Wow - serious issues

[Edward Dekkers]

I unsubscribed 10 days agao - as I've been doing the work of multiple people due to various reason, and I simply ran out of time to keep up to date and read all the MailScanner stuff.

I had to come subscribe back today though - as MailScanner (or part thereof - I'm not sure) developed a serious issue.

Basically - the configuration has not been changed for ages - certainly not since this started.

>From what I can tell, this started March 27 at 17:31.

Basically, messages would come in as per normal.
For some reason they all get marked by MailScanner as {Spam}
Notify message goes out to myself and the sender
When it gets delivered to me, it gets marked and processed again.
Rinse and repeat.

over 2600 spam notifications waiting for me this morning and messages usually OK now marked as spam.

I'm normally lucky to get 50 or so legitimate e-mails a day. 

No updates done to the server at this time nor configuration changes.

Extract from "cat /var/log/mail.info.0 | grep 'deliver,notify'"

Mar 27 17:31:11 ubuntu MailScanner[19413]: Spam Actions: message 44A0BC702F8.267B2 actions are deliver,notify,striphtml 
Mar 27 17:47:38 ubuntu MailScanner[19386]: Spam Actions: message 99153C703A9.9B31C actions are deliver,notify,striphtml 
Mar 27 18:01:42 ubuntu MailScanner[19413]: Spam Actions: message C41F8C703A6.1D502 actions are deliver,notify,striphtml 
Mar 27 18:02:00 ubuntu MailScanner[19413]: Spam Actions: message 77C50C703AB.EB565 actions are deliver,notify,striphtml 
Mar 27 18:02:17 ubuntu MailScanner[19413]: Spam Actions: message E3C6CC703AE.0697C actions are deliver,notify,striphtml 
Mar 27 18:02:33 ubuntu MailScanner[19278]: Spam Actions: message ABA16C703A9.313E5 actions are deliver,notify,striphtml 
Mar 27 18:02:49 ubuntu MailScanner[19278]: Spam Actions: message 73A6DC703AB.CB0BB actions are deliver,notify,striphtml 
Mar 27 18:03:03 ubuntu MailScanner[19413]: Spam Actions: message DC83AC703A9.E11AE actions are deliver,notify,striphtml 
Mar 27 18:03:23 ubuntu MailScanner[19278]: Spam Actions: message F0BDAC703AB.01034 actions are deliver,notify,striphtml 
Mar 27 18:03:42 ubuntu MailScanner[19386]: Spam Actions: message 1E2BFC703AE.7B976 actions are deliver,notify,striphtml 
Mar 27 18:04:00 ubuntu MailScanner[19278]: Spam Actions: message A44DEC703AB.8A1DA actions are deliver,notify,striphtml 
Mar 27 18:04:20 ubuntu MailScanner[19413]: Spam Actions: message 6DCE5C703A9.213FA actions are deliver,notify,striphtml 
Mar 27 18:04:40 ubuntu MailScanner[19278]: Spam Actions: message 28293C703AB.66668 actions are deliver,notify,striphtml 
Mar 27 18:04:57 ubuntu MailScanner[19413]: Spam Actions: message 1B9FEC703AE.3D671 actions are deliver,notify,striphtml 
Mar 27 18:05:18 ubuntu MailScanner[19413]: Spam Actions: message 69C49C703A9.288EE actions are deliver,notify,striphtml 
Mar 27 18:05:34 ubuntu MailScanner[19413]: Spam Actions: message 7107DC703AB.4D1C0 actions are deliver,notify,striphtml 

Basically she started hammering. My server was at a standstill this morning, As were Outlook clients trying to update the IMAP with the server.

I've temporarily told postfix not to hold the queue (so MailScanner just stares at an empty hold queue) and this has stopped the madness and allowed me to do my work (minus spam checks ofcourse).

Has this happened to other and if not, where do I go about looking for this - this has never happened before.

Oh, and stopping postfix, clearing the queue, and re-starting postfix seems ok until the first message gets processed by MailScanner, then slowly she doubles up and kills my server again.

Please take it slow - I'm not a total noob, but far removed from a guru as well.

Regards,
Ed.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20080328/ad6f740d/attachment.html