How To Delete Mails From Or To A Specific Email Address From Your Mail Queue (Postfix)

Version 1.0
Author: Falko Timme

If you get hit by a spam attack that floods your server with hundreds/thousands of emails from the same sender email address or to the same recipient email address, you can clean your mail queue from these emails with one single command before the mail flood takes your server to its knees.

You can check your current mail queue like this:

postqueue -p

To delete all mails from the mail queue that come from falko@example.com or are sent to falko@example.com (the command is the same regardless of if it's the sender or recipient address), you can use this command:

mailq | tail +2 | awk 'BEGIN { RS = "" } / falko@example\.com$/ { print $1 }' | tr -d '*!' | postsuper -d -

Afterwards check your mail queue again:

postqueue -p

It should now be much shorter.

Share this page:

19 Comment(s)

Add comment

Comments

From: Anonymous

You should probably use tail -n +2 instead of tail -2 which is deprecated and does not work everywhere.

From: Anonymous

Hello, I've the same problem. more than 60000 mails is in the mail queue! and I can't delete it, handy. I use this command and after 1 second it will done without any error but it doesn't work.

 


mailq | tail -n +2 | awk 'BEGIN { RS = "" } / info@mail\.com$/ { print $1 }' | tr -d '*!' | postsuper -d -

From: Dan Purcell

It worked for me when I ran it this way:

postqueue -p | tail -n +2 | awk 'BEGIN { RS = "" } / byrdsnestquilt@bellsouth\.net/ { print $1 }' | tr -d '*!' | postsuper -d -

From:

+1 for your Comment.

This Command works for me too on Debian Squeeze.

From: Anonymous

Why not:

 

mailq|fgrep someone@example.com|sed 's/\*.*//'|postsuper -d -

From: Bryand

mailq | tail -n +2 | awk 'BEGIN { RS = "" } / mailbox@asd\.com.mx$/ { print $1 }' | tr -d '*!' | sudo /opt/zimbra/postfix/sbin/postsuper -d -


mailq|fgrep monitoringeal@grupoasd.com.co|sed 's/\*.*//'|sudo /opt/zimbra/postfix/sbin/postsuper -d -

this command works for me.

From: Anonymous

Works on wheezy

From: Anonymous

This was the only one that worked for me on RHEL

From: Edo

For me works this

mailq | tail -n +2 | awk 'BEGIN { RS = "" } / info@mail\.com$/ { print $1 }' | tr -d '*!' | sudo postsuper -d -

From:

The above commands are not working

For deleting email from some domain, you can use
<code> mailq | awk '$7 ~ /@domain.tld$/ { print $1 }' | tr -d '*!' | postsuper -d -</code>

for deleting email from specified user, use 
<code>mailq | awk '$7 ~/^username@domain.tld$/ { print $1 }' | tr -d '*!' | postsuper -d -or for </code>

 

From: Anonymous

this one works for me on debian ... THANX

From: Some Guy

postsuper -d <queue id> works much more easily.

get the id from postqueue -p:

8D609414BFF4     9564 Fri Feb 27 10:42:42  webmaster@some.where

(conversation with mail.owlpic.com[64.38.116.11] timed out while receiving the initial server greeting)

So in this case

postsuper -d 8D609414BFF4

 

From: till

If you have just one or two mails, then yes. If you have o clean up a few thousand spam mails, then its more handy to use a script like the one above. 

From: DearWebby

Nice for Postfix, but how do I do that with SENDMAIL?

 

From: Steven

Somehow your solution didn't work for me. However, what did work is this:

mailq | grep -E "^[A-Z0-9]+" | grep someone@example.com | cut -c1-12 | postsuper -d -

 

From: Hannes

a liitle bit eassier: mailq |grep -i max@mustermann.de |cut -c1-10 | postsuper -d -

 

From: Ninja

THIS ONE IS THE ONLY ONE THAT REALLY WORK ON POSTFIX

 

postqueue -p | tail -n +2 | awk 'BEGIN { RS = "" } / abcde@xyz\.net/ { print $1 }' | tr -d '*!' | postsuper -d -

From: Tattwam

I am having Mac OS X Server. I have faced spamming issues several times. It shows few thousands emails in the mail queue (sudo mailq). When firing sudo postfix -d ALL , it doesn't give any output like xxx messages deleted.

From: John

@tattwam On Mac OS X Server, you must specify the full path inside of the Server.app package when invoking the "post*" commands (mailq does not require the path). So if you wanted to invoke... postqueue -p ...on OS X Server, you would invoke... /Applications/Server.app/Contents/ServerRoot/usr/sbin/postqueue -p If you don't include the path, it tries to use the wrong queue and you'll get invalid (empty) results. If you have a command like the mailq command above that invokes "postsuper -d" at the end, just paste in that same path just before postsuper, so the command above would end up as: mailq | tail +2 | awk 'BEGIN { RS = "" } / falko@example\.com$/ { print $1 }' | tr -d '*!' | /Applications/Server.app/Contents/ServerRoot/usr/sbin/postsuper -d -