Login or Register to Ask a Question and Join Our Community


Solaris

Flood Messages in maillog

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Operating Systems Solaris Flood Messages in maillog
# 1  
Old 10-20-2011
Flood Messages in maillog
Hi All,

I am getting large number of messages in below file
HTML Code:
/www/wls8/logs/HOSTS/tswebd01-zd01/maillog/maillog
In past 24 hours, it has been increased by near to 1 GB. Can somebody help in finding, from where these messages are being generated and how to I stop them ?
Same kind of messages are replicating. Server-name is tswebd01-zd01
HTML Code:
Oct 20 05:00:33 s_local@tswebd01-zd01 sendmail[25301]: [ID 801593 mail.info] p9FGPZXA011027: to=postmaster, delay=4+19:30:33, xdelay=00:00:00, mailer=relay, pri=41614841, relay=[127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
Oct 20 05:00:33 s_local@tswebd01-zd01 sendmail[25301]: [ID 801593 mail.info] p9FGPZX9011027: to=postmaster, delay=4+19:30:33, xdelay=00:00:00, mailer=relay, pri=41614841, relay=[127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
Oct 20 05:00:33 s_local@tswebd01-zd01 sendmail[25301]: [ID 801593 mail.info] p9FGPZXB011027: to=postmaster, delay=4+19:30:33, xdelay=00:00:00, mailer=relay, pri=41614841, relay=[127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
Oct 20 05:00:33 s_local@tswebd01-zd01 sendmail[25301]: [ID 801593 mail.info] p9FGPZXC011027: to=postmaster, delay=4+19:30:33, xdelay=00:00:00, mailer=relay, pri=41614866, relay=[127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
Oct 20 05:00:33 s_local@tswebd01-zd01 sendmail[25301]: [ID 801593 mail.info] p9FGPZXD011027: to=postmaster, delay=4+19:30:32, xdelay=00:00:00, mailer=relay, pri=41615033, relay=[127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
Oct 20 05:00:33 s_local@tswebd01-zd01 sendmail[25301]: [ID 801593 mail.info] p9FGPZXE011027: to=postmaster, delay=4+19:30:32, xdelay=00:00:00, mailer=relay, pri=41615033, relay=[127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
# 2  
Old 10-20-2011
perhaps from cron.
check if you forgot: > /dev/null 2>&1
# 3  
Old 10-20-2011
Orange47, there is nothing in crontab of any user related to these Deferred/Connection refused messages
# 4  
Old 10-20-2011
have you checked that any command is to be executed by cron at 5:00 ?
# 5  
Old 10-20-2011
It is not about 5:00, since yesterday these are generated every second. In past one day, it has been increased by long queue
Code:
root@tswebd01-zd01:/etc/mail# cat /www/wls8/logs/HOSTS/tswebd01-zd01/maillog/maillog | wc -l
 3604807

---------- Post updated at 08:52 AM ---------- Previous update was at 08:41 AM ----------

Just noticed, sendmail is not sending mails -
Code:
root@tswebd01-zd01:/# mailx -v xxxx_xxx@xxx.com
Subject: Test from server1
.
EOT
root@tswebd01-zd01:/# xxxx_xxx@xxx.com... Connecting to [127.0.0.1] via relay...
xxxx_xxx@xxx.com... Deferred: Connection refused by [127.0.0.1]

# 6  
Old 10-20-2011
There is no relay configured in your server.

Can you check mailhost [relay] entry in /etc/hosts, if not then
- add the server IP which will be the mailhost for this server to send mails
- restart sendmail
- send a test mail with the verbose option to see where it hangs.

Let us know the results.

