Apache overloading smtp

Discussion in 'Apache' started by disciplefk, Mar 12, 2010.

  1. #1
    Hi there, I have a virtual dedicated server going over its 1000day email limit. I do not use this server for email with the exception of a newsletter signup, which does not get near this kind of traffic. I have many, many entries in my mail log that read:
    Mar 12 02:42:54 ip-XXX-myip-XXXX postfix/qmgr[3148]: 7F6471BF44E2: from=<apache@ip-XXX-myip-XXXX.ip.secureserver.net>, size=3542, nrcpt=1 (queue active)
    Mar 12 02:42:54 ip-XXX-myip-XXXX postfix/qmgr[3148]: DCF121BF43A8: from=<apache@ip-XXX-myip-XXXX.ip.secureserver.net>, size=3542, nrcpt=1 (queue active)
    Mar 12 02:42:54 ip-XXX-myip-XXXX postfix/qmgr[3148]: DB99F1BF4340: from=<apache@ip-XXX-myip-XXXX.ip.secureserver.net>, size=3530, nrcpt=1 (queue active)
    Mar 12 02:42:54 ip-XXX-myip-XXXX postfix/qmgr[3148]: D47EB1BF433E: from=<apache@ip-XXX-myip-XXXX.ip.secureserver.net>, size=3551, nrcpt=1 (queue active)
    Mar 12 02:42:54 ip-XXX-myip-XXXX postfix/qmgr[3148]: D6EE91BCBEE2: from=<apache@ip-XXX-myip-XXXX.ip.secureserver.net>, size=3536, nrcpt=1 (queue active)
    Mar 12 02:42:54 ip-XXX-myip-XXXX postfix/qmgr[3148]: D2B171BF4402: from=<apache@ip-XXX-myip-XXXX.ip.secureserver.net>, size=3570, nrcpt=1 (queue active)
    Mar 12 02:42:54 ip-XXX-myip-XXXX postfix/qmgr[3148]: DB79B1BF4404: from=<apache@ip-XXX-myip-XXXX.ip.secureserver.net>, size=3524, nrcpt=1 (queue active)
    Mar 12 02:42:54 ip-XXX-myip-XXXX postfix/qmgr[3148]: D1F061BF44C2: from=<apache@ip-XXX-myip-XXXX.ip.secureserver.net>, size=3530, nrcpt=1 (queue active)
    Is there anything obvious I should check first?
     
    disciplefk, Mar 12, 2010 IP
  2. disciplefk

    disciplefk Peon

    Messages:
    2
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #2
    No ideas? Any place to start?
     
    disciplefk, Mar 18, 2010 IP
  3. tempura

    tempura Peon

    Messages:
    2
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #3
    Looks like your apache is sending out emails you're not expecting. Check the apache access log to see which mail script is being accessed/executed and is responsible for these mails. More details from the mail log will help you too, e.g. when are the emails being send out, to what email addresses and so on...
     
    tempura, Mar 18, 2010 IP
  4. dropcatchsell

    dropcatchsell Active Member

    Messages:
    431
    Likes Received:
    11
    Best Answers:
    0
    Trophy Points:
    60
    #4
    dropcatchsell, Mar 22, 2010 IP
  5. PsyHost

    PsyHost Well-Known Member

    Messages:
    641
    Likes Received:
    7
    Best Answers:
    0
    Trophy Points:
    110
    #5
    check one of the emails in the queue, see where it is originating from, most probably just external spam bots relaying through your open relay, if that is the case set in postfix config as stated by dropcatchsell, however if it's local you may have some work ahead of you.

    gl.
     
    PsyHost, Mar 22, 2010 IP