Hi Eric,
In linux and administration works, there are many paths to a single
destination. Thanks for pointing the smartest way.
Hi Rafael,
cat /var/log/qmail/smtp/* | grep -i [email protected] (empty)
cat /var/log/qmail/submission/* | grep -i [email protected]
(empty)
instead of using '[email protected]', can you check with some other
mail id which is very recent in the spam queue?
in general, each log file inside /var/log/qmail will grow up to 1Mb by
default and 100 log files will be preserved. So in some busy servers, only
we can find logs for few hours. In your server, what is the oldest log file
in smtp folder?.
--Senthilvel.
On Tue, Jun 22, 2010 at 8:38 PM, Eric Shubert <[email protected]> wrote:
> senthil vel wrote:
>
>> Not sure what is going on.. Some other spamdyke gurus may help.
>>
>> How many mails are there in the queue now?
>>
>> If the mail queue is still large, use qmail-remove to remove the mails in
>> the queue. If qmail remove is not installed, please follow this.
>>
>> *Install Qmail-Remove*
>>
>> First you need to download latest version from here <
>> http://www.linuxmagic.com/opensource/qmail/qmail-remove/> current version
>> is Qmail-Remove 0.95
>>
>>
>> Download using the following command
>>
>> #wget
>> http://www.linuxmagic.com/opensource/qmail/qmail-remove/qmail-remove-0.95.tar.gz
>>
>> Now you have qmail-remove-0.95.tar.gz file and now you need to extract
>> using the following command
>>
>> #tar -zxvf qmail-remove-0.95.tar.gz
>>
>> Now you should have qmail-remove-0.95 folder go in to the directory and
>> run the following commands
>>
>> #make
>>
>> #make install
>>
>> This will complete the installation.
>>
>> Now you need to create a directory named “yanked” in the qmail queue
>> directory you intend to use before using this program.
>>
>> #mkdir /var/qmail/queue/yanked
>>
>> *Using qmail-remove*
>>
>> *Syntax*
>>
>> qmail-remove [options]
>>
>> *Available options*
>>
>> -e use extended POSIX regular expressions
>>
>> -h, -? this help message
>>
>> -i search case insensitively [default: case sensitive]
>>
>> -n limit our search to the first bytes of each file
>>
>> -p specify the pattern to search for
>>
>> -q specify the base qmail queue dir [default: /var/qmail/queue]
>>
>> -r actually remove files, without this we’ll only print them
>>
>> -s specify your conf-split value if non-standard [default: 23]
>>
>> -v increase verbosity (can be used more than once)
>>
>> -y directory to put files yanked from the queue [default: /yanked]
>>
>> -X modify timestamp on matching files, to make qmail expire mail is the
>> number of seconds we want to move the file into the past.specifying a value
>> of 0 causes this to default to (604800)
>>
>> -x modify timestamp on matching files, to make qmail expire mail is a
>> date/time string in the format of output of the “date” program.
>>
>> *Examples for qmail-remove*
>>
>>
>> To delete mails from Que,
>>
>>
>> # qmail-remove -r -p gtre.ac.net <http://gtre.ac.net>
>>
>>
>> 324001: yes
>> moved mess/0/324001 to yanked/324001.mess
>> moved remote/0/324001 to yanked/324001.remote
>> moved info/0/324001 to yanked/324001.info <http://324001.info>
>>
>> 324024: yes
>> moved mess/0/324024 to yanked/324024.mess
>> moved remote/0/324024 to yanked/324024.remote
>> moved info/0/324024 to yanked/324024.info <http://324024.info>
>>
>> This will remove all emails <http://www.debianhelp.co.uk/qmailqueue.htm#>
>> in que with “gtre.ac.net <http://gtre.ac.net>” in it and place it in
>> /var/qmail/queue/yanked folder.
>>
>>
>> In this way we are using qmail-remove, there must be some other smarter
>> way may be there to use this...
>>
>> As all the spam mails are having same from address
>> [email protected] <mailto:[email protected]>,
>> append this mail id to /var/qmail/control/badmailfrom file or
>> /var/qmail/control/badmailto. This will be a temperarory solution.
>>
>>
> qmail-remove looks like a handy tool.
>
> Short of that, you can use qmHandle (part of QTP) to remove messages in the
> queue. It can delete messages according to the contents of from, to, or
> subject.
>
> FWIW, I agree that it's likely that a spammer obtained the password to one
> of your accounts, and is using it to submit messages. I'm going to butt out
> though, and let Senthil help you out. ;)
>
> --
> -Eric 'shubes'
>
>
>
>
> ---------------------------------------------------------------------------------
> Qmailtoaster is sponsored by Vickers Consulting Group (
> www.vickersconsulting.com)
> Vickers Consulting Group offers Qmailtoaster support and installations.
> If you need professional help with your setup, contact them today!
>
> ---------------------------------------------------------------------------------
> Please visit qmailtoaster.com for the latest news, updates, and
> packages.
> To unsubscribe, e-mail:
> [email protected]
> For additional commands, e-mail:
> [email protected]
>
>
>
