Re: [qmailtoaster] my qmailtoaster queue full, send a lot of spam

2019-01-08 Thread nhaya...@wats.gr.jp 
Hi,

1. Block the IP address by iptables.
2. It needs clear the queue.
3. restart qmail.

I think fastest recovery all clear the queue.
Then you can inform to the users.
These are point.

Regards,
Noriyuki Hayashi


> This could come from a web injection stop the web server. And check if things 
> still coming. 
> 
> > Il giorno 7 gen 2019, alle ore 22:12, Tony White  ha 
> > scritto:
> > 
> > Hi,
> >   This how I would try to fix it first.
> > 
> >   If you have cli access then try this command to see the ip address
> > that is sending the emails.
> > 
> > watch SMTP log
> > tail -n 25 -f /var/log/qmail/smtp/current | tai64nlocal
> > 
> > OR
> > 
> > watch SUBMISSION log
> > tail -n 25 -f /var/log/qmail/submission/current | tai64nlocal
> > 
> > OR try both if no obvious ip is visible.
> > 
> > look for the same ip many times in the list.
> > once you have the ip use iptables to block it.
> > 
> > iptables -I INPUT -s IP.ADDR.ESS -j DROP
> > 
> > Example
> > iptables -I INPUT -s 192.168.1.1 -j DROP
> > 
> > The queue will stop filling.
> > Clear the queue as per Eric's notes.
> > 
> > best wishes
> >  Tony White
> > 
> >> On 8/1/19 2:30 am, Giuseppe Perna wrote:
> >> 
> >> Thanks  Eric Broch for your replay,
> >> 
> >> yes, the queue is continuing to fill up even after password reset!!
> >> i reset password email and clear the queue  qmHandle -D , but i see the 
> >> log contains many emails that send mail to the whole world
> >> is there another queue where it allocates messages?
> >> 
> >> thanks
> >> 
> >> 
> >> Il giorno lun 7 gen 2019 alle ore 14:42 Eric Broch 
> >> mailto:ebr...@whitehorsetc.com>> ha scritto:
> >> 
> >>Clarification:
> >> 
> >>The queue is continuing to fill up even after password reset!?
> >> 
> >>If not:
> >> 
> >>I've used 'qmHandle -D' to delete all messages in the queue WITH THE 
> >> UNDERSTANDING THAT GOOD MESSAGES ARE DELETED AS
> >>WELL.
> >> 
> >> 
> >>>On 1/7/2019 12:15 AM, Giuseppe Perna wrote:
> >>>Hello,
> >>> 
> >>>qmailtoaster has a full tail,
> >>>qmHandle -L and qmHandle -l contains many emails that send mail to the 
> >>> whole world.
> >>>I reset the password for these email addresses, but the queues still 
> >>> fill up.
> >>> 
> >>>in qmlog -f send i see:
> >>> 
