postfix-maildrop issues

[xodiacx]

Guys is there a way wherein I can read this more clearly, found this laying in my /var/spool/postfix/maildrop/ and it completely make my server crash. Please see below lines

"T1575574760 269280Arewrite_context=localFrootSrootM N#To: perkins.billiej@gmx.de:lalala24NMSubject: Der Einweisungsprozess ist obligatorisch #DE1D22H11788Z1740018344514N"X-PHP-Originating-Script: 0:eb.phpNSFrom: DeutscheBank<ID68324587@account-verify.137.identity47DE54311.deutschebank.de>NMIME-Version: 1.0N&Content-Type: text/html; charset=UTF-8N
X-Priority: 0N N(<p><span>Sehr geehrter Kunde,</span></p>NH<p><span><br />Ihr Konto bei der Deutschen Bank ist gesperrt.</span></p>Nã<p><br /><span>Warum?</span><br /><span>Sie haben den Anweisungsprozess nicht abgeschlossen.</span><br /><span>Der Einweisungsprozess ist obligatorisch und hilft Ihnen dabei, eine Operation ohne Hilfe der technischen Abteilung durchzuf&uuml;hren.</span><br /><span>Dies erzeugt eine zuf&auml;llige Online-Operation (Simulation).</span><br /><span>Wenn der Vorgang abgeschlossen ist, wird Ihr Konto wieder normal.</span><br /><br /><a href="http://source.sybeyomyk509466.ethumbtech.com"><span>Hier ausf&uuml;llen.</span></a><br /><br /><span>Deutsche Bank @ 2019</span>Technische<span>&nbsp;Abteilung.</span></p>X Rperkins.billiej@gmx.de:lalala24E "

Thanks

[williamconley]

1) Welcome to the Party!

2) As you are obviously new here, I have some suggestions to help us all help you:

When you post, please post your entire configuration including (but not limited to) your installation method (7.X.X?) and vicidial version with build (VERSION: 2.X-XXXx ... BUILD: #####-####).

This IS a requirement for posting along with reading the stickies (at the top of each forum) and the manager's manual (available on EFLO.net, both free and paid versions)

You should also post: Asterisk version, telephony hardware (model number is helpful here), cluster information if you have one, and whether any other software is installed in the box. If your installation method is "manual/from scratch" you must post your operating system with version (and the .iso version from which you installed your original operating system) plus a link to the installation instructions you used. If your installation is "Hosted" list the site name of the host.

If this is a "Cloud" or "Virtual" server, please note the technology involved along with the version of that techology (ie: VMware Server Version 2.0.2). If it is not, merely stating the Motherboard model # and CPU would be helpful.

Similar to This:

Vicibox X.X from .iso | Vicidial X.X.X-XXX Build XXXXXX-XXXX | Asterisk X.X.X | Single Server | No Digium/Sangoma Hardware | No Extra Software After Installation | Intel DG35EC | Core2Quad Q6600

3) "it completely make my server crash" is a bit vague. Are you saying it turned off? MySQL stopped running? Postfix service failed? Hard drive filled up?

4) Have you configured postfix aside from the default installation of a Vicibox install? Or is this a non-Vicibox installation? (If it's a non-vicibox install, this question is Entirely unrelated to this forum!)

5) Whitelist lock down your server. Your Vicidial server should not be visible to the world and should not be accepting email from anyone via postfix. Vicidial servers are meant for outbound email only. Any inbound email is handled a different way, not through postfix at all.

[xodiacx]

thanks @williamconley the server's specs is 200gb SSD, 6 cores intel processor, 16gb ram. It is hosted in VULTR.com. Vicibox8 is currently running, single install using the standard iso downloaded.

MySQL stopped running? - yes it stop running at the same time the database get corrupted.
Hard drive filled up? - yes 100% seen thru df -h and df --inodes command
Are you saying it turned off? - asterisk and php stop responding

I believe that the mail function feature is disabled also, not running.

[williamconley]

thanks @williamconley the server's specs is 200gb SSD, 6 cores intel processor, 16gb ram. It is hosted in VULTR.com. Vicibox8 is currently running, single install using the standard iso downloaded.

I note several problems with this response: Vicibox versions have three significant digits, not one. So: 8.X.X? Next up: Vicibox is NOT the dialer softtware, it's just the installer. The only Required information on this site is the Vicidial version. That's the dialer suite you are using. The Vicidial Version is likely something starting with 2.14 and has more information after that including a Build #. Please remember to always post AT LEAST the Vicidial Version with Build.

MySQL stopped running? - yes it stop running at the same time the database get corrupted.
Hard drive filled up? - yes 100% seen thru df -h and df --inodes command

Um ... 100% drive usage will cause corrupted files (perhaps rendering email unreadable as they are corrupted?) and system failure. That means the system crash is not because of an email unless the email is what filled the HD.

Are you saying it turned off? - asterisk and php stop responding

I believe that the mail function feature is disabled also, not running.

Mail function/feature disabled is an odd description. Postfix is likely running, but when the HD is 100% full may not be able to start. And postfix is a service used to transport email. So I'm confused as to your statement of "mail function feature is disabled". lol

Delete files and/or get a bigger HD. Your HD usage can not be over 95% for a functioning system, and should not be over 75% ordinarily for a smooth running system. But 100% is just a crash in progress.

[xodiacx]

thanks @williamconley so postfix is installed by default? if so, hmm then there is a chance the server is compromised also? as posted earlier, those contents came from the file that is stored in our box and filled up the servers storage.

[williamconley]

thanks @williamconley so postfix is installed by default? if so, hmm then there is a chance the server is compromised also? as posted earlier, those contents came from the file that is stored in our box and filled up the servers storage.

You did not say earlier that it filled the HD. You said just that it caused it to crash. You left off HOW it caused it to crash. How tiny is your HD that a single file would crash it?

Is your server whitelisted? IE: Only those with approved IP address are allowed to communicate with the server, nobody else? If not, this would be a good time to whitelist it. Install a firewall or modify the firewall to ONLY allow authorized IPs through.