Email storage and spam

[alert3ff]

Greetings,
I have a customer that has his main account name [email protected] that was used as a fals return address for a spammer. Now he has 70000 emails messages in his box. First of all can I go in somehow with SSh and empty that box instead of using POP? Second, any way to prevent this or dleete the main pop account?
Thank you,
Ed

 

[nobaloney]

Is his email login [email protected], or just username?

Either way you can delete the entire mailbox file; the system will rebuild when next the user gets mail.

If the login is [email protected], the file to delete is:

/var/spool/virtual/example.com/username

If the login is username, the file to delete is:

/var/spool/mail/username

If his email login is username, then there's no way to remove that account without starting the whole account/domain, etc., over, but you can create a forward to send all mail to username to /dev/null.

If his email login is [email protected], just remove that email account and let your client use a different account.

What would I do? If I had an email address that I knew got so much spam, and nothing but spam, I'd set it up to forward to a program that determined the IP#s of the mailservers and add them automatically to my SpamBlocker blocklist.

But that's just me .

Jeff

 

[alert3ff]

Jeff,
Thank you!

 

[donkeyKICK]

What would I do? If I had an email address that I knew got so much spam, and nothing but spam, I'd set it up to forward to a program that determined the IP#s of the mailservers and add them automatically to my SpamBlocker blocklist.
Jeff

How would you set that up? I have an address that received NOTHING but spam. It was once setup to be used for comparison against a spamassassing filter. I didn't set it up, and don't know how. If that address appears in the header I am just deleteing them. I'd like to make use of it if possible.

 

[nobaloney]

We don't have a script you can use on your server; you'd have to write your own.

What you do is use a forward to forward all email to that address to a script you've written which will intelligently strip out the IP# of the last mailserver, and then just add that IP# to /etc/virtual/bad_sender_hosts. There's no need to restart anything.

Jeff