Yes but I still need to sent out all that email. Is there anyway to do that? Is there any reason it has this much trouble? thanks tons for answering! Jared Wray Corbis Corporation Lead Web Systems Administrator Address: www.corbis.com Email: [EMAIL PROTECTED] Phone: 425.401.4320 -----Original Message----- From: Daniel Donnelly [mailto:[EMAIL PROTECTED]] Sent: None To: [EMAIL PROTECTED] Subject: Re: [IMail Forum] Stopping a hijacking by bulk mailers Tor, Move all the Q*.* files out of the spool directory. These are the ones IMail uses to queue and send the D*.* files. If you can shut down the SMTP service, at least IMail won't be able to send and you might gain control, but maybe not. If you can have someone on site stop all the IMail services, you may be able to move the files faster. Files in use are locked by IMail, so some won't move. ***Actually, if you rename the c:\imail\spool to cd:\imail\oldspool, that would be enough to stop IMail from trying to deliver email***. A new spool will be created, but that would be new email. If you cannot rename the directory, then get someone on site to take the machine off line and stop all services. A restart probably would get you back in fastest and as soon as it comes up, stop all IMail services and then move files or rename dir. Daniel Donnelly Ipswitch Technical Support ___________________________________________________________ | See our Knowledge Base at http://support.ipswitch.com/kb | In reply to 2 Jul message from [EMAIL PROTECTED]: >This weekend one of the domains at our imail server has been >hijacked by spammers sending bulk mail - the smtp setting was >allow anyone to send so I guess it was just a problem waiting >to happen. I have no idea how much mail is being sent but >since yesterday evening it's been taking about half an hour to >pick up a single message from the server, and it took 1 hour >to try to log on with PC Anywhere before it timed out and gave >up. So obviously there is a lot of mail traffic going >through. >Since this is a long weekend in Canada we don't have access to >tech support and to get someone to reboot our server at its >parked location. Normally we administer the server using PC >Anywhere, but due to the machine being low on resources >because of the massive bog down of the smtp services PC >Anywhere is not responding. >I am however able to access the server through ftp and get >file access to the imail directory and the winnt directory. >Is there a particular file I could rename/disable when >connected through ftp in order to shut down the smtp service >so that I can take control of the server again? >I have tried to delete pending outgoing messages from the >imail/spool directory but it says I don't have access to do so >- even though I am logged on as administrator through >ftpvoyager. >Thanks, >Tor >Please visit >http://www.ipswitch.com/support/mailing-lists.html to be >removed from this list. Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list.
