[LUNI] Is mqueue a valid subdir???

Joel F. Hacker qa6240 at email.mot.com
Wed Jun 4 15:49:00 CDT 2003


Hi,

Recently, my system was attacked by a sendmail
worm (yes, I know, I should have upgraded it twice
in April, but I only did it once).

After removing one bogus user account from the
system, I found that /var was full.  Further
examination found that there was a directory
/var/spool/mqueue that was looked like this:

drwxr-xr-x   2  root  mail   1884160 Jun  4  01:39  mqueue

Any ideas what I should do???

1.  Is mqueue a valid subdir on redhat?
2.  How would the directory get so large???
3.  Do I fix it by just cd mqueue; rm -f *
4. Anything else I should investigate???

Thanks!

Joel




More information about the luni mailing list