Mailing-List: contact server-user-help@james.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "James Users List" <server-user@james.apache.org>
Received-SPF: neutral (herse.apache.org: 12.170.54.180 is neither permitted
 nor denied by domain of maomaode@gmail.com)
Message-ID: <468CD1F0.2020207@gmail.com>
Date: Thu, 05 Jul 2007 19:11:44 +0800
From: maomaode <maomaode@gmail.com>
User-Agent: Thunderbird 1.5.0.12 (Windows/20070509)
MIME-Version: 1.0
To: James Users List <server-user@james.apache.org>
Subject: Re: James Server exists abnormally and can not startup
References: <46863CDB.3010901@gmail.com>
 <30402825.963971183217142867.JavaMail.root@elysia.void.it>
 <468857F4.1090805@gmail.com>
 <25114952.1359641183360912619.JavaMail.root@elysia.void.it>
 <4688B391.9030403@gmail.com>
 <12403019.1371851183364873612.JavaMail.root@elysia.void.it>
 <4689AEF5.9000201@gmail.com>
 <1088737.1974901183545023456.JavaMail.root@elysia.void.it>
In-Reply-To: <1088737.1974901183545023456.JavaMail.root@elysia.void.it>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit

Stefano Bagnara wrote:
> maomaode ha scritto:
>   
>> Hi Stefano
>>
>> Really Thanks your help, and your information.
>>
>> I changed the environment, since it's really changed from the version 2.3.0
>>
>> But the server still can not start up normally.
>>
>> And then i search the nohup.log i found this
>>
>> Exception: Exception caught while storing a stream :
>> java.io.FileNotFoundException:
>> /data2/bokeland/softwares/james-2.3.1/apps/james/var/mail/outgoing/4D61696C313138333133313337363532382D3835333738352D746F2D7961686F6F2E636F6D2E686F746D61696C2E636F6D2E6D736E2E636F6D2E73696E616D61696C2E636F6D2E7961686F6F2E636F6D2E74772E75726C2E636F6D2E74772E6D61696C2E61706F6C2E636F6D2E74772E736F2D6E65742E6E65742E74772E6D7331312E75726C2E636F6D2E7477.Repository.FileStreamStore
>> (File name too long)
>>     
>
> This is a different problem than the previous one, but it is anyway
> related to the files you have in the repository.
>
> The file above, decoded, give this text:
> "Mail1183131376528-853785-to-yahoo.com.hotmail.com.msn.com.sinamail.com.yahoo.com.tw.url.com.tw.mail.apol.com.tw.so-net.net.tw.ms11.url.com.tw"
>
> This is the result of mail Mail1183131376528 splitted and then moved to
> the outgoing spool by remote delivery. That mail has a recipient with
> the following domain:
> yahoo.com.hotmail.com.msn.com.sinamail.com.yahoo.com.tw.url.com.tw.mail.apol.com.tw.so-net.net.tw.ms11.url.com.tw
>
> It seems weird that in your outgoing you have such a domain.
>   


This is MUST a spammer, anyway to stop it using my James Server, can you 
tell me how to configure.
I've configured my server with the SMTPs and POPs, but seems that will 
not prevent spammers.

Really appreciate your help

James

>   
>> Seems that James Server trying to write some file, but the file name is
>> tooo long
>>
>> And then i go into the apps/james/var/mail directory when i > ls -l i
>> found this:
>>
>> drwxr-xr-x 2 root root        48 Jul  3 09:51 address-error
>> drwxr-xr-x 2 root root        48 Jul  3 09:36 error
>> drwxr-xr-x 7 root root       168 Jun 18 16:21 inboxes
>> drwxr-xr-x 2 root root 123294544 Jun 30 16:56 outgoing
>> drwxr-xr-x 2 root root        48 Jun 17 19:56 relay-denied
>> drwxr-xr-x 2 root root 140114288 Jun 30 17:03 spam
>> drwxr-xr-x 2 root root      1008 Jun 30 17:03 spool
>>
>>
>> You may noticed that the outgoing and spam directory size is really wired!?
>>
>> I go into the outgoing directory , and i can not list the directory with
>>     
>>> ls -l and also i can not > rm *
>>>       
>
> Run a search for "find xargs rm" on your favorite search engine for a
> solution to this.
>
>   
>> So i decided mv the direcotry :
>>
>> drwxr-xr-x 2 root root        48 Jul  3 09:51 address-error
>> drwxr-xr-x 2 root root        48 Jul  3 09:36 error
>> drwxr-xr-x 7 root root       168 Jun 18 16:21 inboxes
>> drwxr-xr-x 2 root root        48 Jul  3 09:48 outgoing
>> drwxr-xr-x 2 root root 123294544 Jun 30 16:56 outgoing_bak
>> drwxr-xr-x 2 root root        48 Jun 17 19:56 relay-denied
>> drwxr-xr-x 2 root root 140114288 Jun 30 17:03 spam_bak
>> drwxr-xr-x 2 root root      1008 Jun 30 17:03 spool
>>
>>
>> Now i can start the James Server
>>
>> But I still don't know why the directory size is so big, is it been
>> attacked? hacked? or it's the config errors or it's a program errors?
>> As you can see, mv directory is just a work around solution, i guess the
>> problem will happen later
>>     
>
> Look in the logs, maybe increasing the log level (environment.xml) and
> try to understand the flow of some message. If there is weird activity
> you will for sure notice this.
>
> Stefano
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
> For additional commands, e-mail: server-user-help@james.apache.org
>
>
>   

---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org