log_selector = +address_rewrite +all_parents +arguments +connection_reject +delay_delivery +delivery_size +dnslist_defer +incoming_interface +incoming_port +lost_incoming_connection +queue_run +received_sender +received_recipients +retry_defer +sender_on_delivery +size_reject +skip_delivery +smtp_confirmation +smtp_connection +smtp_protocol_error +smtp_syntax_error +subject +tls_cipher +tls_peerdn

Then save it. Allow some time to pass (maybe 6 to 24 hours) and then run the following:

awk '$3 ~ /^cwd/{print $3}' /var/log/exim_mainlog | sort | uniq -c | sed "s|^ *||g" | sort -nr

This will list directories that email was sent from. You’d be looking for user home directories with a large number. If there are no numbers or directories in that listing, it’s possible they are using a raw socket() command to connect to remote MX servers and spam.

Also, you may want to check the queue and see if this is just one message that is being retried in which case you can just deleted it from the queue. This also can be done from WHM using “Mail Queue Manager”.

[an error occurred while processing this directive]

 make sure /etc/wwwacct.conf is chmod 644

2. You must have a server with the following minimum specifications:

At least a Pentium 3 500 MHz processor
At least a 10 GB hard drive
At least 256 MB of RAM

3. The following partitions are recommended prior to installing cPanel:

1 GB /
1 GB /boot (No seperate /boot for FreeBSD)
2 GB /tmp
30 GB /usr
30 GB /var
4 GB swap (swap should be 2x RAM)

Remaining space to /home

Note: The above partitioning scheme is assuming a 40 GB hard drive. If you have a larger hard drive, you should increment /usr & /var accordingly.

If you do not have a partitioning scheme similar to the above, it is recommended that you format & repartition your machine as you may run into operational issues in the future.

mkdir /home/cptemp
cd /home/cptemp
wget http://layer1.cpanel.net/latest
sh latest

At this point the installation has started and may take anywhere from 30 – 60 minutes to complete. At no point during the installation should you be prompted for user input. You will know the cPanel installation has been completed by the screen output coming to a stop & the statement “Done.” is printed on your screen. You should then hit “ctrl c”† to continue.

Note: You must be on a stable connection to install cPanel. If your shell session disconnects during a cPanel install the cPanel installation will be aborted. You can restart the cPanel installation by completing “sh cpanel-*”† again, however it is recommended that you reformat your machine & start over to ensure a clean slate before placing the machine into production.

Connect to WHM in a web browser: https://server_ip:2087

Follow the instructions and click next

On “Server Setup” section click on “Edit setup”.

a) Type a email address at “Server Contact E-Mail Address”
b) Insert primary and secondary Name Server and click on “Assign Ip Address” and “Add An A Entry for this nameserver” for every NS. (You need to have a supplimentary IP for second Name Server).
c) Click on “Save”

Click on “Tweak Settings” and check/uncheck what do you consider necesarry.

On “Tweak Security” click “SMTP Tweak” and check “Allow connections to localhost on port 25.” Click “Enable”

Click on “Update Config” ans select build type (I recomand “Automatic (RELEASE tree)”

“Shell Fork Bomb Protection” click on “Enable Protection”

“Service Configuration”

“FTP Configuration” I recomand to disable “Anonimous Ftp” and switch to “Pure-ftpd”

“DNS Functions”

“Add an A Entry for your Hostname” and click on “Add the entry”

“IP Functions”

If you have a IP Class click on “Add a New IP Address” and follow the instruction

“Software”

Click on “Update Server Software” and “Update System Software” and wait….
Click on “Update Apache” leave the check box selected and I recomand to select suplimentary just “GD” and “IMAP” and click “Start build”

“cPanel”

Click on “Addon Modules” and install “modsecurity” and “addonupdates”
Click on “Upgrade to Latest Version” and “Click to upgrade”

I recomand to install additional monitoring software like phpSysInfo http://phpsysinfo.sourceforge.net/ (Install the scripts into a domain hosted in server, www.domain.com/info/)

-go to WHM/Service Configuration/Exim Configuration and switch to Advanced mode

-at begin ACL form put:

if $header_from: contains “@domain_name.com”
then
fail text “What message do you want.”
seen finish
endif

1. In DNS Zone do that:
domain.com. 14400 IN MX 0 any.domain.com.

2. Add new entry
any.domain.com. 14400 IN A 123.123.123.123
Change last figure of Serial Number and click Save. Restart Bind

3. Make a ssh connection and remove the domain name from /etc/localdomains
Add the domain name in /etc/remotedomains

Restart Exim (/scripts/restartsrv_exim)
You need to wait aprox. 4 hours to work

 If the domain name are pointed to Email server and from there are redirected the www do that:

1. Remove the DNS Zone from WHM
2. Make a ssh connection and remove the domain name from /etc/localdomains
Add the domain name in /etc/remotedomains
Restart Exim (/scripts/restartsrv_exim)