Hello all,
A client informed me this morning she was getting more than usual amounts of spam and asked if I could check into it. I myself did indeed notice an increase in spam. When I checked the properties of the spam to see what their SA rating was, oddly enough SpamAssassin wasn't even checking them.
I SSH'd into my server to check and SA was indeed running. My next thought was to check my mail exim queue, and when I looked at that, I was astounded to see 40+ pages of frozen emails 99% spam going back a week. I spent time cleaning all of that, restarted exim and spam assassin and instantly saw the deluge of spam coming back.
At the moment email properties are showing SA checking them, but giving low ratings like 1.9 and such to obvious spams. I noticed my SSH terminal also showed:
root 13290 0.1 0.2 6572 2284 ? S 14:24 0:00 /usr/sbin/exim -Mc 1Jwi8C-0003SL-UD
root 13302 0.1 0.2 6592 2276 ? S 14:24 0:00 /usr/sbin/exim -Mc 1Jwi86-0003RW-6f
root 13312 0.1 0.2 6580 2284 ? S 14:24 0:00 /usr/sbin/exim -Mc 1Jwi8G-0003SV-Hw
root 13318 0.1 0.2 6572 2280 ? S 14:24 0:00 /usr/sbin/exim -Mc 1Jwi8G-0003SW-RX
root 13324 0.0 0.2 6580 2276 ? S 14:24 0:00 /usr/sbin/exim -Mc 1Jwi8H-0003Se-Aq
root 13337 0.1 0.3 6972 3348 ? S 14:24 0:00 /usr/sbin/exim -Mc 1Jwi8L-0003T6-03
root 13345 0.2 0.2 6568 2288 ? S 14:24 0:00 /usr/sbin/exim -Mc 1Jwi8O-0003TA-By
root 13385 0.2 0.2 6584 2288 ? S 14:25 0:00 /usr/sbin/exim -Mc 1Jwi8T-0003Th-UB
Is there anything to be worried about, or is this just a spam attack happening??
Brad
A client informed me this morning she was getting more than usual amounts of spam and asked if I could check into it. I myself did indeed notice an increase in spam. When I checked the properties of the spam to see what their SA rating was, oddly enough SpamAssassin wasn't even checking them.
I SSH'd into my server to check and SA was indeed running. My next thought was to check my mail exim queue, and when I looked at that, I was astounded to see 40+ pages of frozen emails 99% spam going back a week. I spent time cleaning all of that, restarted exim and spam assassin and instantly saw the deluge of spam coming back.
At the moment email properties are showing SA checking them, but giving low ratings like 1.9 and such to obvious spams. I noticed my SSH terminal also showed:
root 13290 0.1 0.2 6572 2284 ? S 14:24 0:00 /usr/sbin/exim -Mc 1Jwi8C-0003SL-UD
root 13302 0.1 0.2 6592 2276 ? S 14:24 0:00 /usr/sbin/exim -Mc 1Jwi86-0003RW-6f
root 13312 0.1 0.2 6580 2284 ? S 14:24 0:00 /usr/sbin/exim -Mc 1Jwi8G-0003SV-Hw
root 13318 0.1 0.2 6572 2280 ? S 14:24 0:00 /usr/sbin/exim -Mc 1Jwi8G-0003SW-RX
root 13324 0.0 0.2 6580 2276 ? S 14:24 0:00 /usr/sbin/exim -Mc 1Jwi8H-0003Se-Aq
root 13337 0.1 0.3 6972 3348 ? S 14:24 0:00 /usr/sbin/exim -Mc 1Jwi8L-0003T6-03
root 13345 0.2 0.2 6568 2288 ? S 14:24 0:00 /usr/sbin/exim -Mc 1Jwi8O-0003TA-By
root 13385 0.2 0.2 6584 2288 ? S 14:25 0:00 /usr/sbin/exim -Mc 1Jwi8T-0003Th-UB
Is there anything to be worried about, or is this just a spam attack happening??
Brad