{"id":801,"date":"2013-01-16T18:14:57","date_gmt":"2013-01-16T23:14:57","guid":{"rendered":"https:\/\/www.inmotionhosting.com\/support\/2013\/01\/16\/find-email-delivery-failures-in-exim\/"},"modified":"2021-08-16T23:23:59","modified_gmt":"2021-08-17T03:23:59","slug":"find-email-delivery-failures-in-exim","status":"publish","type":"post","link":"https:\/\/www.inmotionhosting.com\/support\/email\/find-email-delivery-failures-in-exim\/","title":{"rendered":"Find email delivery failures in Exim"},"content":{"rendered":"

In this article we are going to go over how to quickly review the entire mail log for your VPS or dedicated server in order to find delivery failures that are occurring.<\/p>\n

Email delivery failures can happen for a large number of reasons, for a more in-depth explanation on these types of issues you can check out my article on why does email bounce<\/a>?<\/p>\n

In order to follow the steps below you’ll need root access<\/a> to your server.<\/p>\n

Locating email delivery failed messages<\/h2>\n
    \n
  1. Login to your server via SSH<\/a> as the root user.<\/li>\n
  2. Run the following command to get a sorted report of the users with the highest amounts of delivery failures:
    \ngrep \"for .*@.*\" \/var\/log\/exim_mainlog | grep \"<= <>\" | awk -F\"T=\" '{print $2}' |
    \nawk '{print $NF,$0}' | awk -F\" for\" '{print $1}' | sort | uniq -c | sort -n<\/code>
    \nCode breakdown:<\/strong><\/p>\n\n\n\n\n\n\n\n
    grep “for .*@.*” \/var\/log\/exim_mainlog<\/th>\nLocate lines in the Exim mail log that include any variation of “for user@domain.com”<\/td>\n<\/tr>\n
    grep “<= <>”<\/th>\nLocate lines that are being sent from a null sender, which indicates a bounce back<\/td>\n<\/tr>\n
    awk -F”T=” ‘{print $2}’<\/th>\nUse the awk<\/strong> command with the F<\/strong>ield seperator set to T=<\/strong> which is the subject line in the mail log, then only print the $2<\/strong>nd column of data.<\/td>\n<\/tr>\n
    awk ‘{print $NF,$0}’ | awk -F” for” ‘{print $1}’<\/th>\nUse awk<\/strong> to print $NF<\/strong> which is the very last column, which is the email address. Then run awk<\/strong> again with the F<\/strong>ield seperator set to for<\/strong> and then print out only the $1<\/strong>st colum of data (this strips the email user off of the end of the line).<\/td>\n<\/tr>\n
    sort | uniq -c | sort -n<\/th>\nSort all of the data by the email users, then uniquely count them, and finally sort those counts by lowest to highest.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    This will give you back data looking like this:
    \n573 support@example.com \"Mail delivery failed: returning message to sender<\/a>
    \n663 user@example.com \"Mail delivery failed: returning message to sender
    \n871 test@example.com \"Mail delivery failed: returning message to sender
    \n1282 help@example.com \"Mail delivery failed: returning message to sender<\/code><\/li>\n<\/ol>\n

    Investigate cause of delivery failures<\/h2>\n

    Now that you know one user in particular help@example.com<\/strong> had the most delivery errors, you can use the steps below to investigate the cause of these problems.<\/p>\n

      \n
    1. Run the following command to find the latest delivery failure:grep \"Mail delivery failed:\" \/var\/log\/exim_mainlog | grep help@example.com | tail -1<\/code>
      \nThis should give you back the full line from the Exim mail log that contains that error:<\/p>\n

      2013-01-16 14:45:34 1TvYvW-0006AC-ER <= <> R=1TvYvW-00069r-Au U=mailnull P=local S=2012
      \nT=\"Mail delivery failed: returning message to sender\" for help@example.com<\/code>
      \nCopy the messaged ID following R=<\/strong>, so in this case it would be 1TvYvW-00069r-Au<\/strong><\/li>\n

