• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 659
  • Last Modified:

qmail / Find sender of a message in queue

1) I run qmHandle -R and see all the messages in the outbound queue. Message 509845 looks like it could be spam from the title.

2) I run qmHandle -m509845 to read the contents and see it is indeed spam.

3) The headers are forged. I cannot see any user account information in the message that lets me know which, if any, of my users logged on to send this.

So how do I determine what (if any) user account was the one that logged on and sent that message? I've never needed to find anything like this before so I have no idea how it would be in the system logs or where to look.
0
mcj
Asked:
mcj
1 Solution
 
arnoldCommented:
run
find /var/mail/queue -name 509845
One of the returned data will likely be in the bounce hierarchy viewing that will tell you  who the envelope sender is and to whom the bounce message is attempted.

0

Featured Post

The new generation of project management tools

With monday.com’s project management tool, you can see what everyone on your team is working in a single glance. Its intuitive dashboards are customizable, so you can create systems that work for you.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now