Natalio Gatti wrote:
I tried your first suggestion, but I only get something like this:
[EMAIL PROTECTED] 11]# cd /var/qmail/queue/11/
[EMAIL PROTECTED] 11]# cat 627704
[EMAIL PROTECTED]
I use a tool called qmHandle to view and manage the queue, and it
throws the header I already post. I have to delete those messages, so
I can not try qmqtool now.
I have copied smtp & send logs, and via qmail-mrtg i can suppose the
time of the attack. I will try analyzing those logs to see f I can get
any info.
The actual message will be in /var/qmail/queue/mess/###
That would be the info you need. Hopefully most of them are coming from
the same IP address.
You could lower your qmaileueue to a low number (6000 or so), and then
run qmailctl doqueue and that will flush out any messages over 10
minutes old. Just make sure to change your qmailqueue file back to
something reasonable afterwards.
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
