I had some strange happenings with my mail server last night and would appreciate any input that can be given.

A little background. I am running Qmail+VPopmail+SQWebmail. My versions are Vpopmail 4.9.8, Qmail 1.03, and sqwebmail 2.0, Redhat 7.0. My /home/vpopmail/domains directory is actually and additional 40GB Hard Drive mounted to that point. The server currently hosts about 150 domains.

Last night all of the data from one of the domain folders disappeared (this domain is the vpopmail default domain also), including all MailDirs and .qmail files. However the domain folder remained, as well as all users were still had a record in the MYSQL Database, and no other domains seem to be affected. So I re-created the .qmail-default file, and with every mail that was recieved a new MailDir for that user was re-created. So the problem started healing itself. However, I am baffled as to where the data went.

Looking through the logs I was able to narrow down to a 3 minute period of time when the data disappeared and the mail started bouncing. I then looked through every other log on the system and cannot find any suspicious behaviour surrounding that time. My first thought was a breakin, but I haven't been able to find any evidence of that yet.

Any comments or light anyone can shed on this situation would be appreciated.

MSN 8 with e-mail virus protection service: 2 months FREE* http://join.msn.com/?page=features/virus

Reply via email to