'Too many open files' and the Sobig virus

[Adrian Barker]

 >Adrian Barker wrote:
 >> We are still seeing the 'Too many open files' problem even after
 >> increasing the rlim_fd_max and rlim_fd_cur in /etc/system and
 >> rebooting, and ulimit -n unlimited to the 'check_mailscanner' script.
 >
 >Does the 'Too many open files' message relate to a MailScanner process or a=
 > sendmail process?  Is the mail stuck in mqueue or mqueue.in?
 >
 >If the problem is with MailScanner you could try reducing the batch size in=
 > MailScanner.conf, which I think may well reduce the number of files each M=
 >S process tries to open.

Reducing the batch size has fixed the problem, so many thanks for that.
We were completely stuck, with MailScanner unable to process any email
and tens of thousands of emails waiting.



Adrian Barker, Information Systems
University College London, Gower Street, London WC1E 6BT
External phone: (+44) 020 7679  2795,  Fax (+44) 20 7388 5406
Internal phone: x 32795
Email: A.Barker at ucl.ac.uk


 >
 >
 >
 >BMRB International=20
 >http://www.bmrb.co.uk
 >+44 (0)20 8566 5000
 >_________________________________________________________________
 >This message (and any attachment) is intended only for the=20
 >recipient and may contain confidential and/or privileged=20
 >material.  If you have received this in error, please contact the=20
 >sender and delete this message immediately.  Disclosure, copying=20
 >or other action taken in respect of this email or in=20
 >reliance on it is prohibited.  BMRB International Limited=20
 >accepts no liability in relation to any personal emails, or=20
 >content of any email which does not directly relate to our=20
 >business.