First of all, it is necessary to check and make sure whether the trigger for this suspension or defer email is based on a compromised email or not.grep "2024-09-19" /var/log/exim_mainlog | grep domain.com | grep "<=" | grep -v "<>" | awk '{ print $4,$5 }' | sort | uniq -c | sort -g | tail
usually, once using above command, if this issue triggered by compromised email,, it will appears thousands sending as below sample screenshot
if there are no compromised email indications,, can move forward to check error “Mailbox full” OR “cannot resolve host” by running following commandgrep "2024-09-17" /var/log/exim_mainlog | exigrep domain.com | grep " == " | less
if appers error mailbox full, can perform incrase mailbox stroage
if appears “cannot resolve host”,, it is neccesery to further checking
in order to reset the defer, bcan go to following path "/var/cpanel/email_send_limits"root@malawisaurus [/var/cpanel/email_send_limits]# ll
total 68
drwxr-x--x 6 root root 4096 Aug 22 18:00 ./
drwx--x--x 151 root root 20480 Aug 22 18:17 ../
drwxr-x--- 2 root mail 20480 Aug 22 15:48 cache/
-rw-r--r-- 1 root root 125 Jul 23 05:48 defer_cutoff
drwxr-x--- 2 root root 4096 Aug 13 06:00 hourly_notify/
drwxr-x--- 41 root mail 12288 Aug 22 15:48 track/
drwxr-x--x 24 root root 4096 Jul 16 15:04 users/
there’s will be appear file “max deferfail….”
can process to remove/delete it