Forum Moderators: bakedjake
I only have my own sites on my server and noticed a few emails addresses in the mailq that I didn't send and would like to view them to see what they are.
I have the "q-id" from running mailq but don't do know what to do with it. I tried pine but only saw lots of incoming email that mailscanner blocked that had viruses.
I have previous q-id numbers saved from last week, can I read those also?
[root@hah01 root]# mailq
/var/spool/mqueue (3 requests)
----Q-ID---- --Size-- -----Q-Time----- ------------Sender/Recipient------------
h7ODVjw06118 637 Sun Aug 24 07:31 <>
(Deferred: Connection refused by mail2.suspicious_site.com.)
suspicious@email.com
How do I view the contents of emails that are in the mailq?
Those emails are basically files in /var/spool/mqueue named after the ID (3 files per ID). Enter that directory and do a :
ls -l *ID
replace ID with the message ID to see the filenames. They are text files, the one starting with a 'd' should hold the message contents/body. View that files (and the others if you wish) to get details on the emails in question.
