Huge problem with Qmail
"Cosmic Dreamer" <[email protected]> Wed, 14 Aug 2002 09:47:31 +0200
| Newsgroups | gmane.science.mathematics.copyright |
|---|---|
| Message-ID | <004001c24366$d8b2d900$769ee0d5@WORKGROUP2> |
This is a multi-part message in MIME format. ------=_NextPart_000_003C_01C24377.9C262530 Content-Type: multipart/alternative; boundary="----=_NextPart_001_003D_01C24377.9C262530" ------=_NextPart_001_003D_01C24377.9C262530 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hello, A few weeks ago I started an own E-mail server, wich I use for several = of my projects.. It has Plesk installed (and it uses Qmail allong with it's functions to = make email accounts trough the webinterface of plesk.. I'd like to ask (rather urgent) if someone knows what to do..as i ran = into some problems This afternoon I had a complaint from my hosting provider that my relay server for mail was open, I actually didn't do that on purpose it must = have happened while I didn't know what i was doing with the mail = configuration when I started using my server. Now Ive found out that my server has been abused by spammers like for sending an impossible amount of spam trough it.. I just shut down the mail server (and in my server console closed open = relay mailing). I use Qmail and when i went to var/log/maillog and /var/qmail/queue i = saw an enormous amount of undelevered mail wich was trying to be sent.. but I = guess half of the internet blocks my mail now.. or, i just might have been = stupid by deleting the entire subdirs of /mess /local and /todo, because = now I have all kinds of error messages, (ofcoruse I wanted the = bombardment to recepients to be stopped immediately I already recreated all these dirs but i'm not sure what kind of user = rights have to be given .. qmailq. as owner and qmail as group? (an wich = write permissions (i know i deleted everything in a hurry :P When I send messages to myself as a test, ofcourse nothing works (i can = login but nothing seems to be put trough) I get thse kind of things Aug 14 00:26:26 www qmail: 1029277586.991103 warning: trouble injecting bounce message, will try later Aug 14 00:26:27 www qmail: 1029277587.029529 warning: trouble injecting bounce message, will try later Aug 14 00:26:27 www qmail: 1029277587.039975 warning: trouble injecting bounce message, will try later Aug 14 00:26:27 www qmail: 1029277587.056355 end msg 394735 Aug 14 00:26:27 www qmail: 1029277587.069134 warning: trouble injecting bounce message, will try lat Because I use Qmail within plesk I don't know how to stop this, how can = i make clear to it that it cant no longer try to send these spam messages (wich i have deleted)... So i worked a while, and I did a little research in the Qmail manual and = i tried to send myself a local message like they show, i get this.. root@www /]# % echo to: core | /var/qmail/bin/qmail-inject bash: %: command not found qmail-inject: fatal: qq trouble creating files in queue (#4.3.0) [root@www /]# what dir should i still rebuild ? I've found something like queue-fix... but it didn't really fix = anything, in fact it just recreated a directory, I also tried to delete my main mail account in plesk and created it = again but nothing seems to work, When I try to login via webmail (because Plesk sever administrator = installed it) and send a message to someone, it says "there was an error = while sending your message".. It's specially hard to see whats going wrong because this morning the = /var/log/maillog said something like "cannot open /todo/0 .. sleeping, " = but I've seen that directory and it has rights for qmailq.qmail...=20 i've been asking on various newsgroups, and plesk message board but = nothing seems to help, could anything short but deleting all my plesk = related things and reinstalling everything again help ? cd ------=_NextPart_001_003D_01C24377.9C262530 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; = charset=3Diso-8859-1"> <META content=3D"MSHTML 6.00.2716.2200" name=3DGENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=3D#ffffff> <DIV><FONT face=3DArial size=3D2> <DIV><FONT face=3DVerdana size=3D2>Hello,<BR><BR>A few weeks ago I = started an own=20 E-mail server, wich I use for several of my projects..</FONT></DIV> <DIV><FONT face=3DVerdana size=3D2></FONT> </DIV> <DIV><FONT face=3DVerdana size=3D2>It has Plesk installed (and it uses = Qmail allong=20 with it's functions to make email accounts trough the webinterface of=20 plesk..