Topic: I cannot send emails, and I have 10000 mails in the send queue and growing

[lightman]

Hello

I'm a little desperate here, I don't know what to do, I already apply the new patch, however my problem is not reception, as mails come in to the SME very well from inet, the problem is that I cannot send mails.

I installed the contrib qmHandle because I didn't know any other way to see what messages are in the queue and it reports
that I have over 10.000 messages and every time i check the number grows for a couple of hundreds!.

I was backlisted in most sites for spammer, but i have no idea how they are using my sme 7.3 to spam!.

as I'm writing this email the number grows from 10.000 to 14.000 emails in the outgoing remote queue.
any idea of how to stop this?, I'm not sure what info add to this message so please ask and I paste it.
thanks
lightman

[janet]

lightman

You probably have a virus infection on one of your workstations, so disconnect the LAN cable on all workstations immediately.

Then do a full virus scan on each workstation and only when they are clean, reconnect them to the network.

[lightman]

Hello!

Thanks for answer, well I don't think so, because all the mail that I check that the machine is trying to send are spam, there are no attachments in any of them, virus often send attachment's with copies of themselves and this is not happening here, unless the virus is in the SME

I can see, watching the qmail log in realtime 2 messages for second trying to go out continuosly, look:

Code: [Select]

@4000000048ea1c613617e48c new msg 6029895
@4000000048ea1c613617f42c info msg 6029895: bytes 1089 from <79brentrutledgerzn@northstate.net> qp 19833 uid 453
@4000000048ea1c62053c33cc new msg 6043535
@4000000048ea1c62053c4f24 info msg 6043535: bytes 1080 from <925ns@levettandbailey.com> qp 19842 uid 453
@4000000048ea1c620d32ce9c new msg 6043536
@4000000048ea1c620d32e60c info msg 6043536: bytes 1090 from <79brentrutledgerzn@northstate.net> qp 19844 uid 453
@4000000048ea1c6211e57d54 new msg 6043537
@4000000048ea1c6211e594c4 info msg 6043537: bytes 1067 from <465ndreu@men.lu> qp 19847 uid 453
@4000000048ea1c621888ff8c new msg 6043539
@4000000048ea1c62188916fc info msg 6043539: bytes 1090 from <224pete@emwis.com> qp 19850 uid 453
@4000000048ea1c6219ee11b4 new msg 6043540
@4000000048ea1c6219ee2924 info msg 6043540: bytes 1091 from <58rhpkxmvqah@qqla.com> qp 19852 uid 453
@4000000048ea1c621ca171e4 new msg 6043538
@4000000048ea1c621ca18954 info msg 6043538: bytes 1082 from <008rbhctyb@csdsa.org> qp 19848 uid 453
@4000000048ea1c622a98135c delivery 512: deferral: Connected_to_12.51.68.45_but_greeting_failed./Remote_host_said:_554-ironport.monroe.k12.ga.us/554_Your_access_to_this_mail_system_has_been_rejected_due_to_the_sending_MTA's_poor_reputation._If_you_believe_that_this_failure_is_in_error,_please_contact_the_intended_recipient_via_alternate_means./
@4000000048ea1c622a983a6c status: local 0/10 remote 19/20
@4000000048ea1c622c0182b4 starting delivery 516: msg 6030018 to remote nova-treasuresmember@ebay.com
@4000000048ea1c622c019e0c status: local 0/10 remote 20/20
@4000000048ea1c623b1f98e4 new msg 6043541
@4000000048ea1c623b1fb43c info msg 6043541: bytes 1091 from <79brentrutledgerzn@northstate.net> qp 19862 uid 453
@4000000048ea1c6302de7d4c delivery 473: deferral: Sorry,_I_wasn't_able_to_establish_an_SMTP_connection._(#4.4.1)/
@4000000048ea1c6302de9c8c status: local 0/10 remote 19/20
@4000000048ea1c630534c574 starting delivery 517: msg 6030020 to remote nortona@valic.com
@4000000048ea1c630534e0cc status: local 0/10 remote 20/20
@4000000048ea1c630534ec84 new msg 6043542
