Re: mailbombed
On Tue, Jul 17, 2001 at 03:51:00PM -0700, Adam McKenna wrote: > On Tue, Jul 17, 2001 at 09:42:14AM -0700, Jon Rust wrote: > > A user on a mailserver that we secondary for (don't get me started) has > > been mailbombed. Currently there are literally 10's of thousands of > > messages in my queue trying to deliver to him. My mail server's running > > at a oad of 8 right now. How can I clear out all these messages easily? > > They are all the same size, so I could use find to look through mess for > > the file names, then remove them from mess, info and remote. Does that > > work? Should I stop qmail-send before doing this? > > Add the domain to virtualdomains, like so: > > domain.com:alias-domain > [...] The > only problem with this is that all messages for that domain will be deleted, > not just the person who got mailbombed. Why delete all messages for that domain when you can handle messages just for that user? [EMAIL PROTECTED]:alias-domain man qmail-send
Re: mailbombed
On Tue, Jul 17, 2001 at 05:03:34PM -0700, Jon Rust wrote: > Anyway, it's been running all day with the new smtproute and the alias > entry. Logs confirm the messages are being "delivered." I'm all the way > down to 140,000 queued msgs now. That's after about 7 hours worth of > processing. For future reference, how unsafe is just removing the files > from mess, info, and remote with qmail running? You might also try increasing concurrencylocal, to speed things up. --Adam -- Adam McKenna <[EMAIL PROTECTED]> | Sign the Fernando Petition! http://flounder.net/publickey.html | http://www.mickaboofriends.org GPG: 17A4 11F7 5E7E C2E7 08AA| 38B0 05D0 8BF7 2C6D 110A|
Re: mailbombed
On Tue, Jul 17, 2001 at 05:03:34PM -0700, Jon Rust wrote: > Anyway, it's been running all day with the new smtproute and the alias > entry. Logs confirm the messages are being "delivered." I'm all the way > down to 140,000 queued msgs now. That's after about 7 hours worth of > processing. For future reference, how unsafe is just removing the files > from mess, info, and remote with qmail running? > It's extremely unsafe -- you will destroy your queue. You shouldn't have to worry about stopping qmail long enough to do this, tho, it will only generate a few deferrals, even on a moderately busy mailserver. GW -- Greg White Those who make peaceful revolution impossible will make violent revolution inevitable. -- John F. Kennedy
Re: mailbombed
On Tue, Jul 17, 2001 at 03:51:22PM -0700, Adam McKenna wrote:
> On Tue, Jul 17, 2001 at 09:42:14AM -0700, Jon Rust wrote:
> > A user on a mailserver that we secondary for (don't get me started) has
> > been mailbombed. Currently there are literally 10's of thousands of
> > messages in my queue trying to deliver to him. My mail server's running
> > at a oad of 8 right now. How can I clear out all these messages easily?
> > They are all the same size, so I could use find to look through mess for
> > the file names, then remove them from mess, info and remote. Does that
> > work? Should I stop qmail-send before doing this?
>
> Add the domain to virtualdomains, like so:
>
> domain.com:alias-domain
>
> then create ~alias/.qmail-domain-default with a single hash ("#") mark in it.
>
> then add a smtproute to localhost for the domain and restart qmail-send. The
> only problem with this is that all messages for that domain will be deleted,
> not just the person who got mailbombed.
Thanks Adam. Of course, it took many hours to get this from you. The
total count of messages was close to 250,000, and my mail server has
been almost useless today. I used this technique after someone (dek
IIRC) in the #qmail IRC channel pointed me to
http://www.faqts.com/knowledge_base/view.phtml/aid/1443
Anyway, it's been running all day with the new smtproute and the alias
entry. Logs confirm the messages are being "delivered." I'm all the way
down to 140,000 queued msgs now. That's after about 7 hours worth of
processing. For future reference, how unsafe is just removing the files
from mess, info, and remote with qmail running?
sigh...
last pid: 55460; load averages: 8.54, 7.28, 7.94 up 42+00:28:06 17:00:12
181 processes: 2 running, 179 sleeping
CPU states: 81.9% user, 0.4% nice, 9.2% system, 2.7% interrupt, 5.8% idle
Thanks again!
jon
Re: mailbombed
> "Jon" == Jon Rust <[EMAIL PROTECTED]> writes:
> How can I clear out all these messages easily?
Perl or bash/sed? A simple:
qmail-qread | perl -we "while (<>) { grab the message id using a regex
and kill the item in the queue with the queue utilities available from
www.qmail.org and a system() call; }"
would do it. It's been done before...
--
"I'm not dumb. I just have a command of throughly useless
information."
- Calvin, of Calvin and Hobbes
Re: Fw: mailbombed
Just a little re-work of the other one. One deny if they are listed. This allow only if they are listed. |if test -n "`fgrep -x $SENDER allowfrom`"; then echo Allowed; exit 0; else exit 99; fi ./Maildir/ As with anything. No warranty. - Original Message - From: "Pat Collins" <[EMAIL PROTECTED]> To: "Bob Ross" <[EMAIL PROTECTED]>; "Qmail-List" <[EMAIL PROTECTED]> Sent: Tuesday, July 17, 2001 6:53 PM Subject: Re: Fw: mailbombed > I like that idea, please post. > > Pat > > On Tue, 17 Jul 2001 16:04:56 -0700, "Bob Ross" <[EMAIL PROTECTED]> wrote : > > > > > There is another, but I will have to dig it up to only accept email from > > certain senders. We use that for our kids. They only receive email from > > those that we approve. > >
Re: Fw: mailbombed
I like that idea, please post. Pat On Tue, 17 Jul 2001 16:04:56 -0700, "Bob Ross" <[EMAIL PROTECTED]> wrote : > > There is another, but I will have to dig it up to only accept email from > certain senders. We use that for our kids. They only receive email from > those that we approve.