</FONT></DIV> <DIV><FONT face=3DVerdana size=3D2></FONT> </DIV> <DIV><FONT face=3DVerdana size=3D2>I'd like to ask (rather urgent) if = someone knows=20 what to do..as i ran into some problems<BR><BR>This afternoon I had a = complaint=20 from my hosting provider that my relay<BR>server for mail was open, I = actually=20 didn't do that on purpose it must have<BR>happened while I didn't know = what i=20 was doing with the mail configuration<BR>when I started using my=20 server.<BR><BR>Now Ive found out that my server has been abused by = spammers like=20 for<BR>sending an impossible amount of spam trough it..<BR><BR>I just = shut down=20 the mail server (and in my server console closed open=20 relay<BR>mailing).<BR><BR>I use Qmail and when i went to var/log/maillog = and=20 /var/qmail/queue i saw an<BR>enormous amount of undelevered mail wich = was trying=20 to be sent.. but I guess<BR>half of the internet blocks my mail now.. = or, i just=20 might have been stupid by deleting the entire subdirs of /mess /local = and /todo,=20 because now I have all kinds of error messages, (ofcoruse I wanted the=20 bombardment to recepients to be stopped immediately<BR><BR>I already = recreated=20 all these dirs but i'm not sure what kind of user rights have to be = given <IMG=20 alt=3D"" src=3D"http://forum.plesk.com/images/smilies/frown.gif" = border=3D0>.. qmailq.=20 as owner and qmail as group? (an wich write permissions (i know i = deleted=20 everything in a hurry :P<BR><BR>When I send messages to myself as a = test,=20 ofcourse nothing works (i can login but nothing seems to be put = trough)<BR>I get=20 thse kind of things<BR><BR>Aug 14 00:26:26 www qmail: 1029277586.991103 = warning:=20 trouble injecting<BR>bounce message, will try later<BR>Aug 14 00:26:27 = www=20 qmail: 1029277587.029529 warning: trouble injecting<BR>bounce message, = will try=20 later<BR>Aug 14 00:26:27 www qmail: 1029277587.039975 warning: trouble=20 injecting<BR>bounce message, will try later<BR>Aug 14 00:26:27 www = qmail:=20 1029277587.056355 end msg 394735<BR>Aug 14 00:26:27 www qmail: = 1029277587.069134=20 warning: trouble injecting<BR>bounce message, will try = lat<BR><BR>Because I use=20 Qmail within plesk I don't know how to stop this, how can i<BR>make = clear to it=20 that it cant no longer try to send these spam messages<BR>(wich i have=20 deleted)...<BR><BR>So i worked a while, and I did a little research = in the=20 Qmail manual and i tried to send myself a local message like they show, = i get=20 this..<BR><BR>root@www /]# % echo to: core |=20 /var/qmail/bin/qmail-inject<BR>bash: %: command not = found<BR>qmail-inject:=20 fatal: qq trouble creating files in queue (#4.3.0)<BR>[root@www = /]#<BR><BR>what=20 dir should i still rebuild ?<BR><BR>I've found something like = queue-fix... but=20 it didn't really fix anything, in fact it just recreated a = directory,<BR><BR>I=20 also tried to delete my main mail account in plesk and created it again = but=20 nothing seems to work,<BR><BR>When I try to login via webmail (because = Plesk=20 sever administrator installed it) and send a message to someone, it = says=20 "there was an error while sending your message"..</FONT></DIV> <DIV><FONT face=3DVerdana size=3D2></FONT> </DIV> <DIV><FONT face=3DVerdana size=3D2>It's specially hard to see whats = going wrong=20 because this morning the /var/log/maillog said something like "cannot = open=20 /todo/0 .. sleeping, " but I've seen that directory and it has rights = for=20 qmailq.qmail... </FONT></DIV> <DIV><FONT face=3DVerdana></FONT> </DIV> <DIV><FONT face=3DVerdana>i've been asking on various newsgroups, and = plesk=20 message board but nothing seems to help, could anything short but = deleting all=20 my plesk related things and reinstalling everything again help = ?</FONT></DIV> <DIV><FONT face=3DVerdana></FONT> </DIV> <DIV><FONT face=3DVerdana>cd</FONT></DIV></FONT></DIV></BODY></HTML> ------=_NextPart_001_003D_01C24377.9C262530-- ------=_NextPart_000_003C_01C24377.9C262530 Content-Type: image/gif; name="frown.gif" Content-Transfer-Encoding: base64 Content-Location: http://forum.plesk.com/images/smilies/frown.gif R0lGODlhDwAPANU/AP/4oNLLfs7IfNXPgN/Yhv/3m//7zv/4p//5sd3WhP/83P/6vf/3nf/4q/ry lv/70v/5sP/81f31mO7nj//4ov/7x8rDef/7yvHqkcO9dcfBd+bfiv/6wP/3mf/4pf/7ydzVhP72 mP/70f/83f/7y//6vP/4qvbulP/82cK8dfjwlerjjP/82P/5r//5tcvFevnxlf/7xv/6v//4o//5 tOjhi+Hah9TNf//6wtnSgvz0l//6u+PciMG7dAAAAKSkpCH5BAEAAD8ALAAAAAAPAA8AAAaTwJ9Q 6CsWh8hfUcF6XDhHpE8x8kUMMR/k4Bv6WCiroSKj+RiOrvLhE5FwO1cD4MN0fZXLpwgxces1NkUL CyVFAAwFRRsJA0UICC0NFAUdEicrCQEvRR4zFAAFEjowEwQBGilFIQ4qJ0ZFAhk9PXcTKz48BCAD Fj60aj4bBDk3AhaztLVeAwIayspqXr/QUUlKsElBADs= ------=_NextPart_000_003C_01C24377.9C262530--