/var full

[mind-field]

Hello,

My /var dir keeps filling up and I cannot lower it. I try it goes down and 2 days later back up to 86%

Any assistance would be greatful!

Thanks and God Bless!

[elleryjh]

what's it filling with? Logs? Also, how big is it?

[mr.wonderful]

Originally posted by elleryjh
Also, how big is it?

Lol! Now thats a personal question!

[McRox]

Do the following:

# cd /var;du -sh *

You should see a list of dirs with the size behind each..

The "log" map is usually eating up lots of space.

If your var partition isn't big, I recommend creating a new map on the /backup or /home or any other partition with alot free space and create a symlink, chown the folder and touch the required files

[mind-field]

Hello,

Here it is:

76k arpwatch
1.6M cache
386M cpanel
4.0k db
509M lib
4.0k local
8.0k lock
192M log
16k lost+found
0 mail
6.1M named
2.8M named-bak
4.0k nis
4.0k opt
32k portsentry
4.0k preserve
12k proftpd
4.0k proftpd.pid
0 quota.user
100k run
3.4G spool
76k tempnamed
4.0k tmp
28k yp
8.0k zonefix.php

What can I do?

Thanks and God Bless!

[PWSowner]

Looks like your exim mail queue and message log is what's taking up all the space.
/var/spool/exim/msglog/
and
/var/spool/exim/input/


You can safely delete any files in those directories older than 3 days.

Check the size of those 2 folders and see how old the files in them go back to.

[McRox]

Originally posted by mind-field
386M cpanel
192M log
3.4G spool

Those are the ones that usually grown. It looks like your box is really affected by the worms that are abusing mailservers.

If you have a 2nd harddrive or another partition with lots of space, you could create a new "spool" map, chown it with the right users and create a symlink on the /var partition.

This does not solve your problem, but gives the spoolmap more room in case it needs to grow.

I recommend cleaning up the spool every now and then OR add a cron job for a daily clean up