Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: exim: users

Find Ip address and content of frozen messages

 

 

exim users RSS feed   Index | Next | Previous | View Threaded


achapela.rexistros at gmail

Jul 3, 2008, 3:17 AM

Post #1 of 4 (317 views)
Permalink
Find Ip address and content of frozen messages

Hello,
I am trying to know the ip address of a list of frozen messages. Also, I
want to know the content of the each message.

With exim -bpc I can count the total messages in the spool and with exim
-bp I can see a resume of the data I need.

What command I can use ?

Best regards!

--
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


graeme at graemef

Jul 3, 2008, 3:47 AM

Post #2 of 4 (306 views)
Permalink
Re: Find Ip address and content of frozen messages [In reply to]

On Thu, 2008-07-03 at 12:17 +0200, Adrian Chapela wrote:
> I am trying to know the ip address of a list of frozen messages. Also, I
> want to know the content of the each message.

OK...

> With exim -bpc I can count the total messages in the spool and with exim
> -bp I can see a resume of the data I need.
>
> What command I can use ?

exipick is the tool of choice here, coupled with the exim binary itself
and a bit of creative plumbing in your shell of choice.

"exipick -z" extracts a list of frozen messages.
"exipick -z -i" extracts the queue ID of frozen messages.

For a long list of frozen messages where you want to see the body, use:

for x in `exipick -z -i`; do echo $x; exim -Mvb $x; done

You may want to put a pager in there somewhere - either pipe "exim -Mvb
$x" through a pager, or pipe the whole output through after the "done".

When you say you want to "know the IP address", what do you mean? The
one the message arrived from?

Graeme


--
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


achapela.rexistros at gmail

Jul 3, 2008, 4:31 AM

Post #3 of 4 (300 views)
Permalink
Re: Find Ip address and content of frozen messages [In reply to]

Graeme Fowler escribió:
> On Thu, 2008-07-03 at 12:17 +0200, Adrian Chapela wrote:
>
>> I am trying to know the ip address of a list of frozen messages. Also, I
>> want to know the content of the each message.
>>
>
> OK...
>
>
>> With exim -bpc I can count the total messages in the spool and with exim
>> -bp I can see a resume of the data I need.
>>
>> What command I can use ?
>>
>
> exipick is the tool of choice here, coupled with the exim binary itself
> and a bit of creative plumbing in your shell of choice.
>
> "exipick -z" extracts a list of frozen messages.
> "exipick -z -i" extracts the queue ID of frozen messages.
>
> For a long list of frozen messages where you want to see the body, use:
>
> for x in `exipick -z -i`; do echo $x; exim -Mvb $x; done
>
> You may want to put a pager in there somewhere - either pipe "exim -Mvb
> $x" through a pager, or pipe the whole output through after the "done".
>
> When you say you want to "know the IP address", what do you mean? The
> one the message arrived from?
>
Yes, I want to know if they are spam only or there is some PC infected
and it is sending messages.

> Graeme
>
>
>


--
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/


gergely.nagy at interware

Jul 3, 2008, 4:49 AM

Post #4 of 4 (302 views)
Permalink
Re: Find Ip address and content of frozen messages [In reply to]

>>> I am trying to know the ip address of a list of frozen messages. Also, I
>>> want to know the content of the each message.
>>>
>> OK...
>>
>>
>>> With exim -bpc I can count the total messages in the spool and with exim
>>> -bp I can see a resume of the data I need.
>>>
>>> What command I can use ?
>>>
>> exipick is the tool of choice here, coupled with the exim binary itself
>> and a bit of creative plumbing in your shell of choice.
>>
>> "exipick -z" extracts a list of frozen messages.
>> "exipick -z -i" extracts the queue ID of frozen messages.
>>
>> For a long list of frozen messages where you want to see the body, use:
>>
>> for x in `exipick -z -i`; do echo $x; exim -Mvb $x; done
>>
>> You may want to put a pager in there somewhere - either pipe "exim -Mvb
>> $x" through a pager, or pipe the whole output through after the "done".
>>
>> When you say you want to "know the IP address", what do you mean? The
>> one the message arrived from?
>>
> Yes, I want to know if they are spam only or there is some PC infected
> and it is sending messages.

exipick -z -i --show-vars sender_host_address,message_body

And then you can parse that output by a program, or look through it
manually.

--
Gergely Nagy <gergely.nagy[at]interware.co.hu>

--
## List details at http://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

exim users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact lists@gossamer-threads.com
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.