From: sunmanagers mailing list (sunmanagers@chrysek.dyndns.org)
Date: Wed Sep 13 2006 - 13:06:00 EDT
Thanks, to remove them its not a big deal, I did write a small script to
stop sendmail and then go look for a subject line using:
find /var/spool/mqueue | xargs grep PHA | grep RMA | grep -v "PHARMACY" |
grep -v "PHARMACEUTICAL"
to find all messages with that subject line. then I used awk and sed to
move those files to a different directory. then I start sendmail, so that
part is easy but bof can I songifure sendmail so that I would not be
getting those? its crazy, I had over 1400 messages that had those stupid
spam messages in there.. and they still are comming... I can easily put
this script into cron and run this every few minutes to clean up mqueue
folder but that is a temp fix and not a solution. I do not want to install
dspam or any other things but was wondering if I can do filter based on
such pattern in sendmail.cf I know that i can filter based on subject line
and I found examples to do that but I was unable to find a solution based
on a subject pattern maching using sendmail and was wondering if here
might be some senamil guru who could help me a bit and maybe this group as
well maybe.
Thanks for help.
On Wed, 13 Sep 2006, Hutin Bertrand wrote:
> /etc/init.d/sendmail stop
>
> then remove the files (2 files per request) with the same identifier,
> then restart sendmail
>
>
>> -----Message d'origine-----
>> De : sunmanagers mailing list [mailto:sunmanagers@chrysek.dyndns.org]
>> Envoyi : mercredi 13 septembre 2006 16:58
>> @ : sunmanagers@sunmanagers.org
>> Objet : sendmail and spam
>>
>> Hello folks, I have a small problem, I have a sendmail server
>> and I did notice a lot of messages in a mqueue, so I started
>> to look into them and there are over 1400 messages stuck with
>> subject lines such as:
>> /var/spool/mqueue/dfk896rTBv007940:Subject: Re: PHAabmRMACY
>> /var/spool/mqueue/dfk8AHCbhb004433:Subject: Re: PHAvpiRMACY
>> /var/spool/mqueue/dfk898SH0G016819:Subject: Re: PHAmhfRMACY
>> /var/spool/mqueue/dfk89Bs7ho006724:Subject: Re: PHAeerRMACY
>> /var/spool/mqueue/dfk89BriYV006672:Subject: Re: PHAznwRMACY
>> /var/spool/mqueue/dfk8990uxY019754:Subject: Re: PHAgpkRMACY
>> /var/spool/mqueue/dfk89G2Yxl003615:Subject: Re: PHAhplRMACY
>> /var/spool/mqueue/dfk897DSux009529:Subject: Re: PHAqaoRMACY
>> /var/spool/mqueue/dfk89AmUBX030740:Subject: Re: PHAineRMACY
>> /var/spool/mqueue/dfk898NFab016359:Subject: Re: PHAdrmRMACY
>> /var/spool/mqueue/dfk897J2Zg009998:Subject: Re: PHAvipRMACY
>> /var/spool/mqueue/dfk89CGuGI009392:Subject: Re: PHAforRMACY
>> /var/spool/mqueue/dfk897JJK6010015:Subject: Re: PHAawsRMACY
>> /var/spool/mqueue/dfk89DO4N8018406:Subject: Re: PHAjpjRMACY
>> /var/spool/mqueue/dfk89Bqx0V006602:Subject: Re: PHAfrsRMACY
>> /var/spool/mqueue/dfk89BIGSq002677:Subject: Re: PHAfmsRMACY
>> /var/spool/mqueue/dfk89Abpem029585:Subject: Re: PHAycoRMACY
>> /var/spool/mqueue/dfk8A3h2F2005583:Subject: Re: PHAneiRMACY
>> /var/spool/mqueue/dfk89BcrHW005002:Subject: Re: PHAxpdRMACY
>> /var/spool/mqueue/dfk89BnnfS006245:Subject: Re: PHAczqRMACY
>> /var/spool/mqueue/dfk897ZD3n011708:Subject: Re: PHAgexRMACY
>> /var/spool/mqueue/dfk89EKdQv024452:Subject: Re: PHAiceRMACY
>> /var/spool/mqueue/dfk89EYthv025987:Subject: Re: PHAocsRMACY
>> /var/spool/mqueue/dfk897a0la011806:Subject: Re: PHAgexRMACY
>> /var/spool/mqueue/dfk8C6Tadj007507:Subject: Re: PHAmovRMACY
>> /var/spool/mqueue/dfk8C6GcRi006756:Subject: Re: PHAwyeRMACY
>> /var/spool/mqueue/dfk8995qxS020256:Subject: Re: PHAlvdRMACY
>> /var/spool/mqueue/dfk897kYMe012700:Subject: Re: PHAafnRMACY
>> /var/spool/mqueue/dfk8AGK15c031111:Subject: Re: PHAnxiRMACY
>> /var/spool/mqueue/dfk89MrP3n012318:Subject: Re: PHAvvlRMACY
>> /var/spool/mqueue/dfk897u4ff013652:Subject: Re: PHAltwRMACY
>> /var/spool/mqueue/dfk8BHq6oZ029869:Subject: Re: PHAdrhRMACY
>> /var/spool/mqueue/dfk8BNZKwe007079:Subject: Re: PHAtrrRMACY
>> /var/spool/mqueue/dfk8980FHx013931:Subject: Re: PHAsvrRMACY
>> /var/spool/mqueue/dfk8983C2q014561:Subject: Re: PHAxpaRMACY
>> /var/spool/mqueue/dfk8983jvR014602:Subject: Re: PHAjwzRMACY
>>
>> Is there any way to add a rule to sendmail and block emails
>> based on a subject pattern such as this one? spammers are
>> trying to change pattern by changing 3 characters in subject line...
>>
>> Also is there any script that i could just stop sendmail and
>> remove those
>> 1400+ messages? I know that there are not only the files listed but
>> 1400+ header
>> files etc. So if I just remove those files it would not do
>> any good so I guess I need to replace first 2 characters of
>> the file name to replace one of the emails...
>>
>> Thanks so much for any help.
>>
>> Chris
>> _______________________________________________
>> sunmanagers mailing list
>> sunmanagers@sunmanagers.org
>> http://www.sunmanagers.org/mailman/listinfo/sunmanagers
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers
This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:40:48 EDT