Sendmail: Remove pending emails

Question

Hello,  I am working on a Linux server (Redhat), I have installed Nagios and Centreon.  I stopped Sendmail because Nagios was sending me a lot of emails (more than 2000) since my servers were not functioning. So I did a /etc/init.d/sendmail stop  The problem is that when I restart Sendmail, it sends me a lot of emails, including emails that are a week old (Sendmail has been stopped for a week but Nagios continued to run).  How can I delete the emails that need to be sent to avoid being spammed by emails that are several days old?  How can I delete all the emails that are pending and have not yet been sent?  Thank you for your help  Flipmode

dubcek · Answer

hello go clean up /var/spool/mqueue

flipmode62 · Answer

I've already checked in /var/spool/mqueue and there's nothing there :(   ll /var/spool/mqueue/ total 0   Is there another directory or file that needs to be modified or deleted?  Thank you for your help  Flipmode

dubcek · Answer

that's where sendmail stores its queue. they might be in a Nagios queue? or is the directory redefined in the sendmail config? what does /usr/bin/mailq respond?

flipmode62 · Answer

Maybe there is a Nagios queue, but I have no idea where it is.  In the directory: /var/spool/mail/, there are different files corresponding to different users (and one of them is named Nagios. However, in: /var/spool/mqueue/ there are no files  Is the directory redefined in the sendmail configuration? In the file /etc/mail/sendmail.cf?  Thank you for your help.

dubcek · Answer

yes in /var/spool/mail, it's the received emails

flipmode62 · Answer

So the emails that could not be sent by Nagios using Sendmail (because Sendmail was stopped) are where?  Thank you for your help

dubcek · Answer

Since there is nothing in /var/spool/mqueue, I don't know, try a search with find. check in the nagios directory.

flipmode62 · Answer

I tried looking in the Nagios directory... and searching with find but I found nothing :(  I restarted Sendmail, and it's spamming me with emails from a week ago, so there must be a queue somewhere  Thanks for your help  Flipmode

dubcek · Answer

/usr/bin/mailq returns the mail queue status. find / -name "*mqueue*" -print searches for directories or files with the name "mqueue" starting from the root directory.

flipmode62 · Answer

/usr/bin/mailq /var/spool/mqueue est vide  Requêtes totales : 0   Thank you for your help

dubcek · Answer

check where the emails come from, maybe when sendmail starts another server sends them.

dubcek · Answer

sendmail is used to send and receive mail. Are the mails sent from this machine? Check in /var/log/maillog What does find / -name "*mqueue*" -print respond?

flipmode62 · Answer

Sendmail is used to send emails (just like Postfix). I am using the company's SMTP server. /var/log/maillog ... Dec 14 06:07:49 SNOYMON02 sendmail[28501]: mBE57nRu028501: to=prenom.nom@entreprise.fr, ctladdr=nagios (501/502), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30334, relay=[127.0.0.1] [127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1] Dec 14 06:08:01 SNOYMON02 sendmail[28888]: mBE581W7028888: from=nagios, size=387, class=0, nrcpts=1, msgid=<200812140508.mBE581W7028888@localhost.localdomain>, relay=nagios@localhost Dec 14 06:08:01 SNOYMON02 sendmail[28886]: mBE581tD028886: from=nagios, size=372, class=0, nrcpts=1, msgid=<200812140508.mBE581tD028886@localhost.localdomain>, relay=nagios@localhost Dec 14 06:08:01 SNOYMON02 sendmail[28888]: mBE581W7028888: to=nagios, ctladdr=nagios (501/502), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30387, relay=[127.0.0.1] [127.0.0.1], dsn=4.0.0, stat=Deferred: Connection refused by [127.0.0.1] ... find / -name "*mqueue*" -print /usr/include/bits/mqueue.h /usr/include/mqueue.h /usr/share/man/man0p/mqueue.h.0p.gz /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/bits/mqueue.ph /usr/lib64/perl5/5.8.5/x86_64-linux-thread-multi/mqueue.ph /usr/src/kernels/2.6.9-67.EL-x86_64/include/config/posix/mqueue.h /usr/src/kernels/2.6.9-67.EL-x86_64/include/linux/mqueue.h /usr/src/kernels/2.6.9-67.EL-largesmp-x86_64/include/config/posix/mqueue.h /usr/src/kernels/2.6.9-67.EL-largesmp-x86_64/include/linux/mqueue.h /usr/src/kernels/2.6.9-67.EL-smp-x86_64/include/config/posix/mqueue.h /usr/src/kernels/2.6.9-67.EL-smp-x86_64/include/linux/mqueue.h /var/spool/clientmqueue /var/spool/mqueue

dubcek · Answer

files there /var/spool/clientmqueue?

