Solved

qmail / Find sender of a message in queue

Posted on 2010-11-18
1
642 Views
Last Modified: 2012-05-10
1) I run qmHandle -R and see all the messages in the outbound queue. Message 509845 looks like it could be spam from the title.

2) I run qmHandle -m509845 to read the contents and see it is indeed spam.

3) The headers are forged. I cannot see any user account information in the message that lets me know which, if any, of my users logged on to send this.

So how do I determine what (if any) user account was the one that logged on and sent that message? I've never needed to find anything like this before so I have no idea how it would be in the system logs or where to look.
0
Comment
Question by:mcj
1 Comment
 
LVL 76

Accepted Solution

by:
arnold earned 250 total points
Comment Utility
run
find /var/mail/queue -name 509845
One of the returned data will likely be in the bounce hierarchy viewing that will tell you  who the envelope sender is and to whom the bounce message is attempted.

0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

Suggested Solutions

Email signatures have numerous marketing benefits. Here are 8 top reasons to turn your email signature into a marketing channel.
This process describes the steps required to Import and Export data from and to .pst files using Exchange 2010. We can use these steps to export data from a user to a .pst file, import data back to the same or a different user, or even import data t…
In this video we show how to create a Distribution Group in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >>…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now