[Cialug] Postfix issue

Tony Bibbs cialug@cialug.org
Sun, 22 May 2005 16:56:04 -0500


I've got a few applications that are email capable.  Yeah, I need to 
check the logs...it's ridiculous.

--Tony

Jon Clemons wrote:
> Do you have a formmail script on there??
> Look are your apache server logs it should show what
> script is being called over and over.
> 
> 
> ----- Original Message ----- From: "Tony Bibbs" <tony@tonybibbs.com>
> To: <cialug@cialug.org>
> Sent: Sunday, May 22, 2005 4:50 PM
> Subject: Re: [Cialug] Postfix issue
> 
> 
>> nothing right now, I deleted the deferred queue when I found out there 
>> were 21,000 messages.  All the problems are with the apache user.  
>> Some script on my box is being misused...now I just need to find the 
>> needle in the haystack.
>>
>> --Tony
>>
>> Jon Clemons wrote:
>>
>>> What is the output of mailq|wc -l
>>>
>>>
>>>
>>> ----- Original Message ----- From: "Tony Bibbs" <tony@tonybibbs.com>
>>> To: <cialug@cialug.org>
>>> Sent: Sunday, May 22, 2005 2:41 PM
>>> Subject: Re: [Cialug] Postfix issue
>>>
>>>
>>>> k, open relay isn't it...I just tested it.  Must be something else 
>>>> (sigh).
>>>>
>>>> --Tony
>>>>
>>>> Anthony Jeffries wrote:
>>>>
>>>>> On Sun, May 22, 2005 9:22, Tony Bibbs said:
>>>>>
>>>>>> Got an issue where undue strain is being put on my server by postfix.
>>>>>> When it isn't running the load is around .27 but when it is 
>>>>>> running it's
>>>>>> up to near 5 at times.  I'm pouring through the logs and the first 
>>>>>> thing
>>>>>> I notice is a *ton* of these sorts of entries:
>>>>>>
>>>>>> May 22 09:17:14 iowaoutdoors postfix/smtp[15805]: 192922CD35B:
>>>>>> to=<luna_pi@click21.com.br>, 
>>>>>> relay=mail3.click21.com.br[200.255.27.137],
>>>>>> delay=391139, status=sent (250 Ok: queued as 6D160AB60C)
>>>>>>
>>>>>> They happen one right after another just a few seconds apart.  I'm 
>>>>>> not a
>>>>>> mail server admin (which is my problem, I'm sure) but what does 
>>>>>> this mean?
>>>>>>
>>>>>> --Tony
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> Tony,
>>>>>
>>>>> I think either your server is trying to send a bunch of bounces due to
>>>>> someone spamming non-existent accounts at your domain, or you have 
>>>>> an open
>>>>> relay.
>>>>>
>>>> _______________________________________________
>>>> Cialug mailing list
>>>> Cialug@cialug.org
>>>> http://cialug.org/mailman/listinfo/cialug
>>>>
>>>
>>> _______________________________________________
>>> Cialug mailing list
>>> Cialug@cialug.org
>>> http://cialug.org/mailman/listinfo/cialug
>>
>> _______________________________________________
>> Cialug mailing list
>> Cialug@cialug.org
>> http://cialug.org/mailman/listinfo/cialug
>>
> _______________________________________________
> Cialug mailing list
> Cialug@cialug.org
> http://cialug.org/mailman/listinfo/cialug