The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

What is [/var/spool/exim_incoming/msglog?

Discussion in 'General Discussion' started by GOT, Sep 11, 2003.

  1. GOT

    GOT Get Proactive!

    Joined:
    Apr 8, 2003
    Messages:
    900
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Norfolk, VA
    cPanel Access Level:
    DataCenter Provider
    This directory has 116,016 files in it. I know it relates to mailscanner, but can someone tell me:

    a) why they are being generated
    b) if I need them

    Because

    a) If there is no good reason, lets make them stop being generated
    b) I'll delete them if I do not need them.

    I imagine that some of you with really busy servers have a lot more files in there than I do...

    See below:

    root@server2 [/var/spool/exim_incoming/msglog]# ls -al | more
    total 116016
    drwxr-x--- 2 mailnull mail 696320 Sep 11 18:04 ./
    drwxr-x--- 5 mailnull mail 4096 Jul 24 08:34 ../
    -rw-r----- 1 mailnull mail 116 Jul 27 05:27 19gg0e-0002xN-VU
    -rw-r----- 1 mailnull mail 116 Jul 27 04:13 19ggUA-0003qX-1s
    -rw-r----- 1 mailnull mail 116 Jul 27 05:25 19ghm0-0007pU-Ls
    -rw-r----- 1 mailnull mail 116 Jul 27 05:35 19ghvg-0007zP-Gr

    cPanel.net Support Ticket Number:
     
  2. GOT

    GOT Get Proactive!

    Joined:
    Apr 8, 2003
    Messages:
    900
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Norfolk, VA
    cPanel Access Level:
    DataCenter Provider
    Anyone?

    cPanel.net Support Ticket Number:
     
  3. kuklovod

    kuklovod Member

    Joined:
    Sep 9, 2003
    Messages:
    5
    Likes Received:
    0
    Trophy Points:
    1
    it's the messages that could not be delivered due to one or another reason. basically, your undelivered mail queue. If it's too high, you probably have misconfigured exim.conf.

    for example, try changing following values:

    # how long to leave bounce errors on the queue (default few days)
    ignore_bounce_errors_after = 0s

    # how long to wait before removing frozen messages from queue, default 7d = 1 week
    timeout_frozen_after = 2d

    you could also add for some better performance:

    deliver_queue_load_max = 3
    remote_max_parallel = 5

    And you should check which messages you have in your queue. If it's mostly Sobig.F virus (possible) and your server trying to send replys to every forged address, you should add this replacing your current check_message rule:

    check_message:
    require verify = header_sender
    drop condition = \
    ${if match{$message_body} \
    {(Please s|S)ee the attached file for details} \
    {yes}{no}}
    condition = ${if >{$message_size}{98000}{yes}{no}}
    condition = \
    ${if eq{$header_X-MailScanner:}{Found to be clean} \
    {yes}{no}}
    message = "Sobig.F discarded"

    accept

    hope it helps somewhat (definitely reduced our queue from 1000+ to 1-2 messages at one time)

    cPanel.net Support Ticket Number:
     
  4. GOT

    GOT Get Proactive!

    Joined:
    Apr 8, 2003
    Messages:
    900
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Norfolk, VA
    cPanel Access Level:
    DataCenter Provider
    I changed mailscanner so taht notofies are not sent, so I really have nothing in my exim queue right now.

    But I do have 116,000+ messages in this directory. I really do not think that exim is still trying to deliver these things as some of them are well over a month old.

    Additionally, these are not actual email, but, rather, they look almost like log snippets:

    2003-09-07 19:36:44 Received from catchvelvet@hotmail.com H=(EDWARDS) [207.191.34.70] P=esmtp S=102663

    and

    2003-09-09 10:36:57 Received from kux48tdk@excite.com H=(200-101-232-005.fnsce7004.dsl.brasiltelecom.net.br) [200.101.232.5] P=smtp S=8579 id=hin62m743671s1iyt-erugryxc$422@d7v.sv7rwa3yb

    One line in each file and it contains this type of entry.

    cPanel.net Support Ticket Number:
     
  5. kuklovod

    kuklovod Member

    Joined:
    Sep 9, 2003
    Messages:
    5
    Likes Received:
    0
    Trophy Points:
    1
    oops, my bad. was thinking about the queue since my messagelog contains only the log for messages which are on queue, but yours obviously logs all previous mails, too, so you must have preserve_message_logs turned on.

    straight from the horses mouth:
     
  6. GOT

    GOT Get Proactive!

    Joined:
    Apr 8, 2003
    Messages:
    900
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Norfolk, VA
    cPanel Access Level:
    DataCenter Provider
    Do you see this line in your exim.conf? Its not in mine at all.

