Hi,
I just re-installed mailscanner and mailwatch. This machine only job is to be our mail relay. Checks/scans virus and spam and then send.
I've never configured anything like this before, and the person who originaly set this up no longer works for us, so I'm on my own.
I installed with no problems. I'm pretty sure my configuration is good, but then again, I have nothing really to base this off of except my own opionion.
I don't recall setting this machine up to check dns names of mail recipiants. Obviously this machine points to our dns servers on the network card setup. I don't recall seeing my log files roll so fast with requests from this machine like it is now.
So I think I have something not setup right. The log file /var/log/messages on our dns server filled up the entire partition over the weekend. This has never before done this, and most of it all is from our new mailscanner machine.
To try to take off some load on our main dns server, I pointed our dns to our secondary dns machine. This I assume is helping some, because now both log files /var/log/messages are filling up with messages from this one machine. Also the main dns server is still getting requests and so is the secondary. And the secondary just started getting lots of requests from the mailscanner machine. Priviously it would get one request every couple of minutes.
Can someone tell me what I may have missed on this setup? Is this really normal? I figure there has to be some sort of dns cache or something that I didn't configure?
I'm also getting about 4 requests a second on both machines, from this server.
**adding some more info**
I have about 1200 messages in my mail queue. I have a hunch that this has something to do with it. For the most part, they are junk mail going out? most of them say deferred witha message attached. Here's an example:
To:
elias@we-help-u.biz
Message: {Spam?} Delivery Status Notification (Failure) Deferred: Connection refused by we-help-u.biz.
Size:6.5Kb
Tried:41227
Time:00:00:27
From the above, I got this from mailwatch, it says tried 41227. Does this mean it tried to send it 42000 times? What must I do to get this to stop trying such as this?