Spammer?

1

123hosted

New member
Joined
Aug 17, 2006
Messages
2
Hi,

I had an account on my server which was deleted because they were sending spam from my server. But in my exim log I am still getting the following messages and I believe its making a higher load on my server. Anyone got any ideas how to stop it?

2006-08-17 05:01:58 1GChVS-0004Yi-EI mx6.go2.pl [193.17.41.46] Connection timed out
2006-08-17 05:01:59 1GChVS-0004Yi-EI == [email protected] R=lookuphost T=remote_smtp defer (110): Connection timed out
2006-08-17 05:04:16 1GChcD-000433-Om mx7.go2.pl [193.17.41.47] Connection refused
2006-08-17 05:04:17 1GChcD-000433-Om == [email protected] R=lookuphost T=remote_smtp defer (-44): SMTP error from remote mail server after RCPT TO:<[email protected]>: host mx3.go2.pl [193.17.41.43]: 450 <[email protected]>: Sender address rejected: Domain not found
2006-08-17 05:04:18 1GChcD-00042c-Dc == [email protected] R=lookuphost T=remote_smtp defer (-44): SMTP error from remote mail server after RCPT TO:<[email protected]>: host mx3.go2.pl [193.17.41.43]: 450 <[email protected]>: Sender address rejected: Domain not found
2006-08-17 05:04:19 1GChcD-000420-0C == [email protected] R=lookuphost T=remote_smtp defer (-44): SMTP error from remote mail server after RCPT TO:<[email protected]>: host mx3.go2.pl [193.17.41.43]: 450 <[email protected]>: Sender address rejected: Domain not found
2006-08-17 05:04:21 1GChcE-00044A-BO == [email protected] R=lookuphost T=remote_smtp defer (-44): SMTP error from remote mail server after RCPT TO:<[email protected]>: host mx3.go2.pl [193.17.41.43]: 450 <[email protected]>: Sender address rejected: Domain not found
2006-08-17 05:04:22 1GChcC-00040p-7R == [email protected] R=lookuphost T=remote_smtp defer (-44): SMTP error from remote mail server after RCPT TO:<[email protected]>: host mx3.go2.pl [193.17.41.43]: 450 <[email protected]>: Sender address rejected: Domain not found
2006-08-17 05:04:22 1GChcB-0003zr-NO SMTP error from remote mail server after initial connection: host mx3.go2.pl [193.17.41.43]: 421 mx3.go2.pl Error: too many connections from 209.85.42.149
2006-08-17 05:04:22 1GChcB-0003zr-NO == [email protected] R=lookuphost T=remote_smtp defer (0): SMTP error from remote mail server after initial connection: host mx3.go2.pl [193.17.41.43]: 421 mx3.go2.pl Error: too many connections from 209.85.42.149
2006-08-17 05:04:45 1GCgQb-0006Bc-QZ mx9.go2.pl [193.17.41.123] Connection refused
2006-08-17 05:04:47 1GCgQb-0006Bc-QZ == [email protected] R=lookuphost T=remote_smtp defer (111): Connection refused
2006-08-17 05:04:54 1GCgNP-0004dD-AF SMTP error from remote mail server after RCPT TO:<[email protected]>: host mx4.go2.pl [193.17.41.44]: 450 <[email protected]>: Sender address rejected: Domain not found
2006-08-17 05:04:54 1GCgNP-0004dD-AF == [email protected] R=lookuphost T=remote_smtp defer (-44): SMTP error from remote mail server after RCPT TO:<[email protected]>: host mx4.go2.pl [193.17.41.44]: 450 <[email protected]>: Sender address rejected: Domain not found
2006-08-17 05:04:54 1GDekA-0006sW-IH <= <> R=1GCgNP-0004dD-AF U=mail P=local S=1583 T="Warning: message 1GCgNP-0004dD-AF delayed 48 hours" from <> for [email protected]
2006-08-17 05:04:55 1GDekA-0006sW-IH ** [email protected] F=<>: Unrouteable address
2006-08-17 05:04:55 1GDekA-0006sW-IH Frozen (delivery error message)
2006-08-17 05:04:56 1GCgMZ-0002dE-2v SMTP error from remote mail server after RCPT TO:<[email protected]>: host mx4.go2.pl [193.17.41.44]: 450 <[email protected]>: Sender address rejected: Domain not found
2006-08-17 05:04:56 1GCgMZ-0002dE-2v == [email protected] R=lookuphost T=remote_smtp defer (-44): SMTP error from remote mail server after RCPT TO:<[email protected]>: host mx4.go2.pl [193.17.41.44]: 450 <[email protected]>: Sender address rejected: Domain not found
