There is an ongoing attack against JoinMarket makers where a random nick not serving onion constantly sends !orderbook requests through directory servers. The makers and directories mostly cope with the load, but the log files, which have a hardcoded debug log level, grow several gigabytes per hour and crash many makers.
A solution is to setup hourly log rotation. In Debian systems, you can move logrotate from daily to hourly cron using:
```
dpkg-divert --add --rename --divert /etc/cron.hourly/logrotate /etc/cron.daily/logrotate
```
The default user data directory is `$HOME_DIR/.joinmarket`. Create a logrotate config:
```
/home/user/.joinmarket/logs/*.log {
hourly
size 100M
copytruncate
rotate 24
notifempty
missingok
}
```
To install and test, save the config to `/etc/logrotate.d/joinmarket-logs`, test it with `sudo logrotate -d /etc/logrotate.d/joinmarket-logs`, and force run manually with `sudo logrotate -f /etc/logrotate.d/joinmarket-logs` or wait for automatic hourly execution via cron.
