Exim Queue Scripts - Revision history

Smsldoo at 14:17, 25 March 2014

2014-03-25T14:17:05Z

Smsldoo at 14:02, 1 March 2013

2013-03-01T14:02:53Z

Smsldoo: /* Display specific field */

2013-03-01T14:02:20Z

‎Display specific field

Smsldoo: /* Overview */

2013-03-01T14:01:56Z

‎Overview

Smsldoo: /* Overview */

2013-03-01T14:01:46Z

‎Overview

Smsldoo: /* Advanced sender find */

2013-03-01T14:01:34Z

‎Advanced sender find

Smsldoo: /* Advanced sender find */

2013-03-01T14:01:19Z

‎Advanced sender find

Smsldoo: /* Advanced sender find */

2013-03-01T14:00:48Z

‎Advanced sender find

Smsldoo: /* Delete Scripts */

2013-03-01T14:00:10Z

‎Delete Scripts

Smsldoo: /* Get list of IP addresses sending messages from specific address */

2013-03-01T13:58:10Z

‎Get list of IP addresses sending messages from specific address

@@ Line 7: / Line 7: @@
 ==Query Scripts==
 ===Find top sending addresses for current messages in queue===
-<code>[bash,n]
+<source lang='bash'>
 find /var/spool/exim/input/0 -name '*-H' | xargs grep 'auth_id' | cut -d " " -f2 | sort | uniq -c | sort -rn
-</code>
+</source>
 ===Find messages with specific element (subject, to, from etc)===
 Note this will only return the message IDs and does not corralate any information.
-<code>[bash,n]
+<source lang='bash'>
 find /var/spool/exim/input/0 -name '*-H' | xargs grep "$ELEMENT" | cut -d: -f1 | cut -d/ -f7 | cut -d- -f1-3
-</code>
+</source>
 '''''EXAMPLE:'''''
-<code>[bash,n]
+<source lang='bash'>
 find /var/spool/exim/input/0 -name '*-H' | xargs grep "subject:" | cut -d: -f1 | cut -d/ -f7 | cut -d- -f1-3
-</code>
+</source>
 ===Get message IDs for messages from a specific sender===
-<code>[bash,n]
+<source lang='bash'>
 find /var/spool/exim/input/0 -name '*-H' | xargs grep 'auth_id' | grep $EMAILADDRESS | cut -d: -f1 | cut -d/ -f7 | cut -d- -f1-3
-</code>
+</source>
 '''''EXAMPLE:'''''
-<code>[bash,n]
+<source lang='bash'>
 find /var/spool/exim/input/0 -name '*-H' | xargs grep 'auth_id' | grep likestospam@insecurepassword.com | cut -d: -f1 | cut -d/ -f7 | cut -d- -f1-3
-</code>
+</source>
 ===Get list of IP addresses sending messages from specific address===
-<code>[bash,n]
+<source lang='bash'>
 for i in $(find /var/spool/exim/input/0 -name '*-H' | xargs grep 'auth_id' | grep $EMAILADDRESS  | cut -d: -f1 | cut -d/ -f7 | cut -d- -f1-3);
   do exim -Mvh $i | grep helo | cut -d "[" -f2 | cut -d "]" -f1| grep -v helo_name; done | sort | uniq -c | sort -n
-</code>
+</source>
 '''''EXAMPLE:'''''
-<code>[bash,n]
+<source lang='bash'>
 for i in $(find /var/spool/exim/input/0 -name '*-H' | xargs grep 'auth_id' | grep likestospam@insecurepassword.com  | cut -d: -f1 | cut -d/ -f7 | cut -d- -f1-3);
   do exim -Mvh $i | grep helo | cut -d "[" -f2 | cut -d "]" -f1| grep -v helo_name; done | sort | uniq -c | sort -n
-</code>
+</source>
 ===Display specific field===
 This will display the contents of the specific field.
-<code>[bash,n]
+<source lang='bash'>
   find /var/spool/exim/input/0 -name '*-H' | xargs grep "$FIELD" | cut -d: -f3- | sort | uniq -c | sort -nr
-</code>
+</source>
 '''''EXAMPLE:'''''
-<code>[bash,n]
+<source lang='bash'>
   find /var/spool/exim/input/0 -name '*-H' | xargs grep "Subject" | cut -d: -f3- | sort | uniq -c | sort -nr
-</code>
+</source>
 ==Delete Scripts==
 ===Delete messages based on specific element (IE Subject, To, From etc)===
-<code>[bash,n]
+<source lang='bash'>
 find /var/spool/exim/input -name '*-H' | xargs grep '$ELEMENT' | cut -d: -f1 | cut -d/ -f7 | cut -d- -f1-3 | xargs exim -Mrm
-</code>
+</source>
 '''''EXAMPLE:'''''
-<code>[bash,n]
+<source lang='bash'>
 find /var/spool/exim/input -name '*-H' | xargs grep 'From: somethingimportant@somerealcompany.com' | cut -d: -f1 | cut -d/ -f7 | cut -d- -f1-3 | xargs exim -Mrm
-</code>
+</source>
 ===Delete messages based on address===
-<code>[bash,n]
+<source lang='bash'>
 find /var/spool/exim/input -name '*-H' | xargs grep 'auth_id' | grep $EMAILADDRESS | cut -d: -f1 | cut -d/ -f7 | cut -d- -f1-3 | xargs exim -Mrm
-</code>
+</source>
 '''''EXAMPLE:'''''
-<code>[bash,n]
+<source lang='bash'>
 find /var/spool/exim/input -name '*-H' | xargs grep 'auth_id' | grep likestospam@insecurepassword.com | cut -d: -f1 | cut -d/ -f7 | cut -d- -f1-3 | xargs exim -Mrm
-</code>
+</source>
 ==Advanced Scripts==
@@ Line 85: / Line 85: @@
 {{mbox|size=tiny|msg=Most likely you will want to run the normal sender find script above as this will return lists for each queue folder.}}
-<code>[bash,n]
+<source lang='bash'>
 for dir in $(ls -l /var/spool/exim/input/ | grep -v "\." | awk '{print $9}');
 do echo "Searching $dir directory";
@@ Line 97: / Line 97: @@
 fi;
 done;
-</code>
+</source>
 ===Advanced message delete based on address===
@@ Line 103: / Line 103: @@
 You will need to change '''EMAILADDRESS'''.
-<code>[bash,n]
+<source lang='bash'>
 EMAILADDRESS='';
 for dir in $(ls -l /var/spool/exim/input/ | grep -v "\." | awk '{print $9}');
@@ Line 117: / Line 117: @@
 for msg in $(echo "$spam" | rev | cut -d "/" -f1 | rev); do exim -Mrm $msg; done;
 done;
-</code>
+</source>
 ===Advanced NDR delete===
@@ Line 124: / Line 124: @@
 You can change '''SUBJECT''' to delete other messages such as NDRs or what ever other verbage is used in the message.
-<code>[bash,n]
+<source lang='bash'>
 SUBJECT='Delivery Status Notification';
 for dir in $(ls -l /var/spool/exim/input/ | grep -v "\." | awk '{print $9}');
@@ Line 140: / Line 140: @@
 done;
 done;
-</code>
+</source>
 ==What to change==
 In the above query scripts you will want to change the variables to match what you are looking for.

