How to find SMTP Auth user names to find out bulk spam user: Difference between revisions
(Created page with "{{WIP}}{{Article Infobox|{{admin}}|{{ZCS 8.6}}|{{ZCS 8.5}}|{{ZCS 8.0}}}} =How to find SMTP Auth user names to find out bulk spam user= ==Purpose== How to find SMTP Auth user n...") |
No edit summary |
||
(2 intermediate revisions by 2 users not shown) | |||
Line 1: | Line 1: | ||
{{ | {{BC|Certified}} | ||
__FORCETOC__ | |||
<div class="col-md-12 ibox-content"> | |||
=How to find SMTP Auth usernames to find a bulk spam user= | |||
{{KB|{{ZC}}|{{ZCS 8.6}}|{{ZCS 8.5}}|{{ACS 8.0}}|}} | |||
{{WIP}} | |||
==Purpose== | ==Purpose== | ||
How to find SMTP Auth | How to find SMTP Auth usernames to find a bulk spam user. | ||
==Resolution== | ==Resolution== | ||
Use the following command line to get the user listing who authenticated on SMTP port to send an email: | Use the following command line to get the user listing of who authenticated on the SMTP port to send an email: | ||
<pre>cat /var/log/zimbra.log | sed -n 's/.*sasl_username=//p' | sort | uniq -c | sort -n | <pre>cat /var/log/zimbra.log | sed -n 's/.*sasl_username=//p' | sort | uniq -c | sort -n | ||
1 Auser@domain.com | 1 Auser@domain.com | ||
Line 11: | Line 15: | ||
4 Cuser@domain.com | 4 Cuser@domain.com | ||
5 Duser@domain.com | 5 Duser@domain.com | ||
36 SPAMMER@domain.com | |||
</pre> | </pre> | ||
==Additional Content== | ==Additional Content== | ||
* For a detailed | * For a detailed explanation about the Zimbra Logs system, please [[Log_Files|read the next Wiki article]]. | ||
{{Article Footer|Zimbra Collaboration 8.6, 8.5, 8.0|04/15/2015}} | {{Article Footer|Zimbra Collaboration 8.6, 8.5, 8.0|04/15/2015}} | ||
{{NeedSME|SME1|SME2| | {{NeedSME|SME1|SME2|Jenny Jarrard}} |
Latest revision as of 18:50, 11 July 2015
How to find SMTP Auth usernames to find a bulk spam user
- This article is a Work in Progress, and may be unfinished or missing sections.
Purpose
How to find SMTP Auth usernames to find a bulk spam user.
Resolution
Use the following command line to get the user listing of who authenticated on the SMTP port to send an email:
cat /var/log/zimbra.log | sed -n 's/.*sasl_username=//p' | sort | uniq -c | sort -n 1 Auser@domain.com 3 Buser@domain.com 4 Cuser@domain.com 5 Duser@domain.com 36 SPAMMER@domain.com
Additional Content
- For a detailed explanation about the Zimbra Logs system, please read the next Wiki article.