Craig wrote: > postfix-2.2.8_2,1 > amavisd-new-2.3.3_1,1
> I ran into problems last night with this message repeating for about 2 > minutes in the maillog: > Feb 2 00:33:21 mx1 amavis[75326]: (75326-01) Exceeded storage quota > 279252000 bytes by do_ascii; last chunk 51216 bytes > Feb 2 00:33:21 mx1 amavis[75326]: (75326-01) Decoding of p1163 (ASCII > English text) failed, leaving it unpacked: do_ascii: Exceeded storage quota > 279252000 bytes by do_ascii; last chunk 51216 bytes > With this as the last amavis log entry: > Feb 2 00:35:41 mx1 amavis[75326]: (75326-01) Decoding of p4420 (ASCII > English text, with very long lines) failed, leaving it unpacked: do_ascii: > Exceeded storage quota 279252000 bytes by do_ascii; last chunk 51216 bytes > After that, amavisd stopped responding and messages went to the deferred > queue. I had to kill the process since "amavisd reload" would not work. Any > attempt to requeue the messages had the same result, although the first 90 > messages went through without a problem. I assume that one of the 200 > messages in the queue was causing the problem. > Would any of following settings in the config file cause the problem? Also > what is a reasonable setting when Postfix is set to "message_size_limit = > 30000000" and any ideas on why this stopped amavisd from responding? > $MAXLEVELS = 14; > $MAXFILES = 1500; > $MIN_EXPANSION_QUOTA = 100*1024; # bytes > $MAX_EXPANSION_QUOTA = 300*1024*1024; # bytes > Any help is appreciated. > Craig I could be wrong, but it appears to be a mail bomb, if so: I would guess this is not a normal mail bomb (because amavisd-new can usually handle normal mail bombs). It would be useful to preserve a copy of it so it someone smart could see how it works and then see if it can be stopped in the future. Of course, I wouldn't send it to anybody via email. See if you can determine the temporary directory it created (or will create in the future when it gets scanned again) and try to preserve the email.txt file in that temporary directory. Once you have a copy, I would suggest deleting it from the Postfix deferred queue. Gary V ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642 _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
