Print a count of the messages in the queue:
[root@localhost]# exim -bpc
Print a listing of the messages in the queue (time queued, size, message-id, sender, recipient):
[root@localhost]# exim -bp
Print a summary of messages in the queue (count, volume, oldest, newest, domain, and totals):
[root@localhost]# exim -bp | exiqsumm
Print what Exim is doing right now:
[root@localhost]# exiwhat
Test how exim will route a given address:
[root@localhost]# exim -bt alias@localdomain.com
#user@thishost.com
<-- alias@localdomain.com
router = localuser, transport = local_delivery
[root@localhost]# exim -bt user@thishost.com
user@thishost.com
router = localuser, transport = local_delivery
[root@localhost]# exim -bt user@remotehost.com
router = lookuphost, transport = remote_smtp
host mail.remotehost.com [1.2.3.4] MX=0
Run a pretend SMTP transaction from the command line, as if it were coming from the given IP address. This will display Exim's checks, ACLs, and filters as they are applied. The message will NOT actually be delivered.
[root@localhost]# exim -bh 192.168.11.22
Display all of Exim's configuration settings:
[root@localhost]# exim -bP
Searching the queue with exiqgrep
Exim includes a utility that is quite nice for grepping through the queue, called exiqgrep. Learn it. Know it. Live it. If you're not using this, and if you're not familiar with the various flags it uses, you're probably doing things the hard way, like piping `exim -bp` into awk, grep, cut, or `wc -l`. Don't make life harder than it already is.
First, various flags that control what messages are matched. These can be combined to come up with a very particular search.
Use -f to search the queue for messages from a specific sender:
[root@localhost]# exiqgrep -f [luser]@domain
Use -r to search the queue for messages for a specific recipient/domain:
[root@localhost]# exiqgrep -r [luser]@domain
Use -o to print messages older than the specified number of seconds. For example, messages older than 1 day:
[root@localhost]# exiqgrep -o 86400 [...]
Use -y to print messages that are younger than the specified number of seconds. For example, messages less than an hour old:
[root@localhost]# exiqgrep -y 3600 [...]
Use -s to match the size of a message with a regex. For example, 700-799 bytes:
[root@localhost]# exiqgrep -s '^7..$' [...]
Use -z to match only frozen messages, or -x to match only unfrozen messages.
There are also a few flags that control the display of the output.
Use -i to print just the message-id as a result of one of the above two searches:
[root@localhost]# exiqgrep -i [ -r | -f ] ...
Use -c to print a count of messages matching one of the above searches:
[root@localhost]# exiqgrep -c ...
Print just the message-id of the entire queue:
[root@localhost]# exiqgrep -i
Managing the queue
The main exim binary (/usr/sbin/exim) is used with various flags to make things happen to messages in the queue. Most of these require one or more message-IDs to be specified in the command line, which is where `exiqgrep -i` as described above really comes in handy.
Start a queue run:
[root@localhost]# exim -q -v
Start a queue run for just local deliveries:
[root@localhost]# exim -ql -v
Remove a message from the queue:
[root@localhost]# exim -Mrm <message-id> [ <message-id> ... ]
Freeze a message:
[root@localhost]# exim -Mf <message-id> [ <message-id> ... ]
Thaw a message:
[root@localhost]# exim -Mt <message-id> [ <message-id> ... ]
Deliver a message, whether it's frozen or not, whether the retry time has been reached or not:
[root@localhost]# exim -M <message-id> [ <message-id> ... ]
Deliver a message, but only if the retry time has been reached:
[root@localhost]# exim -Mc <message-id> [ <message-id> ... ]
Force a message to fail and bounce as "cancelled by administrator":
[root@localhost]# exim -Mg <message-id> [ <message-id> ... ]
Remove all frozen messages:
[root@localhost]# exiqgrep -z -i | xargs exim -Mrm
Remove all messages older than five days (86400 * 5 = 432000 seconds):
[root@localhost]# exiqgrep -o 432000 -i | xargs exim -Mrm
Freeze all queued mail from a given sender:
[root@localhost]# exiqgrep -i -f luser@example.tld | xargs exim -Mf
View a message's headers:
[root@localhost]# exim -Mvh <message-id>
View a message's body:
[root@localhost]# exim -Mvb <message-id>
View a message's logs:
[root@localhost]# exim -Mvl <message-id>
Add a recipient to a message:
[root@localhost]# exim -Mar <message-id> <address> [ <address> ... ]
Edit the sender of a message:
[root@localhost]# exim -Mes <message-id> <address>
Searching the logs with exigrep
The exigrep utility (not to be confused with exiqgrep) is used to search an exim log for a string or pattern. It will print all log entries with the same internal message-id as those that matched the pattern, which is very handy since any message will take up at least three lines in the log. exigrep will search the entire content of a log entry, not just particular fields.
One can search for messages sent from a particular IP address:
[root@localhost]# exigrep '<= .* \[12.34.56.78\] ' /path/to/exim_log
Search for messages sent to a particular IP address:
[root@localhost]# exigrep '=> .* \[12.34.56.78\]' /path/to/exim_log
This example searches for outgoing messages, which have the "=>" symbol, sent to "user@domain.tld". The pipe to grep for the "<=" symbol will match only the lines with information on the sender - the From address, the sender's IP address, the message size, the message ID, and the subject line if you have enabled logging the subject. The purpose of doing such a search is that the desired information is not on the same log line as the string being searched for.
[root@localhost]# exigrep '=> .*user@domain.tld' /path/to/exim_log | fgrep '<='
Generate and display Exim stats from a logfile:
[root@localhost]# eximstats /path/to/exim_mainlog
Same as above, with less verbose output:
[root@localhost]# eximstats -ne -nr -nt /path/to/exim_mainlog
Same as above, for one particular day:
[root@localhost]# fgrep YYYY-MM-DD /path/to/exim_mainlog | eximstats
To delete all queued messages containing a certain string in the body:
[root@localhost]# grep -lr 'a certain string' /var/spool/exim/input/ | \
sed -e 's/^.*\/\([a-zA-Z0-9-]*\)-[DH]$/\1/g' | xargs exim -Mrm
Note that the above only delves into /var/spool/exim in order to grep for queue files with the given string, and that's just because exiqgrep doesn't have a feature to grep the actual bodies of messages. If you are deleting these files directly, YOU ARE DOING IT WRONG! Use the appropriate exim command to properly deal with the queue.
If you have to feed many, many message-ids (such as the output of an `exiqgrep -i` command that returns a lot of matches) to an exim command, you may exhaust the limit of your shell's command line arguments. In that case, pipe the listing of message-ids into xargs to run only a limited number of them at once. For example, to remove thousands of messages sent from hero@linux-geek.com:
[root@localhost]# exiqgrep -i -f '<hero@linux-geek.com>' | xargs exim -Mrm
No comments:
Post a Comment