> >>>01-07 07:15:08 info msg 5012912: bytes 2911 from <#@[]> qp 16477 uid 
> >>> 7790
> >>>01-07 07:15:08 new msg 5077748
> >>>01-07 07:15:08 info msg 5077748: bytes 2705 from <#@[]> qp 16482 uid 
> >>> 7790
> >>>01-07 07:15:08 new msg 5992194
> >>>01-07 07:15:08 info msg 5992194: bytes 2748 from <#@[]> qp 16514 uid 
> >>> 7790
> >>>01-07 07:15:08 new msg 5992748
> >>>01-07 07:15:08 info msg 5992748: bytes 2623 from <#@[]> qp 16524 uid 
> >>> 7790
> >>> 
> >>>info msg 5993280: bytes 2747 from <#@[]> qp 1329 uid 7796
> >>>01-07 07:15:28 starting delivery 511: msg 5992631 to local 
> >>> postmas...@mail.miodominio.it
> >>>
> >>>01-07 07:15:28 status: local 2/10 remote 60/60
> >>>01-07 07:15:28 delivery 510: success: did_0+1+0/qp_17982/
> >>>01-07 07:15:28 status: local 1/10 remote 60/60
> >>>01-07 07:15:28 new msg 4961868
> >>>01-07 07:15:28 info msg 4961868: bytes 2657 from <#@[]> qp 2989 uid 
> >>> 7796
> >>>01-07 07:15:28 end msg 5209073
> >>>01-07 07:15:28 new msg 5993966
> >>>01-07 07:15:28 info msg 5993966: bytes 3133 from <#@[]> qp 8580 uid 
> >>> 7796
> >>>01-07 07:15:28 starting delivery 512: msg 5993280 to local 
> >>> postmas...@mail.miodominio.it
> >>>
> >>>01-07 07:15:28 status: local 2/10 remote 60/60
> >>>01-07 07:15:28 new msg 5993571
> >>>01-07 07:15:28 info msg 5993571: bytes 2844 from <#@[]> qp 4724 uid 
> >>> 7790
> >>>01-07 07:15:28 delivery 511: success: did_0+1+0/qp_17985/
> >>>01-07 07:15:28 status: local 1/10 remote 60/60
> >>>01-07 07:15:28 new msg 5992368
> >>> 
> >>> 
> >>> 
> >>>i have this version qmailtoaster:
> >>> rpm -qa | grep toaster*
> >>>ucspi-tcp-toaster-0.88-1.3.5
> >>>qmail-toaster-1.03-1.3.15
> >>>autorespond-toaster-2.0.4-1.3.3
> >>>qmailadmin-toaster-1.2.11-1.3.4
> >>>isoqlog-toaster-2.1-1.3.4
> >>>qmailtoaster-plus-0.3.0-1.4.4
> >>>daemontools-toaster-0.76-1.3.3
> >>>vpopmail-toaster-5.4.17-1.3.4
> >>>libsrs2-toaster-1.0.18-1.3.3
> >>>qmail-pop3d-toaster-1.03-1.3.15
> >>>courier-imap-toaster-4.1.2-1.3.7
> >>>control-panel-toaster-0.5-1.3.4
> >>>ezmlm-cgi-toaster-0.53.324-1.3.3
> >>>qmailmrtg-toaster-4.2-1.3.3
> >>>maildrop-toaster-devel-2.0.3-1.3.5
> >>>vqadmin-toaster-2.3.4-1.3.3
> >>>spamassassin-toaster-3.2.4-1.3.13
> >>>ripmime-toaster-1.4.0.6-1.3.3
> >>>clamav-toaster-0.95.2-1.3.30
> >>>libdomainkeys-toaster-0.68-1.3.3
> >>>courier-authlib-toaster-0.59.2-1.3.6
> >>>ezmlm-toaster-0.53.324-1.3.3
> >>>maildrop-toaster-2.0.3-1.3.5
> >>>

