how to delete more than 300.000 mails

[arsenet]

Hi,
Yesterday one user infected by a virus, sen more than 500.000 spam mails.
When we detected, move from UNIX queue to archive to clen UNIX queue, now, who can i delete that mails? 98% are spam, but not all.
i see in the wiki the message to delete mails from queue using omstat, but take mora than 4 minutes to delete one mail, and queue.manager 100%.

Very much thanks

[ltward]

If the messages are still in the queue then omstat is your best choice. As the queue gets smaller, the deletions will happen faster.

You could use omqdump and delete ALL of the messages (including the good ones) but that will also take a long time on such a big queue, and it will use system resources.

You might want to wait until after business hours, when users are not on the system as much, and run the omstat command then.

If the messages are already delivered in user accounts, omtidyallu is your best choice.

[mikethebike]

The problem is that omqstat runs through the entire queue.

What you could is move all the mails to another queue that has nothing in it (smerr maybe) and then process them there. It will take a while to create the file, but you will only stat the queue once. Make sure NOTHING is added or removed from the queue while you do this.

omstat -q smerr > /tmp/workfile

cat /tmp/workfile |while read line;do
echo $line |grep -q <string from bad message subject>
if [$? -eq 0 ]
echo 2
else
echo 1
done > /tmp/workfile2

then use omresub to resub them to service router

omresub -q smerr -i < /tmp/workfile2

Mick

[arsenet]

/root/borrarfromomstat2: line 2: syntax error near unexpected token `newline'
/root/borrarfromomstat2: line 2: `echo $line |grep -q <My Last Wish>'

[arsenet]

ok, i make some changes and now work, but i have at least 5 diferent spam mails, and this only work for one

[mikethebike]

you could edit the file directly, and search/replace each line with either "1" or "2", so you end up with a file containing somthing like:

1
2
2
2
1
1
1
1

Then run omresub against that file.

omresub -q smerr -i < /tmp/workfile2

[arsenet]

yes but we are talking about 300.000 mails, that only about 2000 are ok

[mikethebike]

Hi,

if you use an editor, you do not need to edit each line individually.

for example, if you are using vi editor or sed, do a search and replace of all lines that contain the message subject you want to delete. Editing the entire file of 300,000 should take no more than a few minutes.

g/subject line/s/^.*$/2/

or using sed

cat /tmp/workfile |grep "subject line" |sed 's/^.*$/2/g' > /tmp/workfile2

Mick

[arsenet]

if i use cat method, all line change to 2

[mikethebike]

ooops, I should have checked that command!!
sorry, please see my previous post for that method, no need to use sed:

cat /tmp/workfile |while read line;do
echo $line |grep -q <string from bad message subject>
if [$? -eq 0 ]
echo 2
else
echo 1
done > /tmp/workfile2

Mick

[ltward]

Good point about stating the queue more than once.

I really like the idea of making an input file for omresub, Mick. Clever!