Skip navigation

Server slowdown after spam attack...

653 Views 3 Replies Latest reply: Feb 24, 2012 1:56 PM by starion RSS
starion Level 1 Level 1 (85 points)
Currently Being Moderated
Feb 23, 2012 2:09 PM

One of our users set their password to "1234" on Sunday.  We were dumped on with 3.6 million messages before we discovered it and shut the account down on Tuesday.  We have cleared the postfix queue of all the offending messages, but the server is still having an issue.

 

When you reboot the machine, everything seems okay for about a couple of minutes, then it starts slowing down to the point where you can't even login to a terminal session.  Email services work during this time, but connections start timing out in a few minutes and your back to a largely unresponsive machine.  The activity viewer doesn't show any one high CPU process.

 

I'm wondering if there might be some corruption in the cyrus stuff.  Running on a Dual 1.8Ghz G5, 4Gig RAM, pair of 400Gig HD drives.

 

Not sure where to go from here.  Suggestions?

Actions

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • This solved my question - 10 points
  • This helped me - 5 points
This site contains user submitted content, comments and opinions and is for informational purposes only. Apple disclaims any and all liability for the acts, omissions and conduct of any third parties in connection with or related to your use of the site. All postings and use of the content on this site are subject to the Apple Support Communities Terms of Use.