    2. Using the message ID you copied, run the following command: exigrep -I -l 1TvYvW-00069r-Au \/var\/log\/exim_mainlog<\/code>
      \nThis will display the full message transaction for the message that bounced:
      \n2013-01-16 14:45:34 cwd=\/var\/spool\/exim 3 args: \/usr\/sbin\/exim -Mc 1TvYvW-00069r-Au
      \n2013-01-16 14:45:34 cwd=\/var\/spool\/exim 7 args: \/usr\/sbin\/exim -t -oem -oi -f <> -E1TvYvW-00069r-Au
      \n2013-01-16 14:45:34 1TvYvW-00069r-Au <= help@example.com H=localhost (secure103.inmotionhosting.com) [127.0.0.1]:40726 P=esmtpa A=courier_login:help@example.com S=1172 id=f25ddf5d4e8c56e73ab82081c9011a34@atomlabs.net T=\"Test\" for no-reply@example.com
      \n2013-01-16 14:45:34 1TvYvW-00069r-Au ** no-reply@example.com R=virtual_aliases: No Such User Here\"
      \n2013-01-16 14:45:34 1TvYvW-00069r-Au Completed
      \n2013-01-16 14:45:34 1TvYvW-0006AC-ER <= <> R=1TvYvW-00069r-Au U=mailnull P=local S=2012 T=\"Mail delivery failed: returning message to sender\" for help@example.com
      \n2013-01-16 14:45:34 1TvYvW-0006AC-ER => help <help@example.com> R=virtual_user T=virtual_userdelivery
      \n2013-01-16 14:45:34 1TvYvW-0006AC-ER Completed<\/code>
      \nSo in this case we can see the reason the message bounced was ** no-reply@example.com R=virtual_aliases: No Such User Here<\/strong>. Basically, help@example.com<\/strong> had tried to send a message to an email address that didn’t exist so it bounced.<\/li>\n
    3. You can repeat the sames steps to investigate other bounces that user has been generating. Or an alternative method would be to directly look at the user’s mail with the following commands:
      \ngrep \"Mail delivery failed\" \/home\/userna5\/mail\/example.com\/help\/{cur,new} -R<\/code><\/p>\n

      This gives back something like:
      \n\/home\/userna5\/mail\/example.com\/help\/cur\/1358366803.H952383P10133.ecbiz103.inmotionhosting.com,S=2120:2,:Subject: Mail delivery failed: returning message to sender
      \n\/home\/userna5\/mail\/example.com\/help\/cur\/1358366759.H640077P7532.ecbiz103.inmotionhosting.com,S=2115:2,:Subject: Mail delivery failed: returning message to sender
      \n\/home\/userna5\/mail\/example.com\/help\/cur\/1358365534.H479296P23705.ecbiz103.inmotionhosting.com,S=2107:2,:Subject: Mail delivery failed: returning message to sender
      \n\/home\/userna5\/mail\/example.com\/help\/cur\/1358366776.H336048P8578.ecbiz103.inmotionhosting.com,S=2123:2,:Subject: Mail delivery failed: returning message to sender<\/code>
      \nYou can then read one of the bounce backs for further details with this command:
      \nless \/home\/userna5\/mail\/example.com\/help\/cur\/1358366776.H336048P8578.ecbiz103.inmotionhosting.com,S=2123:2,<\/code>
      \nWhen you’re done looking at the file, you can hit q<\/strong> to quit and get back to the command line.<\/li>\n<\/ol>\n

      You should now understand how to locate users on your server that are generating a large amount of delivery failures, and also how to investigate those bounces to see the root cause of those issues.<\/p>\n","protected":false},"excerpt":{"rendered":"

