Thanks for the help Len. I looked through the files again. authorize.net is
the culprit. (I have a dual PII handling IMAIL only. It chokes when I try to
move files from the spool directory to a temp directory.) I do not know if
this was done on purpose or not, I have emailed their support. Although I
like your tools very much, I hadn't much time, but I will play with them
later. I used WinNT Find and searched for anything containing text
"authorize.net" and just cut and pasted from there. This took about 45 mins
for 7600 files though, so I had to cancel at that point (SMTP service
wouldn't respond during this). I will continue the operation after working
hours.
Thanks for your swift help.
BTW I have just got approval for an IMGate box because of this :)
Craig.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Len Conrad
Sent: Wednesday, December 27, 2000 9:40 AM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] 32000 files
>I have a huge problem,
yes, the Subject: warned us. vbg
>my mail server, Imail upgraded several times from 5
>to 6.05. I have a big problem right now. I have 32,000 files in my spool
>directory and 4 days of log files that are about 1 GB.
you're being abused, not amused.
>Spoolclean won't delete the log files (sysxxxxxx) and Imail reports
>only 200 items in its queue. (32000 files?) I have tried stopping
>all Imail services, moving the log files, deleting them, spool
>cleaning them out of existence. Nothing
>works. What's up with that and 32000 files? It doesn't look like a spammer.
mail bomber
>I have looked at some of these files by time to see if there are any
>similarities.
.... and ??
>Does anyone know of a windows program that will open a log file that is
>600MB?
I suggest you don't try it (it will takes a LOOONNNNGGG time to open),
but....
MS Word?
or www.TextPad.com?
or www.UltraEdit.com?
If the above fail (likely), then go to www.ProfSoftware.com, grab
their demo of their UnixDos tool kit and use the "tail" or "head"
command (after install, click onthe unixdos.hlp file or run the
commands without params to get help, easy to use) to try to slice off
the first or last few 1000 lines to another, smaller file to look
at. These tools might blow up, too.
btw, of the 32K files, there's probably some repeating signature
string in each junk file that you could test for and if the string
is in there, delete the file. That would selectively clean out the
mail bomb crap while leaving your valid users files alone. You could
use the egrep command in the toolbox and something like this that
Dusty@NetEase showed us in the IMGate list:
egrep -l 'stringtodelete' /imail/spool/* > /tmp/cln-list
rm -f `cat /tmp/cln-list`
rm /tmp/cln-list
You'll have to play with that to get the syntax right for the unixdos
egrep.exe. rm is just ReMove, aka, DELete.
Somebody here might have some NT batch file to accomplish the same.
btw, once you know some log line signature to look for, you could use
the unixdos sed.exe (Stream EDitor) to detect the signature string
and delete that line(s)
sed /signaturestring/d <sys1226.txt >sys1226clean.txt
Len
http://BIND8NT.MEIway.com : Binary for ISC BIND 8.2.3 T9B for NT4 & W2K
http://IMGate.MEIway.com : Build free, hi-perf, anti-spam mail gateways
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