@@ Line 17: / Line 17: @@
 </code>
-'''EXAMPLE:'''
+'''''EXAMPLE:'''''
 <code>[bash,n]
 find /var/spool/exim/input/0 -name '*-H' | xargs grep "subject:" | cut -d: -f1 | cut -d/ -f7 | cut -d- -f1-3
@@ Line 27: / Line 27: @@
 </code>
-'''EXAMPLE:'''
+'''''EXAMPLE:'''''
 <code>[bash,n]
 find /var/spool/exim/input/0 -name '*-H' | xargs grep 'auth_id' | grep likestospam@insecurepassword.com | cut -d: -f1 | cut -d/ -f7 | cut -d- -f1-3
@@ Line 38: / Line 38: @@
 </code>
-'''EXAMPLE:'''
+'''''EXAMPLE:'''''
 <code>[bash,n]
 for i in $(find /var/spool/exim/input/0 -name '*-H' | xargs grep 'auth_id' | grep likestospam@insecurepassword.com  | cut -d: -f1 | cut -d/ -f7 | cut -d- -f1-3);
@@ Line 62: / Line 62: @@
 </code>
-'''EXAMPLE:'''
+'''''EXAMPLE:'''''
 <code>[bash,n]
 find /var/spool/exim/input -name '*-H' | xargs grep 'From: somethingimportant@somerealcompany.com' | cut -d: -f1 | cut -d/ -f7 | cut -d- -f1-3 | xargs exim -Mrm
@@ Line 72: / Line 72: @@
 </code>
-'''EXAMPLE:'''
+'''''EXAMPLE:'''''
 <code>[bash,n]
 find /var/spool/exim/input -name '*-H' | xargs grep 'auth_id' | grep likestospam@insecurepassword.com | cut -d: -f1 | cut -d/ -f7 | cut -d- -f1-3 | xargs exim -Mrm

@@ Line 51: / Line 51: @@
 </code>
 <code>[bash,n]
   find /var/spool/exim/input/0 -name '*-H' | xargs grep "Subject" | cut -d: -f3- | sort | uniq -c | sort -nr

@@ Line 3: / Line 3: @@
 Different scripts to search the exim queue.
-{{mbox|size=tiny|msg=Note these scripts have been recently changed to look only at the '''0''' queue by default.<br \>This will allow for faster scan times that should still represent the queue as a whole.}}
+{{mbox|size=tiny|msg=Note these scripts have been recently changed to look only at the '''0''' queue by default.  This will allow for faster scan times that should still represent the queue as a whole.}}
 ==Query Scripts==

@@ Line 3: / Line 3: @@
 Different scripts to search the exim queue.
-{{mbox|size=small|msg=Note these scripts have been recently changed to look only at the '''0''' queue by default.<br \>This will allow for faster scan times that should still represent the queue as a whole.}}
+{{mbox|size=tiny|msg=Note these scripts have been recently changed to look only at the '''0''' queue by default.<br \>This will allow for faster scan times that should still represent the queue as a whole.}}
 ==Query Scripts==

@@ Line 82: / Line 82: @@
 Makes it easier to identify spamming accounts with large exim queues.
-{{mbox|size=small|msg=Most likely you will want to run the normal sender find script above as this will return lists for each queue folder.}}
+{{mbox|size=tiny|msg=Most likely you will want to run the normal sender find script above as this will return lists for each queue folder.}}
 <code>[bash,n]