    Thank you so much for find that info for me! Now all I have to do is figure out where in exim.conf it goes! :)

    cPanel.net Support Ticket Number:
     
  7. GOT

    GOT Get Proactive!

    Joined:
    Apr 8, 2003
    Messages:
    900
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Norfolk, VA
    cPanel Access Level:
    DataCenter Provider
    This is still an issue. Anyone have a working solution?
     
  8. Noldar

    Noldar Well-Known Member

    Joined:
    Jun 26, 2002
    Messages:
    64
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    Ponchatoula, LA
    Add this to your exim.conf. It can be entered into the first block in the exim config editor in WHM.
    Code:
    # turn off writing of logs to /var/spool/exim_incoming/msglog/
    no_message_logs
    
    Richard
     
  9. GOT

    GOT Get Proactive!

    Joined:
    Apr 8, 2003
    Messages:
    900
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Norfolk, VA
    cPanel Access Level:
    DataCenter Provider
    THANK YOU!!! I'm going to add this to our HOWTOs!
     
  10. Silverado

    Silverado Well-Known Member

    Joined:
    Mar 19, 2003
    Messages:
    154
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Backyard - Poolside
    Regarding this setting, I am curious if it will not process any logs in the overall /var/log (examples)
    maillog
    messages
    exim_mainlog
    eixm_paniclog... etc.etc.

    Do you know if this is what that setting is supposed to do?
    Great thread....
     
  11. GOT

    GOT Get Proactive!

    Joined:
    Apr 8, 2003
    Messages:
    900
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Norfolk, VA
    cPanel Access Level:
    DataCenter Provider
    I can report that after doing this, there are no new files in my msglog folder, and all the normal logs relating to mail still look good.

    Thanks a ton!
     
  12. Website Rob

    Website Rob Well-Known Member

    Joined:
    Mar 23, 2002
    Messages:
    1,506
    Likes Received:
    0
    Trophy Points:
    36
    Location:
    Alberta, Canada
    cPanel Access Level:
    Root Administrator
    GotHosting, can you provide what are you running?

    My Servers show no such directory as: exim_incoming

    I'm using:

    WHM 8.5.4 cPanel 8.5.4-E97
    RedHat 9
     
  13. GOT

    GOT Get Proactive!

    Joined:
    Apr 8, 2003
    Messages:
    900
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Norfolk, VA
    cPanel Access Level:
    DataCenter Provider
    I do not think you'll have that directory unless you are running mailscanner.

    I am running the same version of cpanel as you are under redhat 7.3.
     
  14. Website Rob

    Website Rob Well-Known Member

    Joined:
    Mar 23, 2002
    Messages:
    1,506
    Likes Received:
    0
    Trophy Points:
    36
    Location:
    Alberta, Canada
    cPanel Access Level:
    Root Administrator
    Thanks -- and you are correct. I do not use MailScanner and didn't realize the problem was directly related to it. Good thread for future problems though, if I ever do use it. :)
     
  15. equens

    equens Well-Known Member

    Joined:
    Feb 8, 2002
    Messages:
    270
    Likes Received:
    0
    Trophy Points:
    16
    My /var/spool/exim_incoming/msglog has 6.0G !!!

    My /var/spool/exim_incoming/msglog has 6.0G !!! Can I delete this files?
     
  16. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    Yes, you can.
     
  17. webignition

    webignition Well-Known Member

    Joined:
    Jan 22, 2005
    Messages:
    1,880
    Likes Received:
    0
    Trophy Points:
    36
    On the other hand, my /var/spool/exim_incoming/msglog contains about 3MB, which seems quite nice for the moment.

    Would anyone know if MailScanner clears old files from this directory periodically, or would it build up over time and surprise me one day?
     
  18. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    It looks like the exim cleanup routine is not working in exim_incoming, although it should as the coding is there. I'm going to look into it further and probably put a workaround in the daily cronjob associated with our MailScanner package to keep it tidy. If you're not interested in the msglog facility, you can switch it off by adding the following to the first textarea in the advanced mode exim config editor:

    no_message_logs
     
  19. webignition

    webignition Well-Known Member

    Joined:
    Jan 22, 2005
    Messages:
    1,880
    Likes Received:
    0
    Trophy Points:
    36
    I don't think I'm interested in the msglog facility, but then I can't say for sure because I'm not 100% sure what uses it.

    I assume that the database 'mailscanner' is used by Mailwatch to produce its nice looking lists and stats, and of course there's always the contents /var/log/ to take a look through when needed.

    What then the purpose of the contents of /var/spool/exim_incoming/msglog? I have a strong feeling that its of no use to me, but there's no harm in asking.
     
  20. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    IIRC, the msglog is simply an archive of email going through the server and of little use.
     
Loading...

Share This Page