Hi John,

That sounds like a good move. I don't have a lot of experience using tcpdump. Could you help prevent me from fumbling around like a ****wit with it and let me know what I need to do with it to identify the source of the spamd traffic?

        Thanks.

        Kind regards.

        Jim.

On 05/04/17 01:21, John Hardin wrote:
On Tue, 4 Apr 2017, Kevin A. McGrail wrote:

On 4/4/2017 8:04 PM, John Hardin wrote:
 If all else fails, you may want to visit syslog.conf and tell it to ignore
 mail.info level messages.

Hmm, normally I agree with you, John but I'd strongly recommend against that.
He's got something hitting spamd approximately 500x more than is needed and
that would just hide the issue.

Plus, I'd likely say the machine is CPU and IO bound from that much processing
anyway... The syslog is just a tip of the iceberg.

Oh, agreed.

Perhaps run tcpdump and see where the spamd traffic is coming from, to rule out
something other than the local MTAs?


--
James R. McLachlan PGDCCI(Open)
Managing Director
Objective Software Services Ltd.
Web   : http://www.oss-ltd.com
Tel   : +44 (0)1397 708550
Mob   : +44 (0)7971 232717
Fax   : +44 (0)7970 117580
e-mail: j...@oss-ltd.com

Objective Software Services Ltd. is a company registered in England and Wales with company number 2892148.
Registered office: 11 Percy Terrace, Tunbridge Wells, Kent, TN4 9RH

Reply via email to