate? And what do they represent?

Regards
Ian

 

[cPanelMichael]

Per the ticket, the emails for the "root" user were also accurate. They represent emails sent by the server (e.g. alerts and notifications).

Thank you.

 

[driansmith]

Per the ticket, the emails for the "root" user were also accurate. They represent emails sent by the server (e.g. alerts and notifications).

Yes, many thanks for all your help Michael.