      In this article we are going to go over how to quickly review the entire mail log for your VPS or dedicated server in order to find delivery failures that are occurring. Email delivery failures can happen for a large number of reasons, for a more in-depth explanation on these types of issues you can Read More ><\/a><\/p>\n","protected":false},"author":57014,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[4],"tags":[],"class_list":["post-801","post","type-post","status-publish","format-standard","hentry","category-email"],"acf":[],"yoast_head":"\nFind email delivery failures in Exim | InMotion Hosting<\/title>\n<meta name=\"description\" content=\"In this article we are going to go over how to quickly review the entire mail log for your VPS or dedicated server in order to find delivery failures that are occurring.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.inmotionhosting.com\/support\/email\/find-email-delivery-failures-in-exim\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Find email delivery failures in Exim | InMotion Hosting\" \/>\n<meta property=\"og:description\" content=\"In this article we are going to go over how to quickly review the entire mail log for your VPS or dedicated server in order to find delivery failures that are occurring.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.inmotionhosting.com\/support\/email\/find-email-delivery-failures-in-exim\/\" \/>\n<meta property=\"og:site_name\" content=\"InMotion Hosting Support Center\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/inmotionhosting\/\" \/>\n<meta property=\"article:published_time\" content=\"2013-01-16T23:14:57+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-08-17T03:23:59+00:00\" \/>\n<meta name=\"author\" content=\"InMotion Hosting Contributor\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@https:\/\/twitter.com\/InMotionHosting\" \/>\n<meta name=\"twitter:site\" content=\"@InMotionHosting\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"InMotion Hosting Contributor\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/email\/find-email-delivery-failures-in-exim\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/email\/find-email-delivery-failures-in-exim\/\"},\"author\":{\"name\":\"InMotion Hosting Contributor\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/person\/f9a4fc454cd1df128ee8e898d30d4644\"},\"headline\":\"Find email delivery failures in Exim\",\"datePublished\":\"2013-01-16T23:14:57+00:00\",\"dateModified\":\"2021-08-17T03:23:59+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/email\/find-email-delivery-failures-in-exim\/\"},\"wordCount\":538,\"commentCount\":3,\"publisher\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#organization\"},\"articleSection\":[\"Email\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.inmotionhosting.com\/support\/email\/find-email-delivery-failures-in-exim\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/email\/find-email-delivery-failures-in-exim\/\",\"url\":\"https:\/\/www.inmotionhosting.com\/support\/email\/find-email-delivery-failures-in-exim\/\",\"name\":\"Find email delivery failures in Exim | InMotion Hosting\",\"isPartOf\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#website\"},\"datePublished\":\"2013-01-16T23:14:57+00:00\",\"dateModified\":\"2021-08-17T03:23:59+00:00\",\"description\":\"In this article we are going to go over how to quickly review the entire mail log for your VPS or dedicated server in order to find delivery failures that are occurring.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/email\/find-email-delivery-failures-in-exim\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.inmotionhosting.com\/support\/email\/find-email-delivery-failures-in-exim\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/email\/find-email-delivery-failures-in-exim\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.inmotionhosting.com\/support\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Find email delivery failures in Exim\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#website\",\"url\":\"https:\/\/www.inmotionhosting.com\/support\/\",\"name\":\"InMotion Hosting Support Center\",\"description\":\"Web Hosting Support & Tutorials\",\"publisher\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.inmotionhosting.com\/support\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#organization\",\"name\":\"InMotion Hosting\",\"url\":\"https:\/\/www.inmotionhosting.com\/support\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2023\/02\/inmotion-hosting-logo-yoast.jpg\",\"contentUrl\":\"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2023\/02\/inmotion-hosting-logo-yoast.jpg\",\"width\":696,\"height\":696,\"caption\":\"InMotion Hosting\"},\"image\":{\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/inmotionhosting\/\",\"https:\/\/x.com\/InMotionHosting\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/person\/f9a4fc454cd1df128ee8e898d30d4644\",\"name\":\"InMotion Hosting Contributor\",\"description\":\"InMotion Hosting contributors are highly knowledgeable individuals who create relevant content on new trends and troubleshooting techniques to help you achieve your online goals!\",\"sameAs\":[\"https:\/\/www.linkedin.com\/company\/inmotion-hosting\/\",\"https:\/\/x.com\/https:\/\/twitter.com\/InMotionHosting\"],\"url\":\"https:\/\/www.inmotionhosting.com\/support\/author\/inmotion-hosting-contributor\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Find email delivery failures in Exim | InMotion Hosting","description":"In this article we are going to go over how to quickly review the entire mail log for your VPS or dedicated server in order to find delivery failures that are occurring.