This could come from a web injection stop the web server. And check if things still coming.
> Il giorno 7 gen 2019, alle ore 22:12, Tony White <t...@ycs.com.au> ha scritto: > > Hi, > This how I would try to fix it first. > > If you have cli access then try this command to see the ip address > that is sending the emails. > > watch SMTP log > tail -n 25 -f /var/log/qmail/smtp/current | tai64nlocal > > OR > > watch SUBMISSION log > tail -n 25 -f /var/log/qmail/submission/current | tai64nlocal > > OR try both if no obvious ip is visible. > > look for the same ip many times in the list. > once you have the ip use iptables to block it. > > iptables -I INPUT -s IP.ADDR.ESS -j DROP > > Example > iptables -I INPUT -s 192.168.1.1 -j DROP > > The queue will stop filling. > Clear the queue as per Eric's notes. > > best wishes > Tony White > >> On 8/1/19 2:30 am, Giuseppe Perna wrote: >> >> Thanks Eric Broch for your replay, >> >> yes, the queue is continuing to fill up even after password reset!! >> i reset password email and clear the queue qmHandle -D , but i see the log >> contains many emails that send mail to the whole world >> is there another queue where it allocates messages? >> >> thanks >> >> >> Il giorno lun 7 gen 2019 alle ore 14:42 Eric Broch <ebr...@whitehorsetc.com >> <mailto:ebr...@whitehorsetc.com>> ha scritto: >> >> Clarification: >> >> The queue is continuing to fill up even after password reset!? >> >> If not: >> >> I've used 'qmHandle -D' to delete all messages in the queue WITH THE >> UNDERSTANDING THAT GOOD MESSAGES ARE DELETED AS >> WELL. >> >> >>> On 1/7/2019 12:15 AM, Giuseppe Perna wrote: >>> Hello, >>> >>> qmailtoaster has a full tail, >>> qmHandle -L and qmHandle -l contains many emails that send mail to the >>> whole world. >>> I reset the password for these email addresses, but the queues still >>> fill up. >>> >>> in qmlog -f send i see: >>> >>> 01-07 07:15:08 info msg 5012912: bytes 2911 from <#@[]> qp 16477 uid 7790 >>> 01-07 07:15:08 new msg 5077748 >>> 01-07 07:15:08 info msg 5077748: bytes 2705 from <#@[]> qp 16482 uid 7790 >>> 01-07 07:15:08 new msg 5992194 >>> 01-07 07:15:08 info msg 5992194: bytes 2748 from <#@[]> qp 16514 uid 7790 >>> 01-07 07:15:08 new msg 5992748 >>> 01-07 07:15:08 info msg 5992748: bytes 2623 from <#@[]> qp 16524 uid 7790 >>> >>> info msg 5993280: bytes 2747 from <#@[]> qp 1329 uid 7796 >>> 01-07 07:15:28 starting delivery 511: msg 5992631 to local >>> postmas...@mail.miodominio.it >>> <mailto:postmas...@mail.miodominio.it> >>> 01-07 07:15:28 status: local 2/10 remote 60/60 >>> 01-07 07:15:28 delivery 510: success: did_0+1+0/qp_17982/ >>> 01-07 07:15:28 status: local 1/10 remote 60/60 >>> 01-07 07:15:28 new msg 4961868 >>> 01-07 07:15:28 info msg 4961868: bytes 2657 from <#@[]> qp 2989 uid 7796 >>> 01-07 07:15:28 end msg 5209073 >>> 01-07 07:15:28 new msg 5993966 >>> 01-07 07:15:28 info msg 5993966: bytes 3133 from <#@[]> qp 8580 uid 7796 >>> 01-07 07:15:28 starting delivery 512: msg 5993280 to local >>> postmas...@mail.miodominio.it >>> <mailto:postmas...@mail.miodominio.it> >>> 01-07 07:15:28 status: local 2/10 remote 60/60 >>> 01-07 07:15:28 new msg 5993571 >>> 01-07 07:15:28 info msg 5993571: bytes 2844 from <#@[]> qp 4724 uid 7790 >>> 01-07 07:15:28 delivery 511: success: did_0+1+0/qp_17985/ >>> 01-07 07:15:28 status: local 1/10 remote 60/60 >>> 01-07 07:15:28 new msg 5992368 >>> >>> >>> >>> i have this version qmailtoaster: >>> rpm -qa | grep toaster* >>> ucspi-tcp-toaster-0.88-1.3.5 >>> qmail-toaster-1.03-1.3.15 >>> autorespond-toaster-2.0.4-1.3.3 >>> qmailadmin-toaster-1.2.11-1.3.4 >>> isoqlog-toaster-2.1-1.3.4 >>> qmailtoaster-plus-0.3.0-1.4.4 >>> daemontools-toaster-0.76-1.3.3 >>> vpopmail-toaster-5.4.17-1.3.4 >>> libsrs2-toaster-1.0.18-1.3.3 >>> qmail-pop3d-toaster-1.03-1.3.15 >>> courier-imap-toaster-4.1.2-1.3.7 >>> control-panel-toaster-0.5-1.3.4 >>> ezmlm-cgi-toaster-0.53.324-1.3.3 >>> qmailmrtg-toaster-4.2-1.3.3 >>> maildrop-toaster-devel-2.0.3-1.3.5 >>> vqadmin-toaster-2.3.4-1.3.3 >>> spamassassin-toaster-3.2.4-1.3.13 >>> ripmime-toaster-1.4.0.6-1.3.3 >>> clamav-toaster-0.95.2-1.3.30 >>> libdomainkeys-toaster-0.68-1.3.3 >>> courier-authlib-toaster-0.59.2-1.3.6 >>> ezmlm-toaster-0.53.324-1.3.3 >>> maildrop-toaster-2.0.3-1.3.5 >>> squirrelmail-toaster-1.4.13-1.3.9 >>> simscan-toaster-1.3.1-1.3.6 >>> >>> >>> thanks >>> >> -- Eric Broch >> White Horse Technical Consulting (WHTC) >> > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com > For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com >
--------------------------------------------------------------------- To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
