From owner-freebsd-questions@FreeBSD.ORG Thu Jul 17 14:46:39 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 23C3037B401 for ; Thu, 17 Jul 2003 14:46:39 -0700 (PDT) Received: from smmcroute.smmc.qld.edu.au (dsl-210-15-201-90.QLD.netspace.net.au [210.15.201.90]) by mx1.FreeBSD.org (Postfix) with ESMTP id EE53343F3F for ; Thu, 17 Jul 2003 14:46:36 -0700 (PDT) (envelope-from keith@smmc.qld.edu.au) Received: (qmail 11234 invoked by uid 89); 17 Jul 2003 21:46:23 -0000 Received: from unknown (HELO smmc.qld.edu.au) (127.0.0.1) by 127.0.0.1 with SMTP; 17 Jul 2003 21:46:23 -0000 Received: from 10.0.1.109 (SquirrelMail authenticated user keith) by localhost.smmc.qld.edu.au with HTTP; Fri, 18 Jul 2003 07:46:23 +1000 (EST) Message-ID: <3039.10.0.1.109.1058478383.squirrel@localhost.smmc.qld.edu.au> Date: Fri, 18 Jul 2003 07:46:23 +1000 (EST) From: To: , "Free bsd " In-Reply-To: <007901c34c61$4dd50290$2401010a@zone3000.net> References: <2614.10.0.1.109.1058432155.squirrel@localhost.smmc.qld.edu.au> <20030717023103.A4775@njamn8or.no-ip.org> <1057.203.221.19.98.1058444958.squirrel@localhost.smmc.qld.edu.au> <007901c34c61$4dd50290$2401010a@zone3000.net> X-Priority: 3 Importance: Normal X-Mailer: SquirrelMail (version 1.2.11) MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Subject: Re: Help! Is this an attack or a virus? Qmail on FBSD is flooding X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Jul 2003 21:46:39 -0000 G'day Vitali, Thanks for your advice I'll look into it I was thinking about it last night and figured that there must be messages in the Q. A quick check showed that one such message was Qd to send a couple of jpgs to dozens of CCd addresses! That does look like a virus on one of my internal clients...(using their address book) What say you? Keith > Hi, dear All! > > qmail-remote sends mail to remote hosts as long as qmail-local sends > local mail (inside the box). how many qmail-remote processes do you have > (ps ax|grep qmail-remote|wc -l)? did you try to delete the messages from > the queue, if so you should have done it correctly. please, obtain the > qmail-remove package (find it on Google), there is an instruction how to > delete the queued messages. and see the log file (grep qmail-remote > /var/log/maillog | more), as this information is not nuff > > WBR > > -- > Error Code=-1 Continue? > Yes | No > -- > > ++++ http://www.geocities.com/vitali_malicky > > > >> Hi Victor thanks, >> I had deleted that one persons account but it staill happens! >> What is the qmail-remote thing?? >> Any ideas? >> Keith >> >> > > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org"