<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1400" name=GENERATOR></HEAD>
<BODY>
<DIV><FONT face=Arial><FONT size=2>/var/spool/MailScanner/incoming<SPAN
class=856061121-15062004> has a subdirectory for each child, and this directory
contains the messages that the child process is working on. Your batch size is
probably 150. Right after that you should have seen Scanning 150
messages.</SPAN></FONT></FONT></DIV>
<DIV><FONT face=Arial><FONT size=2><SPAN
class=856061121-15062004></SPAN></FONT></FONT> </DIV>
<DIV><FONT face=Arial><FONT size=2><SPAN class=856061121-15062004>In
sendmail...</SPAN></FONT></FONT></DIV>
<DIV><FONT face=Arial><FONT size=2><SPAN
class=856061121-15062004></SPAN></FONT></FONT> </DIV>
<DIV><FONT face=Arial><FONT size=2><SPAN class=856061121-15062004>grep RPFD:<A
href="mailto:whoever@whatever.com">whoever@whatever.com</A> qf*</SPAN></FONT></FONT></DIV>
<DIV><FONT face=Arial><FONT size=2><SPAN
class=856061121-15062004></SPAN></FONT></FONT> </DIV>
<DIV><FONT face=Arial><FONT size=2><SPAN class=856061121-15062004>Delete the qf
file and it's corresponding df and the other files that sendmail uses or
*<msg id>. Easy enough to script.</SPAN></FONT></FONT></DIV>
<DIV><FONT face=Arial><FONT size=2><SPAN
class=856061121-15062004></SPAN></FONT></FONT> </DIV>
<DIV><FONT face=Arial><FONT size=2><SPAN class=856061121-15062004>If there is a
large number of files in the directory wrap the grep in a
find:</SPAN></FONT></FONT></DIV>
<DIV><FONT face=Arial><FONT size=2><SPAN
class=856061121-15062004></SPAN></FONT></FONT> </DIV>
<DIV><FONT face=Arial><FONT size=2><SPAN class=856061121-15062004>find ./ -name
"qf*" -exec <SPAN class=856061121-15062004>grep RPFD:<A
href="mailto:whoever@whatever.com">whoever@whatever.com</A> {}
\;</SPAN></SPAN></FONT></FONT></DIV>
<DIV><FONT face=Arial><FONT size=2><SPAN class=856061121-15062004><SPAN
class=856061121-15062004></SPAN></SPAN></FONT></FONT> </DIV>
<DIV><FONT face=Tahoma size=2>-----Original Message-----<BR><B>From:</B>
MailScanner mailing list [mailto:MAILSCANNER@JISCMAIL.AC.UK]<B>On Behalf Of
</B>Max Kipness<BR><B>Sent:</B> Tuesday, June 15, 2004 5:09 PM<BR><B>To:</B>
MAILSCANNER@JISCMAIL.AC.UK<BR><B>Subject:</B> Virus epidemic, 11,000 messages
waiting!<BR><BR></FONT></DIV>
<BLOCKQUOTE
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid">
<DIV><SPAN class=234590021-15062004><FONT face=Arial
size=2>Hi,</FONT></SPAN></DIV>
<DIV><SPAN class=234590021-15062004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=234590021-15062004><FONT face=Arial size=2>I have a client
that has been is being hit by 10000 plus emails with zafi in them. He told me
that he was not receiving email, so I looked at his log and saw that 11,000
emails are ready to be processed.</FONT></SPAN></DIV>
<DIV><SPAN class=234590021-15062004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=234590021-15062004><FONT face=Arial size=2>It seems like all
the emails are sent to one person, so I've gut that user account off in
/etc/access which is working fine.</FONT></SPAN></DIV>
<DIV><SPAN class=234590021-15062004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=234590021-15062004><FONT face=Arial size=2>I have to question
though.</FONT></SPAN></DIV>
<DIV><SPAN class=234590021-15062004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=234590021-15062004><FONT face=Arial size=2>1) I thought that
all messages waiting to be processed were in /var/spool/MailScanner/incoming
in the various subdirectories. I had a script that counted the messages there
on one of my servers. However on this server, only 150 are in there. Where are
the other 11,000? The last lines I see in the log say: New Batch:
Found 11.000 messagins waiting.</FONT></SPAN></DIV>
<DIV><SPAN class=234590021-15062004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=234590021-15062004><FONT face=Arial size=2>2) Does anyone
have a script would find email from this certain person and delete? Or is
there anyway not to have MailScanner process at this
point?</FONT></SPAN></DIV>
<DIV><SPAN class=234590021-15062004><FONT face=Arial
size=2></FONT></SPAN> </DIV></BLOCKQUOTE></BODY></HTML>
-------------------------- MailScanner list ----------------------<br>
To leave, send leave mailscanner to <a href="mailto:jiscmail@jiscmail.ac.uk">jiscmail@jiscmail.ac.uk</a><br>
Before posting, please see the Most Asked Questions at<br>
<a href="http://www.mailscanner.biz/maq/">http://www.mailscanner.biz/maq/</a> and the archives at<br>
<a href="http://www.jiscmail.ac.uk/lists/mailscanner.html">http://www.jiscmail.ac.uk/lists/mailscanner.html</a><br>