@4000000048ea1c630534f454 info msg 6043542: bytes 1078 from <08rbhctyb@csdsa.org> qp 19864 uid 453
@4000000048ea1c6306f85aec new msg 6043543
@4000000048ea1c6306f87644 info msg 6043543: bytes 1073 from <94nyyfan@rogers.com> qp 19866 uid 453
@4000000048ea1c631fb59b6c new msg 6043547
@4000000048ea1c631fb5b2dc info msg 6043547: bytes 1096 from <43pnmtravel@cdc.it> qp 19877 uid 453
@4000000048ea1c632121be2c new msg 6043544
@4000000048ea1c632121d984 info msg 6043544: bytes 1098 from <79sheehancolleen@iosmed.org> qp 19869 uid 453
@4000000048ea1c63269ee8d4 new msg 6043546
@4000000048ea1c63269f042c info msg 6043546: bytes 1084 from <008rbhctyb@csdsa.org> qp 19876 uid 453
@4000000048ea1c6331948b04 new msg 6043545
@4000000048ea1c633194a274 info msg 6043545: bytes 1074 from <84privacy@gdsx.com> qp 19872 uid 453
@4000000048ea1c63377efa54 new msg 6043548
@4000000048ea1c63377f11c4 info msg 6043548: bytes 1080 from <594piachris@gnpframe.com> qp 19880 uid 453
@4000000048ea1c6403a4943c delivery 516: deferral: Connected_to_66.135.195.181_but_greeting_failed./Remote_host_said:_554_sjciport02.sjc.ebay.com/
@4000000048ea1c6403a4b764 status: local 0/10 remote 19/20
@4000000048ea1c640536194c starting delivery 518: msg 6030024 to remote nguyen@vnla.com
@4000000048ea1c64053630bc status: local 0/10 remote 20/20
@4000000048ea1c640d1ec1cc new msg 6043550
@4000000048ea1c640d1ed93c info msg 6043550: bytes 1102 from <186pluidb@leymanlift.com> qp 19887 uid 453
@4000000048ea1c6416b3dde4 new msg 6043551
@4000000048ea1c6416b3f16c info msg 6043551: bytes 1089 from <888ppup@vrancart.ro> qp 19892 uid 453
@4000000048ea1c641a0e5f3c new msg 6043549
@4000000048ea1c641a0e7a94 info msg 6043549: bytes 1080 from <637pitikul@mdf-net.com> qp 19884 uid 453
@4000000048ea1c641b7457dc delivery 517: deferral: Connected_to_167.230.202.13_but_greeting_failed./Remote_host_said:_554_livplpps13.aig.com_ESMTP_Blocked_-_see_https://support.proofpoint.com/rbl-lookup.cgi?ip=xxx.xxx.xxx.xxx_[_rscore=100_spam=100_virus=0_]/
@4000000048ea1c641b74771c status: local 0/10 remote 19/20
@4000000048ea1c641d803d0c starting delivery 519: msg 6030031 to remote norris@chem.ucla.edu
@4000000048ea1c641d805864 status: local 0/10 remote 20/20
@4000000048ea1c641f2194e4 new msg 6043552
@4000000048ea1c641f21ac54 info msg 6043552: bytes 1073 from <995rafalj@niemojewski.com> qp 19894 uid 453
@4000000048ea1c64249b19f4 new msg 6043553
@4000000048ea1c64249b354c info msg 6043553: bytes 1089 from <94piracicabaq@npg.com.br> qp 19897 uid 453
@4000000048ea1c650420e85c new msg 6043554
@4000000048ea1c650420ffcc info msg 6043554: bytes 1072 from <677rs@wgyates.com> qp 19899 uid 453
@4000000048ea1c650979be3c new msg 6043555
@4000000048ea1c650979d5ac info msg 6043555: bytes 1074 from <269rou-s@ysn21.jp> qp 19909 uid 453
@4000000048ea1c650f284d6c new msg 6043556
@4000000048ea1c650f2864dc info msg 6043556: bytes 1068 from <29polder@pzh.nl> qp 19911 uid 453
@4000000048ea1c651c41fc64 new msg 6043558
@4000000048ea1c651c4213d4 info msg 6043558: bytes 1084 from <03nlo@haddonhouse.com> qp 19915 uid 453
@4000000048ea1c652095935c new msg 6043557
@4000000048ea1c652095aacc info msg 6043557: bytes 1097 from <957michel.machard@wanadoo.fr> qp 19914 uid 453
@4000000048ea1c6525e21ccc new msg 6043559
@4000000048ea1c6525e23824 info msg 6043559: bytes 1073 from <01rm.cfei@cm-lyon.fr> qp 19917 uid 453
@4000000048ea1c652b28ca3c new msg 6043560
@4000000048ea1c652b28e1ac info msg 6043560: bytes 1097 from <088ray@rqelectric.com> qp 19921 uid 453
@4000000048ea1c652f4c21a4 new msg 6043561
@4000000048ea1c652f4c3914 info msg 6043561: bytes 1076 from <63shlomi@hstudio.com> qp 19919 uid 453
@4000000048ea1c6532b35ccc new msg 6043564
