OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: delivery temporarily suspended

From: Roy-Magne Mo (rmosunnmore.net)
Date: Mon May 02 2005 - 17:25:07 CDT


On Mon, Apr 18, 2005 at 12:55:44PM -0700, Florin Andrei wrote:
> This is an outbound email gateway that's collecting email from inside
> the network and distributes them to the Internet. It's a busy system,
> dealing with tens of thousands of messages a day.
> Operating system: Linux Fedora Core 3
> Postfix version: 2.1.5 (latest FC3 update)

I am seeing problems here that looks quite like your scenario:
Fedora Core 3
linux kernel: 2.6.11-1.14_FC3smp
Postfix 2.1.5

Nothing really fancy configwise, no RBLS, no external programs of any
sort. Server just works as outgoing mail relay and only allows access
from given ip addresses. We are seeing at an average 2 mail/second.

2-3 times now we've seen a build up in the mailq, probably caused by one
or more infected pc and clients sending large volumes of legitimate
mail. So probably a lot of this mail is not deliverable.

A couple of the log messages that caught my attention:

postfix/smtp[1942]: panic: vstream_buf_alloc: unable to extend
fixed-size buffer

postfix/smtp[2225]: panic: myfree: corrupt or unallocated memory block

postfix/qmgr[16054]: fatal: bad extra offset file active/A/AC46A3394C7
postfix/master[2915]: warning: process /usr/libexec/postfix/qmgr pid
16054 exit status 1
postfix/smtp[16025]: panic: myfree: corrupt or unallocated memory block

Cleaning up the queue from spam, and a couple of tries with postsuper -r
ALL seems to loosen up the queue.

--
Roy-Magne Mo