* Jie Wang <[EMAIL PROTECTED]>: > Hello, everyone, > > I have a box running 2.2.3 and encounter the following problem. > > The box is behind a firewall (ISA), and is under attack frequently ( a > lots of SMTP connections).
Who says that it's an attack. > When there are a lot of SMTP connection requests arriving at the box, > Postfix does not reject them, Why should Postfix reject them? > instead it put these requests on hold. Show some logs for that. > But to the firewall, it seems these connections are being set up, > therefore they occupy some resources, when there are too many of these > requests, the firewall freezes. ISA is not a good firewall. Why do you expect Postfix to solve the firewall's problems? > I am looking for ways to get Postfix reject SMTP connections explicitly > when Maxproc is reached, Postfix does that > and send a server busy message along with the rejection message. That's not possible, since that implies accepting the connection. -- Ralf Hildebrandt ([EMAIL PROTECTED]) [EMAIL PROTECTED] Postfix - Einrichtung, Betrieb und Wartung Tel. +49 (0)30-450 570-155 http://www.arschkrebs.de I'm looking for a job It is generally inadvisable to eject directly over the area you just bombed. --U.S. Air Force Manual