Regards,
[EMAIL PROTECTED]
---------- Original Message ----------------------------------
From: Rasmus Aaen <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Date: Fri, 8 Jun 2001 16:28:28 +0200
>They were (almost) all from the monitor program, but the logs
doesn't show
>the monitor machine sending them. Could it be because Imail tries
to create
>a new .SMD file, if it can't write to the one on the disk?
>
>/Rasmus
>
>-----Original Message-----
>From: [EMAIL PROTECTED]
>[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott
Perry
>Sent: 8. juni 2001 15:52
>To: [EMAIL PROTECTED]
>Subject: Re: [IMail Forum] Huge .tmp file in spool dir
>
>
>
>>My mailserver crashed last night because it ran out of disk
space. It
>>normally has about 3 GB of free space. When I checked the spool
dir, there
>>was a file called broad44.tmp taking up more than 2.5 GB, and
34,000+ .SMD
>>files.
>>Two days ago there was about 20 files in the spool dir.
>
>The $64,000 question: What is in those 34,000 .SMD files?
>
>Unless your business skyrocketed overnight, take a look at a
couple of
>those 34,000 .SMD files and I'll bet you will immediately
discover the
>problem.
>
>If they all have a subject of "BEST FREE PORN ON THE WEB", a
spammer has
>used your mail server to send out his junk.
>
>If they all are to the same user, check out their forwarding to
make sure
>there isn't a mail loop.
>
>>I've been through the logfiles for the last few days, and I
can't see
>>anything out of the ordinary. The log for last night is about
25% larger
>>than normal, mainly because our monitor software tried to send
alert mails
>>because the mailserver was failing. But it didn't send no where
near the
>>34,000 mails (I think it send about 6-700 during the night).
>
>Then it likely wasn't a spammer. You should take a look at
the .SMD files
>and see what's in there.
>
> -Scott
>
>Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for
>IMail. http://www.declude.com
>
>
>
>Please visit http://www.ipswitch.com/support/mailing-lists.html
>to be removed from this list.
>
>An Archive of this list is available at:
>http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
>Please visit http://www.ipswitch.com/support/mailing-lists.html
>to be removed from this list.
>
>An Archive of this list is available at:
>http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
________________________________________________________________
Sent via the KillerWebMail system at killerwebmail.com
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
