send mail process running in every 15 minutes

[Aamir14]

Hi,

send mail process running in every 15 minutes

and take out 50% cpu usages.

and my server folder

 /var/spool/mqueue  also kept many files.

for example:----

euD0012766  qfqA5KjnCx018538  qfqA6KnqD1023068  qfqA7KrtD0025614  qfqA93x8D0006239

dfqA53gwCx025859  dfqA6EmpCx015873  dfqA7AM8Cx011539  dfqA8EuvCx021818  qfqA4GB1Cx013324  qfqA5LFsCx019093  qfqA6KnqD2023068  qfqA7MsFCx027783  qfqA94TDCx006796

dfqA53gwD0025859  dfqA6FIuCx016509  dfqA7BMJCx013576  dfqA8FR2Cx022388  qfqA4GB1D0013324  qfqA5LFsD0019093  qfqA6KnqD3023068  qfqA7NOKCx028341  qfqA94TDD0006796

dfqA55DDCx027513  dfqA6Fn1Cx017197  dfqA7BMJD0013576  dfqA8FR2D0022388  qfqA4HBBCx014399  qfqA5NGFCx021265  qfqA6Lo2Cx024249  qfqA7NOKD0028341  qfqA96TXCx009437

dfqA55DDD0027513  dfqA6Fn1D0017197  dfqA7BMJD1013576  dfqA8FR2D1022388  qfqA4HBBD0014399  qfqA5NGFD0021265  qfqA6Lo2D0024249  qfqA7NsPCx028873  qfqA96xcCx010198

dfqA57DXCx000731  dfqA6Fn1D1017197  dfqA7BqOCx014630  dfqA8Fv7Cx022921  qfqA4HBBD1014399  qfqA5NkKCx021797  qfqA6Lo2D1024249  qfqA81OeCx000621  qfqA96xcD0010198

dfqA57DXD0000731  dfqA6GJ7Cx017781  dfqA7CMTCx015685  dfqA8Fv7D0022921  qfqA4HfHCx014942  qfqA61keCx023965  qfqA6MK7Cx024807  qfqA81OeD0000621

dfqA59hwCx004653  dfqA6GJ7D0017781  dfqA7CMTD0015685  dfqA8GvHCx024007  qfqA4IBMCx015505  qfqA61keD0023965  qfqA6NKHCx025894  qfqA83P0Cx002872

prodapp1#

prodapp1#more qfqA96xcD0010198

V8

T1352444801

K1352444806

N1

P50304741

I64/8/87329

MI/O error

Frs

$_localhost

$r

$slocalhost

${daemon_flags}c u

SMAILER-DAEMON

MI/O error

C:postmaster

rRFC822; postmaster@prodapp1.mpmkvvcl.com

RPFA:root

H?P?Return-Path: <M-^Ag>

H??Received: from localhost (localhost)

        by prodapp1.mpmkvvcl.com (@(#)Sendmail version 8.13.3 - Revision 1.001:: HP-UX11.31 - 2nd April,2008/8.13.3) id qA96xcD0010198;

        Fri, 9 Nov 2012 12:36:41 +0530 (IST)

H?D?Date: Fri, 9 Nov 2012 12:36:41 +0530 (IST)

H?F?From: Mail Delivery Subsystem <MAILER-DAEMON>

H?x?Full-Name: Mail Delivery Subsystem

H?M?Message-Id: <201211090706.qA96xcD0010198@prodapp1.mpmkvvcl.com>

H??To: postmaster

H??MIME-Version: 1.0

H??Content-Type: multipart/report; report-type=delivery-status;

        boundary="qA96xcD0010198.1352444801/prodapp1.mpmkvvcl.com"

H??Subject: Postmaster notify: see transcript for details

H??Auto-Submitted: auto-generated (postmaster-notification)

.

prodapp1#

Please tell us what is a problem.how can see the default time interval.

and why many messages kept in /var/spool/mqueue  folder.

and how to solved the problem.

Thanks 

Aamir

[Matti_Kurkela]

Run "mailq" as root to get a better overview of the contents of the /var/spool/mqueue directory. Also check the postmaster notifications in the local mail inbox of the root user, i.e. /var/mail/root file.

If the output includes messages that are sent from outside your organization to destinations outside your organization, your mail server is probably an open relay that is being abused by spammers. This is a serious configuration error and other mail server administrators may hate you for it.

If the system is your main mail server, it should accept mail in two categories:

• from inside your organization to any destinations
• from outside your organization to destinations within your organization only

You should never allow a mail server to accept mail from anywhere for delivery to anywhere: such a configuration will be abused by spammers eventually.

If the system is not (one of) your main mail server(s), its port 25 should not be accessible from the Internet at all, and it should normally be configured to deliver all outgoing mail to your main mail server(s) only. The main mail server(s) would use their configuration rules to determine if the message can be forwarded to its actual destination or not.

If the mailq output includes only bounce messages for mails that clearly are not sent by you, a spammer has used your domain name as a fake source address in a spam campaign, and you are getting the error messages as backscatter.  If this system is one of your main mail servers, there is not much you can do to completely block this, but there may be some ways to limit the flood. If this system is not used as an actual mail server, just block access from Internet to port 25.

If the messages in your mail queue are bounce messages for mails that are actually sent by your system, you may have a malfunctioning e-mail generator software that is sending messages to invalid destinations. Look at the bounce messages to identify the origin of the failed messages, find the e-mail generator and fix it.

[Dennis Handly]

>sendmail process running in every 15 minutes.

>and my server folder  /var/spool/mqueue  also kept many files.

I too had this directory fill up with messages and N bounces for those messages.  Due to a hardware error and a bad root alias.

I basically created a script to look for the bounce text and remove them.  Then I could look at the originals and find why they were bouncing.

What does mailq show?

>H??Subject: Postmaster notify: see transcript for details

You need to look at the corresponding dfqA96xcD0010198 for the details.

See these topics:

http://h30499.www3.hp.com/t5/Messaging/var-spool-mqueue/m-p/4197315

http://h30499.www3.hp.com/t5/Messaging/cleaning-var-spool-mqueue/m-p/5108075