Hi Wietse, The UID 500 is from our batch email not spam. It constantly sends out emails to our clients on a regular basis. Also, I turned off verbose logging on all options. I originally turned it on to try and figure out why it was getting stuck on the weekends, but now it is off. I will see if that helps this weekend. Thank you.
Gonzo Fernandez Network Engineer On Dec 15, 2011, at 5:35 PM, Wietse Venema wrote: > Gonzo Fernandez: >> # egrep 884643E30022 /var/log/maillog >> >> Dec 12 10:08:50 batch-ca4-02 postfix/pickup[26935]: warning: 884643E30022: >> message has been queued for 1 days >> Dec 12 10:08:50 batch-ca4-02 postfix/pickup[26935]: 884643E30022: uid=500 >> from=<x...@xxxx.com> > > What user acccount has uid=500? Is this your web server? Perhaps > you have an exploitable web application. This is very popular with > spammers. > > To block local submissions from this user, > > /etc/postfix/main.cf: > authorized_submit_users = !username, static:anyone > >> Dec 12 10:08:50 batch-ca4-02 postfix/qmgr[26936]: qmgr_active_feed: >> incoming/884643E30022 > > Please turn off all your verbose logging in master.cf. It makes > Postfix VERY VERY SLOW and makes mail overload problems much worse. > > On the other hand, if your email overload is caused by spam, please > turn on verbose logging on everything, to slow down the delivery > of spam. > > Wietse