@4000000048ea1c6532b37824 info msg 6043564: bytes 1066 from <677rcf@cca.qc.ca> qp 19925 uid 453
@4000000048ea1c65378a0a5c new msg 6043563
@4000000048ea1c65378a25b4 info msg 6043563: bytes 1078 from <348programming@kdvs.org> qp 19923 uid 453
@4000000048ea1c660297cf8c new msg 6043567
@4000000048ea1c660297eae4 info msg 6043567: bytes 1092 from <39roger@ljusdal.net> qp 19931 uid 453
@4000000048ea1c66076dec94 new msg 6043562
@4000000048ea1c66076e07ec info msg 6043562: bytes 1079 from <948producing@p-i-a.com> qp 19901 uid 453
@4000000048ea1c660995d1bc new msg 6043565
@4000000048ea1c660998a07c info msg 6043565: bytes 1077 from <07pocsainn@rtlklub.hu> qp 19928 uid 453
@4000000048ea1c66138ccc84 delivery 519: failure: 169.232.134.7_does_not_like_recipient./Remote_host_said:_554_Service_unavailable;_Client_host_[MYISP.NET]_blocked_using_Barracuda_Reputation;_http://bbl.barracudacentral.com/q.cgi?ip=xxx.xxx.xxxx.xxx/Giving_up_on_169.232.134.7./
@4000000048ea1c661391aa9c status: local 0/10 remote 19/20
@4000000048ea1c661752d91c bounce msg 6030031 qp 19937
@4000000048ea1c66175b31d4 end msg 6030031
@4000000048ea1c661a153d0c starting delivery 520: msg 6030035 to remote ndorren.ball@ipaper.com
@4000000048ea1c661a16eabc status: local 0/10 remote 20/20
@4000000048ea1c661a1f2fec new msg 6043570
@4000000048ea1c661a213774 info msg 6043570: bytes 1812 from <> qp 19937 uid 406
@4000000048ea1c6621d7799c new msg 6043566
@4000000048ea1c6621d7910c info msg 6043566: bytes 1086 from <21pineda@optima-systems.com> qp 19930 uid 453
@4000000048ea1c662443beac new msg 6043568
@4000000048ea1c662443ce4c info msg 6043568: bytes 1106 from <069christian.maillot2@libertysurf.fr> qp 19933 uid 453
@4000000048ea1c6625edc144 new msg 6043569
@4000000048ea1c6625edd8b4 info msg 6043569: bytes 1076 from <223christian.lubat3@libertysurf.fr> qp 19935 uid 453
@4000000048ea1c6631ad9144 new msg 6030031
@4000000048ea1c6631ada8b4 info msg 6030031: bytes 1092 from <088sheehancolleen@iosmed.org> qp 19942 uid 453
@4000000048ea1c6634f3bb94 delivery 477: deferral: Sorry,_I_wasn't_able_to_establish_an_SMTP_connection._(#4.4.1)/
@4000000048ea1c6634f3d6ec status: local 0/10 remote 19/20
@4000000048ea1c6636dee5dc starting delivery 521: msg 6030040 to remote njohnson@tirekingdom.com
@4000000048ea1c6636df0134 status: local 0/10 remote 20/20
@4000000048ea1c6703bea804 new msg 6043572
@4000000048ea1c6703bebb8c info msg 6043572: bytes 1095 from <919christian.malard@libertysurf.fr> qp 19945 uid 453
@4000000048ea1c67088ace44 new msg 6043571
@4000000048ea1c67088ae5b4 info msg 6043571: bytes 1084 from <91pwoodi@lmht.com> qp 19946 uid 453
@4000000048ea1c67092d20f4 new msg 6043574
@4000000048ea1c67092d3c4c info msg 6043574: bytes 1090 from <30rjohnson@cuoftexas.org> qp 19952 uid 453
@4000000048ea1c673779ce1c delivery 514: success: 130.16.210.73_accepted_message./Remote_host_said:_250_Ok:_queued_as_41A9C186797/
@4000000048ea1c67377e8524 status: local 0/10 remote 19/20
@4000000048ea1c6737820794 end msg 6030016
@4000000048ea1c67397ec1f4 starting delivery 522: msg 6030045 to remote ndriver@lucent.com
@4000000048ea1c6739807b5c status: local 0/10 remote 20/20
@4000000048ea1c68035a8734 new msg 6043573
@4000000048ea1c68035aa28c info msg 6043573: bytes 1081 from <79placement@cnwsmt.com> qp 19948 uid 453
@4000000048ea1c68054b107c new msg 6043575
@4000000048ea1c68054b2bd4 info msg 6043575: bytes 1068 from <492press@ieb.hu> qp 19956 uid 453
@4000000048ea1c680d553734 new msg 6030016
@4000000048ea1c680d554ea4 info msg 6030016: bytes 1111 from <43professionalservices@iqms.com> qp 19958 uid 453
@4000000048ea1c6814a9b604 new msg 6043576
@4000000048ea1c6814a9cd74 info msg 6043576: bytes 1103 from <79ruth.wullschleger@bzu.ch> qp 19961 uid 453