flipmode62 · Answer

Yes, there are a lot of files in /var/spool/clientmqueue: ls /var/spool/clientmqueue dfmAIJTjGP017247 dfmASMYdhQ023415 dfmBAAwBnT004284 dfmB6E01Fg002779 dfmBDID18P021723 qfmAONl1dJ030111 qfmB2KstEq014086 qfmBA9ghuh007487 dfmAIJTkci017273 dfmASMYdhQ023427 dfmB6E01xR002784 dfmBDID1hF021725 qfmAONl1fZ030109 qfmB2Kstf4014157 qfmALDP1BP007872 Example of files: vi dfmBAAwBnT004284 ***** centreon Notification ***** Notification Type: RECOVERY Service: EgoRadio7 Host: SLENEGO02 - SLENEGO02 Address: 172.17.42.157 State: OK Date/Time: 10-12-2008 / 11:58:11 Additional Info : EgoRadioarvato20007: Started vi qfmALDP1BP007872 V8 T1227273901 K1227273901 N1 P30387 MDeferred: Connection refused by [127.0.0.1] Fbs $_nagios@localhost ${daemon_flags}c u Snagios Anagios@localhost.localdomain MDeferred: Connection refused by [127.0.0.1] C:nagios rRFC822; nagios@localhost.localdomain RPFD:nagios H?P?Return-Path: <g> H??Received: (from nagios@localhost) by localhost.localdomain (8.13.1/8.13.1/Submit) id mALDP1BP007872; Fri, 21 Nov 2008 14:25:01 +0100 H?D?Date: Fri, 21 Nov 2008 14:25:01 +0100 H?x?Full-Name: CronDaemon H?M?Message-Id: <200811211325.mALDP1BP007872@localhost.localdomain> H??From: root (Cron Daemon) H??To: nagios H??Subject: Cron /usr/local/centreon/cron/parsing_status.pl 2>&1 >> /usr/local/centreon/log/odsParsingStatus.log H??X-Cron-Env: H??X-Cron-Env: H??X-Cron-Env: H??X-Cron-Env: H??X-Cron-Env: Should I delete it?

dubcek · Answer

yes or you move them to /tmp

dubcek · Answer

it's a lot, indeed

flipmode62 · Answer

Yes, it's much more than I thought and it takes several minutes to move!

dubcek · Answer

if you run grep -v "^H??To: nagios" /tmp/d* you can check if an email is not addressed to nagios

flipmode62 · Answer

My files are still in: /var/spool/clientmqueue/  grep -v "^H??To: nagios"/var/spool/clientmqueue/d* bash: /bin/grep: Argument list too long  So I can't see if an email is intended for nagios.

dubcek · Answer

like this: ls d* | xargs grep -v "^H??To: nagios" you can see if an email is not addressed to nagios

dubcek · Answer

no * then ls | xargs grep -v "^H??To: nagios"

bob031 · Answer

Hi,  I followed your discussion (and I'm learning at the same time), I came across this:  empty the queue: via the daemon: sendmail -L sm-msp-queue -Ac -q15m via cron: sendmail -L sm-msp-queue -Ac -q  source: http://sebastien.nameche.fr/ category: Course Support title: Hardening MTA Sendmail and Postfix page 9  if that can help .....  -- a penguin on the ice floe!

flipmode62 · Answer

I deleted all the files that were in the queue: /var/spool/clientmqueue And I restarted Sendmail: /etc/init.d/sendmail start and I did: sendmail -L sm-msp-queue -Ac -q15m   The problem is that now I am not receiving any emails from Nagios :(  However, when I do:  sendmail xxxx@yy.com From: nagios@localhost.localdomain Subject: Test ...... message content .....   I do receive an email from nagios@localhost.localdomain. But when there is a Nagios alert, it is not sent by email. I have nothing in the queue /var/spool/clientmqueue and in the queue /var/spool/mqueue  Thank you for your help  Flipmode

dubcek · Answer

Is there a trace in the logs, syslog or /var/log/maillog? Replace localhost.localdomain with yy.com in the Nagios config?

