Mengatasi Antrian Email SPAM + cPanel + Exim Command

ITLampung.Com - Pengguna hosting sudah sangat terbiasa dengan aktivitas spam yang berada diserver, permasalah yang sering terjadi adalah spam muncul dari salah satu website pelanggan yang segala macam plugins dipasang tanpa melihat script didalamnya.

Beberapa Tips untuk mengatasi Antrian Email SPAM :

Cek Log Server /var/log/exim_mainlog

Pengecekan secara realtime gunakan command tail -f /var/log/exim_mainlog, jika terlihat ada salah satu email yang kira-kira mendominasi pengiriman email, silahkan copy salah satu Message-ID, selanjutnya gunakan beberapa command exim dibawah ini.

1. Cek antrian E-mail

 exim -bp

2. Cek total antrian E-mail

 exim -bpc

3. Cek total antrian e-mail berdasarkan sender e-mail

 exim -bp|awk '{print $4}'|sort -n|uniq -c|sort -n

4. Cek header e-mail berdasarkan message-id nya

 exim -Mvh [message-id]

5. Cek body e-mail berdasarkan message-id nya

 exim -Mvb [message-id]

6. Hapus suatu antrian e-mail berdasarkan message-id nya

 exim -Mrm [message-id]

7. Hapus antrian e-mail dengan status Frozen

 exiqgrep -z -i | xargs exim -Mrm

8. Hapus suatu pengiriman email berdasarkan pengirim alamat email tertentu

 exiqgrep -i -f senderuser@domainname.com | xargs exim -Mrm

9. Hapus suatu pengiriman email berdasarkan pengirim email yang tidak diketahui

 exim -bp |grep "<>" | awk '{print $3}'|xargs exim -Mrm

10. Hapus seluruh antrian email

 exim -bpu | awk '{print $3}' | xargs exim -Mrm

Jika antrian email cukup banyak, maka akan muncul seperti log sbb :

 Message 1ROS3l-001w1j-Dt has been removed  
 Message 1ROS3u-001w4P-NV has been removed  
 Message 1ROS3l-001w1j-Dt has been removed  
 Message 1ROS3u-001w4P-NV has been removed  
 Message 1ROS5r-001x5m-4Q has been removed  
 Message 1ROS67-001x8O-Q6 has been removed  
 Message 1ROS6T-001xBu-N8 has been removed  
 Message 1ROS9Q-001zAP-VW has been removed  
 Message 1ROSA7-001zd3-1Y has been removed  
 Message 1ROSFa-0022T3-Fl has been removed  
 Message 1ROSFb-0022TM-Ch has been removed  
 Message 1ROSJz-0024wf-W1 has been removed  
 Message 1ROSRU-0029FD-L2 has been removed  
 Message 1ROSRc-0029IB-JX has been removed  
 Message 1ROS5r-001x5m-4Q has been removed  
 Message 1ROS67-001x8O-Q6 has been removed  
 Message 1ROS6T-001xBu-N8 has been removed  
 Message 1ROS9Q-001zAP-VW has been removed  
 Message 1ROSA7-001zd3-1Y has been removed  
 Message 1ROS3l-001w1j-Dt has been removed  
 Message 1ROS3u-001w4P-NV has been removed  
 Message 1ROS5r-001x5m-4Q has been removed  
 Message 1ROS67-001x8O-Q6 has been removed  
 Message 1ROS6T-001xBu-N8 has been removed  
 Message 1ROS9Q-001zAP-VW has been removed  
 Message 1ROSA7-001zd3-1Y has been removed  
 Message 1ROSFa-0022T3-Fl has been removed  
 Message 1ROSFb-0022TM-Ch has been removed  
 Message 1ROSJz-0024wf-W1 has been removed  
 Message 1ROSRU-0029FD-L2 has been removed  
 Message 1ROSRc-0029IB-JX has been removed  
 Message 1ROSFb-0022TM-Ch has been removed  
 Message 1ROSJz-0024wf-W1 has been removed  
 Message 1ROSRU-0029FD-L2 has been removed  
 Message 1ROSRc-0029IB-JX has been removed

atau dengan cara lain yang dengan menggunakan command sbb :

 rm -rf /var/spool/exim/input/*

Demikian command exim yang bisa digunakan untuk menganalisa sumber permasalahan SPAM, jika terpaksa matikan service exim dan suspend user hosting pelanggan :D.

---
dikutip dari website http:_//www_chrootid_com/hapus-antrian-email-exim/
athour : Adit Thaufan