Re: [qmailtoaster] my qmailtoaster queue full, send a lot of spam

2019-01-08 Thread remo 
This could come from a web injection stop the web server. And check if things 
still coming. 

> Il giorno 7 gen 2019, alle ore 22:12, Tony White  ha scritto:
> 
> Hi,
>   This how I would try to fix it first.
> 
>   If you have cli access then try this command to see the ip address
> that is sending the emails.
> 
> watch SMTP log
> tail -n 25 -f /var/log/qmail/smtp/current | tai64nlocal
> 
> OR
> 
> watch SUBMISSION log
> tail -n 25 -f /var/log/qmail/submission/current | tai64nlocal
> 
> OR try both if no obvious ip is visible.
> 
> look for the same ip many times in the list.
> once you have the ip use iptables to block it.
> 
> iptables -I INPUT -s IP.ADDR.ESS -j DROP
> 
> Example
> iptables -I INPUT -s 192.168.1.1 -j DROP
> 
> The queue will stop filling.
> Clear the queue as per Eric's notes.
> 
> best wishes
>  Tony White
> 
>> On 8/1/19 2:30 am, Giuseppe Perna wrote:
>> 
>> Thanks  Eric Broch for your replay,
>> 
>> yes, the queue is continuing to fill up even after password reset!!
>> i reset password email and clear the queue  qmHandle -D , but i see the log 
>> contains many emails that send mail to the whole world
>> is there another queue where it allocates messages?
>> 
>> thanks
>> 
>> 
>> Il giorno lun 7 gen 2019 alle ore 14:42 Eric Broch > > ha scritto:
>> 
>>Clarification:
>> 
>>The queue is continuing to fill up even after password reset!?
>> 
>>If not:
>> 
>>I've used 'qmHandle -D' to delete all messages in the queue WITH THE 
>> UNDERSTANDING THAT GOOD MESSAGES ARE DELETED AS
>>WELL.
>> 
>> 
>>>On 1/7/2019 12:15 AM, Giuseppe Perna wrote:
>>>Hello,
>>> 
>>>qmailtoaster has a full tail,
>>>qmHandle -L and qmHandle -l contains many emails that send mail to the 
>>> whole world.
>>>I reset the password for these email addresses, but the queues still 
>>> fill up.
>>> 
>>>in qmlog -f send i see:
>>> 
>>>01-07 07:15:08 info msg 5012912: bytes 2911 from <#@[]> qp 16477 uid 7790
>>>01-07 07:15:08 new msg 5077748
>>>01-07 07:15:08 info msg 5077748: bytes 2705 from <#@[]> qp 16482 uid 7790
>>>01-07 07:15:08 new msg 5992194
>>>01-07 07:15:08 info msg 5992194: bytes 2748 from <#@[]> qp 16514 uid 7790
>>>01-07 07:15:08 new msg 5992748
>>>01-07 07:15:08 info msg 5992748: bytes 2623 from <#@[]> qp 16524 uid 7790
>>> 
>>>info msg 5993280: bytes 2747 from <#@[]> qp 1329 uid 7796
>>>01-07 07:15:28 starting delivery 511: msg 5992631 to local 
>>> postmas...@mail.miodominio.it
>>>
>>>01-07 07:15:28 status: local 2/10 remote 60/60
>>>01-07 07:15:28 delivery 510: success: did_0+1+0/qp_17982/
>>>01-07 07:15:28 status: local 1/10 remote 60/60
>>>01-07 07:15:28 new msg 4961868
>>>01-07 07:15:28 info msg 4961868: bytes 2657 from <#@[]> qp 2989 uid 7796
>>>01-07 07:15:28 end msg 5209073
>>>01-07 07:15:28 new msg 5993966
>>>01-07 07:15:28 info msg 5993966: bytes 3133 from <#@[]> qp 8580 uid 7796
>>>01-07 07:15:28 starting delivery 512: msg 5993280 to local 
>>> postmas...@mail.miodominio.it
>>>
>>>01-07 07:15:28 status: local 2/10 remote 60/60
>>>01-07 07:15:28 new msg 5993571
>>>01-07 07:15:28 info msg 5993571: bytes 2844 from <#@[]> qp 4724 uid 7790
>>>01-07 07:15:28 delivery 511: success: did_0+1+0/qp_17985/
>>>01-07 07:15:28 status: local 1/10 remote 60/60
>>>01-07 07:15:28 new msg 5992368
>>> 
>>> 
>>> 
>>>i have this version qmailtoaster:
>>> rpm -qa | grep toaster*
>>>ucspi-tcp-toaster-0.88-1.3.5
>>>qmail-toaster-1.03-1.3.15
>>>autorespond-toaster-2.0.4-1.3.3
>>>qmailadmin-toaster-1.2.11-1.3.4
>>>isoqlog-toaster-2.1-1.3.4
>>>qmailtoaster-plus-0.3.0-1.4.4
>>>daemontools-toaster-0.76-1.3.3
>>>vpopmail-toaster-5.4.17-1.3.4
>>>libsrs2-toaster-1.0.18-1.3.3
>>>qmail-pop3d-toaster-1.03-1.3.15
>>>courier-imap-toaster-4.1.2-1.3.7
>>>control-panel-toaster-0.5-1.3.4
>>>ezmlm-cgi-toaster-0.53.324-1.3.3
>>>qmailmrtg-toaster-4.2-1.3.3
>>>maildrop-toaster-devel-2.0.3-1.3.5
>>>vqadmin-toaster-2.3.4-1.3.3
>>>spamassassin-toaster-3.2.4-1.3.13
>>>ripmime-toaster-1.4.0.6-1.3.3
>>>clamav-toaster-0.95.2-1.3.30
>>>libdomainkeys-toaster-0.68-1.3.3
>>>courier-authlib-toaster-0.59.2-1.3.6
>>>ezmlm-toaster-0.53.324-1.3.3
>>>maildrop-toaster-2.0.3-1.3.5
>>>squirrelmail-toaster-1.4.13-1.3.9
>>>simscan-toaster-1.3.1-1.3.6
>>> 
>>> 
>>>thanks
>>> 
>>-- Eric Broch
>>White Horse Technical Consulting (WHTC)
>> 
> 
> 
> -
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 
-
To unsubscribe, e-mail:

Re: [qmailtoaster] my qmailtoaster queue full, send a lot of spam

2019-01-07 Thread Tony White 

Hi,
  This how I would try to fix it first.

