今天我们发现我们的一台服务器负载非常繁重,通过查看maillog,它发送了大量的服务器到奇怪的电子邮件地址.它看起来像是从我们的服务器发送垃圾邮件.但是,我找不到发送帐户是谁.
如何查找发件人,以便我可以关闭该帐户?
以下是队列中其中一个出站电子邮件的示例:
[root@server11 mqueue]# cat qfp96I9K1r020960V8T1317924562K1318068176N27P3934747I9/3/119387MDeferredFws$_localhost [127.0.0.1]$rSMTP$sUser${daemon_flags}${if_addr}127.0.0.1SrRFC822; jenners0223@aol.comRPFD:rRFC822; jennecho@aol.comRPFD:rRFC822; jennebarre@aol.comRPFD:rRFC822; jenndum@aol.comRPFD:rRFC822; jenncsh@aol.comRPFD:MDeferredrRFC822; jennclemons@cs.comRPFD:rRFC822; jennesef@yahoo.comRPFD:rRFC822; jennerped@yahoo.comRPFD:rRFC822; jenneroutszong@yahoo.comRPFD:rRFC822; jennermills@yahoo.comRPFD:rRFC822; jennerbeez@yahoo.comRPFD:rRFC822; jennerate@yahoo.comRPFD:rRFC822; jenner_parker@yahoo.comRPFD:rRFC822; jennellsmilIE@yahoo.comRPFD:rRFC822; jennellehuff@yahoo.comRPFD:rRFC822; jennel4eva@yahoo.comRPFD:rRFC822; jenneka.gaines@yahoo.comRPFD:rRFC822; jennejenkins@yahoo.comRPFD:rRFC822; jenneintenn@yahoo.comRPFD:rRFC822; jenneekay@yahoo.comRPFD:rRFC822; jennean.dickens@yahoo.comRPFD:rRFC822; jennduckworth@yahoo.comRPFD:rRFC822; jenndooley03@yahoo.comRPFD:rRFC822; jenndobscha@yahoo.comRPFD:rRFC822; jenndeemartin@yahoo.comRPFD:rRFC822; jenndannwill@yahoo.comRPFD:rRFC822; jennd926@yahoo.comRPFD:rRFC822; jenncummisky@yahoo.comRPFD:rRFC822; jenncradduck@yahoo.comRPFD:rRFC822; jenncoffin@yahoo.comRPFD:rRFC822; jennchrischristopher@yahoo.comRPFD:MDeferredrRFC822; jenncepero@yahoo.comRPFD:H?P?Return-Path: H??Received: from User (localhost [127.0.0.1]) by [server name] (8.13.1/8.13.1) with SMTP ID p96I9K1r020960; Fri,7 Oct 2011 05:09:22 +1100H?M?Message-ID: H??From: "Match.com"H??Subject: Your Match Account Has Been Hold - Re-Connect NowH??Date: Thu,6 Oct 2011 11:12:59 -0700H??MIME-Version: 1.0H??Content-Type: text/HTML; charset="windows-1251"H??Content-transfer-encoding: 7bitH??X-Priority: 3H??X-MSMail-Priority: normalH??X-Mailer: Microsoft Outlook Express 6.00.2600.0000H??X-MimeolE: Produced By Microsoft MimeolE V6.00.2600.0000
更新1:
一旦我清理了/ var / spool / mqueue文件夹,它就会很快填满新的垃圾邮件.
一旦我重新启动了sendmail服务,它就会停止填写垃圾邮件,但它会在几个小时后再回来.这表明了什么?谢谢.
ps -eo pcpu,pID,user,args | sort -k 1 -r |头-10
希望它像一个滥用已知权限的用户空间进程一样简单,而不像需要被删除和重建的有根框的那样.准备好火焰喷射器.
总结以上是内存溢出为你收集整理的sendmail – 服务器发送垃圾邮件?全部内容,希望文章能够帮你解决sendmail – 服务器发送垃圾邮件?所遇到的程序开发问题。
如果觉得内存溢出网站内容还不错,欢迎将内存溢出网站推荐给程序员好友。
欢迎分享,转载请注明来源:内存溢出
评论列表(0条)