Re: [Exim] DOS problem (?)

Top Page
Delete this message
Reply to this message
Author: Alun
Date:  
To: Chris Edwards
CC: exim-users, auj
Subject: Re: [Exim] DOS problem (?)
--
Chris Edwards (chris@???) said, in message
    <Pine.SOL.4.56.0309051025440.12747@???>:

>
> That's interesting.
>
> When our "smtp_accept_max" is exceeded, exim logs:
>
> Connection from 130.209.16.11 refused: too many connections
>
> When our "smtp_accept_max_per_host" is exceeded, exim logs:
>
> Connection from 130.209.16.11 refused: too many connections from that IP address
>
> Note the "from that IP address" bit. This implies its your
> smtp_accept_max limit that was being reached. Any idea how many
> connections were active ? What did "exiwhat" return ?


Duh, I didn't notice that subtle distinction. Now I've got past the DOS
mindset, it looks like there's a file locking problem in a perl function I
call from the ACL - this is causing exim processes to pile up. The IP
address in question was banging so hard on the door that I assumed it was
down to that.

That said, 22 retries per second, sustained over 19 hours has got to be the
most aggressive mail server ever!

Sorry folks - not exim's fault - mine!

Cheers,
Alun.

--
Alun Jones                       auj@???
Systems Support,                 (01970) 62 2494
Information Services,
University of Wales, Aberystwyth



--
[ Content of type application/pgp-signature deleted ]
--