[BlueOnyx:01712] Re: Sendmail attack, again

[Gerald Waugh]

Roman Bürkle wrote;
> ... and my 10 cent:
>
> first look at the listing:
>
> find /var/spool/mqueue/ -type f -ls
>
> then remove the files:
>
> find /var/spool/mqueue/ -type f -ls -exec rm {} \;
>
>
A variation that removes email more than n days old.

find /var/spool/mqueue/ -type f  -mtime +n -ls -exec rm {} \;
and
find /var/spool/mqueue.in/ -type f  -mtime +n -ls -exec rm {} \;

I used n=1 to cleanup all email from mqueue more than 1 day old
find /var/spool/mqueue/ -type f  -mtime +1 -ls -exec rm {} \;
As most spam is undeliverable so the server attempts to send for 5 days
Note: if you have a large mque it eill take a while to complete.

Gerald