From owner-freebsd-security Mon Jun 14 14: 3:23 1999 Delivered-To: freebsd-security@freebsd.org Received: from tinker.com (troll.tinker.com [204.214.7.146]) by hub.freebsd.org (Postfix) with ESMTP id 3A3F9155CA for ; Mon, 14 Jun 1999 14:03:10 -0700 (PDT) (envelope-from carol@tinker.com) Received: by localhost (8.8.5/8.8.5) Received: by mail.tinker.com via smap (V2.0) id xma012152; Mon Jun 14 15:48:29 1999 Received: by localhost (8.8.8/8.8.8) id PAA11681; Mon, 14 Jun 1999 15:58:07 -0500 (CDT) Message-ID: <37656D82.19B57AC1@tinker.com> Date: Mon, 14 Jun 1999 16:00:50 -0500 From: Carol Deihl Organization: Shrier and Deihl X-Mailer: Mozilla 4.5 [en] (X11; U; FreeBSD 2.2.8-RELEASE i386) X-Accept-Language: en MIME-Version: 1.0 To: LutzRab@omc.net Cc: security@FreeBSD.ORG Subject: Re: New Attack via sendmail? References: <199906141930.VAA14403@office.omc.net> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Lutz Rabing wrote: > > I've seen some pretty strange lines in syslog of one of our webservers. > > The box is running 2.2.8 with sendmail 8.9.3 and has never been out of > swap space before, in fact it's not using swap space at all under normal > conditions. > > Lutz Rabing > -OMCnet- > > ------------------------------------------------------------------------ > Jun 14 14:11:48 meg /kernel: swap_pager: out of swap space > Jun 14 14:11:48 meg Jun 14 14:11:48sendmail[: /etc/spwd.db > Jun 14 14:11:48 meg Jun 14 14:11:48sendmail[: OAA14935 [snip] Are you running a Netscape browser on the box? A couple of months ago I had a similar problem, on a non-public box. It looks like the Netscape browser (Communicator 4.5) has a memory leak (especially in JavaScript processing), and eventually it would eat all the swap and cause something else to choke. I raised the (soft) ulimits for data and stack in my .profile, and I exit Netscape every couple of days (or whenever it starts getting slow). I'm not really sure if this was the problem, but it has not reoccurred since I up'ed the ulimits. Carol -- Carol Deihl - carol@tinker.com Shrier and Deihl - Unix Network Admin and Internet Software Development To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message