>Looks to me like someone with a couple of server farms tried to use you
>as a relay.
>
>Did you check other activity in your logs from those ips? You may have
>something on your box open.
Nothing is open, plus exim requires authentication from all users.
xo amongst many others would not respond to my complaints. Now I
block most of them at firewall.
"05900 31497 1709100 deny log tcp from 209.216.53.0/24 to any 25 in"
31497 attempts in about 24 hrs with almost 2 million packets ditched.
http://emh16.com/
>On Jan 2, 2004, at 1:45 PM, George wrote:
>
>>Was this an attack? It certainly froze up my computer. (OSX Server)
>>
>>
>>From midnight until 7:45 am (that is when I restarted my server) all
>>I have in my logs are lines that look like this:
>>
>>2004-01-02 04:18:29 Connection from 12.129.205.75 refused: too many
>>connections
>>2004-01-02 04:18:36 Connection from 66.77.108.70 refused: too many
>>connections
>>2004-01-02 04:18:49 Connection from 64.156.187.155 refused: too many
>>connections
>>2004-01-02 04:18:51 Connection from 66.55.169.93 refused: too many
>>connections
>>2004-01-02 04:19:35 Connection from 12.129.205.83 refused: too many
>>connections
>>2004-01-02 04:20:00 Connection from 64.253.206.210 refused: too many
>>connections
>>2004-01-02 04:20:51 Connection from 66.55.169.93 refused: too many
>>connections
>>2004-01-02 04:20:54 Connection from 205.188.157.40 refused: too many
>>connections
>>2004-01-02 04:21:13 Connection from 66.63.169.46 refused: too many
>>connections
>>
>>
>>or look at this section where the ip is obviously from the same
>>place...
>>
>>2004-01-02 04:22:34 Connection from 209.216.53.147 refused: too many
>>connections
>>2004-01-02 04:22:34 Connection from 209.216.53.146 refused: too many
>>connections
>>2004-01-02 04:22:34 Connection from 209.216.53.145 refused: too many
>>connections
>>2004-01-02 04:22:34 Connection from 209.216.53.144 refused: too many
>>connections
>>2004-01-02 04:22:34 Connection from 209.216.53.143 refused: too many
>>connections
>>2004-01-02 04:22:34 Connection from 209.216.53.142 refused: too many
>>connections
>>2004-01-02 04:22:34 Connection from 209.216.53.141 refused: too many
>>connections
>>2004-01-02 04:22:34 Connection from 209.216.53.140 refused: too many
>>connections
>>2004-01-02 04:22:34 Connection from 209.216.53.139 refused: too many
>>connections
>>2004-01-02 04:22:34 Connection from 209.216.53.138 refused: too many
>>connections
>>
>>
>>http://maxo.captainnet.net/exim_main.txt
>>
>>--
>>
>>## List details at http://www.exim.org/mailman/listinfo/exim-users
>>Exim details at http://www.exim.org/ ##
>>
>
>
>--
>
>## List details at http://www.exim.org/mailman/listinfo/exim-users
>Exim details at http://www.exim.org/ ##
