Gecko [ goons4good.org ]

Name	Size	Permission	Date
cron	[ DIR ]	drwxr-xr-x	2025-07-23 04:12
add-pgsql-ipv6-support.sh	564 B	-rwxr-xr-x	2022-09-28 10:30
allow_cl.sh	3.3 KB	-rwxr-xr-x	2024-03-05 16:15
auth-removal.sh	1.95 KB	-rwx------	2023-01-23 13:29
block_ssh.sh	1.15 KB	-rwxr-xr-x	2023-05-23 21:01
cfm_control	4.65 KB	-rwxr-xr-x	2024-03-28 12:14
check_autossl_excluded.sh	6.88 KB	-rwxr-xr-x	2023-05-22 11:59
convert_to_clos.sh	5.73 KB	-rwxr-xr-x	2023-02-09 14:50
convert_to_core.sh	276 B	-rwx------	2025-04-01 06:33
disable_cpbackups.sh	1.39 KB	-rwxr-xr-x	2024-10-10 07:11
domain_check.py	6.24 KB	-rwxr-xr-x	2024-08-27 10:40
grubinst6.sh	230 B	-rwxr-xr-x	2022-10-27 11:41
grubinst7.sh	323 B	-rwxr-xr-x	2024-01-24 12:57
install-ipa.sh	2 KB	-rwxr-xr-x	2024-09-26 04:24
install-ipa.sh.bak	2.37 KB	-rwxr-xr-x	2023-07-05 13:07
install_cloudlinux.sh	1.31 KB	-rwxr-xr-x	2022-09-29 15:30
install_csf.sh	2.91 KB	-rwx------	2023-05-08 10:57
install_elasticsearch.sh	2.19 KB	-rwx------	2022-07-25 14:24
install_litespeed.sh	4.33 KB	-rwx------	2024-06-13 10:28
install_multiphp.sh	976 B	-rwx------	2022-10-10 14:55
install_redis.sh	709 B	-rwx------	2022-09-28 10:30
ipmicfg	429.04 KB	-rwxr-xr-x	2023-10-04 10:59
lets_encrypt_accept.sh	306 B	-rwxr-xr-x	2024-05-14 09:32
mailqueue_check.sh	1.65 KB	-rwxr-xr-x	2022-04-11 09:40
mysql_minor_upgrade.sh	9.33 KB	-rwxr-xr-x	2024-09-11 17:25
server-scripts_deployer.sh	13.54 KB	-rwxr-xr-x	2024-03-28 12:59
set_autossl_onlynotify_expiry.sh	1.91 KB	-rwxr-xr-x	2022-09-14 08:37
updatecfips.sh	1.62 KB	-rwxr-xr-x	2023-05-22 11:59
wp_plugin_scan.py	14.8 KB	-rw-------	2025-01-21 11:31

Rename

#!/bin/bash

#mailqueue audit beta : SYSENG-4712

IFS=$'\n'
frozenThresh="20"
uniqRecThresh="10"
logFile="/var/log/mail_queue.log"

mapfile -t id_array < <(exiqgrep -z -i)

#get user and recipient from frozen messages, put them side by side in array unless it's mailnull

for id in "${!id_array[@]}" 
do
  user_grep=$(grep "${id_array["$id"]}" /var/log/exim_mainlog | grep "Sender identification U=" | grep -wv "U=mailnull" | awk '{ print $6 }' | sed -r 's/^.{2}//' | head -1)
  rec_grep=$(grep "${id_array["$id"]}" /var/log/exim_mainlog | grep "U=$user_grep" | grep "S=" | awk -F'=' '{ print $4 }' | tail -1)
  
  if [ ! -z "$user_grep" ]; then
    user_array=(${user_array[@]} "$user_grep":"${id_array["$id"]}":"$rec_grep")
  fi
done

#logging what we found, only for this beta

for log in "${user_array[@]}"
do
	echo "$(date "+%D %T") : "$log"" >> "$logFile"
done

#find number of unique frozen messages per user

for frozenCount in `printf "%s\n" "${user_array[@]}" | awk -F':' '{ print $1 }' | sort -n | uniq -c | sort -rn`
do
	
#if unique frozen messages are greater than the threshold, take action

if [ `echo "$frozenCount" | awk '{ print $1 }'` -gt "$frozenThresh" ]; then

uniqRec=$(printf "%s\n" "${user_array[@]}" | grep `echo "$frozenCount" | awk '{print $2}'` | awk -F':' '{ print $3 }' | sort -n | uniq | sort -rn | wc -l)
    if [ "$uniqRec" -gt "$uniqRecThresh" ]; then
      
#TICKET CREATION AND OTHER ACTIONS GO HERE

echo "$(date "+%D %T") : $(echo "$frozenCount" | awk '{ print $2 }') is unable to send $(echo "$frozenCount" | awk '{ print $1 }') emails to more than "$uniqRecThresh" unique addresses. Could they be spamming?" >> "$logFile"
    fi

fi
done