The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Spool file is locked (another process is handling this message)

Discussion in 'General Discussion' started by heymichelle, Jan 4, 2004.

  1. heymichelle

    heymichelle Well-Known Member

    Joined:
    Feb 25, 2002
    Messages:
    45
    Likes Received:
    0
    Trophy Points:
    6
    I am needing desperate help in this matter, someone on my server is sending spam emails. and I am talking about hundreds. Its mainly coming from my own domain which I don't have any idea how this is happening. Does anyone know because even the headers are faulse in the emails, etc..
    when I go into the WHM Panel and spot all these emails I try to delete them and I have this come up:

    Spool file is locked (another process is handling this message)

    Is there any way to identify where the source is coming from?

    Anybody out there that can help in this matter would be very much appreciated!
     
  2. PWSowner

    PWSowner Well-Known Member

    Joined:
    Nov 10, 2001
    Messages:
    2,948
    Likes Received:
    3
    Trophy Points:
    38
    Location:
    ON, Canada
    I believe the "Spool file is locked" means exim is currently trying to send the message. Restarting exim may stop it to allow you to delete it.

    Where it's coming from? Since it's in your mail queue it was likely sent with a formmail script on your website. Sounds like you're using a formmail script that's not safe.
     
  3. heymichelle

    heymichelle Well-Known Member

    Joined:
    Feb 25, 2002
    Messages:
    45
    Likes Received:
    0
    Trophy Points:
    6
    wow FAST response!

    well i am using quite a few mailforms, since I have many payment pages. so i would not even have any idea which one.

    the header is almost like this all the time, except for maybe a different "return address" which is false.

    - Removed -


    and right as we chat, I am getting at least 20 a minute. :(
     
    #3 heymichelle, Jan 4, 2004
    Last edited by a moderator: Jun 5, 2014
  4. PWSowner

    PWSowner Well-Known Member

    Joined:
    Nov 10, 2001
    Messages:
    2,948
    Likes Received:
    3
    Trophy Points:
    38
    Location:
    ON, Canada
    Is each mail form using it's own formmail script or are they all using the same script.

    I saw a script somewhere that checked for older versions of Matt's formmail scripts but don't remember where. If you're still out of control, you could try disabling the formmail scripts, one at a time if you have a few, by changing the permissions of any formmail.cgi or .pl files to 644.

    You should check your formmail.cgi or .pl scripts to see if they are the Matt Wright scripts. If so, and if the version is less than 1.91, it could be what's being used.
     
  5. PWSowner

    PWSowner Well-Known Member

    Joined:
    Nov 10, 2001
    Messages:
    2,948
    Likes Received:
    3
    Trophy Points:
    38
    Location:
    ON, Canada
  6. heymichelle

    heymichelle Well-Known Member

    Joined:
    Feb 25, 2002
    Messages:
    45
    Likes Received:
    0
    Trophy Points:
    6
    The main forms i am using is by:
    Cliff's Form Mailer Version 1.0
    Available at http://www.shavenferret.com/scripts

    The reason I like it because it has a autoresponse, i don't use matts formmail.

    I went ahead and hopefully found each and every script, its hard because I sell scripts and have many demos up, with of course the mailer in them.

    Thanks for your help
     
  7. heymichelle

    heymichelle Well-Known Member

    Joined:
    Feb 25, 2002
    Messages:
    45
    Likes Received:
    0
    Trophy Points:
    6
    wow, will download this right away!

    Thanks again for FAST response
     
  8. heymichelle

    heymichelle Well-Known Member

    Joined:
    Feb 25, 2002
    Messages:
    45
    Likes Received:
    0
    Trophy Points:
    6
    okay heres a stupid question, don't I just upload to my cgi-bin and chmod to 755 and call it from my browser for this script to work? or do I need to do something else?
     
  9. PWSowner

    PWSowner Well-Known Member

    Joined:
    Nov 10, 2001
    Messages:
    2,948
    Likes Received:
    3
    Trophy Points:
    38
    Location:
    ON, Canada
    Did you change the email address in the script to yours?
     
