Recovering from spam, clean up DB?

Over the weekend a misconfigured autoresponder deluged our RT system
with around 10,000 tickets. I’ve blocked the user at the sendmail
level, but now I need a way to clean up my database (mysql). Has anyone
dealt with this before? You can’t just search your DB and delete all
the rows that you don’t want, can you? Is there a way to export all the
tickets I do want, and create a new database? If I do need to keep
everything in the database, is there a way to efficiently kill all these
tickets?

Any help would be much appreciated. Thanks!

-Michael

Michael D. Marziani
Sr. Systems Administrator

Over the weekend a misconfigured autoresponder deluged our RT system
with around 10,000 tickets. I’ve blocked the user at the sendmail
level, but now I need a way to clean up my database (mysql). Has anyone
dealt with this before?

We had a 5000 ticket flood a few weeks ago – I just marked the
tickets as dead and was done with it.

Cheers,

-Rich

Rich Lafferty --------------±----------------------------------------------
Ottawa, Ontario, Canada | Save the Pacific Northwest Tree Octopus!
http://www.lafferty.ca/ | http://zapatopi.net/treeoctopus.html
rich@lafferty.ca -----------±----------------------------------------------

Over the weekend a misconfigured autoresponder deluged our RT system
with around 10,000 tickets. I’ve blocked the user at the sendmail
level, but now I need a way to clean up my database (mysql). Has anyone
dealt with this before?

We had a 5000 ticket flood a few weeks ago – I just marked the
tickets as dead and was done with it.

Hello Rich,

Excuse me for jumping in but what gave you the “flood”? While it maybe
unrelated, there is a time I had a situation almost similar. Some clown
was going on leave and had their admin setup an autoreponder. This clown
sent mail to hundreds of addresses (I’m surprised she had such a big contact
list), one of which was my rt address. So rt got the mail, responded to the
clown’s address, mail was picked by the clown’s bot, responded to rt, rt got
it, responded again - the cycle was so vicious I has to shutdown that queue.

I’m wondering if there is a way to protect rt against such a situation.

    cheers
   - wash 

Odhiambo Washington, wash@wananchi.com . WANANCHI ONLINE LTD (Nairobi, KE)
http://ns2.wananchi.com/~wash/ . 1ere Etage, Loita Hse, Loita St.,
GSM: (254) 722 743 223 . # 10286, 00100 NAIROBI
"Oh My God! They killed init! You Bastards!"
–from a /. post

Over the weekend a misconfigured autoresponder deluged our RT system
with around 10,000 tickets. I’ve blocked the user at the sendmail
level, but now I need a way to clean up my database (mysql). Has anyone
dealt with this before?

We had a 5000 ticket flood a few weeks ago – I just marked the
tickets as dead and was done with it.

Hello Rich,

Excuse me for jumping in but what gave you the “flood”?

A virus-infected system that apparently had a bunch of our queue
addresses in its addressbook. The unfortunate part was that our local
virus-scanner caught all of the messages – and then sent mail to the
recipient saying “I stopped this virus!”, which is what filled the
queues!

I’m wondering if there is a way to protect rt against such a situation.

For me, plain old mail filtering.

Cheers,

-Rich

Rich Lafferty --------------±----------------------------------------------
Ottawa, Ontario, Canada | Save the Pacific Northwest Tree Octopus!
http://www.lafferty.ca/ | http://zapatopi.net/treeoctopus.html
rich@lafferty.ca -----------±----------------------------------------------

Odhiambo Washington wrote:

I’m wondering if there is a way to protect rt against such a situation.

http://lists.fsck.com/pipermail/rt-devel/2002-February/001958.html