From: Anton Herber (anton.herberincom.de)
Date: Tue Mar 25 2008 - 04:03:04 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

There's even an example in man postsuper

mailq | tail +2 | grep -v ’^ *(’ | awk ´BEGIN { RS = "" }
# $7=sender, $8=recipient1, $9=recipient2
{ if ($8 == "userexample.com" && $9 == "")
print $1 }
´ | tr -d ’*!’ | postsuper -d -

-------- Original Message --------
Subject: Re: Infected pc
From: Antonio Tommasi <antonio.tommasiunile.it>
To: Anton Herber <anton.herberincom.de>
Cc: postfix-userspostfix.org
Date: Tue Mar 25 2008 09:45:37 GMT+0100
> this work to block the infected pc and you can use also access db
> at this point i have thousand and thousand email in postfix queue and
> i want to delete only spam mail send by this address in my queue
>
> Antonio
>
> At 9:41 +0100 25/03/2008, Anton Herber wrote:
>> I would simply use
>>
>> iptables -I INPUT -p tcp -s xxx.xxx.xxx.xxx --dport 25 -j REJECT
>> --reject-with-tcp-reset
>>
>> It should be a temp. solution anyway. In this case quick and dirty
>> should be fine IMHO. :-)
>>
>> -------- Original Message --------
>> Subject: Infected pc
>> From: Antonio Tommasi <antonio.tommasiunile.it>
>> To: postfix-userspostfix.org
>> Date: Tue Mar 25 2008 09:29:58 GMT+0100
>>> Hi to all,
>>> is there a way to delete all mail that become from a specific client?
>>> If an internal pc is infected by a virus and send spam by my smtp
>>> server, it is necessary, when identified, to delete only email from
>>> that ip in my queue.
>>> Is there a way?
>>> Thanks in advance
>>> Antonio
>
>

--
Mit freundlichen Grüßen aus Bonn,
        Anton Herber

------------------------------------------
INCOM Storage GmbH
IT Service & Support Storage Systeme
anton.herberincom.de
Bachstr. 32
53115 Bonn
tel: +49 (0) 228-97 97 7-0
fax: +49 (0) 228-25 70 77
www.incom-storage.de
------------------------------------------

INCOM Storage GmbH, Bachstr. 32, 53115 Bonn,
Tel: (49)228-9797-70, Fax: (49)228-257077, Amtsgericht Bonn: HRB 4205,
Geschäftsführer: Dr. rer. nat. Jan Brustkern, Bernd Frackenpohl

Legal Notice: The information transmitted by this E-mail may contain
confidential or privileged material and may constitute non-public
information. This E-mail is intended to be conveyed, read and viewed
only to the designated addressee(s). If you are not a designated
addressee(s) of this E-mail please do not read, copy, print, use or
disclose this communication. Immediately notify/contact the sender
and delete this E-mail, addressee(s) and all attachments from your
computer. Any review, retransmission, dissemination or other use of,
or taking of any action in reliance upon, this E-mail or its
attachments by persons or entities other than the designated
addressee(s) is strictly prohibited and may be unlawful.

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]