and it goes like this continuoulsy, I try to erase the entire queue with the qmHandle -D, but after a couple of hours it start again

[cactus]

Hello!

Thanks for answer, well I don't think so, because all the mail that I check that the machine is trying to send are spam, there are no attachments in any of them, virus often send attachment's with copies of themselves and this is not happening here, unless the virus is in the SME

I can see, watching the qmail log in realtime 2 messages for second trying to go out continuosly, look:

Code: [Select]

@4000000048ea1c613617e48c new msg 6029895
@4000000048ea1c613617f42c info msg 6029895: bytes 1089 from <79brentrutledgerzn@northstate.net> qp 19833 uid 453
@4000000048ea1c62053c33cc new msg 6043535
@4000000048ea1c62053c4f24 info msg 6043535: bytes 1080 from <925ns@levettandbailey.com> qp 19842 uid 453
@4000000048ea1c620d32ce9c new msg 6043536
@4000000048ea1c620d32e60c info msg 6043536: bytes 1090 from <79brentrutledgerzn@northstate.net> qp 19844 uid 453
@4000000048ea1c6211e57d54 new msg 6043537
@4000000048ea1c6211e594c4 info msg 6043537: bytes 1067 from <465ndreu@men.lu> qp 19847 uid 453
@4000000048ea1c621888ff8c new msg 6043539
@4000000048ea1c62188916fc info msg 6043539: bytes 1090 from <224pete@emwis.com> qp 19850 uid 453
@4000000048ea1c6219ee11b4 new msg 6043540
@4000000048ea1c6219ee2924 info msg 6043540: bytes 1091 from <58rhpkxmvqah@qqla.com> qp 19852 uid 453
@4000000048ea1c621ca171e4 new msg 6043538
@4000000048ea1c621ca18954 info msg 6043538: bytes 1082 from <008rbhctyb@csdsa.org> qp 19848 uid 453
@4000000048ea1c622a98135c delivery 512: deferral: Connected_to_12.51.68.45_but_greeting_failed./Remote_host_said:_554-ironport.monroe.k12.ga.us/554_Your_access_to_this_mail_system_has_been_rejected_due_to_the_sending_MTA's_poor_reputation._If_you_believe_that_this_failure_is_in_error,_please_contact_the_intended_recipient_via_alternate_means./
@4000000048ea1c622a983a6c status: local 0/10 remote 19/20
@4000000048ea1c622c0182b4 starting delivery 516: msg 6030018 to remote nova-treasuresmember@ebay.com
@4000000048ea1c622c019e0c status: local 0/10 remote 20/20
@4000000048ea1c623b1f98e4 new msg 6043541
@4000000048ea1c623b1fb43c info msg 6043541: bytes 1091 from <79brentrutledgerzn@northstate.net> qp 19862 uid 453
@4000000048ea1c6302de7d4c delivery 473: deferral: Sorry,_I_wasn't_able_to_establish_an_SMTP_connection._(#4.4.1)/
@4000000048ea1c6302de9c8c status: local 0/10 remote 19/20
@4000000048ea1c630534c574 starting delivery 517: msg 6030020 to remote nortona@valic.com
@4000000048ea1c630534e0cc status: local 0/10 remote 20/20
@4000000048ea1c630534ec84 new msg 6043542
@4000000048ea1c630534f454 info msg 6043542: bytes 1078 from <08rbhctyb@csdsa.org> qp 19864 uid 453
@4000000048ea1c6306f85aec new msg 6043543
@4000000048ea1c6306f87644 info msg 6043543: bytes 1073 from <94nyyfan@rogers.com> qp 19866 uid 453
@4000000048ea1c631fb59b6c new msg 6043547
@4000000048ea1c631fb5b2dc info msg 6043547: bytes 1096 from <43pnmtravel@cdc.it> qp 19877 uid 453
@4000000048ea1c632121be2c new msg 6043544
@4000000048ea1c632121d984 info msg 6043544: bytes 1098 from <79sheehancolleen@iosmed.org> qp 19869 uid 453
@4000000048ea1c63269ee8d4 new msg 6043546
@4000000048ea1c63269f042c info msg 6043546: bytes 1084 from <008rbhctyb@csdsa.org> qp 19876 uid 453
@4000000048ea1c6331948b04 new msg 6043545
