What’s the easiest way to set this up? If it’s possible, probably invisibly forwarding all outgoing email to his private email box would work.

Question :- Simply How can we send a copy of all outgoing messages to another mailbox?

Answer :- The most straightforward way is to set up a system filter, and include a command such as:

unseen deliver mailbox@whatever.domain

This sends a copy of every message to mailbox@yourdomain.com (unless the message already has that recipient – Exim never does duplicate deliveries). To save only outgoing messages, you need to come up with a definition of what outgoing means. Typically, this might be a check on the sender address and/or on the originating host. Here is an example:

if $sender_address_domain is mydomain.com and

   ${mask:$sender_host_address/24} is 192.168.124.0/24

then

  unseen deliver mailbox@whatever.domain

endif

Detailed Description :-

Login to WHM as root:

Main >> Service Configuration >> Exim Configuration Editor

Check the name & location of “System_Filter_file”, mine is at
/etc/cpanel_exim_system_filter  or /usr/local/cpanel/base/eximacl/antivirusandspam.exim

Now edit this file in your favorite editor and insert this code:

For collecting outgoing mails only

Code:

### START OF OUTGOING MAIL FORWARDING ###

if first_delivery

and (”$h_from:” contains “user@domain.com”)

then

unseen deliver “monitor@domain.com”

endif

### END OF OUTGOING MAIL FORWARDING ###

For collecting both outgoing and incoming mails:

Code:

### START OF OUTGOING + INCOMING MAIL FORWARDING ###

if first_delivery

and (”$h_to:, $h_cc:” contains “user@domain.com”)

or (”$h_from:” contains “user@domain.com”)

then

unseen deliver “monitor@domain.com”

endif

### END OF OUTGOING + INCOMING MAIL FORWARDING ###

Above method will silently/invisibly forward mails to the mail ID monitor@domain.com (change it to actual mail ID where you want all the mails to be delivered, this could be an internal or external mail ID)

Change user@domain.com to actual mail ID that is to be monitored.

You have to make one entry per user between the comments.

Code:

### START OF OUTGOING + INCOMING MAIL FORWARDING Company-1###

Entry – 1

Entry – 2

Entry – 3

### END OF OUTGOING + INCOMING MAIL FORWARDING Company-1 ###

### START OF OUTGOING + INCOMING MAIL FORWARDING Company-2###

Entry – 1

Entry – 2

Entry – 3

### END OF OUTGOING + INCOMING MAIL FORWARDING Company-2 ###

Important: If the system filter mentioned in WHM is “/etc/cpanel_exim_system_filter” change it to something like “/etc/cpanel_exim_system_filter_custom”, otherwise cPanel update will overwrite it.

For Catchall Account : – Just put a domain name to catch all emails on specified mailbox:

Code:

### START OF OUTGOING + INCOMING MAIL FORWARDING ###

if first_delivery

and (”$h_to:, $h_cc:” contains “@domain.com”)

or (”$h_from:” contains “@domain.com”)

then

unseen deliver “monitor@domain.com”

endif

### END OF OUTGOING + INCOMING MAIL FORWARDING ###

You must already be having an entry if there is no entry then put the below code:-

Code:

if not first_delivery

then

finish

endif

So put the filter code below that. Save the file, and don’t forget to restart exim.

Enjoy Linux….!!!!!!

If you found this error for any particular domain say unixsurgeon.com, then first check the mx record for this domain. If the MX record is pointing to a different server, then just remove the domain entry unixsurgeon.com from the /etc/localdomains, And add the same entry in /etc/remotedomains. After that restart the exim service.

[root@p-root]# /etc/init.d/exim stop

[root@p-root]# /etc/init.d/exim start

It will solve your problem. And Other option is find the following line in exim.conf and comment it.

[root@p-root]# vi /etc/exim.conf

drop
condition = ${if match{$sender_helo_name}{$primary_hostname}}
message = “REJECTED – Bad HELO – Host impersonating [$sender_helo_name]“

======================================================================================

Enjoy Linux !!!

