send mail process running in every 15 minutes

Aamir14 · ‎11-08-2012

Hi,

and take out 50% cpu usages.

and my server folder

/var/spool/mqueue also kept many files.

for example:----

euD0012766 qfqA5KjnCx018538 qfqA6KnqD1023068 qfqA7KrtD0025614 qfqA93x8D0006239

dfqA53gwCx025859 dfqA6EmpCx015873 dfqA7AM8Cx011539 dfqA8EuvCx021818 qfqA4GB1Cx013324 qfqA5LFsCx019093 qfqA6KnqD2023068 qfqA7MsFCx027783 qfqA94TDCx006796

dfqA53gwD0025859 dfqA6FIuCx016509 dfqA7BMJCx013576 dfqA8FR2Cx022388 qfqA4GB1D0013324 qfqA5LFsD0019093 qfqA6KnqD3023068 qfqA7NOKCx028341 qfqA94TDD0006796

dfqA55DDCx027513 dfqA6Fn1Cx017197 dfqA7BMJD0013576 dfqA8FR2D0022388 qfqA4HBBCx014399 qfqA5NGFCx021265 qfqA6Lo2Cx024249 qfqA7NOKD0028341 qfqA96TXCx009437

dfqA55DDD0027513 dfqA6Fn1D0017197 dfqA7BMJD1013576 dfqA8FR2D1022388 qfqA4HBBD0014399 qfqA5NGFD0021265 qfqA6Lo2D0024249 qfqA7NsPCx028873 qfqA96xcCx010198

dfqA57DXCx000731 dfqA6Fn1D1017197 dfqA7BqOCx014630 dfqA8Fv7Cx022921 qfqA4HBBD1014399 qfqA5NkKCx021797 qfqA6Lo2D1024249 qfqA81OeCx000621 qfqA96xcD0010198

dfqA57DXD0000731 dfqA6GJ7Cx017781 dfqA7CMTCx015685 dfqA8Fv7D0022921 qfqA4HfHCx014942 qfqA61keCx023965 qfqA6MK7Cx024807 qfqA81OeD0000621

dfqA59hwCx004653 dfqA6GJ7D0017781 dfqA7CMTD0015685 dfqA8GvHCx024007 qfqA4IBMCx015505 qfqA61keD0023965 qfqA6NKHCx025894 qfqA83P0Cx002872

prodapp1#

prodapp1#more qfqA96xcD0010198

V8

T1352444801

K1352444806

N1

P50304741

I64/8/87329

MI/O error

Frs

$_localhost

$r

$slocalhost

${daemon_flags}c u

SMAILER-DAEMON

MI/O error

C:postmaster

rRFC822; postmaster@prodapp1.mpmkvvcl.com

RPFA:root

H?P?Return-Path: <M-^Ag>

H??Received: from localhost (localhost)

by prodapp1.mpmkvvcl.com (@(#)Sendmail version 8.13.3 - Revision 1.001:: HP-UX11.31 - 2nd April,2008/8.13.3) id qA96xcD0010198;

Fri, 9 Nov 2012 12:36:41 +0530 (IST)

H?D?Date: Fri, 9 Nov 2012 12:36:41 +0530 (IST)

H?F?From: Mail Delivery Subsystem <MAILER-DAEMON>

H?x?Full-Name: Mail Delivery Subsystem

H?M?Message-Id: <201211090706.qA96xcD0010198@prodapp1.mpmkvvcl.com>

H??To: postmaster

H??MIME-Version: 1.0

H??Content-Type: multipart/report; report-type=delivery-status;

boundary="qA96xcD0010198.1352444801/prodapp1.mpmkvvcl.com"

H??Subject: Postmaster notify: see transcript for details

H??Auto-Submitted: auto-generated (postmaster-notification)

.

prodapp1#

Please tell us what is a problem.how can see the default time interval.

and why many messages kept in /var/spool/mqueue folder.

and how to solved the problem.

Thanks

Aamir

Matti_Kurkela · ‎11-08-2012

Run "mailq" as root to get a better overview of the contents of the /var/spool/mqueue directory. Also check the postmaster notifications in the local mail inbox of the root user, i.e. /var/mail/root file.

If the output includes messages that are sent from outside your organization to destinations outside your organization, your mail server is probably an open relay that is being abused by spammers. This is a serious configuration error and other mail server administrators may hate you for it.

If the system is your main mail server, it should accept mail in two categories:

from inside your organization to any destinations
from outside your organization to destinations within your organization only

You should never allow a mail server to accept mail from anywhere for delivery to anywhere: such a configuration will be abused by spammers eventually.

If the system is not (one of) your main mail server(s), its port 25 should not be accessible from the Internet at all, and it should normally be configured to deliver all outgoing mail to your main mail server(s) only. The main mail server(s) would use their configuration rules to determine if the message can be forwarded to its actual destination or not.

If the mailq output includes only bounce messages for mails that clearly are not sent by you, a spammer has used your domain name as a fake source address in a spam campaign, and you are getting the error messages as backscatter. If this system is one of your main mail servers, there is not much you can do to completely block this, but there may be some ways to limit the flood. If this system is not used as an actual mail server, just block access from Internet to port 25.

If the messages in your mail queue are bounce messages for mails that are actually sent by your system, you may have a malfunctioning e-mail generator software that is sending messages to invalid destinations. Look at the bounce messages to identify the origin of the failed messages, find the e-mail generator and fix it.

MK

Dennis Handly · ‎11-09-2012

>sendmail process running in every 15 minutes.

>and my server folder /var/spool/mqueue also kept many files.

I too had this directory fill up with messages and N bounces for those messages. Due to a hardware error and a bad root alias.

I basically created a script to look for the bounce text and remove them. Then I could look at the originals and find why they were bouncing.

What does mailq show?

>H??Subject: Postmaster notify: see transcript for details

You need to look at the corresponding dfqA96xcD0010198 for the details.

See these topics:

http://h30499.www3.hp.com/t5/Messaging/var-spool-mqueue/m-p/4197315

http://h30499.www3.hp.com/t5/Messaging/cleaning-var-spool-mqueue/m-p/5108075