Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 26 Sep 2024 16:01:33 +0100
From:      Frank Leonhardt <freebsd-doc@fjl.co.uk>
To:        FreeBSD Mailing List <freebsd-questions@freebsd.org>
Subject:   Re: Odd SASL Behavior
Message-ID:  <6651a50a8935812ae8868e9e3e4c121c@fjl.co.uk>
In-Reply-To: <c91ec0a9-457f-4f73-bf28-d717c9c446c7@gmail.com>

index | next in thread | previous in thread | raw e-mail

On 2024-08-15 21:39, Tim Daneliuk wrote:
> This is a puzzler - hoping someone can shed some light ..
> 
> I have a sendmail/SASL configuration that's been unchanged for years 
> and years.
> 
> Today, all of a sudden, users were unable to send mail from their UAs 
> because SASL
> was grouching about failed password authentication.  After poking 
> around and finding
> nothing having changed, a reboot fixed this.
> 
> Ideas?

There's something spammers can do that upsets (old) SASL causing it to 
go wonky and start rejecting authentication. IME it also consumes a LOT 
of RAM while it's happening.

A solution is to monitor your pagefile and issue a "service saslauthd 
restart" if it starts to grow. A reboot will also fix it, of course, but 
when I figured out what was killing the server this worked pretty well 
instead. Blackholing an IP that's failed authentication too often also 
helps.

Regards, Frank.

-- 
------
25-Nov-24 My apologies to everyone who I appear to have ignored for the 
last few years. A procmail script was misfiling some replies to 
Questions to the wrong folder.


help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6651a50a8935812ae8868e9e3e4c121c>