@4000000048ea1c633194a274 info msg 6043545: bytes 1074 from <84privacy@gdsx.com> qp 19872 uid 453
@4000000048ea1c63377efa54 new msg 6043548
@4000000048ea1c63377f11c4 info msg 6043548: bytes 1080 from <594piachris@gnpframe.com> qp 19880 uid 453
@4000000048ea1c6403a4943c delivery 516: deferral: Connected_to_66.135.195.181_but_greeting_failed./Remote_host_said:_554_sjciport02.sjc.ebay.com/
@4000000048ea1c6403a4b764 status: local 0/10 remote 19/20
@4000000048ea1c640536194c starting delivery 518: msg 6030024 to remote nguyen@vnla.com
@4000000048ea1c64053630bc status: local 0/10 remote 20/20
@4000000048ea1c640d1ec1cc new msg 6043550
@4000000048ea1c640d1ed93c info msg 6043550: bytes 1102 from <186pluidb@leymanlift.com> qp 19887 uid 453
@4000000048ea1c6416b3dde4 new msg 6043551
@4000000048ea1c6416b3f16c info msg 6043551: bytes 1089 from <888ppup@vrancart.ro> qp 19892 uid 453
@4000000048ea1c641a0e5f3c new msg 6043549
@4000000048ea1c641a0e7a94 info msg 6043549: bytes 1080 from <637pitikul@mdf-net.com> qp 19884 uid 453
@4000000048ea1c641b7457dc delivery 517: deferral: Connected_to_167.230.202.13_but_greeting_failed./Remote_host_said:_554_livplpps13.aig.com_ESMTP_Blocked_-_see_https://support.proofpoint.com/rbl-lookup.cgi?ip=xxx.xxx.xxx.xxx_[_rscore=100_spam=100_virus=0_]/
@4000000048ea1c641b74771c status: local 0/10 remote 19/20
@4000000048ea1c641d803d0c starting delivery 519: msg 6030031 to remote norris@chem.ucla.edu
@4000000048ea1c641d805864 status: local 0/10 remote 20/20
@4000000048ea1c641f2194e4 new msg 6043552
@4000000048ea1c641f21ac54 info msg 6043552: bytes 1073 from <995rafalj@niemojewski.com> qp 19894 uid 453
@4000000048ea1c64249b19f4 new msg 6043553
@4000000048ea1c64249b354c info msg 6043553: bytes 1089 from <94piracicabaq@npg.com.br> qp 19897 uid 453
@4000000048ea1c650420e85c new msg 6043554
@4000000048ea1c650420ffcc info msg 6043554: bytes 1072 from <677rs@wgyates.com> qp 19899 uid 453
@4000000048ea1c650979be3c new msg 6043555
@4000000048ea1c650979d5ac info msg 6043555: bytes 1074 from <269rou-s@ysn21.jp> qp 19909 uid 453
@4000000048ea1c650f284d6c new msg 6043556
@4000000048ea1c650f2864dc info msg 6043556: bytes 1068 from <29polder@pzh.nl> qp 19911 uid 453
@4000000048ea1c651c41fc64 new msg 6043558
@4000000048ea1c651c4213d4 info msg 6043558: bytes 1084 from <03nlo@haddonhouse.com> qp 19915 uid 453
@4000000048ea1c652095935c new msg 6043557
@4000000048ea1c652095aacc info msg 6043557: bytes 1097 from <957michel.machard@wanadoo.fr> qp 19914 uid 453
@4000000048ea1c6525e21ccc new msg 6043559
@4000000048ea1c6525e23824 info msg 6043559: bytes 1073 from <01rm.cfei@cm-lyon.fr> qp 19917 uid 453
@4000000048ea1c652b28ca3c new msg 6043560
@4000000048ea1c652b28e1ac info msg 6043560: bytes 1097 from <088ray@rqelectric.com> qp 19921 uid 453
@4000000048ea1c652f4c21a4 new msg 6043561
@4000000048ea1c652f4c3914 info msg 6043561: bytes 1076 from <63shlomi@hstudio.com> qp 19919 uid 453
@4000000048ea1c6532b35ccc new msg 6043564
@4000000048ea1c6532b37824 info msg 6043564: bytes 1066 from <677rcf@cca.qc.ca> qp 19925 uid 453
@4000000048ea1c65378a0a5c new msg 6043563
@4000000048ea1c65378a25b4 info msg 6043563: bytes 1078 from <348programming@kdvs.org> qp 19923 uid 453
@4000000048ea1c660297cf8c new msg 6043567
@4000000048ea1c660297eae4 info msg 6043567: bytes 1092 from <39roger@ljusdal.net> qp 19931 uid 453
