[SlugBug] Spamming program?

Bruno Postle bruno at postle.net
Sat Sep 6 11:14:21 BST 2003


On Fri 05-Sep-2003 at 09:06:55PM +0100, Neil McGovern wrote:
> I just chesked my mailq and found this:
> 
> -Queue ID- --Size-- ----Arrival Time---- -Sender/Recipient-------
> 96ACE3E565     7025 Thu Sep  4 16:25:02  MAILER-DAEMON
>          (connect to parker1.sprint.com[208.18.122.165]: Connection timed out)
>                                          fgbnz9ig at sprint.com
> 
> 3AE8D3E4C7     4326 Wed Sep  3 14:33:13  MAILER-DAEMON
>          (connect to parker1.sprint.com[208.18.122.165]: Connection timed out)
>                                          ko844u at sprint.com

This looks like postfix, there should be more info in the log:

    egrep '96ACE3E565|3AE8D3E4C7' /var/log/maillog

You can view the contents of the deferred messages like so:

    find /var/spool/postfix/deferred/ -type f | xargs postcat

> Now, I know I didn't send these messages, so could it be some
> shitty program on my comp. doing it?

Could be incoming mail that your system has accepted for some reason
and which it is trying to bounce.

-- 
Bruno


More information about the SlugBug mailing list