My server hang this morning and I had to reboot the server. After rebooting I found thousands of .gse and .smd files in the spool directory and my yesterday log file 29/03/2003 grew to 100Mb where normally less than 10MB. I went through the previous day log file 28/03/2003 and notice there is a lot of entries belong to a particular IP address. Could all the queue mail from the previous day. Here is a snaphot of the log files and the .gse file
There are heaps of entry for [0.0.0.0]connect 65.247.177.24 port 0 errors. Then there are thousands of entries trying to send to @mail.ru When I open up the .gse file it always contain the smtp0391.mail.yahoo.com entries I've check the SMTP relays and they all looks fine to me. Can anyone tell me what's is happening here? I also noticed that occationally my log file grow by 3-5 times in size but yesterday it crash my server. Anyone's help would be greatly appreciated. Infact this is not my first time having this problem. Regards Bo Wee Log file on 28/03/2003 ====================== 03:28 08:54 SMTPD(096800E8) [0.0.0.0] connect 65.247.177.24 port 0 03:28 08:54 SMTPD(096800E8) send error 10054 03:28 08:54 SMTPD(096800E8) send error 10054 03:28 08:54 SMTPD(096900E8) [0.0.0.0] connect 65.247.177.24 port 0 03:28 08:54 SMTPD(096900E8) send error 10054 03:28 08:54 SMTPD(096900E8) send error 10054 03:28 08:54 SMTPD(096A00E8) [0.0.0.0] connect 65.247.177.24 port 0 03:28 08:54 SMTPD(096A00E8) send error 10054 03:28 08:54 SMTPD(096B00E8) [0.0.0.0] connect 65.247.177.24 port 0 03:28 08:54 SMTPD(096B00E8) send error 10054 03:28 08:54 SMTPD(096B00E8) send error 10054 03:28 08:54 SMTPD(096C00E8) [0.0.0.0] connect 65.247.177.24 port 0 03:28 08:54 SMTPD(096C00E8) send error 10054 03:28 08:54 SMTPD(096D00E8) [0.0.0.0] connect 65.247.177.24 port 0 03:28 08:54 SMTPD(096D00E8) send error 10054 03:28 08:54 SMTPD(096D00E8) send error 10054 03:28 09:19 SMTPD(0ECE0034) [202.71.162.61] connect 65.247.177.24 port 1072 03:28 09:19 SMTPD(0ECE0034) [65.247.177.24] EHLO mxs.mail.ru 03:28 09:19 SMTPD(0ECE0034) [65.247.177.24] MAIL From: <[EMAIL PROTECTED]> 03:28 09:19 SMTPD(0ECE0034) [65.247.177.24] RCPT To:<[EMAIL PROTECTED]> 03:28 09:19 SMTPD(0ECE0034) [65.247.177.24] ERR mail.pandmparts.com.au invalid user <[EMAIL PROTECTED] 03:28 09:19 SMTPD(0ECE0034) [65.247.177.24] RCPT To:<[EMAIL PROTECTED]> 03:28 09:19 SMTPD(0ECE0034) [65.247.177.24] ERR mail.pandmparts.com.au invalid user <[EMAIL PROTECTED] 03:28 09:19 SMTPD(0ECE0034) [65.247.177.24] MAIL From: <[EMAIL PROTECTED]> 03:28 09:19 SMTPD(0ECE0034) [65.247.177.24] RCPT To:<[EMAIL PROTECTED]> 03:28 09:19 SMTPD(0ECE0034) [65.247.177.24] ERR mail.pandmparts.com.au invalid user <[EMAIL PROTECTED] 03:28 09:19 SMTPD(0ECE0034) [65.247.177.24] RCPT To:<[EMAIL PROTECTED]> 03:28 09:19 SMTPD(0ECE0034) [65.247.177.24] ERR mail.pandmparts.com.au invalid user <[EMAIL PROTECTED] 03:28 09:19 SMTPD(0ECE0034) [65.247.177.24] RCPT To:<[EMAIL PROTECTED]> 03:28 09:19 SMTPD(0ECE0034) [65.247.177.24] ERR mail.pandmparts.com.au invalid user <[EMAIL PROTECTED] 03:28 09:19 SMTPD(0ECE0034) [65.247.177.24] RCPT To:<[EMAIL PROTECTED]> 03:28 09:19 SMTPD(0ECE0034) [65.247.177.24] ERR mail.pandmparts.com.au invalid user <[EMAIL PROTECTED] 03:28 09:19 SMTPD(0ECE0034) [65.247.177.24] RCPT To:<[EMAIL PROTECTED]> One of the .gse file ==================== Date: Sat, 29 Mar 2003 20:47:13 +0800 Message-Id: <[EMAIL PROTECTED]> From: "Postmaster" <[EMAIL PROTECTED]> Sender: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: Undeliverable Mail X-Mailer: <SMTP32 v20010131> Unknown host: [EMAIL PROTECTED]|Killer Original message follows. Received: from smtp0492.mail.yahoo.com [210.21.6.44] by mail.lifespanmortgage.com.au with ESMTP (SMTPD32-6.06) id A5CE45C0116; Sat, 29 Mar 2003 20:47:10 +0800 Date: Sat, 29 Mar 2003 12:45:51 GMT From: "Arierith"<[EMAIL PROTECTED]> X-Priority: 3 To: [EMAIL PROTECTED]|Killer Todd Subject: Maximum exposure Mime-Version: 1.0 Content-Type: text/html; charset=us-ascii Content-Transfer-Encoding: base64 Message-Id: <[EMAIL PROTECTED]> PEhUTUw+DQo8Qk9EWSBCR0NPTE9SPXdoaXRlPjxjZW50ZXI+PGZvbnQgY29sb3I9I0ZGRkZG Rj5i b29ib28yMDAyMjAwMi1ib29ib28yMDAyMjAwMg0KPEEgSFJFRj1odHRwOi8vd3d3Lm9ubGlu ZWRu cy5vcmcvMS8+PGZvbnQgDQpjb2xvcj0jRkZGRkZGPmJvb2JvbzIwMDIyMDAyLWJvb2JvbzIw MDIy MDAyPC9mb250PjwvYT48QnI+DQo8YSBocmVmPSJodHRwOi8vd3d3Lm9ubGluZWRucy5vcmcv MS8i To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
