Hi All, I've been receiving syn_sent on my smtp from an unknown ip which was causing my sendmail to slow down, I do lsof and found these strange logs: ----------- sendmail 24207 root 3r DOOR 0xf6120e58 (FA:->0xf5df6728)
sendmail 24057 root 11u inet 0xf6f450c8 0t0 TCP \ myserver:51869->203.190.83.6:smtp (SYN_SENT) sendmail 24056 root 6w VCHR 21,0 0t0 40929 /devices/pseudo/log@0:conslog->LOG -------------- prior to this, there was a malicious attack on my smtp via a server that was allowed for relay that cause smtp service to crash. So I closed the service and limit my concurrent smtp access to 12, but the SYN_SENT continue to ruin the service. Looks like there's a file on my server that's running this. If so, how will I know the location of the file? Thanks. -- Lito A. Lampitoc : http://www.codewan.com.ph Systems/Network Administrator : CountryWide Wide Area Network, Inc. As we enjoy great advantages from inventions of others, we should be glad of an opportunity to serve others by any invention of ours; and this we should do freely and generously. - Benjamin Franklin _ Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph To leave: send "unsubscribe" in the body to [EMAIL PROTECTED] Fully Searchable Archives With Friendly Web Interface at http://marc.free.net.ph To subscribe to the Linux Newbies' List: send "subscribe" in the body to [EMAIL PROTECTED]