Re: mailbombed
Jon, we recently had a similar problem (but not exactly) and ran into a cool python util we found on the qmail homepage: It goes through the queue and moves the files into a filter dir, and you can do what you want with them from there.. http://www.redwoodsoft.com/~dru/programs/mailRemove.py You can specify a string and it will move those mails with that string. On Tue, 17 Jul 2001, Jon Rust wrote: > A user on a mailserver that we secondary for (don't get me started) has > been mailbombed. Currently there are literally 10's of thousands of > messages in my queue trying to deliver to him. My mail server's running > at a oad of 8 right now. How can I clear out all these messages easily? > They are all the same size, so I could use find to look through mess for > the file names, then remove them from mess, info and remote. Does that > work? Should I stop qmail-send before doing this? > > THanks, > jon > -- John Gonzalez / [EMAIL PROTECTED] / [EMAIL PROTECTED] Tularosa Communications, Inc. (505) 439-0200 voice / (505) 443-1228 fax http://www.tularosa.net / ASN 11711 / JG6416 [--[ sys info ]---] 5:10pm up 313 days, 22:39, 4 users, load average: 0.24, 0.37, 0.28
Fw: mailbombed
In the user directory open up .qmail put the following string 2 lines, I use
Maildir here, yes that's a dot in front of /Maildir and a broken pipe in
front of if
|if test -n "`fgrep -x $SENDER badmailfrom`"; then echo Go Away; exit 99;
else e; fi
./Maildir/
Then put the senders email address in the badmailfrom file in the user
directory, and it will delete every one of them.
There is another, but I will have to dig it up to only accept email from
certain senders. We use that for our kids. They only receive email from
those that we approve.
- Original Message -
From: "Adam McKenna" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, July 17, 2001 3:51 PM
Subject: Re: mailbombed
> On Tue, Jul 17, 2001 at 09:42:14AM -0700, Jon Rust wrote:
> > A user on a mailserver that we secondary for (don't get me started) has
> > been mailbombed. Currently there are literally 10's of thousands of
> > messages in my queue trying to deliver to him. My mail server's running
> > at a oad of 8 right now. How can I clear out all these messages easily?
> > They are all the same size, so I could use find to look through mess for
> > the file names, then remove them from mess, info and remote. Does that
> > work? Should I stop qmail-send before doing this?
>
> Add the domain to virtualdomains, like so:
>
> domain.com:alias-domain
>
> then create ~alias/.qmail-domain-default with a single hash ("#") mark in
it.
>
> then add a smtproute to localhost for the domain and restart qmail-send.
The
> only problem with this is that all messages for that domain will be
deleted,
> not just the person who got mailbombed.
>
> --Adam
>
> --
> Adam McKenna <[EMAIL PROTECTED]> | Sign the Fernando Petition!
> http://flounder.net/publickey.html | http://www.mickaboofriends.org
> GPG: 17A4 11F7 5E7E C2E7 08AA|
> 38B0 05D0 8BF7 2C6D 110A|
>
Re: mailbombed
>Add the domain to virtualdomains, like so:
>
>domain.com:alias-domain
>
>then create ~alias/.qmail-domain-default with a single hash ("#") mark in
>it.
>
>then add a smtproute to localhost for the domain and restart qmail-send.
>The
>only problem with this is that all messages for that domain will be
>deleted,
>not just the person who got mailbombed.
What would the solution be if he was running qmail/ldap/courier-imap?
_
Get your FREE download of MSN Explorer at http://explorer.msn.com
Re: mailbombed
On Tue, Jul 17, 2001 at 09:42:14AM -0700, Jon Rust wrote:
> A user on a mailserver that we secondary for (don't get me started) has
> been mailbombed. Currently there are literally 10's of thousands of
> messages in my queue trying to deliver to him. My mail server's running
> at a oad of 8 right now. How can I clear out all these messages easily?
> They are all the same size, so I could use find to look through mess for
> the file names, then remove them from mess, info and remote. Does that
> work? Should I stop qmail-send before doing this?
Add the domain to virtualdomains, like so:
domain.com:alias-domain
then create ~alias/.qmail-domain-default with a single hash ("#") mark in it.
then add a smtproute to localhost for the domain and restart qmail-send. The
only problem with this is that all messages for that domain will be deleted,
not just the person who got mailbombed.
--Adam
--
Adam McKenna <[EMAIL PROTECTED]> | Sign the Fernando Petition!
http://flounder.net/publickey.html | http://www.mickaboofriends.org
GPG: 17A4 11F7 5E7E C2E7 08AA|
38B0 05D0 8BF7 2C6D 110A|
mailbombed
A user on a mailserver that we secondary for (don't get me started) has been mailbombed. Currently there are literally 10's of thousands of messages in my queue trying to deliver to him. My mail server's running at a oad of 8 right now. How can I clear out all these messages easily? They are all the same size, so I could use find to look through mess for the file names, then remove them from mess, info and remote. Does that work? Should I stop qmail-send before doing this? THanks, jon