Regards,
Vishal
# 7  
Old 10-20-2011
Hi Vishal,
Thanks for replying.
From global zone, I am able to send mails. One of its zone is not able to send mails. I copied same sendmail.cf from global to non-global zone, reatarted sendmail and tried, but now and it failed with below message again
Code:
root@tswebd01-zd01:/etc/mail# mailx -v xxx_xxxh@xxx.com
Subject: test from zone
.
EOT
root@tswebd01-zd01:/etc/mail# xxx_xxxh@xxx.com... Connecting to [127.0.0.1] via relay...
xxx_xxxh@xxx.com... Deferred: Connection refused by [127.0.0.1]

Relay host seems to be already there
Code:
# "Smart" relay host (may be null)
DSsmtp.services.toyota.com
root@tswebd01-zd01:/# ping smtp.services.toyota.com
smtp.services.toyota.com is alive
Login or Register to Ask a Question

Previous Thread | Next Thread

9 More Discussions You Might Find Interesting

1. IP Networking

Flood in the inner circle of provider's Internet

The hardware in the inner circle in the provider's network worked incorrectly and therefore there was flood for an hour. They said that it wouldn't repeat again anymore, and that that flood was not in our user network. Is this 100% correct? (As there was no Internet because of that flood we... (1 Reply)
Discussion started by: Xcislav
1 Replies

2. Shell Programming and Scripting

Filter maillog

Hi, I need to take them all fields SendTo and ip address from a file maillog First I look at all emails from containing the empty field. # zcat /var/log/mail/maillog-20140331.server1.gz | grep "from=<>" | awk '{print $6}' > 1.txt output: Mar 30 23:31:24 servidor1 postfix/smtpd:... (2 Replies)
Discussion started by: Jomeaide
2 Replies

3. Shell Programming and Scripting

Grep out ONLY subject from maillog

I have the following entries in maillog. I need to grep out only the subject part from the following entries. Maillog contain following entries. 2013-11-14 03:30:02 1Vgnd4-001qwZ-36 <= user@domain.com U=user P=local S=9797 id=cd3732bbd0fbda5cb16384bb7d5b465d@localhost.localdomain T="Subject... (3 Replies)
Discussion started by: anil510
3 Replies

4. UNIX for Dummies Questions & Answers

Why there are /var/adm/messages.0,messages.1,messages.2,messages.3

Hi folks, In what circumstance does the log move to /var/adm/messages.0.......messages.1,messages.2,messages.3 .......etc ---------- Post updated at 06:23 PM ---------- Previous update was at 06:17 PM ---------- To make my questions more understandable, What are the processes that... (4 Replies)
Discussion started by: kimurayuki
4 Replies

5. Cybersecurity

Stop flood - how ?

Hello there, I want to know what are the ways to monitorize and control/stop flooding on my server, because I am heavily flooded. At this moment I am doing all this manually (when I see that my bandwidth is lowering or some applications are freezing), my main working tool being iptables.But I... (1 Reply)
Discussion started by: spiriad
1 Replies

6. UNIX for Advanced & Expert Users

/var/log/maillog isn't updating. Postfix related

can someone please help me figure how i can get maillog to start updating again? it just all of a sudden stopped. and postfix isn't writing to it anymore. I'm running a Ubuntu box 8.04 thanks (2 Replies)
Discussion started by: SkySmart
2 Replies

7. UNIX for Advanced & Expert Users

maillog errrors

Watching my maillog this morning i have discovered some errors but I cant track down whats causing them. Jun 16 11:04:12 ws096 sendmail: m5GExW7e006613: Milter (spamass-milter): timeout before data read Jun 16 11:04:12 ws096 sendmail: m5GExW7e006613: Milter (spamass-milter): to error state Jun... (3 Replies)
Discussion started by: mcraul
3 Replies

8. UNIX for Advanced & Expert Users

maillog extract

Hi all, below are some text extracted from maillog. I have a cronjob running at 1720 daily and it will send mails to me. it was working fine on the 27 Sept.Sep 27 17:20:01 venus sendmail: k8R9K0OR032710: from=user1, size=580, class=0, nrcpts=1, msgid=<200609270920.k8R9K0OR032710@venus.domain.com>,... (1 Reply)
Discussion started by: new2ss
1 Replies

9. Shell Programming and Scripting

maillog - Error Message

dear expert Im using shell script to send mail from unix server. My script like below: #! /bin/sh -f # Set necessary variables #export PATH #PATH=/bin:/usr/bin:/usr/ucb:/usr/local/bin:/usr/contrib/bin PATH=/bin:/usr/bin:/usr/ucb:/usr/local/bin:/usr/contrib/bin:$PATH; export PATH... (0 Replies)
Discussion started by: unknown2205
0 Replies
Login or Register to Ask a Question