Admin at 02:12, 31 October 2017

2017-10-31T02:12:52Z

← Older revision		Revision as of 02:12, 31 October 2017
Line 19:		Line 19:
	'''Print the messages in the queue with the UID:'''<br />		'''Print the messages in the queue with the UID:'''<br />
	<code>postqueue -p</code>		<code>postqueue -p</code>


	'''Print the email message in the terminal:'''<br />		'''Print the email message in the terminal:'''<br />

Admin: Created page with "Plesk is spamming!! What to do: 1. Panic. Postfix is really grumpy about working with you to figure out what it's doing. '''E-mails in queue:'''

 function _line..."

2017-10-31T02:12:39Z

Created page with "Plesk is spamming!! What to do: 1. Panic. Postfix is really grumpy about working with you to figure out what it's doing. '''E-mails in queue:''' <pre> function _line..."

New page

Plesk is spamming!!

What to do:
1. Panic.

Postfix is really grumpy about working with you to figure out what it's doing.

'''E-mails in queue:''' 
<pre>
function _line { echo "=======Emails in $DIR Queue======="; };cd /var/spool/postfix;ls -l|egrep -o "deferred|hold|active|corrupt|defer|maildrop"|while read DIR; do _line; ls -lA $DIR|wc -l; echo; done;cd - 1>/dev/null;
</pre>

'''Size of the queue:''' 
postqueue -p | grep -c '^[0-9A-Z]'

'''Print the messages in the queue with the UID:''' 
<code>postqueue -p</code>

'''Print the email message in the terminal:''' 
<code>postcat -q $UID</code>

== Check for originating scripts ==

In the php mail log: 
<code>grep eval /var/log/php_maillog| grep -Po "(?<=\[).*?(?=\()"|sort -b|uniq -c |sort -rnk1</code>

No php maillog (Booo!) We can still check the mail headers... but this is very SLOW: 
<code>for i in $(postqueue -p | grep '^[0-9A-Z]'| awk '{print $1}'); do postcat -q $i | grep 'X-PHP-Originating-Script'; done | cut -d':' -f1- | sort -b|uniq -c|sort -rnk1</code>

This finds the script from the above... I think... 
<code>find $PATH -type f -exec grep -Ea -o Script\:\ [[:digit:]]+\:[[:alnum:]]+\.php {} \;|sort|uniq -c|sort -rnk1</code>

Spamming Plesk - Revision history

Admin at 02:12, 31 October 2017

Admin: Created page with "Plesk is spamming!! What to do: 1. Panic. Postfix is really grumpy about working with you to figure out what it's doing. '''E-mails in queue:'''

function _line..."