<HTML>
<HEAD>
<META content="text/html; charset=iso-8859-1" http-equiv=Content-Type>
<META content="OPENWEBMAIL" name=GENERATOR>
</HEAD>
<BODY bgColor=#ffffff>
Use "cat /dev/null <b>></b> /var/log/<i>logfilename"</i>. That zeros out that file, deleting all the contents without deleting the file itself.
<br />
<br />
<br />Chuck
<br />
<br />
<br /><font size="2">
<br />
<br /><b>---------- Original Message
-----------</b>
<br />
From: "Gregg K" <greggk1@cox.net>
<br />
To: "'BlueOnyx General Mailing List'"
<blueonyx@mail.blueonyx.it>
<br />
Sent: Fri, 3 Oct 2014 08:07:50 -0700
<br />
Subject: [BlueOnyx:16093] Manually clearing Failed Logins
<br />
<br />> <span style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">Hello,<o:p /></span>
<br />>
<span style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">How
would I go by manually clearing the failed login database? I have a server
that has so many entries in there that it just [UTF-8?]won’t open anymore, it
times out. I want to know if there is a way to manually do it through
command line.<o:p /></span>
<br />> <span style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p>
</o:p></span>
<br />> <span style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">Trying
to figure out [UTF-8?]what’s going on with this server, I noticed in the messages
log file, 1000s of entries such as this:<o:p /></span>
<br />> <span style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">Oct
3 08:02:48 ns1 saslauthd[11354]: do_auth
: auth failure: [user=kramer] [service=smtp] [realm=] [mech=shadow]
[reason=Unknown]<o:p /></span>
<br />> <span style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p>
</o:p></span>
<br />> <span style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">They
start at letter A and go all the way to letter Z in the alphabet trying out
different names. I [UTF-8?]can’t figure out the IPs doing this either,
otherwise I would block them. A few times a day, Dovecot just gives up,
and I have to manually restart it. I must say, they are quite persistent
in trying.<o:p /></span>
<br />> <span style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">I have
Dfix installed, but I [UTF-8?]don’t think [UTF-8?]it’s catching these particular
tries.<o:p /></span>
<br />> <span style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"><o:p>
</o:p></span>
<br />> <span style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">Thanks,<o:p /></span>
<br />>
<span style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">Gregg<o:p /></span>
<br /><b>------- End of Original Message
-------</b>
<br />
</font>
</BODY>
</HTML>