senthil vel wrote:
Not sure what is going on.. Some other spamdyke gurus may help.
How many mails are there in the queue now?
If the mail queue is still large, use qmail-remove to remove the mails
in the queue. If qmail remove is not installed, please follow this.
*Install Qmail-Remove*
First you need to download latest version from here
<http://www.linuxmagic.com/opensource/qmail/qmail-remove/> current
version is Qmail-Remove 0.95
Download using the following command
#wget
http://www.linuxmagic.com/opensource/qmail/qmail-remove/qmail-remove-0.95.tar.gz
Now you have qmail-remove-0.95.tar.gz file and now you need to extract
using the following command
#tar -zxvf qmail-remove-0.95.tar.gz
Now you should have qmail-remove-0.95 folder go in to the directory and
run the following commands
#make
#make install
This will complete the installation.
Now you need to create a directory named “yanked” in the qmail queue
directory you intend to use before using this program.
#mkdir /var/qmail/queue/yanked
*Using qmail-remove*
*Syntax*
qmail-remove [options]
*Available options*
-e use extended POSIX regular expressions
-h, -? this help message
-i search case insensitively [default: case sensitive]
-n limit our search to the first bytes of each file
-p specify the pattern to search for
-q specify the base qmail queue dir [default: /var/qmail/queue]
-r actually remove files, without this we’ll only print them
-s specify your conf-split value if non-standard [default: 23]
-v increase verbosity (can be used more than once)
-y directory to put files yanked from the queue [default: /yanked]
-X modify timestamp on matching files, to make qmail expire mail is the
number of seconds we want to move the file into the past.specifying a
value of 0 causes this to default to (604800)
-x modify timestamp on matching files, to make qmail expire mail is a
date/time string in the format of output of the “date” program.
*Examples for qmail-remove*
To delete mails from Que,
# qmail-remove -r -p gtre.ac.net <http://gtre.ac.net>
324001: yes
moved mess/0/324001 to yanked/324001.mess
moved remote/0/324001 to yanked/324001.remote
moved info/0/324001 to yanked/324001.info <http://324001.info>
324024: yes
moved mess/0/324024 to yanked/324024.mess
moved remote/0/324024 to yanked/324024.remote
moved info/0/324024 to yanked/324024.info <http://324024.info>
This will remove all emails
<http://www.debianhelp.co.uk/qmailqueue.htm#> in que with “gtre.ac.net
<http://gtre.ac.net>” in it and place it in /var/qmail/queue/yanked folder.
In this way we are using qmail-remove, there must be some other smarter
way may be there to use this...
As all the spam mails are having same from address
[email protected] <mailto:[email protected]>,
append this mail id to /var/qmail/control/badmailfrom file or
/var/qmail/control/badmailto. This will be a temperarory solution.
qmail-remove looks like a handy tool.
Short of that, you can use qmHandle (part of QTP) to remove messages in
the queue. It can delete messages according to the contents of from, to,
or subject.
FWIW, I agree that it's likely that a spammer obtained the password to
one of your accounts, and is using it to submit messages. I'm going to
butt out though, and let Senthil help you out. ;)
--
-Eric 'shubes'
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
