Dne Wednesday 17 of September 2008 18:32:35 Ralf Hildebrandt napsal(a): > * Milos Prudek <[EMAIL PROTECTED]>: > > I suspect that my email server has been cracked. How do I make sure it > > happened? > > You check the logs. > You check the integrity of the system files using aide or samhain > > > However, /var/log/mail contains huge number of lines like this one: > > What does > qshape > report? > > What does > qshape deferred > report?
This command showed that over 60000 emails addressed to one domain are deferred to be delivered to a localhost mailserver (Lotus Domino) that is currently turned off. I am sure that 99% of that is spam. Now, spamassassin is not currently installed. Before turning on the destination Lotus Domino I would like to scan the deferred queue and DELETE all emails that SpamAssassin considers spam. Can this be done in SpamAssassin itself (running spamassassin on the queue folder), or do I need to connect/configure SpamAssassin with Postfix and will then Postfix automatically send even the deferred mail thru SpamAssassin? Assuming that I set SpamAssassin to DELETE mail considered to be spam. -- Milos Prudek