flipmode62 · Answer

tail -100 /usr/local/nagios/var/nagios.log [1229525435] HOST ALERT: SNOYECH01;UP;HARD;1;PING OK - Packet loss = 0%, RTA = 1.23 ms [1229525435] HOST ALERT: SNOYMON02;UP;HARD;1;PING OK - Packet loss = 0%, RTA = 0.04 ms [1229525435] SERVICE ALERT: SLENBO02;Windows-Ram-Usage;OK;HARD;1;Memory usage: total:3437.57 Mb - used: 538.18 Mb (16%) - free: 2899.40 Mb (84%) [1229525435] SERVICE ALERT: SLENBO01;Windows-Ram-Usage;OK;HARD;1;Memory usage: total:5475.58 Mb - used: 1055.20 Mb (19%) - free: 4420.38 Mb (81%) [1229525435] SERVICE ALERT: SLENDC01;Windows-Ram-Usage;OK;HARD;1;Memory usage: total:3947.59 Mb - used: 473.91 Mb (12%) - free: 3473.67 Mb (88%) [1229525435] SERVICE ALERT: SLENCYB01;Windows-Ram-Usage;OK;HARD;1;Memory usage: total:2473.51 Mb - used: 274.18 Mb (11%) - free: 2199.33 Mb (89%) [1229525436] Max concurrent service checks (20) has been reached. Delaying further checks until previous checks are complete... [1229525436] Max concurrent service checks (20) has been reached. Delaying further checks until previous checks are complete... [1229525437] Max concurrent service checks (20) has been reached. Delaying further checks until previous checks are complete... [1229525437] Max concurrent service checks (20) has been reached. Delaying further checks until previous checks are complete... [1229525438] Max concurrent service checks (20) has been reached. Delaying further checks until previous checks are complete... [1229525438] Max concurrent service checks (20) has been reached. Delaying further checks until previous checks are complete... [1229525439] Max concurrent service checks (20) has been reached. Delaying further checks until previous checks are complete... [1229525439] Max concurrent service checks (20) has been reached. Delaying further checks until previous checks are complete...  I added a redirection in the command file, from standard output and error to a log for the notification command.  commands.cfg: define command{ command_name notify-host-by-email command_line /usr/bin/printf "%b" "***** Nagios *****

Notification Type: $NOTIFICATIONTYPE$
Host: $HOSTNAME$
State: $HOSTSTATE$
Address: $HOSTADDRESS$
Info: $HOSTOUTPUT$

Date/Time: $LONGDATETIME$
" | /bin/mail -s "** $NOTIFICATIONTYPE$ Host Alert: $HOSTNAME$ is $HOSTSTATE$ **" $CONTACTEMAIL$ >> /tmp/alerteservice.log 2>&1 }  # 'notify-service-by-email' command definition define command{ command_name notify-service-by-email command_line /usr/bin/printf "%b" "***** Nagios *****

Notification Type: $NOTIFICATIONTYPE$

Service: $SERVICEDESC$
Host: $HOSTALIAS$
Address: $HOSTADDRESS$
State: $SERVICESTATE$

Date/Time: $LONGDATETIME$

Additional Info:

$SERVICEOUTPUT$" | /bin/mail -s "** $NOTIFICATIONTYPE$ Service Alert: $HOSTALIAS$/$SERVICEDESC$ is $SERVICESTATE$ **" $CONTACTEMAIL$ >> /tmp/alertehost.log 2>&1 }  I checked that notifications are enabled in Nagios.cfg (enable_notifications=1) I checked that my hosts/services/templates contained notifications I checked that my contacts have valid email addresses.  I tried, on the command line, as Nagios to run the notification command: The following command: /usr/bin/printf "%b" "***** Nagios *****

Notification Type: "NotifType"
Host: 192.168.60.37
State: CRITICAL
Address: 192.168.60.37
Info: NAGIOS ALERT ERROR DISK SPACE FULL

