Mark Martinec schrieb: > Did you have a chance to examine the culprit message? > At elevated log levels you can see what components constitute > the message and what are their sizes. A 10 MB compressed archive > can easily fill up a 120 MB partition during decoding or > virus checking.
Dec 18 08:41:32 rzhs098 mail:info postfix/smtpd[327872]: connect from unknown[10.49.2.112] Dec 18 08:41:32 rzhs098 mail:info postfix/smtpd[327872]: 6637F13D4: client=unknown[10.49.2.112] Dec 18 08:41:32 rzhs098 mail:info postfix/cleanup[544856]: 6637F13D4: message-id=<[EMAIL PROTECTED]> Dec 18 08:41:32 rzhs098 mail:info postfix/smtpd[327872]: disconnect from unknown[10.49.2.112] Dec 18 08:41:32 rzhs098 mail:info postfix/qmgr[577602]: 6637F13D4: from=<[EMAIL PROTECTED]>, size=19567, nrcpt=1 (queue active) Dec 18 08:41:32 rzhs098 mail:info amavis[360450]: (360450-02) LMTP::10024 /opt/mail/var/amavis/tmp/amavis-20061218T084105-360450: <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]> SIZE=19567 Received: from rzhs098 ([127.0.0.1]) by localhost (rzhs098.ofd- h.de [127.0.0.1]) (amavisd-new, port 10024) with LMTP for <[EMAIL PROTECTED]>; Mon, 18 Dec 2006 08:41:32 +0100 (N FT) Dec 18 08:41:32 rzhs098 mail:info amavis[360450]: (360450-02) Checking: pN+rG+KM4I3p <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]> Dec 18 08:41:34 rzhs098 mail:err|error amavis[426220]: (426220-08) (!!) ask_av (Sophos SAVI) FAILED - unexpected result: ERROR p003: error scanning file /opt/mail/var/amavis/tmp/amavis-20061218T083448-426220/parts/p003, Unknown error (112) Dec 18 08:41:34 rzhs098 mail:info postfix/smtpd[491638]: connect from localhost[127.0.0.1] Dec 18 08:41:34 rzhs098 mail:info postfix/smtpd[491638]: B09BE13D7: client=localhost[127.0.0.1] Dec 18 08:41:34 rzhs098 mail:info postfix/cleanup[622772]: B09BE13D7: message-id=<[EMAIL PROTECTED]> Dec 18 08:41:34 rzhs098 mail:info postfix/smtpd[532634]: connect from localhost[127.0.0.1] Dec 18 08:41:34 rzhs098 mail:info postfix/smtpd[532634]: D7F9013D9: client=localhost[127.0.0.1] If this is the mail, which caused the error, it's 20k big and spam. HTML text and a gif picture. Hans ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
