> > Had a user with a virus and they sent a massive amount of spam out
> > through my server. Any easy way to go through the message queue and
> > delete any messages that contain there IP address?
>
> If you mean delete any mail sent directly from their IP:
> exipick -i '$sender_host_address eq 1.2.3.4' | xargs exim -Mrm
Thanks, this worked great. Had to download exipick and update queue
path but did the job great. Droped from 21,000 messages in queue to
420 now.
Matt
> If you literally mean "any messages that contain their IP":
> exipick -i --or '$message_headers =~ /\b1\.2\.3\.4\b/' \
> '$message_body =~ /\b1\.2\.3\.4\b/' \
> | xargs exim -Mrm
>
> --John
