> > Had a user with a virus and they sent a massive amount of spam out > > through my server. Any easy way to go through the message queue and > > delete any messages that contain there IP address? > > If you mean delete any mail sent directly from their IP: > exipick -i '$sender_host_address eq 1.2.3.4' | xargs exim -Mrm
Thanks, this worked great. Had to download exipick and update queue path but did the job great. Droped from 21,000 messages in queue to 420 now. Matt > If you literally mean "any messages that contain their IP": > exipick -i --or '$message_headers =~ /\b1\.2\.3\.4\b/' \ > '$message_body =~ /\b1\.2\.3\.4\b/' \ > | xargs exim -Mrm > > --John -- ## List details at http://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