  If you have cli access then try this command to see the ip address
that is sending the emails.

watch SMTP log
tail -n 25 -f /var/log/qmail/smtp/current | tai64nlocal

OR

watch SUBMISSION log
tail -n 25 -f /var/log/qmail/submission/current | tai64nlocal

OR try both if no obvious ip is visible.

look for the same ip many times in the list.
once you have the ip use iptables to block it.

iptables -I INPUT -s IP.ADDR.ESS -j DROP

Example
iptables -I INPUT -s 192.168.1.1 -j DROP

The queue will stop filling.
Clear the queue as per Eric's notes.

best wishes
  Tony White

On 8/1/19 2:30 am, Giuseppe Perna wrote:


Thanks  Eric Broch for your replay,

yes, the queue is continuing to fill up even after password reset!!
i reset password email and clear the queue  qmHandle -D , but i see the log contains many emails that send mail to the 
whole world

is there another queue where it allocates messages?

thanks


Il giorno lun 7 gen 2019 alle ore 14:42 Eric Broch mailto:ebr...@whitehorsetc.com>> ha scritto:

Clarification:

The queue is continuing to fill up even after password reset!?

If not:

I've used 'qmHandle -D' to delete all messages in the queue WITH THE 
UNDERSTANDING THAT GOOD MESSAGES ARE DELETED AS
WELL.


On 1/7/2019 12:15 AM, Giuseppe Perna wrote:

Hello,

qmailtoaster has a full tail,
qmHandle -L and qmHandle -l contains many emails that send mail to the 
whole world.
I reset the password for these email addresses, but the queues still fill 
up.

in qmlog -f send i see:

01-07 07:15:08 info msg 5012912: bytes 2911 from <#@[]> qp 16477 uid 7790
01-07 07:15:08 new msg 5077748
01-07 07:15:08 info msg 5077748: bytes 2705 from <#@[]> qp 16482 uid 7790
01-07 07:15:08 new msg 5992194
01-07 07:15:08 info msg 5992194: bytes 2748 from <#@[]> qp 16514 uid 7790
01-07 07:15:08 new msg 5992748
01-07 07:15:08 info msg 5992748: bytes 2623 from <#@[]> qp 16524 uid 7790

info msg 5993280: bytes 2747 from <#@[]> qp 1329 uid 7796
01-07 07:15:28 starting delivery 511: msg 5992631 to local 
postmas...@mail.miodominio.it

01-07 07:15:28 status: local 2/10 remote 60/60
01-07 07:15:28 delivery 510: success: did_0+1+0/qp_17982/
01-07 07:15:28 status: local 1/10 remote 60/60
01-07 07:15:28 new msg 4961868
01-07 07:15:28 info msg 4961868: bytes 2657 from <#@[]> qp 2989 uid 7796
01-07 07:15:28 end msg 5209073
01-07 07:15:28 new msg 5993966
01-07 07:15:28 info msg 5993966: bytes 3133 from <#@[]> qp 8580 uid 7796
01-07 07:15:28 starting delivery 512: msg 5993280 to local 
postmas...@mail.miodominio.it

01-07 07:15:28 status: local 2/10 remote 60/60
01-07 07:15:28 new msg 5993571
01-07 07:15:28 info msg 5993571: bytes 2844 from <#@[]> qp 4724 uid 7790
01-07 07:15:28 delivery 511: success: did_0+1+0/qp_17985/
01-07 07:15:28 status: local 1/10 remote 60/60
01-07 07:15:28 new msg 5992368



i have this version qmailtoaster:
 rpm -qa | grep toaster*
ucspi-tcp-toaster-0.88-1.3.5
qmail-toaster-1.03-1.3.15
autorespond-toaster-2.0.4-1.3.3
qmailadmin-toaster-1.2.11-1.3.4
isoqlog-toaster-2.1-1.3.4
qmailtoaster-plus-0.3.0-1.4.4
daemontools-toaster-0.76-1.3.3
vpopmail-toaster-5.4.17-1.3.4
libsrs2-toaster-1.0.18-1.3.3
qmail-pop3d-toaster-1.03-1.3.15
courier-imap-toaster-4.1.2-1.3.7
control-panel-toaster-0.5-1.3.4
ezmlm-cgi-toaster-0.53.324-1.3.3
qmailmrtg-toaster-4.2-1.3.3
maildrop-toaster-devel-2.0.3-1.3.5
vqadmin-toaster-2.3.4-1.3.3
spamassassin-toaster-3.2.4-1.3.13
ripmime-toaster-1.4.0.6-1.3.3
clamav-toaster-0.95.2-1.3.30
libdomainkeys-toaster-0.68-1.3.3
courier-authlib-toaster-0.59.2-1.3.6
ezmlm-toaster-0.53.324-1.3.3
maildrop-toaster-2.0.3-1.3.5
squirrelmail-toaster-1.4.13-1.3.9
simscan-toaster-1.3.1-1.3.6


thanks

-- 
Eric Broch

White Horse Technical Consulting (WHTC)




-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] my qmailtoaster queue full, send a lot of spam

2019-01-07 Thread Andrew Swartz 

Sounds suspicious for malware.

