On Thu, 2004-09-30 at 10:51 -0500, David Murphy wrote:
> The reason for this is the server is getting hammerd by the same 30 or 40
> blocked servers trying to relay it mail. When they start the attack it
> caused exim to sometimes die sometime just create a load of 50+. Blocking
> and the tcp stack level would correct the issue.
If its a relatively small number use smtp_accept_max_per_host to keep
any hosts impact on your box low (make sure your total smtp_accept_max
is higher than expected duff hosts * smtp_accept_max_per_host), and add
delays on appropriate ACLs to keep them locked out in an idling state.
Nigel.
--
[ Nigel Metheringham Nigel.Metheringham@??? ]
[ - Comments in this message are my own and not ITO opinion/policy - ]
