Login to the server via ssh

Then if you get blacklisted due to large bounce back emails

then run this command

sudo zgrep info@mcil.in /var/log/exim_mainlog* | grep 2017-07-15 | grep "<>"

if due to cloudmark then

sudo zgrep vimalv@hutgroup.in /var/log/exim_mainlog* | grep 2017-06-24 | grep CMAE

Note - make sure to change the date that you see when you run the blacklisted command

Eg - sudo grep info@mcil.in /var/log/scripts/bklist_activate_mail.log

Check the logs after running the commands sudo zgrep info@mcil.in /var/log/exim_mainlog* | grep 2017-07-15 | grep "<>" or sudo zgrep vimalv@hutgroup.in /var/log/exim_mainlog* | grep 2017-06-24 | grep CMAE

For bounceback or CMAE

you will get a list of logs

then make sure you select the ID that you see in R=

For eg - /var/log/exim_mainlog-20170716.gz:2017-07-15 08:58:25 1dWIu9-004HLx-0t <= <> R=1dWIu5-004Gyc-19 U=mailnull P=local S=2742 T="Mail delivery failed: returning message to sender" for info@mcil.in

Here R=1dWIu5-004Gyc-19

Then run the command accordingly

sudo zgrep 1dWIu5-004Gyc-19 /var/log/exim_mainlog*

then check the log and accordingly inform the cx the reason for the same.

then ask the cx for assurance to stop the practises.

then ask him to change the password.

to check if he has changed the password

For eg - sudo grep mcil.in /usr/local/cpanel/logs/access_log | grep passwd

Eg log for the same would be

122.172.182.224 - info%40mcil.in [07/19/2017:07:53:05 -0000] "POST /cpsess8033794537/webmail/x3/mail/dopasswdpop.html HTTP/1.1" 200 0 "http://mcil.in:2095/cpsess8033794537/webmail/x3/mail/passwdpop.html?redirectdomain=&email=info&domain=mcil.in" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.115 Safari/537.36" "s" "-" 2095

You see info@mcil.in

Then activate the email id from here

sudo /usr/local/scripts/techsupp_helper_scripts/abuse_handling_scripts/bklist_activate_mail.sh --activate (email)

Put the email id towards the end

then hit enter

Successfully activated outgoing mail functionality for Email account info@mcil.in!!!