Re: Disk space issues after open relay discovered

The RTVDSKINF finished. Even before it finished I found another 250,000 spool file entries in QEZJOBLOG and QEZDEBUG and I am deleting them. I scheduled a RCLSPLSTG *NONE to remove the 300-400,000 spool files that have been cleared.

The RTVDSKINF has this entry that I am not sure where to look for more information:

SNADS and object distribution 14.93%

About 7GB is allocated to this entry. Where do I find the objects included in this total and would there be temporary files I can delete in these libraries that will further "clean up" the open relay issue (if that is what cause the object to be created)?

Pete

On 7/29/2010 5:36 PM, Pete Helgren wrote:

I may have a couple of related issues. I got a call a day or so ago
from a customer that said the system was slow and wanted me to take a
look. Turns out they had lit up an external Ethernet adapter and a
hacker took advatage of the default open relay setting on the SMTP
server. I corrected that and shut down the adapter. That took care of
the "slow" issue. Today I get a call from the same customer saying
there was a "critical storage error" in QSYSOPR. I am currently running
RTVDSKINF but I found 125,000 entries in the QPRINT OUTQ, most with an
FFDC in the user data column. I am deleting those but I suspect that
somewhere there are a bunch of SMTP related records (logs, journals?)
that need to be cleaned up. Where should I look (while I wait for the
RTVDSKINF to finish)?

Thanks,