Re: mail queue issues -- backed up with spam messages

Craig Sanders:
> On Sat, Oct 16, 2004 at 08:01:10PM -0400, Wietse Venema wrote:
> > Craig Sanders:
> > > On Sat, Oct 16, 2004 at 12:17:27PM -0400, Wietse Venema wrote:
> > > > I suggest that you search the maillog file for all records that
> > > > list the IP address while the bad customer was using it. That
> > > > gives you the queue ID strings and the random sender addresses.
> > > >
> > > > grep '[111\.222\.333\.444\]' /var/log/maillog >11.22.33.4-records
> > > >
> > > > edit the file, and delete records outside the window of interest
> > > >
> > > > postsuper -h - <11.22.33.4-records
> > >
> > > you can avoid having to manually edit the file with a one-liner like this:
> > >
> > > grep "client=.*\[111\.222\.333\.444\]" /var/log/mail.log | \
> > > awk '{print $6}' | \
> > > sed -e 's/://' | \
> > > postsuper -d -
> > >
> > > (or "postsuper -h -" to hold the messages rather than delete them)
> >
> > The one-liner does not delete the logfile records outside the time
> > window of interest.
>
> sorry, i can't parse that.

We don't want to throw away mail from good customers who have
used that same IP address outside the time window of interest.

Wietse