• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 505
  • Last Modified:

My /var fs got full to 100%


My /var fs got full to 100%. I have removed some files from /var/mail but it just came down to 97%. I am not receiving any mails or able to send any mails. which files or directories can i remove. can any one help us in this.

one more - how to remove e-mail address - some of my old employee's mails are still receiving mails - i want to remove their e-mail address. how to and where to remove those e-mail address permamnently.

i appreciate u r help on this.

1 Solution
One step at a time.
Boot in runlevel 1 or do a init 1 at the console
the go to /var/log and delete some *.tar.gz or *.tar or *.gz or *.tgz file you find there. Those are old backups of your logs.

Do you see an unusually large file in there?
/var/log/messages for example?

You must comment on the distro of linux you're using, the smtp daemon and the user structure.
But I will assume is a standard linux, with sendmail and local users.

let's say joe@domain.com is one of your old employess and you want to delete that user.
1- check if /etc/passwd has an entry for "joe"
2- check if /home has a directory called joe
3- check if /var/mail has a file called joe

Then delete the user in step 1, that will prevent sendmail from deliver mails to him.
make sure number 2 dissapears, if not, delete it
make sure number 3 dissapears, if not, delete it.


What distro are you using? If it is based on debian, you would probably have a /var/cache/apt/archives. Here the downloaded archives of your .deb files are located. These you don't need anymore and you can delete them. You can also use apt-get clear to delete them. If it is fedora-core or red-hat, and you are using yum to update the system you can delete the rpm's in /var/cache/yum/.... which are there for the same reason as in debian.

If you have a partition with enough room, you could use a livecd like knoppix, and then with that OS, move the var folder to the other partition. Then make a symlink in the / with var as name. Just make sure the partition you are copying var to is loaded at bootup.

Funny you mention this problem....I just got done fixing our server running UNIX that was having the same problem.  I ended up emptying SPAM messages from /var/spool/mqueue.  Don't know if you have the same directory.  But the general idea, is to check the incoming queue and see what's going on.



Featured Post

Configuration Guide and Best Practices

Read the guide to learn how to orchestrate Data ONTAP, create application-consistent backups and enable fast recovery from NetApp storage snapshots. Version 9.5 also contains performance and scalability enhancements to meet the needs of the largest enterprise environments.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now