  10. PWSowner

    PWSowner Well-Known Member

    Joined:
    Nov 10, 2001
    Messages:
    2,948
    Likes Received:
    3
    Trophy Points:
    38
    Location:
    ON, Canada
  11. heymichelle

    heymichelle Well-Known Member

    Joined:
    Feb 25, 2002
    Messages:
    45
    Likes Received:
    0
    Trophy Points:
    6
    well I guess i am just dumb at times, i uploaded it and i cannot even get the script to display, it really does not have good directions exactly what to do :(
     
  12. PWSowner

    PWSowner Well-Known Member

    Joined:
    Nov 10, 2001
    Messages:
    2,948
    Likes Received:
    3
    Trophy Points:
    38
    Location:
    ON, Canada
    I don't think it will work through the website. When I used it I uploaded it to the /scripts folder on my server and ran it by typing
    /scripts/chkformmailver
    and it emailed me the list.

    It only checks for Matt's scripts so if you are sure you don't have any of those on your server, it won't matter anyway.

    Are you still getting spam mail sent?
     
  13. heymichelle

    heymichelle Well-Known Member

    Joined:
    Feb 25, 2002
    Messages:
    45
    Likes Received:
    0
    Trophy Points:
    6
    Thanks for your help, I went ahead and found all the mailforms and changed the chmod to 644, so far so good, but the only problem any mailings, the scripts won't work because i did that, but right now I don't need them anyways, I will just change my main site to just have the customer use their own mail program.

    I was noticing on one of my folders where one of the mailers were located, it was showing quite a bit of use from that one url area, so i am now wondering if that was the mailer they were using, but still I am confused, because how can this person use the form and send out hundreds of emails, still confused that way. but right now no more of the emails.

    It has gotten so out of hand, aol has blacklisted my server and domain because this person has been sending out to hundreds of aol people and unknown, just using fake names but to aol.

    oh well...
     
  14. PWSowner

    PWSowner Well-Known Member

    Joined:
    Nov 10, 2001
    Messages:
    2,948
    Likes Received:
    3
    Trophy Points:
    38
    Location:
    ON, Canada
    Spammers have their own little program that calls your script and sends data in it's own form. They go to your website and view the page source to get the url to your formmail script and never go back to the web page again.

    You could reenable the scripts one at a time to see which one they are using.

    The AOL block is only for 24 hours if the spamming is stopped.

    We have a nice choice to make. Use emails on our sites for contact and eventually get lots of spam, or use forms on our sites and possibly be used to send spam.

    I had so much fun with formmail a while back that I decided to write my own script. It's not perfect, but it's easy for me to improve when needed.
     
  15. PWSowner

    PWSowner Well-Known Member

    Joined:
    Nov 10, 2001
    Messages:
    2,948
    Likes Received:
    3
    Trophy Points:
    38
    Location:
    ON, Canada
    Someone is having a great time right now trying to send spam with my script on one of my clients sites. My script emails me when someone tries using it for spam and they have tried several times in the last hour.
     
  16. heymichelle

    heymichelle Well-Known Member

    Joined:
    Feb 25, 2002
    Messages:
    45
    Likes Received:
    0
    Trophy Points:
    6
    thats not good. I know i am tired of it all.
     
  17. heymichelle

    heymichelle Well-Known Member

    Joined:
    Feb 25, 2002
    Messages:
    45
    Likes Received:
    0
    Trophy Points:
    6
    what script did you build? sounds like a neat one to have if you get notified.
     
  18. PWSowner

    PWSowner Well-Known Member

    Joined:
    Nov 10, 2001
    Messages:
    2,948
    Likes Received:
    3
    Trophy Points:
    38
    Location:
    ON, Canada
    It's just my own home made formmail script. I was using the Matt Wright scripts for a while but one day I decided one reason it was used by spammers is that it was made with too many extras and I just wanted something simple so I decided to write my own.

    If you want to try it yourself, I can send it to you. It would require minor changes to your form pages, but simple ones.
     
  19. heymichelle

    heymichelle Well-Known Member

    Joined:
    Feb 25, 2002
    Messages:
    45
    Likes Received:
    0
    Trophy Points:
    6
    I would like to try it

    i am willing to try anything right now, so send it my way :)
    mbarbosa71@comcast.net

    and thank you so much!
     
  20. PWSowner

    PWSowner Well-Known Member

    Joined:
    Nov 10, 2001
    Messages:
    2,948
    Likes Received:
    3
    Trophy Points:
    38
    Location:
    ON, Canada
    It's been emailed.
     
Loading...

Share This Page