Re: [qmailtoaster] Attack?

Rafael Andrade Mon, 28 Jun 2010 03:52:42 -0700

Thank you for reply.

My problems continues... take a look.


*[r...@net ~]# qmailctl queue | head*
messages in queue: 6182
messages in queue but not yet preprocessed: 0

*[r...@net ~]# qmHandle -m2465807 *

--------------
MESSAGE NUMBER 2465807
--------------
Received: (qmail 21700 invoked by uid 48); 28 Jun 2010 04:32:52 -0000
Date: 28 Jun 2010 04:32:52 -0000
Message-ID: <[email protected]>
To: [email protected]
Subject: Atualização do seu aparelho Itoken versão Final sem erros
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1

From: Itau Informa Todos erros corrigidos<[email protected]>



<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE></TITLE>
<META content="text/html; charset=windows-1252" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.7600.16385"></HEAD>
<BODY>
<P><FONT size=2 face=verdana><IMG
src="http://www.unicef.org/french/corporate_partners/images/itau_logo.jpg";><BR></FONT></P>

Caro cliente Leia ComAtenção,

Estamos disponibilizando a você aAtualização completa do seu aparelho iToken para a versão2.5 (v.2.50 Final). Sendo esta versão a única a serverdadeira pois encontramos falhas, que podem comprometer o suasegurança, por meio deste email pedimos que o senhor (a) nosentenda e instale nossa atualização o mais rápido possível paraevitarmos transtornos. A atualização é obrigatória e pode serfeita somente via Bankline por meio do link abaixo. 

Disponível por 5 días úteis apartir de 28/06/2010.

<Ahref="http://www.mazandaranmet.ir/img/itoken_itau.php";>http://bankline.itau.com.br/atualizacaoitoken/itoken_v2.50.</A> Atenciosamente, Itaú S/A - CentralAtendimento On-line.</BODY></HTML>




*[r...@net ~]# qmHandle -m3081939*

--------------
MESSAGE NUMBER 3081939
--------------
Received: (qmail 28643 invoked by uid 48); 28 Jun 2010 03:32:23 -0000
Date: 28 Jun 2010 03:32:23 -0000
Message-ID: <[email protected]>
To: [email protected]
Subject: Atualização do seu aparelho Itoken versão Final sem erros
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1

From: Itau Informa Todos erros corrigidos<[email protected]>



<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD><TITLE></TITLE>
<META content="text/html; charset=windows-1252" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.7600.16385"></HEAD>
<BODY>
<P><FONT size=2 face=verdana><IMG
src="http://www.unicef.org/french/corporate_partners/images/itau_logo.jpg";><BR></FONT></P>

Caro cliente Leia ComAtenção,

Disponível por 5 días úteis apartir de 28/06/2010.




All other messages are equal, only change email destiny ;/

I don't know what to do.

Thanks so much list.



Ganesh.payelkar escreveu:

Dear Rafael,

If your queue are still having this kind ofmails, you can check the mail header in Queue. That is in/var/qmail/queue there are respective folder to keep incoming andoutgoing mails. You have to check some files in mess folder. Beforedelivering mails are kept in respective folders. you can use cat cmdto see the header of that mails. but you should not delete that filesthere.I hope you will get header as well as, which mail idused by spammer to send mails outside.

                kindly correct me if i am wrong.....

Regards,
Ganesh payelkar

On Tue, Jun 22, 2010 at 4:29 PM, Rafael Andrade<[email protected] <mailto:[email protected]>> wrote:


    Hello list,

    I have a production server with qmailtoaster on centos running 2
    years perfectly, recently the server stuck, with many messages in
    queue, i need to stop qmail, clean the queue and running qmail
    again, but i need a solution to fix this problem, any knows or can
    help?

    Thanks so much

    Examples in queue:

    Client = Hide Client Domain

    [r...@net ~]# qmailctl queue | head
    messages in queue: 14691
    messages in queue but not yet preprocessed: 2
    21 Jun 2010 22:45:02 GMT  #3087267  1435  <[email protected]
    <mailto:[email protected]>>
          remote  [email protected] <mailto:[email protected]>
    21 Jun 2010 22:34:44 GMT  #3069258  1430  <[email protected]
    <mailto:[email protected]>>
          remote  [email protected] <mailto:[email protected]>
    21 Jun 2010 22:44:39 GMT  #3079585  1439  <[email protected]
    <mailto:[email protected]>>
          remote  [email protected]
    <mailto:[email protected]>
    22 Jun 2010 00:02:57 GMT  #2443198  1438  <[email protected]
    <mailto:[email protected]>>
          remote  [email protected]
    <mailto:[email protected]>

    Thanks so much




    
---------------------------------------------------------------------------------
    Qmailtoaster is sponsored by Vickers Consulting Group
    (www.vickersconsulting.com <http://www.vickersconsulting.com>)
      Vickers Consulting Group offers Qmailtoaster support and
    installations.
        If you need professional help with your setup, contact them today!
    
---------------------------------------------------------------------------------
       Please visit qmailtoaster.com <http://qmailtoaster.com> for the
    latest news, updates, and packages.
            To unsubscribe, e-mail:
    [email protected]
    <mailto:[email protected]>
       For additional commands, e-mail:
    [email protected]
    <mailto:[email protected]>


---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
     If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
    Please visit qmailtoaster.com for the latest news, updates, and packages.

To unsubscribe, e-mail: [email protected]

    For additional commands, e-mail: [email protected]

Re: [qmailtoaster] Attack?

Reply via email to