Re: mailbombed
On Tue, Jul 17, 2001 at 03:51:22PM -0700, Adam McKenna wrote: On Tue, Jul 17, 2001 at 09:42:14AM -0700, Jon Rust wrote: A user on a mailserver that we secondary for (don't get me started) has been mailbombed. Currently there are literally 10's of thousands of messages in my queue trying to deliver to him. My mail server's running at a oad of 8 right now. How can I clear out all these messages easily? They are all the same size, so I could use find to look through mess for the file names, then remove them from mess, info and remote. Does that work? Should I stop qmail-send before doing this? Add the domain to virtualdomains, like so: domain.com:alias-domain then create ~alias/.qmail-domain-default with a single hash (#) mark in it. then add a smtproute to localhost for the domain and restart qmail-send. The only problem with this is that all messages for that domain will be deleted, not just the person who got mailbombed. Thanks Adam. Of course, it took many hours to get this from you. The total count of messages was close to 250,000, and my mail server has been almost useless today. I used this technique after someone (dek IIRC) in the #qmail IRC channel pointed me to http://www.faqts.com/knowledge_base/view.phtml/aid/1443 Anyway, it's been running all day with the new smtproute and the alias entry. Logs confirm the messages are being delivered. I'm all the way down to 140,000 queued msgs now. That's after about 7 hours worth of processing. For future reference, how unsafe is just removing the files from mess, info, and remote with qmail running? sigh... last pid: 55460; load averages: 8.54, 7.28, 7.94 up 42+00:28:06 17:00:12 181 processes: 2 running, 179 sleeping CPU states: 81.9% user, 0.4% nice, 9.2% system, 2.7% interrupt, 5.8% idle Thanks again! jon
Re: mailbombed
On Tue, Jul 17, 2001 at 05:03:34PM -0700, Jon Rust wrote: Anyway, it's been running all day with the new smtproute and the alias entry. Logs confirm the messages are being delivered. I'm all the way down to 140,000 queued msgs now. That's after about 7 hours worth of processing. For future reference, how unsafe is just removing the files from mess, info, and remote with qmail running? It's extremely unsafe -- you will destroy your queue. You shouldn't have to worry about stopping qmail long enough to do this, tho, it will only generate a few deferrals, even on a moderately busy mailserver. GW -- Greg White Those who make peaceful revolution impossible will make violent revolution inevitable. -- John F. Kennedy
Re: mailbombed
On Tue, Jul 17, 2001 at 05:03:34PM -0700, Jon Rust wrote: Anyway, it's been running all day with the new smtproute and the alias entry. Logs confirm the messages are being delivered. I'm all the way down to 140,000 queued msgs now. That's after about 7 hours worth of processing. For future reference, how unsafe is just removing the files from mess, info, and remote with qmail running? You might also try increasing concurrencylocal, to speed things up. --Adam -- Adam McKenna [EMAIL PROTECTED] | Sign the Fernando Petition! http://flounder.net/publickey.html | http://www.mickaboofriends.org GPG: 17A4 11F7 5E7E C2E7 08AA| 38B0 05D0 8BF7 2C6D 110A|
Re: mailbombed
On Tue, Jul 17, 2001 at 03:51:00PM -0700, Adam McKenna wrote: On Tue, Jul 17, 2001 at 09:42:14AM -0700, Jon Rust wrote: A user on a mailserver that we secondary for (don't get me started) has been mailbombed. Currently there are literally 10's of thousands of messages in my queue trying to deliver to him. My mail server's running at a oad of 8 right now. How can I clear out all these messages easily? They are all the same size, so I could use find to look through mess for the file names, then remove them from mess, info and remote. Does that work? Should I stop qmail-send before doing this? Add the domain to virtualdomains, like so: domain.com:alias-domain [...] The only problem with this is that all messages for that domain will be deleted, not just the person who got mailbombed. Why delete all messages for that domain when you can handle messages just for that user? [EMAIL PROTECTED]:alias-domain man qmail-send
Re: mailbombed
Add the domain to virtualdomains, like so: domain.com:alias-domain then create ~alias/.qmail-domain-default with a single hash (#) mark in it. then add a smtproute to localhost for the domain and restart qmail-send. The only problem with this is that all messages for that domain will be deleted, not just the person who got mailbombed. What would the solution be if he was running qmail/ldap/courier-imap? _ Get your FREE download of MSN Explorer at http://explorer.msn.com
Re: mailbombed
Jon, we recently had a similar problem (but not exactly) and ran into a cool python util we found on the qmail homepage: It goes through the queue and moves the files into a filter dir, and you can do what you want with them from there.. http://www.redwoodsoft.com/~dru/programs/mailRemove.py You can specify a string and it will move those mails with that string. On Tue, 17 Jul 2001, Jon Rust wrote: A user on a mailserver that we secondary for (don't get me started) has been mailbombed. Currently there are literally 10's of thousands of messages in my queue trying to deliver to him. My mail server's running at a oad of 8 right now. How can I clear out all these messages easily? They are all the same size, so I could use find to look through mess for the file names, then remove them from mess, info and remote. Does that work? Should I stop qmail-send before doing this? THanks, jon -- John Gonzalez / [EMAIL PROTECTED] / [EMAIL PROTECTED] Tularosa Communications, Inc. (505) 439-0200 voice / (505) 443-1228 fax http://www.tularosa.net / ASN 11711 / JG6416 [--[ sys info ]---] 5:10pm up 313 days, 22:39, 4 users, load average: 0.24, 0.37, 0.28
