Skip to main content

Posts

Showing posts from February 5, 2013

Tcpdump Tips & Tricks

Tcpdump Tips & Tricks Tcpdump Tips & Tricks  TCPDUMP USAGE

Finding spammers and dealing with floods of excess mail

Finding Spammers and Dealing With Floods In Exim Finding Spammers and Dealing with Floods  One of the handiest command I use for administering our exim mail servers is the following: smtp3:~ # exim -bp | exiqsumm Count  Volume  Oldest  Newest  Domain —–  ——  ——  ——  —— 1    3072      5h      5h  domainName1.com 1    3174     77m     77m  domainName2.com 1    7577     74m     74m  domainName3.com 52    5120      8h      8h  domainName3.com This gives me a nice breakdown of who my top talkers are and the total volume sent to each domain etc. Let’s say I suspect a mail attack and have a rogue spammer on my network. One of the easiest way to see this is by simply tailing ou...