RE: [cobalt-users] RE: Mail Server Down

["Dan Kriwitsky" <list1@xxxxxxxxxxxxxxxxxxxx>]

> The logs are rotating perfectly.  I get the message at what 
> appears random intervals.  The logs do not indicate anything 
> abnormal.  The regular 15-minute check of IMAP, and then I 
> see the message being sent to tell me the smtp server is down 
> in the log.  Funny: if it was down, why is the monitor trying 
> to notify me by SMTP.
> 
> When the active monitor is saying the server is down, I am 
> able to telnet to SMTP port 25 and issue commands... I think 
> the active monitor is confused!

I don't think it uses SMTP to put that message in the admin box. Grep
the maillog for MTA to see if it logged refusing connections or
something similar. I forget what the exact text is, but if you just grep
for the XX:XX hour and minute of the message you might see something, or
at least sometime in that hour and check your access log. Do you have
any heavy CGI or database sites that if a web spider started hitting a
dynamically generated page or series of pages 10 times per second it
would put a load on the server? I've seen that happen. Had to block some
rogue spiders that ignore robots.txt. Run TOP and see what's going on.
If the server load hits a certain level SMTP may shut down.
-- 
C2003 Dan Kriwitsky

Please reply to the list only. Off list replies are not read.