Sounds suspicious for malware.

Check the logs (var/log/qmail/smtp/cur and the similar one for the submission port) to see if email is coming from outside the system.

If it is not from outside the system, then I would go looking for some sort of rogue running process (likely malware) which is injecting mail directly into the queue. If this is occurring, you will likely need to reformat the drive and rebuild from scratch.

-Andy



On 1/7/2019 6:30 AM, Giuseppe Perna wrote:
Thanks  Eric Broch for your replay,

yes, the queue is continuing to fill up even after password reset!!
i reset password email and clear the queue  qmHandle -D , but i see the log contains many emails that send mail to the whole world
is there another queue where it allocates messages?

thanks


Il giorno lun 7 gen 2019 alle ore 14:42 Eric Broch <ebr...@whitehorsetc.com <mailto:ebr...@whitehorsetc.com>> ha scritto:

    Clarification:

    The queue is continuing to fill up even after password reset!?

    If not:

    I've used 'qmHandle -D' to delete all messages in the queue WITH THE
    UNDERSTANDING THAT GOOD MESSAGES ARE DELETED AS WELL.


    On 1/7/2019 12:15 AM, Giuseppe Perna wrote:
    Hello,

    qmailtoaster has a full tail,
    qmHandle -L and qmHandle -l contains many emails that send mail to
    the whole world.
    I reset the password for these email addresses, but the queues
    still fill up.

    in qmlog -f send i see:

    01-07 07:15:08 info msg 5012912: bytes 2911 from <#@[]> qp 16477
    uid 7790
    01-07 07:15:08 new msg 5077748
    01-07 07:15:08 info msg 5077748: bytes 2705 from <#@[]> qp 16482
    uid 7790
    01-07 07:15:08 new msg 5992194
    01-07 07:15:08 info msg 5992194: bytes 2748 from <#@[]> qp 16514
    uid 7790
    01-07 07:15:08 new msg 5992748
    01-07 07:15:08 info msg 5992748: bytes 2623 from <#@[]> qp 16524
    uid 7790

    info msg 5993280: bytes 2747 from <#@[]> qp 1329 uid 7796
    01-07 07:15:28 starting delivery 511: msg 5992631 to local
    postmas...@mail.miodominio.it <mailto:postmas...@mail.miodominio.it>
    01-07 07:15:28 status: local 2/10 remote 60/60
    01-07 07:15:28 delivery 510: success: did_0+1+0/qp_17982/
    01-07 07:15:28 status: local 1/10 remote 60/60
    01-07 07:15:28 new msg 4961868
    01-07 07:15:28 info msg 4961868: bytes 2657 from <#@[]> qp 2989
    uid 7796
    01-07 07:15:28 end msg 5209073
    01-07 07:15:28 new msg 5993966
    01-07 07:15:28 info msg 5993966: bytes 3133 from <#@[]> qp 8580
    uid 7796
    01-07 07:15:28 starting delivery 512: msg 5993280 to local
    postmas...@mail.miodominio.it <mailto:postmas...@mail.miodominio.it>
    01-07 07:15:28 status: local 2/10 remote 60/60
    01-07 07:15:28 new msg 5993571
    01-07 07:15:28 info msg 5993571: bytes 2844 from <#@[]> qp 4724
    uid 7790
    01-07 07:15:28 delivery 511: success: did_0+1+0/qp_17985/
    01-07 07:15:28 status: local 1/10 remote 60/60
    01-07 07:15:28 new msg 5992368



    i have this version qmailtoaster:
     rpm -qa | grep toaster*
    ucspi-tcp-toaster-0.88-1.3.5
    qmail-toaster-1.03-1.3.15
    autorespond-toaster-2.0.4-1.3.3
    qmailadmin-toaster-1.2.11-1.3.4
    isoqlog-toaster-2.1-1.3.4
    qmailtoaster-plus-0.3.0-1.4.4
    daemontools-toaster-0.76-1.3.3
    vpopmail-toaster-5.4.17-1.3.4
    libsrs2-toaster-1.0.18-1.3.3
    qmail-pop3d-toaster-1.03-1.3.15
    courier-imap-toaster-4.1.2-1.3.7
    control-panel-toaster-0.5-1.3.4
    ezmlm-cgi-toaster-0.53.324-1.3.3
    qmailmrtg-toaster-4.2-1.3.3
    maildrop-toaster-devel-2.0.3-1.3.5
    vqadmin-toaster-2.3.4-1.3.3
    spamassassin-toaster-3.2.4-1.3.13
    ripmime-toaster-1.4.0.6-1.3.3
    clamav-toaster-0.95.2-1.3.30
    libdomainkeys-toaster-0.68-1.3.3
    courier-authlib-toaster-0.59.2-1.3.6
    ezmlm-toaster-0.53.324-1.3.3
    maildrop-toaster-2.0.3-1.3.5
    squirrelmail-toaster-1.4.13-1.3.9
    simscan-toaster-1.3.1-1.3.6


    thanks

-- Eric Broch
    White Horse Technical Consulting (WHTC)


---------------------------------------------------------------------
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Reply via email to