Check the logs (var/log/qmail/smtp/cur and the similar one for the 
submission port) to see if email is coming from outside the system.


If it is not from outside the system, then I would go looking for some 
sort of rogue running process (likely malware) which is injecting mail 
directly into the queue.  If this is occurring, you will likely need to 
reformat the drive and rebuild from scratch.


-Andy



On 1/7/2019 6:30 AM, Giuseppe Perna wrote:

Thanks  Eric Broch for your replay,

yes, the queue is continuing to fill up even after password reset!!
i reset password email and clear the queue  qmHandle -D , but i see the 
log contains many emails that send mail to the whole world

is there another queue where it allocates messages?

thanks


Il giorno lun 7 gen 2019 alle ore 14:42 Eric Broch 
mailto:ebr...@whitehorsetc.com>> ha scritto:


Clarification:

The queue is continuing to fill up even after password reset!?

If not:

I've used 'qmHandle -D' to delete all messages in the queue WITH THE
UNDERSTANDING THAT GOOD MESSAGES ARE DELETED AS WELL.


On 1/7/2019 12:15 AM, Giuseppe Perna wrote:

Hello,

qmailtoaster has a full tail,
qmHandle -L and qmHandle -l contains many emails that send mail to
the whole world.
I reset the password for these email addresses, but the queues
still fill up.

in qmlog -f send i see:

01-07 07:15:08 info msg 5012912: bytes 2911 from <#@[]> qp 16477
uid 7790
01-07 07:15:08 new msg 5077748
01-07 07:15:08 info msg 5077748: bytes 2705 from <#@[]> qp 16482
uid 7790
01-07 07:15:08 new msg 5992194
01-07 07:15:08 info msg 5992194: bytes 2748 from <#@[]> qp 16514
uid 7790
01-07 07:15:08 new msg 5992748
01-07 07:15:08 info msg 5992748: bytes 2623 from <#@[]> qp 16524
uid 7790

info msg 5993280: bytes 2747 from <#@[]> qp 1329 uid 7796
01-07 07:15:28 starting delivery 511: msg 5992631 to local
postmas...@mail.miodominio.it 
01-07 07:15:28 status: local 2/10 remote 60/60
01-07 07:15:28 delivery 510: success: did_0+1+0/qp_17982/
01-07 07:15:28 status: local 1/10 remote 60/60
01-07 07:15:28 new msg 4961868
01-07 07:15:28 info msg 4961868: bytes 2657 from <#@[]> qp 2989
uid 7796
01-07 07:15:28 end msg 5209073
01-07 07:15:28 new msg 5993966
01-07 07:15:28 info msg 5993966: bytes 3133 from <#@[]> qp 8580
uid 7796
01-07 07:15:28 starting delivery 512: msg 5993280 to local
postmas...@mail.miodominio.it 
01-07 07:15:28 status: local 2/10 remote 60/60
01-07 07:15:28 new msg 5993571
01-07 07:15:28 info msg 5993571: bytes 2844 from <#@[]> qp 4724
uid 7790
01-07 07:15:28 delivery 511: success: did_0+1+0/qp_17985/
01-07 07:15:28 status: local 1/10 remote 60/60
01-07 07:15:28 new msg 5992368



