Jim
Look at the qmHandle -Sf
It deletes email 'from' a certain account
or qmHandle -St
'to' account
Eric
On 1/18/2016 3:51 PM, Jim Shupert wrote:
thanks all good info
I have done
/var/qmail/bin/qmail-qread
and using a from that i do a
find /var/qmail/queue -name | xargs cat |
thanks all good info
I have done
/var/qmail/bin/qmail-qread
and using a from that i do a
find /var/qmail/queue -name | xargs cat | less
Where is the ~8 digit ID specified on the
/var/qmail/bin/qmail-qread command.
/var/qmail/bin/qmail-qstat
( i have many in q )
I pumped
Some other thoughts:
1. Consider how secure your router/firewall is. There are lots of
DefCon talks on Youtube where they hack into routers running linux
firmware and install malware. Therefore don't overlook the possibility
that your router is the culprit.
2. Tighten up your firewall rules
i will try the
check the qmail queue
monitor the send log or use tcpdump to check connections to the server.
I am now Off the blacklist so it is not such a Bright red matter ...
I also am going to be vigelant to dlt unused accounts
( personnel changes and there ya go unattended account
thanks for the advice and the ...condolence.
Yes, I am saddened ( sinking feeling here )
best wishes thanks again
On 1/14/2016 9:48 PM, Eric wrote:
I get a sinking feeling when this happens. This has happened three
times and every time the domains have been blacklisted and it has
always been
Hi Jim,
You can do several things. First, on your internet firewall block all
outgoing SMTP traffic not originating from your email server. This will
prevent PC's from sending spam directly out the firewall. Two, check the
qmail queue for the possibility of a hacked password. Usually when
I get a sinking feeling when this happens. This has happened three times
and every time the domains have been blacklisted and it has always been
a hacked password and someone externally is using the hacked account to
send email.
On 1/14/2016 4:12 PM, Jim Shupert wrote:
it seems that my mail
it seems that my mail server does appear on a blacklist .
spamcop
If I use mxtoolkit
https://mxtoolbox.com
under "more information" it says
The SpamCop Blocking List lists IP Addresses which have sent unsolicited
email to SpamCop users. This is often an indication of a Virus or Botnet
from a