Sendmail: high cpu usage

[djmostek]

Hello, i'm a bit confused by the load that is generated by sendmail in my dedicated server.



Are there any solutions to lower this usage, and why it's so big.

I would appreciate any suggestion from what should I start checking what' s wrong.

 

[SeLLeRoNe]

Are you sure the outgoing mails are not spam? It may be that website has been hacked somehow and someone is using it to send spam emails

Regards

 

[djmostek]

I set daily send limit to 20

echo 20 > /etc/virtual/limit

 

[Hexweb]

It really looks like a spamming issue in my eyes.

Best you can do is install Maldet and run the scanner to make sure there are no malicious files on your server.

 

[djmostek]

It looks like this actually is that my server i spamming itself.

Extract from my mailog file:

2014-11-27 06:33:33 1Xtrht-0001h6-BG <= [email protected] U=root P=local S=596 T="lfd on xx.pl: Excessive resource usage: daemon (2503 (Parent PID:2503))" from <[email protected]> for root
2014-11-27 06:33:33 1Xtrht-0001h6-BG => user <[email protected]> F=<[email protected]> R=localuser T=local_delivery S=695
2014-11-27 06:33:33 1Xtrht-0001h6-BG Completed
2014-11-27 07:12:34 1XtsJe-0001vM-0v <= [email protected] U=root P=local S=38415 T="lfd on xx.pl: Suspicious process running under user mysql" from <[email protected]> for root
2014-11-27 07:12:34 1XtsJe-0001vM-0v => user <[email protected]> F=<[email protected]> R=localuser T=local_delivery S=38514
2014-11-27 07:12:34 1XtsJe-0001vM-0v Completed
2014-11-27 07:12:34 1XtsJe-0001vR-2f <= [email protected] U=root P=local S=844 T="lfd on xx.pl: Excessive resource usage: mysql (11371 (Parent PID:11044))" from <[email protected]> for root
2014-11-27 07:12:34 1XtsJe-0001vR-2f => user <[email protected]> F=<[email protected]> R=localuser T=local_delivery S=943