Howto track cpanel+exim server outgoing mails
I wanted to track some outgoing mails in my servers. Initially I was using IMAP to solve this issue. Then It was becoming slow everyday. They started complaining that the mail was really slow. I was forced to move to POP3 which is much faster compared to IMAP. Once I activated POP3 tracking was out of my hands. I search a lot on how to play with filters in exim mail.
It is quite powerful and give total control on incoming and outgoing mails. To solve my problem I need to play only with outgoing mails. There is a file named /etc/antivirus.exim is the file we need to play with. I edited the file and added the below lines to make it work for me.
if first_delivery
and ( ("$h_from:" contains "test1@imthi.com")
or ("$h_from:" contains "test2@imthi.com")
or ("$h_from:" contains "test3@imthi.com")
)
then
unseen deliver "tracker@imthi.com"
endif
The above block checks if the outgoing mail is on first delivery and who is the sender. Based on the sender I am sending a bcc copy to another mailbox. You can play more by studying the exim filter commands more 
RSS
where we hav to put
if first_delivery
and ( (”$h_from:” contains “test1@imthi.com”)
or (”$h_from:” contains “test2@imthi.com”)
or (”$h_from:” contains “test3@imthi.com”)
)
then
unseen deliver “tracker@imthi.com”
endif
what file ?
i try to put your code into /etc/antivirus.exim but dont work !! in what line we have to put ??
this ist my /etc/antivirus.exim
http://pastebin.com/fb1d313e
For cpanel 11 you need to edit the file
/etc/cpanel_exim_system_filter
not
/etc/antivirus.exim
um, for outgoing (outbound) email, i think it shout be “$h_to:” instead of ”$h_from:”, at least that’s how it worked for me.
it worked for me. Thank you dude
Where can we access this file in Cpanel 11
etc/cpanel_exim_system_filter
Is it in file manager?
Pls help
anyone?? I want to track my outgoing mails..pls help . I have a shared hosting account .
If you have root access in your cpanel then you can edit that file.
If not then try editing the user filter instead the system filter.