Hello,
To find spam i my qmail queue on a regular qmail server I will first run the command /var/qmail/bin/qmail-qread
In the output of that command I look for mail from <> for example:
18 Dec 2008 12:10:09 GMT #43665 3523 <>
remote notifier@grants.xxx
From within /var/qmail to find the file to double check I use grep, for example:
> grep -r notifier queue/mess
queue/mess/422/43665:To: notifier@grants.xxx
And then you can use more or less to view the bounce message:
> less queue/mess/422/43665
In this case there was an obvious problem that could be blocked. Checking the queue for more bounce messages from that IP showed they were backscattering so I blocked their IP address until the customer can be contacted and have their mail server or application fixed.
-Raymond
To find spam i my qmail queue on a regular qmail server I will first run the command /var/qmail/bin/qmail-qread
In the output of that command I look for mail from <> for example:
18 Dec 2008 12:10:09 GMT #43665 3523 <>
remote notifier@grants.xxx
From within /var/qmail to find the file to double check I use grep, for example:
> grep -r notifier queue/mess
queue/mess/422/43665:To: notifier@grants.xxx
And then you can use more or less to view the bounce message:
> less queue/mess/422/43665
In this case there was an obvious problem that could be blocked. Checking the queue for more bounce messages from that IP showed they were backscattering so I blocked their IP address until the customer can be contacted and have their mail server or application fixed.
-Raymond
