Package: postfix Version: 2.1.5-9 Severity: normal
Hello, my server had a mail in the queue which was approx 18MB. when postfix tried to process this mail, the "cleanup" process got killed because it used more than 20MB of memory. After increasing this limit to 25MB in main.conf, the message was processed. Nov 16 18:37:14 master kernel: grsec: From 195.253.6.98: denied resource overstep by requesting 20480000 for RLIMIT_FSIZE against limit 20480000 for /usr/lib/postfix/cleanup[cleanup:32242] uid/euid:101/101 gid/egid:101/101, parent /usr/lib/postfix/master[master:29287] uid/euid:0/0 gid/egid:0/0 Nov 16 18:37:15 master kernel: grsec: From 195.253.6.98: denied resource overstep by requesting 20480000 for RLIMIT_FSIZE against limit 20480000 for /usr/lib/postfix/cleanup[cleanup:32242] uid/euid:101/101 gid/egid:101/101, parent /usr/lib/postfix/master[master:29287] uid/euid:0/0 gid/egid:0/0 (grsecurity is an external kernel patch that adds certain log messages to the kernel, for example when processes get killed, or system time changes, etc.) See www.grsecurity.org. I suspect postfix sets its own "ulimit" to main.cf:message_size_limit, but the process trying to handle the message actually uses more RAM than the message would require. Please investigate. Thanks, Jens -- System Information: Debian Release: 3.1 APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing') Architecture: i386 (i686) Kernel: Linux 2.4.29hf4-jb-050316 Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Versions of packages postfix depends on: ii adduser 3.63 Add and remove users and groups ii debconf [debconf-2.0] 1.4.30.13 Debian configuration management sy ii dpkg 1.10.28 Package maintenance system for Deb ii libc6 2.3.2.ds1-22 GNU C Library: Shared libraries an ii libdb4.2 4.2.52-18 Berkeley v4.2 Database Libraries [ ii libgdbm3 1.8.3-2 GNU dbm database routines (runtime ii netbase 4.21 Basic TCP/IP networking system -- debconf information: * postfix/master_upgrade_warning: true postfix/db_upgrade_warning: true * postfix/mailname: debian.local * postfix/dynamicmaps_upgrade_warning: true postfix/recipient_delim: + * postfix/main_mailer_type: Internet Site postfix/transport_map_warning: * postfix/append_dot_mydomain: false postfix/db2_db3_upgrade: true postfix/relayhost: postfix/procmail: false postfix/bad_recipient_delimiter: * postfix/chattr: false * postfix/root_address: NONE postfix/rfc1035_violation: false postfix/mynetworks: 127.0.0.1/8 * postfix/destinations: $myhostname, localhost.$mydomain, localhost, $mydomain postfix/nqmgr_upgrade_warning: postfix/not_configured: postfix/mailbox_limit: 0 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
