I am having a
problem with my SMTP service going down and back up again several times per day.
Thankfully it only goes down for a few seconds and then goes back up just fine,
but sometimes it will go down for a few minutes. This occurs when I get the
following entry in my SMTP log. We are an ISP that's been around a while, and we
receive approx 30,000 messages/smtp connections per day. I realize that most of
those connections are from spammers with hosed up machines and DNS properties,
but my log is riddled with entries similar to this one: (IP and port have been
replaced with x's because they are random).
02-19-2003 20:37:00 SMTPD (0D6802C0) [0.0.0.0]
connect xxx.xxx.xxx.xxx
port xxxx
02-19-2003 20:37:00 SMTPD (0D6802C0) send error 10054
02-19-2003 20:37:00 SMTPD (0D6802C0) send error 10054
This error will show
several different IP addresses so there's no real pattern to it. Some have shown
up more that others and I have entered several IP's that have caused this error
in the SMTP blocked IP list, but there are too many of them to truly keep up on
it. I know that this error is due to a connection initiated by a spammer or some
other type of mail server that just doesn't work. Reverse lookups on the IP in
question rarely come up with anything, and usually the IP's in question cant
even be pinged. I don't really care that my logs are filled with errors like
this, but the problem is that whenever my SMTP service goes down and back up for
a few seconds, it is directly related to the time that the send error 10054
occurred.
Is anyone else
having this problem, and is there anything I cant do to keep the SMTP service
from going down when this happens? This seems to be occurring more and
more, and I am getting more and more calls from customers that think the mail
server is down because they get a POP3 error whenever they try to log in.
Thanks in advance
for any help with this one.
Mike VandeBerg
Systems Administrator
NTS Services Corp
309-353-5632 ext. 227
Mobile 309-241-8973
[EMAIL PROTECTED]
