Re: Odd SASL Behavior

From: Frank Leonhardt <freebsd-doc_at_fjl.co.uk>
Date: Thu, 26 Sep 2024 15:01:33 UTC
On 2024-08-15 21:39, Tim Daneliuk wrote:
> This is a puzzler - hoping someone can shed some light ..
> 
> I have a sendmail/SASL configuration that's been unchanged for years 
> and years.
> 
> Today, all of a sudden, users were unable to send mail from their UAs 
> because SASL
> was grouching about failed password authentication.  After poking 
> around and finding
> nothing having changed, a reboot fixed this.
> 
> Ideas?

There's something spammers can do that upsets (old) SASL causing it to 
go wonky and start rejecting authentication. IME it also consumes a LOT 
of RAM while it's happening.

A solution is to monitor your pagefile and issue a "service saslauthd 
restart" if it starts to grow. A reboot will also fix it, of course, but 
when I figured out what was killing the server this worked pretty well 
instead. Blackholing an IP that's failed authentication too often also 
helps.

Regards, Frank.

-- 
------
25-Nov-24 My apologies to everyone who I appear to have ignored for the 
last few years. A procmail script was misfiling some replies to 
Questions to the wrong folder.