OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: que fill up problem

From: Wietse Venema (wietseporcupine.org)
Date: Fri Jan 02 2004 - 10:59:54 CST


jparsonssutv.com:
> Hello everyone...
>
> I was wondering if someone might be able to help me figure out a good way
> to clean out some mail in the queues.
>
> I have a user that is infected with a virus, I have blocked thier access
> for now until they are clean, however i didn't get it shutdown before they
> filled up the mail queues with tons of junk mail all addressed to aol.com
> users. the emails forge the senders address, and the receipient addresses
> of the emails, are random or seem to be. the only constant on all the
> headers would be the IP address that the messages were sent from.
> so my question...
>
> is there a command or way to remove all mail from the queues that were
> sent from that IP address?
>
> I could let the mail go through, however there is A LOT of it. It would
> be much nicer for me and the receipients if i could kill this all now.
>
> Any help would be appreciated, if you need more info please let me know.
>
> I am running postfix version postfix-2.0.14.20030812,2 on a FreeBSD 4.9
> System.

postfix stop
cd /var/spool/postfix
find incoming active deferred -type f -print | \
        xargs grep -l '\[1\.2\.3\.4\]' \
        | xargs rm
postfix start

        Wietse