i have this version qmailtoaster:
 rpm -qa | grep toaster*
ucspi-tcp-toaster-0.88-1.3.5
qmail-toaster-1.03-1.3.15
autorespond-toaster-2.0.4-1.3.3
qmailadmin-toaster-1.2.11-1.3.4
isoqlog-toaster-2.1-1.3.4
qmailtoaster-plus-0.3.0-1.4.4
daemontools-toaster-0.76-1.3.3
vpopmail-toaster-5.4.17-1.3.4
libsrs2-toaster-1.0.18-1.3.3
qmail-pop3d-toaster-1.03-1.3.15
courier-imap-toaster-4.1.2-1.3.7
control-panel-toaster-0.5-1.3.4
ezmlm-cgi-toaster-0.53.324-1.3.3
qmailmrtg-toaster-4.2-1.3.3
maildrop-toaster-devel-2.0.3-1.3.5
vqadmin-toaster-2.3.4-1.3.3
spamassassin-toaster-3.2.4-1.3.13
ripmime-toaster-1.4.0.6-1.3.3
clamav-toaster-0.95.2-1.3.30
libdomainkeys-toaster-0.68-1.3.3
courier-authlib-toaster-0.59.2-1.3.6
ezmlm-toaster-0.53.324-1.3.3
maildrop-toaster-2.0.3-1.3.5
squirrelmail-toaster-1.4.13-1.3.9
simscan-toaster-1.3.1-1.3.6


thanks

-- 
Eric Broch

White Horse Technical Consulting (WHTC)



-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] my qmailtoaster queue full, send a lot of spam

2019-01-07 Thread Giuseppe Perna 
Thanks  Eric Broch for your replay,

yes, the queue is continuing to fill up even after password reset!!
i reset password email and clear the queue  qmHandle -D , but i see the log
contains many emails that send mail to the whole world
is there another queue where it allocates messages?

thanks


Il giorno lun 7 gen 2019 alle ore 14:42 Eric Broch 
ha scritto:

> Clarification:
>
> The queue is continuing to fill up even after password reset!?
>
> If not:
>
> I've used 'qmHandle -D' to delete all messages in the queue WITH THE
> UNDERSTANDING THAT GOOD MESSAGES ARE DELETED AS WELL.
>
>
> On 1/7/2019 12:15 AM, Giuseppe Perna wrote:
>
> Hello,
>
> qmailtoaster has a full tail,
> qmHandle -L and qmHandle -l contains many emails that send mail to the
> whole world.
> I reset the password for these email addresses, but the queues still fill
> up.
>
> in qmlog -f send i see:
>
> 01-07 07:15:08 info msg 5012912: bytes 2911 from <#@[]> qp 16477 uid 7790
> 01-07 07:15:08 new msg 5077748
> 01-07 07:15:08 info msg 5077748: bytes 2705 from <#@[]> qp 16482 uid 7790
> 01-07 07:15:08 new msg 5992194
> 01-07 07:15:08 info msg 5992194: bytes 2748 from <#@[]> qp 16514 uid 7790
> 01-07 07:15:08 new msg 5992748
> 01-07 07:15:08 info msg 5992748: bytes 2623 from <#@[]> qp 16524 uid 7790
>
> info msg 5993280: bytes 2747 from <#@[]> qp 1329 uid 7796
> 01-07 07:15:28 starting delivery 511: msg 5992631 to local
> postmas...@mail.miodominio.it
> 01-07 07:15:28 status: local 2/10 remote 60/60
> 01-07 07:15:28 delivery 510: success: did_0+1+0/qp_17982/
> 01-07 07:15:28 status: local 1/10 remote 60/60
> 01-07 07:15:28 new msg 4961868
> 01-07 07:15:28 info msg 4961868: bytes 2657 from <#@[]> qp 2989 uid 7796
> 01-07 07:15:28 end msg 5209073
> 01-07 07:15:28 new msg 5993966
> 01-07 07:15:28 info msg 5993966: bytes 3133 from <#@[]> qp 8580 uid 7796
> 01-07 07:15:28 starting delivery 512: msg 5993280 to local
> postmas...@mail.miodominio.it
> 01-07 07:15:28 status: local 2/10 remote 60/60
> 01-07 07:15:28 new msg 5993571
> 01-07 07:15:28 info msg 5993571: bytes 2844 from <#@[]> qp 4724 uid 7790
> 01-07 07:15:28 delivery 511: success: did_0+1+0/qp_17985/
> 01-07 07:15:28 status: local 1/10 remote 60/60
> 01-07 07:15:28 new msg 5992368
>
>
>
> i have this version qmailtoaster:
>  rpm -qa | grep toaster*
> ucspi-tcp-toaster-0.88-1.3.5
> qmail-toaster-1.03-1.3.15
> autorespond-toaster-2.0.4-1.3.3
> qmailadmin-toaster-1.2.11-1.3.4
> isoqlog-toaster-2.1-1.3.4
> qmailtoaster-plus-0.3.0-1.4.4
> daemontools-toaster-0.76-1.3.3
> vpopmail-toaster-5.4.17-1.3.4
> libsrs2-toaster-1.0.18-1.3.3
> qmail-pop3d-toaster-1.03-1.3.15
> courier-imap-toaster-4.1.2-1.3.7
> control-panel-toaster-0.5-1.3.4
> ezmlm-cgi-toaster-0.53.324-1.3.3
> qmailmrtg-toaster-4.2-1.3.3
> maildrop-toaster-devel-2.0.3-1.3.5
> vqadmin-toaster-2.3.4-1.3.3
> spamassassin-toaster-3.2.4-1.3.13
> ripmime-toaster-1.4.0.6-1.3.3
> clamav-toaster-0.95.2-1.3.30
> libdomainkeys-toaster-0.68-1.3.3
> courier-authlib-toaster-0.59.2-1.3.6
> ezmlm-toaster-0.53.324-1.3.3
> maildrop-toaster-2.0.3-1.3.5
> squirrelmail-toaster-1.4.13-1.3.9
> simscan-toaster-1.3.1-1.3.6
>
>
> thanks
>
> --
> Eric Broch
> White Horse Technical Consulting (WHTC)
>
>

