<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<div class="moz-cite-prefix">On 07/01/2015 07:29 AM, Gerald Waugh
wrote:<br>
</div>
<blockquote cite="mid:5593DD11.3060407@frontstreetnetworks.com"
type="cite">
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
<br>
<div class="moz-cite-prefix">On 06/29/2015 03:36 PM, Greg Kuhnert
wrote:<br>
</div>
<blockquote
cite="mid:F654D094-18E5-4391-9B59-0DE492AAD083@compassnetworks.com.au"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<br class="">
<div>
<blockquote type="cite" class="">
<div class="">On 30 Jun 2015, at 6:17 am, Gerald Waugh <<a
moz-do-not-send="true"
href="mailto:gwaugh@frontstreetnetworks.com" class="">gwaugh@frontstreetnetworks.com</a>>
wrote:</div>
<br class="Apple-interchange-newline">
<div class=""><br class="">
On 06/29/2015 02:19 PM, Michael Stauber wrote:<br class="">
<blockquote type="cite" class="">Hi Gerald,<br class="">
<br class="">
<blockquote type="cite" class="">Jun 29 07:44:27
/host/// dovecot: auth: Error: auth worker: Aborted<br
class="">
PASSV request for email_user: Worker process died
unexpectedly<br class="">
Jun 29 07:44:29 /host/// dovecot: pop3-login: Aborted
login (auth<br class="">
failed, 1 attempts in 2 secs):
user=<email_user>, method=PLAIN,<br class="">
rip=1.2.3.4, lip=5.6.7.8,
session=<2B1Hc6cZrgDRygR3><br class="">
</blockquote>
Restart Dovecot and see if that fixes it:<br class="">
<br class="">
/sbin/service dovecot restart<br class="">
<br class="">
</blockquote>
restarting dovecot fixes, but why does it happen?<br
class="">
server is 5106R running fail2ban<br>
</div>
</blockquote>
</div>
</blockquote>
restarting dovecot does not fix it, we have to reboot the server.<br>
This issue continues.<br>
</blockquote>
CentOS release 5.11 (Final)<br>
BlueOnyx build 20140205 for a 5106R in en_US<br>
dovecot version 2.2.15<br>
<br>
5,000 + instances of "Worker process died unexpectedly"<br>
Only happens for small number of users or from a small number of
IPs<br>
<br>
<br>
<br>
</body>
</html>