Hi all

I have a issue having disk space full due to alot of files inside /var/spool/clientmqueue. There are approximately about 90000 queue messages. I cleaned up all the queue messages in clientmqueue already and managed to check one of the queue messages.

below is the content of the message
...............................................
# more dfl5C2kAS8024883|more
This is a MIME-encapsulated message

--l5C2kAS8024883.1181616370/localhost.localdomain

The original message was received at Tue, 12 Jun 2007 10:46:10 +0800
from root@localhost

----- The following addresses had permanent fatal errors -----
root
(reason: 550 5.0.0 Access denied)
(expanded from: root)

----- Transcript of session follows -----
... while talking to [127.0.0.1]:
>>> MAIL From:<root@localhost.localdomain>
<<< 550 5.0.0 Access denied
554 5.0.0 Service unavailable

--l5C2kAS8024883.1181616370/localhost.localdomain
Content-Type: message/delivery-status

Reporting-MTA: dns; localhost.localdomain
Arrival-Date: Tue, 12 Jun 2007 10:46:10 +0800

Final-Recipient: RFC822; root@localhost.localdomain
Action: failed
Status: 5.0.0
Diagnostic-Code: SMTP; 550 5.0.0 Access denied
Last-Attempt-Date: Tue, 12 Jun 2007 10:46:10 +0800

--l5C2kAS8024883.1181616370/localhost.localdomain
Content-Type: message/rfc822

Return-Path: <root>
Received: (from root@localhost)
by localhost.localdomain (8.13.1/8.13.1/Submit) id l5C2kAS7024883
for root; Tue, 12 Jun 2007 10:46:10 +0800
Date: Tue, 12 Jun 2007 10:46:10 +0800
From: root <root>
Message-Id: <200706120246.l5C2kAS7024883@localhost.localdomain>
To: root
Subject: Port Denial noted sendmail-D10203


--l5C2kAS8024883.1181616370/localhost.localdomain--
.........................................................

I suspected the system trying to send email to root and rejected. It was queue and kept sending until the disk space is fully utilized with queue messages.
I would like to know where the problem is and please guide me along to troubleshoot.

First, I suspect it was due to the address "root" because it says..
----- The following addresses had permanent fatal errors -----
root
(reason: 550 5.0.0 Access denied)
(expanded from: root)

Another thing I could not figure out is message subject...

Subject: Port Denial noted sendmail-D10203

D10203 is the hostname of the server.

Pls advise me on troubleshooting and fixing.
Currently I cleaned up all teh queuemessages from /var/spool/clientmqueue. I am not sure it will come back again after some days.
Thanks in advance, indeed.

Hello,
Is there more info about wich mail is trying to send? I mean, if you can read which program is trying to send the mail you'll be able to stop/reconfigure it. If there is no message body, try installing some sendmail to view the message as root and work around this.

Regards,
emi

hi emi_ramo

sorry I could not identify which process sending mails. the extract content i posted earlier on is from queue message from sendmail.
Anyway, I have removed the sendmail from server but I am not sure it will still coming back or not.

Hi there,
may be it's useful to see whats happening in /var/log/mail.*
Look there (with 'less' or 'more') and try to recover the problem with the information in logs.

How to stop Cron Daemon to send mail to root?