Re: [qmailtoaster] my qmailtoaster queue full, send a lot of spam

2019-01-07 Thread Eric Broch 

Clarification:

The queue is continuing to fill up even after password reset!?

If not:

I've used 'qmHandle -D' to delete all messages in the queue WITH THE 
UNDERSTANDING THAT GOOD MESSAGES ARE DELETED AS WELL.



On 1/7/2019 12:15 AM, Giuseppe Perna wrote:

Hello,

qmailtoaster has a full tail,
qmHandle -L and qmHandle -l contains many emails that send mail to the 
whole world.
I reset the password for these email addresses, but the queues still 
fill up.


in qmlog -f send i see:

01-07 07:15:08 info msg 5012912: bytes 2911 from <#@[]> qp 16477 uid 7790
01-07 07:15:08 new msg 5077748
01-07 07:15:08 info msg 5077748: bytes 2705 from <#@[]> qp 16482 uid 7790
01-07 07:15:08 new msg 5992194
01-07 07:15:08 info msg 5992194: bytes 2748 from <#@[]> qp 16514 uid 7790
01-07 07:15:08 new msg 5992748
01-07 07:15:08 info msg 5992748: bytes 2623 from <#@[]> qp 16524 uid 7790

info msg 5993280: bytes 2747 from <#@[]> qp 1329 uid 7796
01-07 07:15:28 starting delivery 511: msg 5992631 to local 
postmas...@mail.miodominio.it 

01-07 07:15:28 status: local 2/10 remote 60/60
01-07 07:15:28 delivery 510: success: did_0+1+0/qp_17982/
01-07 07:15:28 status: local 1/10 remote 60/60
01-07 07:15:28 new msg 4961868
01-07 07:15:28 info msg 4961868: bytes 2657 from <#@[]> qp 2989 uid 7796
01-07 07:15:28 end msg 5209073
01-07 07:15:28 new msg 5993966
01-07 07:15:28 info msg 5993966: bytes 3133 from <#@[]> qp 8580 uid 7796
01-07 07:15:28 starting delivery 512: msg 5993280 to local 
postmas...@mail.miodominio.it 

01-07 07:15:28 status: local 2/10 remote 60/60
01-07 07:15:28 new msg 5993571
01-07 07:15:28 info msg 5993571: bytes 2844 from <#@[]> qp 4724 uid 7790
01-07 07:15:28 delivery 511: success: did_0+1+0/qp_17985/
01-07 07:15:28 status: local 1/10 remote 60/60
01-07 07:15:28 new msg 5992368



i have this version qmailtoaster:
 rpm -qa | grep toaster*
ucspi-tcp-toaster-0.88-1.3.5
qmail-toaster-1.03-1.3.15
autorespond-toaster-2.0.4-1.3.3
qmailadmin-toaster-1.2.11-1.3.4
isoqlog-toaster-2.1-1.3.4
qmailtoaster-plus-0.3.0-1.4.4
daemontools-toaster-0.76-1.3.3
vpopmail-toaster-5.4.17-1.3.4
libsrs2-toaster-1.0.18-1.3.3
qmail-pop3d-toaster-1.03-1.3.15
courier-imap-toaster-4.1.2-1.3.7
control-panel-toaster-0.5-1.3.4
ezmlm-cgi-toaster-0.53.324-1.3.3
qmailmrtg-toaster-4.2-1.3.3
maildrop-toaster-devel-2.0.3-1.3.5
vqadmin-toaster-2.3.4-1.3.3
spamassassin-toaster-3.2.4-1.3.13
ripmime-toaster-1.4.0.6-1.3.3
clamav-toaster-0.95.2-1.3.30
libdomainkeys-toaster-0.68-1.3.3
courier-authlib-toaster-0.59.2-1.3.6
ezmlm-toaster-0.53.324-1.3.3
maildrop-toaster-2.0.3-1.3.5
squirrelmail-toaster-1.4.13-1.3.9
simscan-toaster-1.3.1-1.3.6


