Page 1 of 1

email server hacked, how to remove ALL pending in trying to be sent out in the Q?

Posted: Tue Jul 30, 2019 12:06 pm
by AFN
Mail server hacked: Getting a lot of e-mails saying it's rejected or will keep trying for the next 72 hours.

Yesterday my hosting company sent me an e-mail saying that one or more of your domain name(s), IP(s) maybe sending out a lot of spam e-mails please take action.

Yesterday I changed the password.

Today when I login and see the e-mails, it was over 900 and the number keeps growing.

I saw this thread viewtopic.php?t=17582&sid=355a3fb9c89b0 ... 431a05f062, but it does not answer my question.

Today after I see the number keep growing I decide to suspend the email account and also the domain name all together my question is how can I see any of the emails that may be pending in trying to be sent out and if there are any emails How can I remove all of the emails from the q?

What leads me to believe it is coming from not my server it's self, but from third-party because when I go to effective email account I see there are no email sent from the account, but how can Google, Yahoo and so on say it is from my IP and domain name? I know their are scripts and I am sure the spammer can spoof domain names and IPs.

Re: email server hacked, how to remove ALL pending in trying to be sent out in the Q?

Posted: Sat Aug 03, 2019 7:15 pm
by dreiggy
Hi,

most probably that mails are bounces. To check exim queue use command: exim -bp / exim -bpc
How to remove mails from queue, read this article: https://www.cyberciti.biz/faq/exim-remo ... ail-queue/