服务器充斥了垃圾邮件。队列中有很多的邮件信息 邮件发送缓慢

從下表中可以看出，大量的連線被建立。 

 

 

检查Qmail队列中有多少邮件信息：

# /var/qmail/bin/qmail-qstat
messages in queue:5645
messages in queue but not yet preprocessed: 82

 

還有五千多筆未發出。

 

查找 maillog 紀錄，找看看對方是經由哪個信箱驗證來發送的

# /usr/local/psa/var/log/maillog // 紀錄位置不一定跟我的環境相同

May 27 15:23:59 xxxxxx smtp_auth: SMTP connect from unknown [149.129.139.62]
May 27 15:23:59 xxxxxx smtp_auth: SMTP user sale@xxxx.com.tw : logged in from (null) [149.129.139.62]

 

解決方案：

1. 使用 iptable 先封鎖 該IP

2. 清掉郵件促列。

3. 變更信箱密碼，並把該帳號的電腦掃毒。

 

 查到的 垃圾 郵件標題

Received: (qmail 28485 invoked from network); 27 May 2015 15:25:04 +0800

Received: from unknown (HELO User) (149.129.139.62)

  by 61-67-233-host52.kbtelecom.net.tw with ESMTPA; 27 May 2015 15:25:03 +0800

Reply-To: <bingo.lottoclaimdept@yandex.com>

From: "BINGO LOTTO INTERNATIONAL"<winner@bingolotto.co.uk>

Subject: WINNER TICKET NUMBER: CL17-2731-37-43

Date: Wed, 27 May 2015 15:18:07 -1200

MIME-Version: 1.0

Content-Type: text/html;

        charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

郵件伺服器- Qmail 相關設定用法

 

查看預設設定
   /var/qmail/bin/qmail-showctl

更改設定
   由 qmail-showctl 去查看變數什麼，再新增此檔名放至 /var/qmail/control 裡，將數值寫入此檔
   例如從 qmail-showctl 查到

queuelifetime: (Default.) Message lifetime in the queue is 604800 seconds.

   vi /var/qmail/control/queuelifetime

86400

查看 mail queue 裡的訊息
   /var/qmail/bin/qmail-qread

27 Sep 2007 05:35:45 GMT  #4048300  255  root@test.com
        remote  cross@11111111111111111111111111.com

   [queue 多久] [何時開始寄的]  [ qeueu ID ] [ 郵件大小 ] [ sender ]
                   remote [ recipient ]

查看狀態
   /var/qmail/bin/qmail-qstat

messages in queue: 1
messages in queue but not yet preprocessed: 0

qmail queue 目錄
   bounce : 被退信
   info       : 寄件者
   mess     : 寄件 header, body
   remote  : 收件者

a tool for the qmail queue
   ref: http://sourceforge.net/projects/qmhandle

 

 

qmail 紀錄檔太大，造成分割槽滿載

錯誤訊息如下:



Nov 1 06:39:31 dzvhost qmail: 1414795171.323420 warning: trouble injecting bounce message, will try later

Nov 1 06:39:31 dzvhost qmail-queue-handlers[303]: Handlers Filter before-queue for qmail started ...

Nov 1 06:39:31 dzvhost qmail-queue-handlers[303]: from=

Nov 1 06:39:31 dzvhost qmail-queue-handlers[303]: to=1

Nov 1 06:39:31 dzvhost qmail-queue-handlers[303]: Unable to get sender domain by sender mailname

Nov 1 06:39:31 dzvhost last message repeated 3 times

Nov 1 06:39:31 dzvhost qmail-queue-handlers[303]: handlers_stderr: SKIP

Nov 1 06:39:31 dzvhost qmail-queue-handlers[303]: SKIP during call 'check-quota' handler

Nov 1 06:39:31 dzvhost qmail-queue-handlers[303]: Incorrect recipient mailname : 1







1. 先查詢郵件 QUEUE



https://support.godaddy.com/help/article/1582/viewing-messages-in-your-qmail-queue







2. 清空 qmail queue(Plesk clear qmail queue)



http://dragos.fedorovici.com/plesk-clear-qmail-queue/