Mails

Exim - Scripts that sent mails

grep cwd /var/log/exim_mainlog | grep -v /var/spool | awk -F"cwd=" '{print $2}' | awk '{print $1}' | sort | uniq -c | sort -n

Postfix - Scripts that sent mails (dev)

for i in $(mailq|grep -P "^\w+"|grep -v "MAILER-DAEMON"|awk '{print $1}'); do postcat -vq $i|grep X-PHP-Origina; done

Number Mails per Sender more than 100

cat /var/log/exim_mainlog | egrep -o "[^[:space:]]+@[^[:space:]]+" | tr -d "<>" | sort -nr | uniq -c | awk '$1>100'

Dovecot login - who is the sender

egrep -o 'dovecot_login[^ ]+' /var/log/exim_mainlog | sort|uniq -c|sort -nk 1

WHM: Disabling/Enabling mails for account

• Disable emails for account:

chmod 0 /home/username/etc 
chattr +ia /home/username/etc

• Re-enable emails for account

chattr -ia /home/username/etc 
chmod 750 /home/username/etc

Links

Yahoo mail blacklist removal [1]

Microsoft/Outlook/Hotmail blacklist removal [2]

WHM: How to Prevent Email Abuse [3]