2006-08-17 05:04:56 1GDekC-0006t3-B1 <= <> R=1GCgMZ-0002dE-2v U=mail P=local S=1577 T="Warning: message 1GCgMZ-0002dE-2v delayed 48 hours" from <> for [email protected]
2006-08-17 05:04:56 1GDekC-0006t3-B1 ** [email protected] F=<>: Unrouteable address
2006-08-17 05:04:56 1GDekC-0006t3-B1 Frozen (delivery error message)
2006-08-17 05:04:57 1GCgMp-00038y-Dn SMTP error from remote mail server after RCPT TO:<[email protected]>: host mx4.go2.pl [193.17.41.44]: 450 <[email protected]>: Sender address rejected: Domain not found
2006-08-17 05:04:57 1GCgMp-00038y-Dn == [email protected] R=lookuphost T=remote_smtp defer (-44): SMTP error from remote mail server after RCPT TO:<[email protected]>: host mx4.go2.pl [193.17.41.44]: 450 <[email protected]>: Sender address rejected: Domain not found
2006-08-17 05:04:57 1GDekD-0006tE-EG <= <> R=1GCgMp-00038y-Dn U=mail P=local S=1593 T="Warning: message 1GCgMp-00038y-Dn delayed 48 hours" from <> for [email protected]
2006-08-17 05:04:57 1GDekD-0006tE-EG ** [email protected] F=<>: Unrouteable address
2006-08-17 05:04:57 1GDekD-0006tE-EG Frozen (delivery error message)
2006-08-17 05:04:58 1GCgMv-0003Tz-0L SMTP error from remote mail server after RCPT TO:<[email protected]>: host mx4.go2.pl [193.17.41.44]: 450 <[email protected]>: Sender address rejected: Domain not found
2006-08-17 05:04:58 1GCgMv-0003Tz-0L == [email protected] R=lookuphost T=remote_smtp defer (-44): SMTP error from remote mail server after RCPT TO:<[email protected]>: host mx4.go2.pl [193.17.41.44]: 450 <[email protected]>: Sender address rejected: Domain not found
2006-08-17 05:04:59 1GCgMU-0002Yo-OS SMTP error from remote mail server after RCPT TO:<[email protected]>: host mx4.go2.pl [193.17.41.44]: 450 <[email protected]>: Sender address rejected: Domain not found
2006-08-17 05:04:59 1GCgMU-0002Yo-OS == [email protected] R=lookuphost T=remote_smtp defer (-44): SMTP error from remote mail server after RCPT TO:<[email protected]>: host mx4.go2.pl [193.17.41.44]: 450 <[email protected]>: Sender address rejected: Domain not found
2006-08-17 05:04:59 1GDekF-0006u8-54 <= <> R=1GCgMU-0002Yo-OS U=mail P=local S=1581 T="Warning: message 1GCgMU-0002Yo-OS delayed 48 hours" from <> for [email protected]
2006-08-17 05:04:59 1GDekF-0006u8-54 ** [email protected] F=<>: Unrouteable address
2006-08-17 05:04:59 1GDekF-0006u8-54 Frozen (delivery error message)
2006-08-17 05:04:59 1GCgMU-0002XY-9l SMTP error from remote mail server after initial connection: host mx4.go2.pl [193.17.41.44]: 421 mx4.go2.pl Error: too many connections from 209.85.42.149
2006-08-17 05:04:59 1GCgMU-0002XY-9l == [email protected] R=lookuphost T=remote_smtp defer (0): SMTP error from remote mail server after initial connection: host mx4.go2.pl [193.17.41.44]: 421 mx4.go2.pl Error: too many connections from 209.85.42.149
2006-08-17 05:04:59 1GDekF-0006uE-Sh <= <> R=1GCgMU-0002XY-9l U=mail P=local S=1545 T="Warning: message 1GCgMU-0002XY-9l delayed 48 hours" from <> for [email protected]
2006-08-17 05:04:59 1GDekF-0006uE-Sh ** [email protected] F=<>: Unrouteable address
2006-08-17 05:04:59 1GDekF-0006uE-Sh Frozen (delivery error message)
 
Identify which messages are spam and still in the queue:
exim -bp

Than, delete them from your live queue (note; this action is not really recommended, but fastest way to dispose of these messages), by deleting the messages id's from /var/spool/exim/input/.
Both the -D and -H have to be deleted.

Exim will detect this, generate an error and delete the message from queue, at least, in cases I had the problem.

If you want to be sure, you can mark a message as delivered by:
exim -Mmad <message id>
 
Thank you very much...the files are deleting now there was 30000 spam messages :(

Is there any way to stop this happening after so many messages are send in a certain amount of time?
 
There's a SMTP plugin for that purpose somewhere on these forums. But I don't use it, so don't know if it works.
 
You must log in or register to reply here.
Back
Top