Hi, 1. Block the IP address by iptables. 2. It needs clear the queue. 3. restart qmail.
I think fastest recovery all clear the queue. Then you can inform to the users. These are point. Regards, Noriyuki Hayashi > This could come from a web injection stop the web server. And check if things > still coming. > > > Il giorno 7 gen 2019, alle ore 22:12, Tony White <t...@ycs.com.au> ha > > scritto: > > > > Hi, > > This how I would try to fix it first. > > > > If you have cli access then try this command to see the ip address > > that is sending the emails. > > > > watch SMTP log > > tail -n 25 -f /var/log/qmail/smtp/current | tai64nlocal > > > > OR > > > > watch SUBMISSION log > > tail -n 25 -f /var/log/qmail/submission/current | tai64nlocal > > > > OR try both if no obvious ip is visible. > > > > look for the same ip many times in the list. > > once you have the ip use iptables to block it. > > > > iptables -I INPUT -s IP.ADDR.ESS -j DROP > > > > Example > > iptables -I INPUT -s 192.168.1.1 -j DROP > > > > The queue will stop filling. > > Clear the queue as per Eric's notes. > > > > best wishes > > Tony White > > > >> On 8/1/19 2:30 am, Giuseppe Perna wrote: > >> > >> Thanks Eric Broch for your replay, > >> > >> yes, the queue is continuing to fill up even after password reset!! > >> i reset password email and clear the queue qmHandle -D , but i see the > >> log contains many emails that send mail to the whole world > >> is there another queue where it allocates messages? > >> > >> thanks > >> > >> > >> Il giorno lun 7 gen 2019 alle ore 14:42 Eric Broch > >> <ebr...@whitehorsetc.com <mailto:ebr...@whitehorsetc.com>> ha scritto: > >> > >> Clarification: > >> > >> The queue is continuing to fill up even after password reset!? > >> > >> If not: > >> > >> I've used 'qmHandle -D' to delete all messages in the queue WITH THE > >> UNDERSTANDING THAT GOOD MESSAGES ARE DELETED AS > >> WELL. > >> > >> > >>> On 1/7/2019 12:15 AM, Giuseppe Perna wrote: > >>> Hello, > >>> > >>> qmailtoaster has a full tail, > >>> qmHandle -L and qmHandle -l contains many emails that send mail to the > >>> whole world. > >>> I reset the password for these email addresses, but the queues still > >>> fill up. > >>> > >>> in qmlog -f send i see: > >>> > >>> 01-07 07:15:08 info msg 5012912: bytes 2911 from <#@[]> qp 16477 uid > >>> 7790 > >>> 01-07 07:15:08 new msg 5077748 > >>> 01-07 07:15:08 info msg 5077748: bytes 2705 from <#@[]> qp 16482 uid > >>> 7790 > >>> 01-07 07:15:08 new msg 5992194 > >>> 01-07 07:15:08 info msg 5992194: bytes 2748 from <#@[]> qp 16514 uid > >>> 7790 > >>> 01-07 07:15:08 new msg 5992748 > >>> 01-07 07:15:08 info msg 5992748: bytes 2623 from <#@[]> qp 16524 uid > >>> 7790 > >>> > >>> info msg 5993280: bytes 2747 from <#@[]> qp 1329 uid 7796 > >>> 01-07 07:15:28 starting delivery 511: msg 5992631 to local > >>> postmas...@mail.miodominio.it > >>> <mailto:postmas...@mail.miodominio.it> > >>> 01-07 07:15:28 status: local 2/10 remote 60/60 > >>> 01-07 07:15:28 delivery 510: success: did_0+1+0/qp_17982/ > >>> 01-07 07:15:28 status: local 1/10 remote 60/60 > >>> 01-07 07:15:28 new msg 4961868 > >>> 01-07 07:15:28 info msg 4961868: bytes 2657 from <#@[]> qp 2989 uid > >>> 7796 > >>> 01-07 07:15:28 end msg 5209073 > >>> 01-07 07:15:28 new msg 5993966 > >>> 01-07 07:15:28 info msg 5993966: bytes 3133 from <#@[]> qp 8580 uid > >>> 7796 > >>> 01-07 07:15:28 starting delivery 512: msg 5993280 to local > >>> postmas...@mail.miodominio.it > >>> <mailto:postmas...@mail.miodominio.it> > >>> 01-07 07:15:28 status: local 2/10 remote 60/60 > >>> 01-07 07:15:28 new msg 5993571 > >>> 01-07 07:15:28 info msg 5993571: bytes 2844 from <#@[]> qp 4724 uid > >>> 7790 > >>> 01-07 07:15:28 delivery 511: success: did_0+1+0/qp_17985/ > >>> 01-07 07:15:28 status: local 1/10 remote 60/60 > >>> 01-07 07:15:28 new msg 5992368 > >>> > >>> > >>> > >>> i have this version qmailtoaster: > >>> rpm -qa | grep toaster* > >>> ucspi-tcp-toaster-0.88-1.3.5 > >>> qmail-toaster-1.03-1.3.15 > >>> autorespond-toaster-2.0.4-1.3.3 > >>> qmailadmin-toaster-1.2.11-1.3.4 > >>> isoqlog-toaster-2.1-1.3.4 > >>> qmailtoaster-plus-0.3.0-1.4.4 > >>> daemontools-toaster-0.76-1.3.3 > >>> vpopmail-toaster-5.4.17-1.3.4 > >>> libsrs2-toaster-1.0.18-1.3.3 > >>> qmail-pop3d-toaster-1.03-1.3.15 > >>> courier-imap-toaster-4.1.2-1.3.7 > >>> control-panel-toaster-0.5-1.3.4 > >>> ezmlm-cgi-toaster-0.53.324-1.3.3 > >>> qmailmrtg-toaster-4.2-1.3.3 > >>> maildrop-toaster-devel-2.0.3-1.3.5 > >>> vqadmin-toaster-2.3.4-1.3.3 > >>> spamassassin-toaster-3.2.4-1.3.13 > >>> ripmime-toaster-1.4.0.6-1.3.3 > >>> clamav-toaster-0.95.2-1.3.30 > >>> libdomainkeys-toaster-0.68-1.3.3 > >>> courier-authlib-toaster-0.59.2-1.3.6 > >>> ezmlm-toaster-0.53.324-1.3.3 > >>> maildrop-toaster-2.0.3-1.3.5 > >>> squirrelmail-toaster-1.4.13-1.3.9 > >>> simscan-toaster-1.3.1-1.3.6 > >>> > >>> > >>> thanks > >>> > >> -- Eric Broch > >> White Horse Technical Consulting (WHTC) > >> > > > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com > > For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com > > > -- nhaya...@wats.gr.jp<nhaya...@wats.gr.jp> ibisMailで送信！
