×
INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!
  • Students Click Here

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here

Jobs

Where does sendmail queue messages

Where does sendmail queue messages

Where does sendmail queue messages

(OP)
Sendmail is trying to send a bunch of deferred mail from a recent spam attack on our server.

I now have the server offline but whenever I turn start the sendmail service it begins sending a bunch of deferred email. My question is where is this mail being stored? I used the mailq command and it turns up nothing: 0 messages.

Webmin is installed. The machine has Fedora 6 on it.

Thanks, Mike

RE: Where does sendmail queue messages

Try /var/spool/mqueue.  Webmin should be able to find it for you and give you an option to purge the queue.  If it's not working, check to make sure that the module is setup for sendmail and not postfix.
 

RE: Where does sendmail queue messages

(OP)
I've looked there too and nothing.  Hmmm...

Thanks,
Mike

RE: Where does sendmail queue messages

(OP)
The other day when a spammer was sending email from our server, I noticed that the sender was apache. So, I know the compromise was through a web page but which one? Do you know of any way of configuring sendmail to provide more info?

Thanks, Mike

RE: Where does sendmail queue messages

You may want to look at /var/log/maillog.  Depending on when your logs get rotated, this may be a very small file.  On the other hand, you will notice that the old logs that are rotated out are saved as maillog.1, maillog.2, etc.  You can open any of these logs with a text editor to read them.  My guess is that you'll find that these emails are coming from a form mail script on one or more of your websites.  There are bots that go around the web looking for forms to fill out and submit.  There is no way to prevent this but some form to mail scripts can be configured to cut down on what these spambots can do.  I like formmail.php from www.tectite.com.
       

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members! Already a Member? Login

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close