<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2800.1276" name=GENERATOR></HEAD>
<BODY>
<DIV dir=ltr align=left><SPAN class=609381221-15062004><FONT face=Arial
color=#0000ff size=2>Ok, I figured out that all the email is under
/var/spool/mqueue.in. I can't even grep * in there because of so many
files.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=609381221-15062004><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=609381221-15062004><FONT face=Arial
color=#0000ff size=2>Any suggestions?</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=609381221-15062004><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=609381221-15062004><FONT face=Arial
color=#0000ff size=2>Thanks,</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=609381221-15062004><FONT face=Arial
color=#0000ff size=2>Max</FONT></SPAN></DIV><BR>
<BLOCKQUOTE
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> MailScanner mailing list
[mailto:MAILSCANNER@JISCMAIL.AC.UK] <B>On Behalf Of </B>Max
Kipness<BR><B>Sent:</B> Tuesday, June 15, 2004 4:09 PM<BR><B>To:</B>
MAILSCANNER@JISCMAIL.AC.UK<BR><B>Subject:</B> Virus epidemic, 11,000 messages
waiting!<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV><SPAN class=234590021-15062004><FONT face=Arial
size=2>Hi,</FONT></SPAN></DIV>
<DIV><SPAN class=234590021-15062004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=234590021-15062004><FONT face=Arial size=2>I have a client
that has been is being hit by 10000 plus emails with zafi in them. He told me
that he was not receiving email, so I looked at his log and saw that 11,000
emails are ready to be processed.</FONT></SPAN></DIV>
<DIV><SPAN class=234590021-15062004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=234590021-15062004><FONT face=Arial size=2>It seems like all
the emails are sent to one person, so I've gut that user account off in
/etc/access which is working fine.</FONT></SPAN></DIV>
<DIV><SPAN class=234590021-15062004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=234590021-15062004><FONT face=Arial size=2>I have to question
though.</FONT></SPAN></DIV>
<DIV><SPAN class=234590021-15062004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=234590021-15062004><FONT face=Arial size=2>1) I thought that
all messages waiting to be processed were in /var/spool/MailScanner/incoming
in the various subdirectories. I had a script that counted the messages there
on one of my servers. However on this server, only 150 are in there. Where are
the other 11,000? The last lines I see in the log say: New Batch:
Found 11.000 messagins waiting.</FONT></SPAN></DIV>
<DIV><SPAN class=234590021-15062004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=234590021-15062004><FONT face=Arial size=2>2) Does anyone
have a script would find email from this certain person and delete? Or is
there anyway not to have MailScanner process at this
point?</FONT></SPAN></DIV>
<DIV><SPAN class=234590021-15062004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=234590021-15062004><FONT face=Arial
size=2>Thanks,</FONT></SPAN></DIV>
<DIV><SPAN class=234590021-15062004><FONT face=Arial
size=2>Max</FONT></SPAN></DIV>-------------------------- MailScanner list
----------------------<BR>To leave, send leave mailscanner to <A
href="mailto:jiscmail@jiscmail.ac.uk">jiscmail@jiscmail.ac.uk</A><BR>Before
posting, please see the Most Asked Questions at<BR><A
href="http://www.mailscanner.biz/maq/">http://www.mailscanner.biz/maq/</A> and
the archives at<BR><A
href="http://www.jiscmail.ac.uk/lists/mailscanner.html">http://www.jiscmail.ac.uk/lists/mailscanner.html</A><BR></BLOCKQUOTE></BODY></HTML>
-------------------------- MailScanner list ----------------------<br>
To leave, send leave mailscanner to <a href="mailto:jiscmail@jiscmail.ac.uk">jiscmail@jiscmail.ac.uk</a><br>
Before posting, please see the Most Asked Questions at<br>
<a href="http://www.mailscanner.biz/maq/">http://www.mailscanner.biz/maq/</a> and the archives at<br>
<a href="http://www.jiscmail.ac.uk/lists/mailscanner.html">http://www.jiscmail.ac.uk/lists/mailscanner.html</a><br>