OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: cryptic error messages

From: Wietse Venema (wietseporcupine.org)
Date: Thu Feb 01 2007 - 11:48:13 CST


Rich Morin:
> I've been getting occasional error messages of the form:
>
> ERR: Feb 1 08:29:58 mini postfix/smtpd[18633]:
> connect from g3po[192.168.1.211]

That is NOT an error.

What you see is software that MIS-LABELS a perfectly normal
Postfix activity record as an error.

> By way of background, "g3po" is our front-end mail server
> (B&W Power Mac G3; Mac OS X 10.4.8) and 192.168.1.211 is
> the correct IP address for it. It handles all incoming
> mail, passing email with valid recipients on to "mini".
>
> I've looked at mini's mail.log file and can't see any
> error messages that correspond to these emailed error
> messages. Can anyone tell me what kinds of problems
> might generate this type of message?
>
>
> On a possibly related note, g3po had an elevated load
> average and was acting rather bogged down. Although
> top(1) didn't show lookupd as the culprit, I decided
> to do a prophylactic "killall -HUP lookupd". This
> seems to have resolved the load average problem.
>
> I'd really like to know what postfix is doing that is
> causing lookupd to become a resource drain. Given that
> we have hard-code our recipient lists in the postfix
> configuration files, I can't understand what it should
> need to look up...

I wrote Postfix, and I know that lookupd is not part of Postfix.

        Wietse