thanks


--
Eric Broch
White Horse Technical Consulting (WHTC)

[qmailtoaster] my qmailtoaster queue full, send a lot of spam

2019-01-07 Thread Giuseppe Perna 
Hello,

qmailtoaster has a full tail,
qmHandle -L and qmHandle -l contains many emails that send mail to the
whole world.
I reset the password for these email addresses, but the queues still fill
up.

in qmlog -f send i see:

01-07 07:15:08 info msg 5012912: bytes 2911 from <#@[]> qp 16477 uid 7790
01-07 07:15:08 new msg 5077748
01-07 07:15:08 info msg 5077748: bytes 2705 from <#@[]> qp 16482 uid 7790
01-07 07:15:08 new msg 5992194
01-07 07:15:08 info msg 5992194: bytes 2748 from <#@[]> qp 16514 uid 7790
01-07 07:15:08 new msg 5992748
01-07 07:15:08 info msg 5992748: bytes 2623 from <#@[]> qp 16524 uid 7790

info msg 5993280: bytes 2747 from <#@[]> qp 1329 uid 7796
01-07 07:15:28 starting delivery 511: msg 5992631 to local
postmas...@mail.miodominio.it
01-07 07:15:28 status: local 2/10 remote 60/60
01-07 07:15:28 delivery 510: success: did_0+1+0/qp_17982/
01-07 07:15:28 status: local 1/10 remote 60/60
01-07 07:15:28 new msg 4961868
01-07 07:15:28 info msg 4961868: bytes 2657 from <#@[]> qp 2989 uid 7796
01-07 07:15:28 end msg 5209073
01-07 07:15:28 new msg 5993966
01-07 07:15:28 info msg 5993966: bytes 3133 from <#@[]> qp 8580 uid 7796
01-07 07:15:28 starting delivery 512: msg 5993280 to local
postmas...@mail.miodominio.it
01-07 07:15:28 status: local 2/10 remote 60/60
01-07 07:15:28 new msg 5993571
01-07 07:15:28 info msg 5993571: bytes 2844 from <#@[]> qp 4724 uid 7790
01-07 07:15:28 delivery 511: success: did_0+1+0/qp_17985/
01-07 07:15:28 status: local 1/10 remote 60/60
01-07 07:15:28 new msg 5992368



i have this version qmailtoaster:
 rpm -qa | grep toaster*
ucspi-tcp-toaster-0.88-1.3.5
qmail-toaster-1.03-1.3.15
autorespond-toaster-2.0.4-1.3.3
qmailadmin-toaster-1.2.11-1.3.4
isoqlog-toaster-2.1-1.3.4
qmailtoaster-plus-0.3.0-1.4.4
daemontools-toaster-0.76-1.3.3
vpopmail-toaster-5.4.17-1.3.4
libsrs2-toaster-1.0.18-1.3.3
qmail-pop3d-toaster-1.03-1.3.15
courier-imap-toaster-4.1.2-1.3.7
control-panel-toaster-0.5-1.3.4
ezmlm-cgi-toaster-0.53.324-1.3.3
qmailmrtg-toaster-4.2-1.3.3
maildrop-toaster-devel-2.0.3-1.3.5
vqadmin-toaster-2.3.4-1.3.3
spamassassin-toaster-3.2.4-1.3.13
ripmime-toaster-1.4.0.6-1.3.3
clamav-toaster-0.95.2-1.3.30
libdomainkeys-toaster-0.68-1.3.3
courier-authlib-toaster-0.59.2-1.3.6
ezmlm-toaster-0.53.324-1.3.3
maildrop-toaster-2.0.3-1.3.5
squirrelmail-toaster-1.4.13-1.3.9
simscan-toaster-1.3.1-1.3.6


thanks