Help, I've been mail flooded to invalid users. My apologies for the length
of this, but I'm trying to be complete. The background is as follows.
My qmail server is the secondary MX for domain tri.net.
mx1.tri.net got flooded with about 28,000 invalid user emails, which
overflowed onto my qmail secondary server, mx2.tri.net.
As qmail.remote is sending them from mx2.tri.net to mx1.tri.net, one of two
things is happening:
1. Fails because of unavailable socket on mx1.tri.net.
2. Log entry as follows-
Dec 14 16:43:14 radius qmail: 976812194.440027 delivery 5510:
failure:
205.153.244.6_does_not_like_recipient./Remote_host_said:_550_<bail
[EMAIL PROTECTED]>..._User_unknown/Giving_up_on_205.153.244.6./
My qstat does not seem to be getting smaller. My qread looks as follows.
----clip ----
12 Dec 2000 21:58:59 GMT #53728 15374 <>
remote [EMAIL PROTECTED]
12 Dec 2000 22:24:01 GMT #53751 15462 <>
remote [EMAIL PROTECTED]
12 Dec 2000 12:53:05 GMT #53774 1146 <[EMAIL PROTECTED]> bouncing
remote [EMAIL PROTECTED]
remote [EMAIL PROTECTED]
remote [EMAIL PROTECTED]
remote [EMAIL PROTECTED]
remote [EMAIL PROTECTED]
remote [EMAIL PROTECTED]
done remote [EMAIL PROTECTED]
remote [EMAIL PROTECTED]
done remote [EMAIL PROTECTED]
done remote [EMAIL PROTECTED]
done remote [EMAIL PROTECTED]
done remote [EMAIL PROTECTED]
done remote [EMAIL PROTECTED]
13 Dec 2000 00:18:33 GMT #54073 33878 <[EMAIL PROTECTED]>
remote [EMAIL PROTECTED]
----clip ----
My questions are as follows.
Because of the 'giving_up' message, is it still retrying the same bad
address again?
Is there a 'filter' I can install to prevent qmail-remote from sending the
emails from '[EMAIL PROTECTED]' on to mx1.tri.net?
What does the 'done' mean on some of the messages in the qread dump? And
will they clean out automagicly?
Any help will be appreciated. Some 'good' email has been trapped in the
queue, such as the last entry in the qread dump. But if I have to, I could
completely dump the queue as a last resort.
Thanks in advance.
Sam
