How to disable a user account that is spamming big time

[Tzvook]

pasichnyk Wrote:If it is coming from the vuXXXX account, it is likely that the website has some mailform exploit or something that is being exploited. I've had this happen on several sites in the past. At least since its running as the user, you have it narrowed down to what site is making the calls. Thats a lot better than where i have been stuck in the past, with apache sending out mails as itself.

If they do have a mailform on their site, just a reminder that all the legitimate email that would have been sent from that (customers, etc) will now be dropped! You need to get to the real issue of what is being exploited.

-
Jesse

10X for reply

I looked at their mailforms (they have 3 of them) and it wasn't checking http referer, so I added it to the forms processors.

The issue now is that my spool is full of junk and server is getting chunk.
Is there any way to empty the spool safely ?
I can simply delete, but I don't want to damage the server/postfix