Hi guys.
Actually I am not system administrator. But I have little experience related Qmail Server. I configured qmail server three months ago. It was working fine during first 2 months. But it is working slow last month. Sometimes it doesn't work by normal. And I've researched about reason it is off. The reason was qmail queue filled by many spam messages. So, I think that is why didn't work.
Some state of qmail :
qmailctl stat
/service/qmail-send: up (pid 79233) 10504 seconds
/service/qmail-send/log: up (pid 79232) 10504 seconds
/service/qmail-smtpd: up (pid 79236) 10504 seconds
/service/qmail-smtpd/log: up (pid 79237) 10504 seconds
/service/qmail-pop3d: up (pid 79239) 10504 seconds
/service/qmail-pop3d/log: up (pid 79240) 10504 seconds
messages in queue: 5070
messages in queue but not yet preprocessed: 0
Also process :
ps -aux | grep qmail
qmailr 10015 0.0 0.0 1300 708 ?? I 3:42PM 0:00.00 qmail-remote yahoo.co.in [email protected] [email protected]
qmailr 15330 0.0 0.0 1300 708 ?? I 3:48PM 0:00.00 qmail-remote redten.net [email protected] [email protected]
qmailr 15917 0.0 0.0 1300 708 ?? I 3:49PM 0:00.00 qmail-remote entre-fortmyers.com [email protected] [email protected]
qmailr 16112 0.0 0.0 1300 708 ?? I 3:49PM 0:00.00 qmail-remote hp.com [email protected] [email protected]
qmailr 17252 0.0 0.0 1300 708 ?? I 3:51PM 0:00.00 qmail-remote yahoo.co.uk [email protected] [email protected]
qmailr 17487 0.0 0.0 1300 708 ?? I 3:51PM 0:00.00 qmail-remote cableaz.com [email protected] [email protected]
qmailr 20618 0.0 0.0 1300 708 ?? I 3:56PM 0:00.00 qmail-remote frfsa.org [email protected] [email protected]
qmailr 20832 0.0 0.0 1300 708 ?? I 3:56PM 0:00.00 qmail-remote yahoo.co.in [email protected] [email protected]
qmailr 21260 0.0 0.0 1300 700 ?? I 3:57PM 0:00.00 qmail-remote tiscali.co.uk [email protected] [email protected]
qmailr 21423 0.0 0.0 1300 708 ?? S 3:57PM 0:00.00 qmail-remote surfeu.de [email protected] [email protected]
qmailr 21436 0.0 0.0 1300 700 ?? I 3:57PM 0:00.00 qmail-remote gov.ab.ca [email protected] [email protected]
qmailr 21537 0.0 0.0 1300 700 ?? I 3:57PM 0:00.00 qmail-remote uspto.gov [email protected] [email protected]
qmailr 21541 0.0 0.0 1300 700 ?? I 3:57PM 0:00.00 qmail-remote tiscali.co.uk [email protected] [email protected]
qmailr 21549 0.0 0.0 1300 700 ?? I 3:57PM 0:00.00 qmail-remote tiscali.co.uk [email protected] [email protected]
qmailr 21633 0.0 0.0 1300 700 ?? I 3:57PM 0:00.00 qmail-remote tiscali.co.uk [email protected] [email protected]
qmailr 21981 0.0 0.0 1300 700 ?? I 3:58PM 0:00.00 qmail-remote dol.gov [email protected] [email protected]
qmailr 22149 0.0 0.0 1300 708 ?? I 3:59PM 0:00.00 qmail-remote ejiva.com [email protected] [email protected]
qmailr 22175 0.0 0.0 1300 708 ?? I 3:59PM 0:00.00 qmail-remote truthmail.com [email protected] [email protected]
qmailr 22184 0.0 0.0 1300 700 ?? I 3:59PM 0:00.00 qmail-remote usaid.gov [email protected] [email protected]
qmailr 22238 0.0 0.0 1300 708 ?? I 3:59PM 0:00.00 qmail-remote hp.com [email protected] [email protected]
qmailr 22239 0.0 0.0 1300 708 ?? I 3:59PM 0:00.00 qmail-remote southtrust.com [email protected] [email protected]
qmailr 22241 0.0 0.0 1300 708 ?? I 3:59PM 0:00.00 qmail-remote palmercay.com [email protected] [email protected]
qmailr 22273 0.0 0.0 1300 708 ?? I 3:59PM 0:00.00 qmail-remote 2hotmail.com [email protected] [email protected]
qmailr 22281 0.0 0.0 1300 708 ?? I 3:59PM 0:00.00 qmail-remote test.com [email protected] [email protected]
qmailr 22308 0.0 0.0 1300 708 ?? I 3:59PM 0:00.00 qmail-remote yahoo.com [email protected] [email protected]
Above email addresses are not available on my mail server. So, I think this emails are sent from PHP script. My server has also web server(apache22).
Maybe spam sender's source is in php scripts.
How can I filter spam sender's PHP source from all scripts ?
Please suggest guys.
Thanks in advance.