@4000000048ea1c66076dec94 new msg 6043562
@4000000048ea1c66076e07ec info msg 6043562: bytes 1079 from <948producing@p-i-a.com> qp 19901 uid 453
@4000000048ea1c660995d1bc new msg 6043565
@4000000048ea1c660998a07c info msg 6043565: bytes 1077 from <07pocsainn@rtlklub.hu> qp 19928 uid 453
@4000000048ea1c66138ccc84 delivery 519: failure: 169.232.134.7_does_not_like_recipient./Remote_host_said:_554_Service_unavailable;_Client_host_[MYISP.NET]_blocked_using_Barracuda_Reputation;_http://bbl.barracudacentral.com/q.cgi?ip=xxx.xxx.xxxx.xxx/Giving_up_on_169.232.134.7./
@4000000048ea1c661391aa9c status: local 0/10 remote 19/20
@4000000048ea1c661752d91c bounce msg 6030031 qp 19937
@4000000048ea1c66175b31d4 end msg 6030031
@4000000048ea1c661a153d0c starting delivery 520: msg 6030035 to remote ndorren.ball@ipaper.com
@4000000048ea1c661a16eabc status: local 0/10 remote 20/20
@4000000048ea1c661a1f2fec new msg 6043570
@4000000048ea1c661a213774 info msg 6043570: bytes 1812 from <> qp 19937 uid 406
@4000000048ea1c6621d7799c new msg 6043566
@4000000048ea1c6621d7910c info msg 6043566: bytes 1086 from <21pineda@optima-systems.com> qp 19930 uid 453
@4000000048ea1c662443beac new msg 6043568
@4000000048ea1c662443ce4c info msg 6043568: bytes 1106 from <069christian.maillot2@libertysurf.fr> qp 19933 uid 453
@4000000048ea1c6625edc144 new msg 6043569
@4000000048ea1c6625edd8b4 info msg 6043569: bytes 1076 from <223christian.lubat3@libertysurf.fr> qp 19935 uid 453
@4000000048ea1c6631ad9144 new msg 6030031
@4000000048ea1c6631ada8b4 info msg 6030031: bytes 1092 from <088sheehancolleen@iosmed.org> qp 19942 uid 453
@4000000048ea1c6634f3bb94 delivery 477: deferral: Sorry,_I_wasn't_able_to_establish_an_SMTP_connection._(#4.4.1)/
@4000000048ea1c6634f3d6ec status: local 0/10 remote 19/20
@4000000048ea1c6636dee5dc starting delivery 521: msg 6030040 to remote njohnson@tirekingdom.com
@4000000048ea1c6636df0134 status: local 0/10 remote 20/20
@4000000048ea1c6703bea804 new msg 6043572
@4000000048ea1c6703bebb8c info msg 6043572: bytes 1095 from <919christian.malard@libertysurf.fr> qp 19945 uid 453
@4000000048ea1c67088ace44 new msg 6043571
@4000000048ea1c67088ae5b4 info msg 6043571: bytes 1084 from <91pwoodi@lmht.com> qp 19946 uid 453
@4000000048ea1c67092d20f4 new msg 6043574
@4000000048ea1c67092d3c4c info msg 6043574: bytes 1090 from <30rjohnson@cuoftexas.org> qp 19952 uid 453
@4000000048ea1c673779ce1c delivery 514: success: 130.16.210.73_accepted_message./Remote_host_said:_250_Ok:_queued_as_41A9C186797/
@4000000048ea1c67377e8524 status: local 0/10 remote 19/20
@4000000048ea1c6737820794 end msg 6030016
@4000000048ea1c67397ec1f4 starting delivery 522: msg 6030045 to remote ndriver@lucent.com
@4000000048ea1c6739807b5c status: local 0/10 remote 20/20
@4000000048ea1c68035a8734 new msg 6043573
@4000000048ea1c68035aa28c info msg 6043573: bytes 1081 from <79placement@cnwsmt.com> qp 19948 uid 453
@4000000048ea1c68054b107c new msg 6043575
@4000000048ea1c68054b2bd4 info msg 6043575: bytes 1068 from <492press@ieb.hu> qp 19956 uid 453
@4000000048ea1c680d553734 new msg 6030016
@4000000048ea1c680d554ea4 info msg 6030016: bytes 1111 from <43professionalservices@iqms.com> qp 19958 uid 453
@4000000048ea1c6814a9b604 new msg 6043576
@4000000048ea1c6814a9cd74 info msg 6043576: bytes 1103 from <79ruth.wullschleger@bzu.ch> qp 19961 uid 453

