--On 21 June 2006 12:31:27 -0700 George <gms@???> wrote:
> Hi,
>
> what exactly causes this? Are these attacks? Would
> "smtp_accept_max_per_host = 10" stop these?
You're seeing several connections per second from this host. Do you know
anything about the host? Does it belong to you? Probably not:
host 64.217.9.27
27.9.217.64.in-addr.arpa domain name pointer
adsl-64-217-9-27.dsl.okcyok.swbell.net.
It seems to me that "smtp_accept_max_per_host = 10" would not stop it
trying to connect.
While the attack continues - assuming you don't own 64.217.9.27 - it might
be better to block the remote host at your firewall. And report it to
swbell, maybe?
> Thanks
>
>
>
> 2006-06-21 10:25:06 Connection from [64.217.9.27] refused: too many
> connections 2006-06-21 10:25:06 Connection from [64.217.9.27] refused:
> too many connections 2006-06-21 10:25:07 Connection from [64.217.9.27]
> refused: too many connections 2006-06-21 10:25:07 Connection from
> [64.217.9.27] refused: too many connections 2006-06-21 10:25:07
> Connection from [64.217.9.27] refused: too many connections 2006-06-21
> 10:25:07 Connection from [64.217.9.27] refused: too many connections
> 2006-06-21 10:25:07 Connection from [64.217.9.27] refused: too many
> connections 2006-06-21 10:25:07 Connection from [64.217.9.27] refused:
> too many connections 2006-06-21 10:25:07 Connection from [64.217.9.27]
> refused: too many connections 2006-06-21 10:25:07 Connection from
> [64.217.9.27] refused: too many connections 2006-06-21 10:25:07
> Connection from [64.217.9.27] refused: too many connections 2006-06-21
> 10:25:07 Connection from [64.217.9.27] refused: too many connections
> 2006-06-21 10:25:07 Connection from [64.217.9.27] refused: too many
> connections 2006-06-21 10:25:07 Connection from [64.217.9.27] refused:
> too many connections 2006-06-21 10:25:07 Connection from [64.217.9.27]
> refused: too many connections 2006-06-21 10:25:07 Connection from
> [64.217.9.27] refused: too many connections 2006-06-21 10:25:08
> Connection from [64.217.9.27] refused: too many connections 2006-06-21
> 10:25:08 Connection from [64.217.9.27] refused: too many connections
> 2006-06-21 10:25:08 Connection from [64.217.9.27] refused: too many
> connections 2006-06-21 10:25:08 Connection from [64.217.9.27] refused:
> too many connections 2006-06-21 10:25:08 Connection from [64.217.9.27]
> refused: too many connections 2006-06-21 10:25:08 Connection from
> [64.217.9.27] refused: too many connections 2006-06-21 10:25:08
> Connection from [64.217.9.27] refused: too many connections 2006-06-21
> 10:25:08 Connection from [64.217.9.27] refused: too many connections
> 2006-06-21 10:25:08 Connection from [64.217.9.27] refused: too many
> connections 2006-06-21 10:25:08 Connection from [64.217.9.27] refused:
> too many connections 2006-06-21 10:25:08 Connection from [64.217.9.27]
> refused: too many connections 2006-06-21 10:25:08 Connection from
> [64.217.9.27] refused: too many connections 2006-06-21 10:25:08
> Connection from [64.217.9.27] refused: too many connections 2006-06-21
> 10:25:08 Connection from [64.217.9.27] refused: too many connections
--
Ian Eiloart
IT Services, University of Sussex
