Wow - serious issues

[Mike Kercher]

Read the thread just previous to this one...ORDB.org 


________________________________

	From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Edward
Dekkers
	Sent: Thursday, March 27, 2008 9:01 PM
	To: mailscanner at lists.mailscanner.info
	Subject: Wow - serious issues
	
	
	I unsubscribed 10 days agao - as I've been doing the work of
multiple people due to various reason, and I simply ran out of time to keep
up to date and read all the MailScanner stuff.
	 
	I had to come subscribe back today though - as MailScanner (or part
thereof - I'm not sure) developed a serious issue.
	 
	Basically - the configuration has not been changed for ages -
certainly not since this started.
	 
	From what I can tell, this started March 27 at 17:31.
	 
	Basically, messages would come in as per normal.
	For some reason they all get marked by MailScanner as {Spam}
	Notify message goes out to myself and the sender
	When it gets delivered to me, it gets marked and processed again.
	Rinse and repeat.
	 
	over 2600 spam notifications waiting for me this morning and
messages usually OK now marked as spam.
	 
	I'm normally lucky to get 50 or so legitimate e-mails a day. 
	 
	No updates done to the server at this time nor configuration
changes.
	 
	Extract from "cat /var/log/mail.info.0 | grep 'deliver,notify'"
	 
	Mar 27 17:31:11 ubuntu MailScanner[19413]: Spam Actions: message
44A0BC702F8.267B2 actions are deliver,notify,striphtml 
	Mar 27 17:47:38 ubuntu MailScanner[19386]: Spam Actions: message
99153C703A9.9B31C actions are deliver,notify,striphtml 
	Mar 27 18:01:42 ubuntu MailScanner[19413]: Spam Actions: message
C41F8C703A6.1D502 actions are deliver,notify,striphtml 
	Mar 27 18:02:00 ubuntu MailScanner[19413]: Spam Actions: message
77C50C703AB.EB565 actions are deliver,notify,striphtml 
	Mar 27 18:02:17 ubuntu MailScanner[19413]: Spam Actions: message
E3C6CC703AE.0697C actions are deliver,notify,striphtml 
	Mar 27 18:02:33 ubuntu MailScanner[19278]: Spam Actions: message
ABA16C703A9.313E5 actions are deliver,notify,striphtml 
	Mar 27 18:02:49 ubuntu MailScanner[19278]: Spam Actions: message
73A6DC703AB.CB0BB actions are deliver,notify,striphtml 
	Mar 27 18:03:03 ubuntu MailScanner[19413]: Spam Actions: message
DC83AC703A9.E11AE actions are deliver,notify,striphtml 
	Mar 27 18:03:23 ubuntu MailScanner[19278]: Spam Actions: message
F0BDAC703AB.01034 actions are deliver,notify,striphtml 
	Mar 27 18:03:42 ubuntu MailScanner[19386]: Spam Actions: message
1E2BFC703AE.7B976 actions are deliver,notify,striphtml 
	Mar 27 18:04:00 ubuntu MailScanner[19278]: Spam Actions: message
A44DEC703AB.8A1DA actions are deliver,notify,striphtml 
	Mar 27 18:04:20 ubuntu MailScanner[19413]: Spam Actions: message
6DCE5C703A9.213FA actions are deliver,notify,striphtml 
	Mar 27 18:04:40 ubuntu MailScanner[19278]: Spam Actions: message
28293C703AB.66668 actions are deliver,notify,striphtml 
	Mar 27 18:04:57 ubuntu MailScanner[19413]: Spam Actions: message
1B9FEC703AE.3D671 actions are deliver,notify,striphtml 
	Mar 27 18:05:18 ubuntu MailScanner[19413]: Spam Actions: message
69C49C703A9.288EE actions are deliver,notify,striphtml 
	Mar 27 18:05:34 ubuntu MailScanner[19413]: Spam Actions: message
7107DC703AB.4D1C0 actions are deliver,notify,striphtml 
	
	Basically she started hammering. My server was at a standstill this
morning, As were Outlook clients trying to update the IMAP with the server.
	 
	I've temporarily told postfix not to hold the queue (so MailScanner
just stares at an empty hold queue) and this has stopped the madness and
allowed me to do my work (minus spam checks ofcourse).
	 
	Has this happened to other and if not, where do I go about looking
for this - this has never happened before.
	 
	Oh, and stopping postfix, clearing the queue, and re-starting
postfix seems ok until the first message gets processed by MailScanner, then
slowly she doubles up and kills my server again.
	 
	Please take it slow - I'm not a total noob, but far removed from a
guru as well.
	 
	Regards,
	Ed.