Re: No,there are 144000 mails in my queue!!!
At 11:09 PM 12/15/00 +0800, jf wrote: >Most of them are the same. > >Pls tell me how to deal with it. > >I have put the mail from address to the badmailfrom,but it wouldn't stop. > >I hate Sparm have you run the rblsmtpd also ?
Re: No,there are 144000 mails in my queue!!!
I think that you can also temporarily shorten the time settings for qmail to return mail within a few hours. Most legitimate mail will be delivered, but "stuck" mail will get bounced more quickly. - Original Message - From: "Charles Cazabon" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, December 15, 2000 9:50 AM Subject: Re: No,there are 144000 mails in my queue!!! > jf <[EMAIL PROTECTED]> wrote: > >Most of them are the same. > >Pls tell me how to deal with it. > > There are several approaches you can take: > > 1. Wait it out. Those messages will eventually all be bounced or delivered, > and your queue will drop back to 0 messages. This will take time. > > 2. Stop qmail and qmail-smtpd. Use qmHandle (www.qmail.org) to remove the > messages from the queue. Restart qmail and qmail-smtpd. You may have to > repeat this process if the spammer continues to use your domain as his > envelope sender, which is what I assume is causing this. > > 3. Stop accepting all mail temporarily, bouncing it all immediately. > You could do this by doing: > cp /var/qmail/control/rcpthosts /var/qmail/control/rcpthosts.save > echo "" >/var/qmail/control/rcpthosts > This will affect legitimate mail for you as well. > > Charles > -- > --- > Charles Cazabon<[EMAIL PROTECTED]> > GPL'ed software available at: http://www.qcc.sk.ca/~charlesc/software/ > Any opinions expressed are just that -- my opinions. > --- >
Re: No,there are 144000 mails in my queue!!!
JF, I just had to deal with the same problem. It was a dictionary spam is what somebody called it. On my server, they where in the remote outgoing queue, but I believe the fix is the same. Keep in mind, I had never worked with python, and the little script was a python script. Luckily, my server already had python installed. The non-existant documentation meant I had to trial and error this, but here is a summary of what I did. Go to this location, and get this script onto your server, I put mine in /var/qmail/bin. http://www.redwoodsoft.com/~dru/programs/mailRemove.py Make it executable. chmod +x mailRemove.py Create the directory filter under qmail/queue. Mine was like this mkdir /var/qmail/queue/filter Next run the script in a test-only mode. You can CTRL-C out of it. python mailRemove.py [search-string] Since all my spam flood was from [EMAIL PROTECTED] my command looked like this, python mailRemove.py registrar If this runs, then you can do this for real. It moves the spam into the filter directory. I halted both qmail-send and smtp before doing this. Like this. python mailRemove.py --real registrar I had 28000 spams, and it took about 5 hours to remove 18000 of these. This server was only a 486/100, 32meg ram. Hopefully it will be lots faster on a better machine. While I am here, I wish to thank Mark and Markus for your help yesterday regarding my problem. Sam - Original Message - From: "jf" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, December 15, 2000 9:09 AM Subject: No,there are 144000 mails in my queue!!! Most of them are the same. Pls tell me how to deal with it. I have put the mail from address to the badmailfrom,but it wouldn't stop. I hate Sparm === ΪÄã¶ø½¨£¬ÎªÄã¶øÉ裬ÈÃÄã´«µÝÕæÐÄÕæÒâ 163.netºØ¿¨Õ¾£¨http://ecard.163.net£© 163µç×ÓÓʾÖȫзîÏ×£¬¾«²ÊÎÞÏ޵ĵç×Ӻؿ¨Õ¾¡£ ===
Re: No,there are 144000 mails in my queue!!!
jf <[EMAIL PROTECTED]> wrote: >Most of them are the same. >Pls tell me how to deal with it. There are several approaches you can take: 1. Wait it out. Those messages will eventually all be bounced or delivered, and your queue will drop back to 0 messages. This will take time. 2. Stop qmail and qmail-smtpd. Use qmHandle (www.qmail.org) to remove the messages from the queue. Restart qmail and qmail-smtpd. You may have to repeat this process if the spammer continues to use your domain as his envelope sender, which is what I assume is causing this. 3. Stop accepting all mail temporarily, bouncing it all immediately. You could do this by doing: cp /var/qmail/control/rcpthosts /var/qmail/control/rcpthosts.save echo "" >/var/qmail/control/rcpthosts This will affect legitimate mail for you as well. Charles -- --- Charles Cazabon<[EMAIL PROTECTED]> GPL'ed software available at: http://www.qcc.sk.ca/~charlesc/software/ Any opinions expressed are just that -- my opinions. ---
No,there are 144000 mails in my queue!!!
Most of them are the same. Pls tell me how to deal with it. I have put the mail from address to the badmailfrom,but it wouldn't stop. I hate Sparm === ΪÄã¶ø½¨£¬ÎªÄã¶øÉ裬ÈÃÄã´«µÝÕæÐÄÕæÒâ 163.netºØ¿¨Õ¾£¨http://ecard.163.net£© 163µç×ÓÓʾÖȫзîÏ×£¬¾«²ÊÎÞÏ޵ĵç×Ӻؿ¨Õ¾¡£ ===