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.inmotionhosting.com\/support\/email\/find-email-delivery-failures-in-exim\/","og_locale":"en_US","og_type":"article","og_title":"Find email delivery failures in Exim | InMotion Hosting","og_description":"In this article we are going to go over how to quickly review the entire mail log for your VPS or dedicated server in order to find delivery failures that are occurring.","og_url":"https:\/\/www.inmotionhosting.com\/support\/email\/find-email-delivery-failures-in-exim\/","og_site_name":"InMotion Hosting Support Center","article_publisher":"https:\/\/www.facebook.com\/inmotionhosting\/","article_published_time":"2013-01-16T23:14:57+00:00","article_modified_time":"2021-08-17T03:23:59+00:00","author":"InMotion Hosting Contributor","twitter_card":"summary_large_image","twitter_creator":"@https:\/\/twitter.com\/InMotionHosting","twitter_site":"@InMotionHosting","twitter_misc":{"Written by":"InMotion Hosting Contributor","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.inmotionhosting.com\/support\/email\/find-email-delivery-failures-in-exim\/#article","isPartOf":{"@id":"https:\/\/www.inmotionhosting.com\/support\/email\/find-email-delivery-failures-in-exim\/"},"author":{"name":"InMotion Hosting Contributor","@id":"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/person\/f9a4fc454cd1df128ee8e898d30d4644"},"headline":"Find email delivery failures in Exim","datePublished":"2013-01-16T23:14:57+00:00","dateModified":"2021-08-17T03:23:59+00:00","mainEntityOfPage":{"@id":"https:\/\/www.inmotionhosting.com\/support\/email\/find-email-delivery-failures-in-exim\/"},"wordCount":538,"commentCount":3,"publisher":{"@id":"https:\/\/www.inmotionhosting.com\/support\/#organization"},"articleSection":["Email"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.inmotionhosting.com\/support\/email\/find-email-delivery-failures-in-exim\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.inmotionhosting.com\/support\/email\/find-email-delivery-failures-in-exim\/","url":"https:\/\/www.inmotionhosting.com\/support\/email\/find-email-delivery-failures-in-exim\/","name":"Find email delivery failures in Exim | InMotion Hosting","isPartOf":{"@id":"https:\/\/www.inmotionhosting.com\/support\/#website"},"datePublished":"2013-01-16T23:14:57+00:00","dateModified":"2021-08-17T03:23:59+00:00","description":"In this article we are going to go over how to quickly review the entire mail log for your VPS or dedicated server in order to find delivery failures that are occurring.","breadcrumb":{"@id":"https:\/\/www.inmotionhosting.com\/support\/email\/find-email-delivery-failures-in-exim\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.inmotionhosting.com\/support\/email\/find-email-delivery-failures-in-exim\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.inmotionhosting.com\/support\/email\/find-email-delivery-failures-in-exim\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.inmotionhosting.com\/support\/"},{"@type":"ListItem","position":2,"name":"Find email delivery failures in Exim"}]},{"@type":"WebSite","@id":"https:\/\/www.inmotionhosting.com\/support\/#website","url":"https:\/\/www.inmotionhosting.com\/support\/","name":"InMotion Hosting Support Center","description":"Web Hosting Support & Tutorials","publisher":{"@id":"https:\/\/www.inmotionhosting.com\/support\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.inmotionhosting.com\/support\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.inmotionhosting.com\/support\/#organization","name":"InMotion Hosting","url":"https:\/\/www.inmotionhosting.com\/support\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/logo\/image\/","url":"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2023\/02\/inmotion-hosting-logo-yoast.jpg","contentUrl":"https:\/\/www.inmotionhosting.com\/support\/wp-content\/uploads\/2023\/02\/inmotion-hosting-logo-yoast.jpg","width":696,"height":696,"caption":"InMotion Hosting"},"image":{"@id":"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/inmotionhosting\/","https:\/\/x.com\/InMotionHosting"]},{"@type":"Person","@id":"https:\/\/www.inmotionhosting.com\/support\/#\/schema\/person\/f9a4fc454cd1df128ee8e898d30d4644","name":"InMotion Hosting Contributor","description":"InMotion Hosting contributors are highly knowledgeable individuals who create relevant content on new trends and troubleshooting techniques to help you achieve your online goals!","sameAs":["https:\/\/www.linkedin.com\/company\/inmotion-hosting\/","https:\/\/x.com\/https:\/\/twitter.com\/InMotionHosting"],"url":"https:\/\/www.inmotionhosting.com\/support\/author\/inmotion-hosting-contributor\/"}]}},"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"primary_category":null,"_links":{"self":[{"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/posts\/801","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/users\/57014"}],"replies":[{"embeddable":true,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/comments?post=801"}],"version-history":[{"count":6,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/posts\/801\/revisions"}],"predecessor-version":[{"id":85072,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/posts\/801\/revisions\/85072"}],"wp:attachment":[{"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/media?parent=801"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/categories?post=801"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.inmotionhosting.com\/support\/wp-json\/wp\/v2\/tags?post=801"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}