Date/Time: 24/10/2008
" | /bin/mail -s "** CRITICAL Host Alert: AGGREGATE is DOWN **" nom.prenom@entreprise.com  allowed me to receive this email below:  ***** Nagios ***** Notification Type: NotifType Host: 192.168.60.37 State: CRITICAL Address: 192.168.60.37 Info: NAGIOS ALERT ERROR DISK SPACE FULL Date/Time: 24/10/2008  Thank you for your help.

dubcek · Answer

Is there a trace in the logs, syslog or /var/log/maillog? I was talking about the sendmail logs to see if there's anything coming from nagios.

flipmode62 · Answer

/var/log/maillog ......................................................................................................................................................................................... Dec 17 16:12:01 localhost sendmail[9994]: mBHFC12f009994: from=nagios, size=387, class=0, nrcpts=1, msgid=<200812171512.mBHFC12f009994@SNOYMON02>, relay=nagios@localhost Dec 17 16:12:01 localhost sendmail[9996]: mBHFC1cr009996: from=, size=620, class=0, nrcpts=1, msgid=<200812171512.mBHFC12f009994@SNOYMON02>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1] Dec 17 16:12:01 localhost sendmail[9995]: mBHFC11n009995: from=, size=605, class=0, nrcpts=1, msgid=<200812171512.mBHFC1s4009992@SNOYMON02>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1] Dec 17 16:12:01 localhost sendmail[9992]: mBHFC1s4009992: to=nagios, ctladdr=nagios (501/502), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30372, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (mBHFC11n009995 Message accepted for delivery) Dec 17 16:12:01 localhost sendmail[9994]: mBHFC12f009994: to=nagios, ctladdr=nagios (501/502), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30387, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (mBHFC1cr009996 Message accepted for delivery) Dec 17 16:12:01 localhost sendmail[9997]: mBHFC11n009995: to=, ctladdr= (501/502), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30787, dsn=2.0.0, stat=Sent Dec 17 16:12:01 localhost sendmail[9998]: mBHFC1cr009996: to=, ctladdr= (501/502), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30802, dsn=2.0.0, stat=Sent Dec 17 16:13:01 localhost sendmail[11485]: mBHFD1pV011485: from=nagios, size=387, class=0, nrcpts=1, msgid=<200812171513.mBHFD1pV011485@SNOYMON02>, relay=nagios@localhost Dec 17 16:13:01 localhost sendmail[11488]: mBHFD17J011488: from=nagios, size=372, class=0, nrcpts=1, msgid=<200812171513.mBHFD17J011488@SNOYMON02>, relay=nagios@localhost Dec 17 16:13:01 localhost sendmail[11489]: mBHFD1kD011489: from=, size=620, class=0, nrcpts=1, msgid=<200812171513.mBHFD1pV011485@SNOYMON02>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1] Dec 17 16:13:01 localhost sendmail[11485]: mBHFD1pV011485: to=nagios, ctladdr=nagios (501/502), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30387, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (mBHFD1kD011489 Message accepted for delivery) Dec 17 16:13:01 localhost sendmail[11490]: mBHFD1dt011490: from=, size=605, class=0, nrcpts=1, msgid=<200812171513.mBHFD17J011488@SNOYMON02>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1] Dec 17 16:13:01 localhost sendmail[11491]: mBHFD1kD011489: to=, ctladdr= (501/502), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30802, dsn=2.0.0, stat=Sent Dec 17 16:13:01 localhost sendmail[11488]: mBHFD17J011488: to=nagios, ctladdr=nagios (501/502), delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=30372, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (mBHFD1dt011490 Message accepted for delivery) Dec 17 16:13:01 localhost sendmail[11493]: mBHFD1dt011490: to=, ctladdr= (501/502), delay=00:00:00, xdelay=00:00:00, mailer=local, pri=30787, dsn=2.0.0, stat=Sent ......................................................................................................................................................................................... Thank you for your help.

dubcek · Answer

and there is nothing in /var/spool/mail? the emails seem to be sent

Sendmail: Remove pending emails

29 réponses

Texture issues in enshrouded

Canon mb5350 - cartridge replacement impossible

Football manager (club management game)

Select next line csh foreach

Win32 kamso then rootkit detection

Win32:spyware-gen [trj] detected by avast

Unknown video error on the freebox player

Make it or break it

How to open a cbr file

Please log in with manager privileges.