Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

When I run sudo tail -f /var/log/mail.log I can see a number of 'live' entries appearing such as

Jun  6 00:40:03 ks393391 sm-msp-queue[2641]: r55MV0l1001642: to=ledbpw@gmail.com, ctladdr=www-data (33/33), delay=00:09:03, xdelay=00:00:00, mailer=relay, pri=121659, relay=[127.0.0.1] [127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
Jun  6 00:40:07 ks393391 sendmail[2696]: r55Me79a002696: from=www-data, size=1225, class=0, nrcpts=1, msgid=<20130605224007.b45d04c3f25c@garyog.com>, relay=www-data@localhost
Jun  6 00:40:07 ks393391 sendmail[2696]: r55Me79a002696: to=dbmaster@example.com, ctladdr=www-data (33/33), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=31225, relay=[127.0.0.1] [127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
Jun  6 00:40:46 ks393391 sendmail[2825]: r55Mekxn002825: from=www-data, size=4973, class=0, nrcpts=1, msgid=<20130605224046.82133bb660cb@garyog.com>, relay=www-data@localhost
Jun  6 00:40:46 ks393391 sendmail[2825]: r55Mekxn002825: to=dbmaster@example.com, ctladdr=www-data (33/33), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=34973, relay=[127.0.0.1] [127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
Jun  6 00:40:53 ks393391 sendmail[2843]: r55MerlU002843: from=www-data, size=4407, class=0, nrcpts=1, msgid=<20130605224053.76c93ecfa6f3@garyog.com>, relay=www-data@localhost
Jun  6 00:40:53 ks393391 sendmail[2843]: r55MerlU002843: to=dbmaster@example.com, ctladdr=www-data (33/33), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=34407, relay=[127.0.0.1] [127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
Jun  6 00:41:04 ks393391 sendmail[2907]: r55Mf4v2002907: from=www-data, size=1225, class=0, nrcpts=1, msgid=<20130605224104.c1244b5d4964@garyog.com>, relay=www-data@localhost
Jun  6 00:41:04 ks393391 sendmail[2907]: r55Mf4v2002907: to=dbmaster@example.com, ctladdr=www-data (33/33), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=31225, relay=[127.0.0.1] [127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1]
Jun  6 00:41:11 ks393391 sendmail[2923]: r55MfBNX002923: from=www-data, size=5903, class=0, nrcpts=1, msgid=<20130605224111.eb806d195c02@garyog.com>, relay=www-data@localhost

These appear every few moments and sometimes in bursts of several. The only reason they are getting "Connection refused" is because I've had to stop the sendmail process while I fix this - as the emails were causing server load to spike and grinding my websites to a hault.

How can I find what is causing this and put a stop to it so I can re-enable sendmail?

Thank you.

share|improve this question
1  
Start by looking at one of the messages to see what it is. Then you will know which web app to look at next. –  Michael Hampton Jun 5 '13 at 22:45
1  
How do I view the messages? –  Euskadi Jun 5 '13 at 22:51
    
@Euskadi Start with mailq -v ; If that doesn't clue you in to the origin of the message examine the files under your mail queue directory (usually /var/spool/mqueue but check your sendmail configuration) –  voretaq7 Jun 5 '13 at 23:02

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.