In such situations, it would be very difficult to receive/send some important emails due to this black list.And it affact your mail server reputation in all over the world.

In such situation a quick resolution is to route/relay the emails through a secondary IP address on the same server which is not black listed under those RBLs.

The mail server on cpanel i.e exim allows you to change the default IP address used by the mail server so that you would be able to route all emails through this new secondary IP address.

Method 1. :-** Send outgoing mail from the ip that matches the domain name in /etc/mailips (*: IP can be added to the file to change the main outgoing interface)**

Add an secondary ip address in to this file and save and exit.

Restart the exim service.
# /etc/init.d/exim restart

Method 2 :- Here are the step by step instructions for you to configure your exim mail server to use new IP address.

1 :- Shutdown the exim service.
# service exim stop or /etc/init.d/exim stop

2 :- Edit your exim configuration file.
# vi /etc/exim.conf

3 :- go to “remote_smtp” section under “TRANSPORTS CONFIGURATION”.
By default it would look like below:

remote_smtp:
driver = smtp
interface = ${if exists {/etc/mailips}{${lookup{$sender_address_domain}lsearch{/etc/mailips}{$value}{}}}{}}
helo_data = ${if exists {/etc/mailhelo}{${lookup{$sender_address_domain}lsearch{/etc/mailhelo}{$value}{$primary_hostname}}}{$primary_ho stname}}

4 :- Comment line containing “interface” and “helo_data” and add new “interface” to match with that of your new IP address. It should look like as follows:

remote_smtp:
driver = smtp
interface = 10.10.10.10 # Your IP address.

5 :- Save your changes and exit out from your exim configuration file.

Note :- Dont forget to set read only attributes on exim configuration file, so that it won’t get reset to default automatically.

You can do it using following command:

# chattr +aui /etc/exim.conf

6 :- start exim service on your server.
# service exim restart or /etc/init.d/exim restart

7 :- Make sure to set reverse DNS for this new IP address to point a valid FQDN.

8 :- Try sending a test email and you will find that, it was sent using this new IP address configured under your exim configuration.

You can verify it by checking the header of new email under exim’s log file i.e /var/log/exim_mainlog

Enjoy linux !!!

/usr/sbin/exim -v -Mrm (MAIL ID HERE)

==== LIST QUEDED MAILS ====

/usr/sbin/exim -bp

==== OUTPUT NUMBER OF QUEDED MAILS ====

/usr/sbin/exim -bpc

==== DELETE FROZEN MAILS ====

/usr/sbin/exim -bp | awk ‘$6~”frozen” { print $3 }’ | xargs exim -Mrm

==== DELIVER FORCEFULLY EMAILS ====

/usr/sbin/exim -qff -v -C /etc/exim.conf &

==== FREEZE MAILS FROM SENDER ====

/usr/sbin/exiqgrep -i -f (MAIL ADDRESS HERE) | xargs exim -Mf

==== REMOVE MAILS FROM SENDER ====

/usr/sbin/exiqgrep -i -f (MAIL ADDRESS HERE) | xargs exim -Mrm

==== REMOVE MAILS FROM RECIPIENT ====

exiqgrep -i -r (MAIL ADDRESS HERE) | xargs exim -Mrm

=====COUNT HOW MANY FROZEN MAILS IN QUEUE===

exim -bpr | grep frozen | wc -l

====DELETE ALL FROZEN MAILS FROM QUEUE=======

exim -bpr | grep frozen | awk {’print $3′} | xargs exim -Mrm

======DELETE MAILS THAT ARE OLDER THEN ONE DAY=======

exiqgrep -o 86400 -i | xargs exim -Mrm

“If you want to delete mails more then 1 day please multiply it to 86400 means that you want to delete mails older then 3 days then use :- exiqgrep -o 257200 -i | xargs exim -Mrm   (86400 *3 =257200) ”

=======TO REMOVE ALL FROZEN MAILS=====

exim -bp | awk ‘/frozen/ {print $3 }’| xargs exim -Mrm