The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

mailbomber URGENT

Discussion in 'E-mail Discussions' started by NNNils, Aug 26, 2003.

  1. NNNils

    NNNils Well-Known Member

    Joined:
    Sep 17, 2002
    Messages:
    580
    Likes Received:
    0
    Trophy Points:
    16
    Just had someone using a mailbomber.

    How can I empty the queue faster then mail keeps sending out???

    cPanel.net Support Ticket Number:
     
  2. pagedeveloping

    pagedeveloping Well-Known Member

    Joined:
    Jun 11, 2003
    Messages:
    219
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    New York
    I am sure there are other ways to do this but this is what I have been doing through ssh

    /etc/rc.d/init.d/exim stop
    rm -rf /var/spool/exim/input
    rm -rf /var/spool/exim/msglog
    /etc/rc.d/init.d/exim start

    If some one else has a better way to do this please fill us in.

    Pete

    cPanel.net Support Ticket Number:
     
  3. ciphervendor

    ciphervendor Well-Known Member

    Joined:
    Aug 26, 2002
    Messages:
    1,052
    Likes Received:
    0
    Trophy Points:
    36
    exiqgrep -f "<>" -i | xargs exim -Mrm

    cPanel.net Support Ticket Number:
     
  4. NNNils

    NNNils Well-Known Member

    Joined:
    Sep 17, 2002
    Messages:
    580
    Likes Received:
    0
    Trophy Points:
    16
    It only seems to remove some of the messages...

    When trying again it says:

    no message ids given after -Mrm option
     
  5. NNNils

    NNNils Well-Known Member

    Joined:
    Sep 17, 2002
    Messages:
    580
    Likes Received:
    0
    Trophy Points:
    16
    I did the above, removed the mailbomb.php script, suspended the account, but still new messages are coming into the mail queue

    where from???????

    cPanel.net Support Ticket Number:
     
  6. ciphervendor

    ciphervendor Well-Known Member

    Joined:
    Aug 26, 2002
    Messages:
    1,052
    Likes Received:
    0
    Trophy Points:
    36
    Something like this will also work:

    exiqgrep -o 0 -i | xargs exim -Mrm

    cPanel.net Support Ticket Number:
     
  7. NNNils

    NNNils Well-Known Member

    Joined:
    Sep 17, 2002
    Messages:
    580
    Likes Received:
    0
    Trophy Points:
    16
    Stupid me!

    Looking in apache status I could easily have seen the pid s and kill them.

    After doing that it was solved immediately.

    cPanel.net Support Ticket Number:
     

Share This Page