cPanel Admins » Mail

Lowest numbered MX record points to localhost

tech — Fri, 30 Jul 2010 04:20:45 +0000

If you see the following in exim’s main_log:

temporarily rejected RCPT : lowest numbered MX record points to local host

This indicates that the domain doesn’t exist in /etc/localdomains. Edit the file with your favorite editor and ensure it’s listed there.

At the same time, you’ll want to ensure it isn’t listed in /etc/remotedomains.

Reinstall Mailman

tech — Fri, 30 Jul 2010 01:54:42 +0000

If you run into an issue where you need to reinstall Mailman, you can do so with the following:

# /usr/local/cpanel/bin/mailman-install --force

Fatal! Write Failure to /etc/valiases

tech — Tue, 04 May 2010 03:02:34 +0000

Fatal! Write Failure: /etc/valiases/yourdomain.tld. Ignore any messages of success this can only result in failure!

First, verify that your domain exists (as a file) in /etc/valiases, and that it has “username:mail” permissions.

# touch /etc/valiases/yourdomain.tld # chown username:mail /etc/valiases/yourdomain.tld

Where are the Mail Filters Located?

tech — Tue, 04 May 2010 02:57:50 +0000

Account level filters:
/home/user/.filter

User Level Filters:
/home/user/.cpanel/filter.yaml

DomainKeys and SPF Record Checking

tech — Sun, 11 Apr 2010 03:00:36 +0000

You probably know that you can configure DomainKeys and SPF records in cPanel >> Email Authentication (if you didn’t, there you go ). If you’d like to confirm that your TXT records are working properly, here are some resources for you:

SPF Record Check – via HTTP
PoliteMail’s SPF Check – outputs a brief breakdown of your records details – the IP addresses permitted in the record, the hostname, and the mailserver name. Then outputs the TXT record it queried.

MXToolBox’s SuperTool – Provides SPF checks, among other useful queries.

kitterman.com

SPF Record Check – via email
This is pretty neat – you can send an email to spf-test@openspf.org from the domain you want to test, and it will reject the message, but in that rejection message, you’ll see the results of your test:

spf-test@openspf.org SMTP error from remote mail server after RCPT TO:: host mailout02.controlledmail.com [72.81.252.18]: 550 5.7.1 : Recipient address rejected: SPF Tests: Mail-From Result="pass": Mail From="test@cpaneladmins.com" HELO name="server.cpaneladmins.com" HELO Result="none" Remote IP="12.34.56.78"

DomainKeys Record Check

http://www.mailradar.com/domainkeys/

Other Resources:
OpenSPF.org’s Wizard – If you want to configure SPF records manually, go here. Note that you won’t be able to edit the records via cPanel >> Email Authentication later on, though.

Install DomainKeys and SPF Records for All Users

tech — Tue, 08 Dec 2009 05:14:02 +0000

cd /var/cpanel/users for user in * ; do /usr/local/cpanel/bin/domain_keys_installer $user ; done for user in * ; do /usr/local/cpanel/bin/spf_installer $user ; done

Configuring DomainKeys from the CLI

tech — Mon, 28 Sep 2009 19:22:11 +0000

/usr/local/cpanel/bin/domain_keys_installer USERNAME

Modify Default Mailbox Size

tech — Sat, 26 Sep 2009 19:59:38 +0000

If using x3, edit the following file:
/usr/local/cpanel/base/frontend/x3/mail/popsinclude.html
and modify

input type="text" name="quota" value="250"

Change the value from 250 to your new default. This will modify the default quota server-wide.

Track down “nobody” spammers, Add Extended Logging To Exim

tech — Fri, 25 Sep 2009 17:54:43 +0000

If you’re seeing outgoing spam from nobody@your.hostname.tld, you can track it down fairly easily.

In WHM, go to Exim Configuration Editor, then select Advanced Editor. In the first field, paste in:

log_selector = +address_rewrite +all_parents +arguments +connection_reject +delay_delivery +delivery_size +dnslist_defer +incoming_interface +incoming_port +lost_incoming_connection +queue_run +received_sender +received_recipients +retry_defer +sender_on_delivery +size_reject +skip_delivery +smtp_confirmation +smtp_connection +smtp_protocol_error +smtp_syntax_error +subject

You will then see extended logging in /var/log/exim_mainlog. You can simply run

grep cwd=/home /var/log/exim_mainlog

and that will show you the path for any user that is sending email via sendmail through exim. It won’t give you the filename, but at least you’ll have the user/folder name, and you can look through the scripts from there.