On 3 Aug 2002 at 18:25, Guy Isabel wrote:
> > You deleted 492 megs of what could have been legitimate E-mails???
>
> Scott, I refrained from telling John this since I felt that 492 MB in a
> [pair of] .SMD file[s] was likely not legitimate e-mail.
It could be aton of emails but I know the history of this server.
There has never been a file that big or even close to it in the spool
directory. Attachments are limited to 4mb and the mail logs
themselves hardly ever go over 2mb a day.
492 mb is about 100 times as large as any file has ever been in the
spool directory. And certainly the 1.9 gig SMD file is way over the
top. I think it's more related to some kind of run a mock email code
on the server.
John
>
> > Most likely a spammer, but it could possibly be a mail loop or similar
> issue.
>
> Indeed, thus my asking for the logs (hopefully parsed so that all
> transactions pertaining to a given process ID) could reveal the nature of
> the beast.
>
> > Have you looked at one of the E-mails -- in 99% of the cases, looking at
> > several of them solves the problem (IE all the same spam, or all to the
> > same user, etc.).
>
> My thoughts, exactly.
>
> Guy
>
>
>
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>
> Please visit the Knowledge Base for answers to frequently asked
> questions: http://www.ipswitch.com/support/IMail/
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit the Knowledge Base for answers to frequently asked
questions: http://www.ipswitch.com/support/IMail/