and it goes like this continuoulsy, I try to erase the entire queue with the qmHandle -D, but after a couple of hours it start again

I disagree, due to the nature of the email addresses from your log file snippets and your last remark most likely one or more of your systems in the network is infected and is generating SPAM like suggested in an earlier post. Do as stated there. Disconnect workstations, scan you server so it is clean and then start scanning your workstations and only put them on the network again when clean.

[Normando]

lightman, you have an infected workstation as Mary say, not dude.

Use authenticate mode for SMTP at LAN and then you can avoid these issues.

Do:

Code: [Select]

mkdir -p /etc/e-smith/templates-custom/var/service/qpsmtpd/config/peers/local
cd /etc/e-smith/templates-custom/var/service/qpsmtpd/config/peers/local
cp /etc/e-smith/templates/var/service/qpsmtpd/config/peers/0/05auth_cvm_unix_local .
signal-event email-update

Code: [Select]

config setprop qpsmtpd Authentication enabled
signal-event email-update

Code: [Select]

mkdir -p /etc/e-smith/templates-custom/var/service/qpsmtpd/config/relayclients
echo "# SMTP Relay from local network denied by custom template" >\
/etc/e-smith/templates-custom/var/service/qpsmtpd/config/relayclients/80relayFromLocalNetwork
signal-event email-update
Before run the above commands, look at:
http://wiki.contribs.org/Email#How_do_I_enable_smtp_authentication_for_users_on_the_internal_network
and
http://wiki.contribs.org/Email#How_do_I_disable_SMTP_relay_for_unauthenticated_LAN_clients

[lightman]

Cactus. You where RIGHT!

It was one of the workstations, watching HTOP in realtime for a while revealed which one.
sorry to bother with such a stupid issue, I should know better .

I wasn't convinced that SME had a virus either because processor rarely goes over 10% and the effect was too slow to be generated inside and too fast to be generated from the wan.

thank you again.

Normando, Excellent Idea!!! I didn't know that SME could do that, I'll try it!, and posted here, thanks!!!.
lightman

[mercyh]

lightman,

You might look at this thread.

http://forums.contribs.org/index.php?topic=41680.0

May help you clean that queue