[BlueOnyx:01690] Re: Sendmail attack, again

[Roman Bürkle]

... and my 10 cent:

first look at the listing:

find /var/spool/mqueue/ -type f -ls

then remove the files:

find /var/spool/mqueue/ -type f -ls -exec rm {} \;


Greets 
Roman


On Tue, 2009-07-14 at 16:08 +0200, Steve Davis wrote:
> Thought I was all finished with this. Had firewall rules set to block
> the numerous IP's attacking the server, however, it was not enough.
> 
> My /var folder is 100% full. Most of it in the /var/spool/mqueue
> 
> But I cannot delete or look at the files, when i try to 
> [root at raq1 mqueue]# rm -f *
> bash: /bin/rm: Argument list too long
> 
> anyone have any ideas.
> 
> Also, none of the mail on this server is relevant. It is not being
> used as a mail server, for the most part. 
> 
> Steve
> 
> 
>