Re: [exim] too many connections

Pàgina inicial
Delete this message
Reply to this message
Autor: Ian Eiloart
Data:  
A: George, exim-users
Assumpte: Re: [exim] too many connections


--On 21 June 2006 12:31:27 -0700 George <gms@???> wrote:

> Hi,
>
> what exactly causes this? Are these attacks? Would
> "smtp_accept_max_per_host = 10" stop these?


You're seeing several connections per second from this host. Do you know
anything about the host? Does it belong to you? Probably not:


    host 64.217.9.27
    27.9.217.64.in-addr.arpa domain name pointer
    adsl-64-217-9-27.dsl.okcyok.swbell.net.


It seems to me that "smtp_accept_max_per_host = 10" would not stop it
trying to connect.

While the attack continues - assuming you don't own 64.217.9.27 - it might
be better to block the remote host at your firewall. And report it to
swbell, maybe?


> Thanks
>
>
>
> 2006-06-21 10:25:06 Connection from [64.217.9.27] refused: too many
> connections 2006-06-21 10:25:06 Connection from [64.217.9.27] refused:
> too many connections 2006-06-21 10:25:07 Connection from [64.217.9.27]
> refused: too many connections 2006-06-21 10:25:07 Connection from
> [64.217.9.27] refused: too many connections 2006-06-21 10:25:07
> Connection from [64.217.9.27] refused: too many connections 2006-06-21
> 10:25:07 Connection from [64.217.9.27] refused: too many connections
> 2006-06-21 10:25:07 Connection from [64.217.9.27] refused: too many
> connections 2006-06-21 10:25:07 Connection from [64.217.9.27] refused:
> too many connections 2006-06-21 10:25:07 Connection from [64.217.9.27]
> refused: too many connections 2006-06-21 10:25:07 Connection from
> [64.217.9.27] refused: too many connections 2006-06-21 10:25:07
> Connection from [64.217.9.27] refused: too many connections 2006-06-21
> 10:25:07 Connection from [64.217.9.27] refused: too many connections
> 2006-06-21 10:25:07 Connection from [64.217.9.27] refused: too many
> connections 2006-06-21 10:25:07 Connection from [64.217.9.27] refused:
> too many connections 2006-06-21 10:25:07 Connection from [64.217.9.27]
> refused: too many connections 2006-06-21 10:25:07 Connection from
> [64.217.9.27] refused: too many connections 2006-06-21 10:25:08
> Connection from [64.217.9.27] refused: too many connections 2006-06-21
> 10:25:08 Connection from [64.217.9.27] refused: too many connections
> 2006-06-21 10:25:08 Connection from [64.217.9.27] refused: too many
> connections 2006-06-21 10:25:08 Connection from [64.217.9.27] refused:
> too many connections 2006-06-21 10:25:08 Connection from [64.217.9.27]
> refused: too many connections 2006-06-21 10:25:08 Connection from
> [64.217.9.27] refused: too many connections 2006-06-21 10:25:08
> Connection from [64.217.9.27] refused: too many connections 2006-06-21
> 10:25:08 Connection from [64.217.9.27] refused: too many connections
> 2006-06-21 10:25:08 Connection from [64.217.9.27] refused: too many
> connections 2006-06-21 10:25:08 Connection from [64.217.9.27] refused:
> too many connections 2006-06-21 10:25:08 Connection from [64.217.9.27]
> refused: too many connections 2006-06-21 10:25:08 Connection from
> [64.217.9.27] refused: too many connections 2006-06-21 10:25:08
> Connection from [64.217.9.27] refused: too many connections 2006-06-21
> 10:25:08 Connection from [64.217.9.27] refused: too many connections




--
Ian Eiloart
IT Services, University of Sussex