[Bug 240521] [NEW] amavis-new floods harddisk

[Robert Penz]

Public bug reported:

Binary package hint: amavisd-new

Our mail relay just stopped working as amavis-new flooded the hard disk.
When I looked where it happend I found over 10gb in
/var/lib/amavis/tmp.

I got many many dirs like this

drwxr-x--- 3 amavis amavis 4096 2008-06-16 16:26 amavis-20080616T102638-05364
drwxr-x--- 3 amavis amavis 4096 2008-06-16 17:32 amavis-20080616T113226-05670
drwxr-x--- 3 amavis amavis 4096 2008-06-16 17:58 amavis-20080616T115851-05809
drwxr-x--- 3 amavis amavis 4096 2008-06-16 18:06 amavis-20080616T120630-05847

and

-rw------- 1 amavis amavis 11518540 2008-05-28 21:56 .spamassassin16120TlGONjtmp
-rw------- 1 amavis amavis 11518540 2008-05-29 00:14 .spamassassin16469TErMHxtmp
-rw------- 1 amavis amavis 11518540 2008-05-29 02:32 .spamassassin16769F1xQmGtmp
-rw------- 1 amavis amavis 11518540 2008-05-29 06:51 .spamassassin17076H8bkFktmp
-rw------- 1 amavis amavis 11518540 2008-05-29 07:07 .spamassassin17471MEWXqftmp
-rw------- 1 amavis amavis 11517826 2008-05-23 14:33 .spamassassin24045apZ4aMtmp

and some of these:

-rw------- 1 amavis amavis    0 2008-06-16 19:33 bw4cay
-rw------- 1 amavis amavis    0 2008-06-16 20:48 Ds6udl
-rw------- 1 amavis amavis    0 2008-06-16 21:25 GWvQm3
-rw------- 1 amavis amavis    0 2008-06-16 18:27 gYrYIS
-rw------- 1 amavis amavis    0 2008-06-16 19:26 iDwQWA
-rw------- 1 amavis amavis    0 2008-06-16 19:33 ik-uXt
-rw------- 1 amavis amavis    0 2008-06-16 20:23 j1tqQc
-rw------- 1 amavis amavis    0 2008-06-16 18:27 J6_v_l
-rw------- 1 amavis amavis    0 2008-06-16 20:23 k55FHi
-rw------- 1 amavis amavis    0 2008-06-16 21:25 nf9zyG
-rw------- 1 amavis amavis    0 2008-06-16 20:48 ODpEEZ
-rw------- 1 amavis amavis    0 2008-06-16 21:57 OZpr_O
-rw------- 1 amavis amavis    0 2008-06-16 21:57 YVI70D
-rw------- 1 amavis amavis    0 2008-06-16 20:24 Zb_vJz
-rw------- 1 amavis amavis    0 2008-06-16 19:26 ZJHFCF

After I did /etc/init.d/amavis stop all spam assassin files and the
amavis dirs got removed, but after a new start of amavis the files/dirs
started to appear again over time.

The amavis log entries look normal

Jun 16 23:43:59 mailgateway amavis[7954]: (07954-05) Passed SPAMMY, [82.198.xxx.xxx] [89.32.xxx.xxx] <57dpelc at xxxx.com> -> <xxxx at xxxxxr.com>, Message-ID: <000601c8cffa$055969e8$182ba2b4 at k
oufwdct>, mail_id: vIZRVLa0yed2, Hits: 8.527, size: 1534, queued_as: BCB1E3C001, 2774 ms


Jun 16 23:42:26 mailgateway amavis[7902]: (07902-08) Blocked SPAM, [82.198.xxx.xxx] [190.87.xxx.xxx] <LorirayDye at xxxxxxx.com> -> <xxxxx at xxxxxxx.com>, quarantine: O/spam-OVDEZO++yrL8.gz,
Message-ID: <f03d01c8cff9$d49f86d0$0201a8c0 at desktop>, mail_id: OVDEZO++yrL8, Hits: 23.214, size: 6258, 3034 ms


I've set following in /etc/amavis/conf.d/50-user

$unrar      = ['rar', 'unrar'];

$sa_tag_level_deflt  = 0.0;
$sa_tag2_level_deflt = 5.0;
$sa_kill_level_deflt = 10.0;
$sa_dsn_cutoff_level = 20;   # spam level beyond which a DSN is not sent
$sa_mail_body_size_limit = 52428800;
$sa_local_tests_only = 0;

$final_virus_destiny        = D_REJECT;
$final_banned_destiny       = D_REJECT;
$final_spam_destiny         = D_REJECT;
$final_bad_header_destiny   = D_PASS;


#$max_servers = 20;
@local_domains_maps = ( read_hash("/etc/amavis/local_domains") );

** Affects: amavisd-new (Ubuntu)
     Importance: Undecided
         Status: New

-- 
amavis-new floods harddisk
https://bugs.launchpad.net/bugs/240521
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to amavisd-new in ubuntu.