* Jie Wang <[EMAIL PROTECTED]>:
> Hello, everyone,
> 
> I have a box running 2.2.3 and encounter the following problem.
> 
> The box is behind a firewall (ISA), and is under attack frequently ( a
> lots of SMTP connections).

Who says that it's an attack.

> When there are a lot of SMTP connection requests arriving at the box,
> Postfix does not reject them,

Why should Postfix reject them?

> instead it put these requests on hold.

Show some logs for that.

> But to the firewall, it seems these connections are being set up,
> therefore they occupy some resources, when there are too many of these
> requests, the firewall freezes.

ISA is not a good firewall. Why do you expect Postfix to solve the
firewall's problems?
 
> I am looking for ways to get Postfix reject SMTP connections explicitly
> when Maxproc is reached,

Postfix does that

> and send a server busy message along with the rejection message.

That's not possible, since that implies accepting the connection.

-- 
Ralf Hildebrandt ([EMAIL PROTECTED])          [EMAIL PROTECTED]
Postfix - Einrichtung, Betrieb und Wartung       Tel. +49 (0)30-450 570-155
http://www.arschkrebs.de                              I'm looking for a job
It is generally inadvisable to eject directly over the area you just
bombed.                                      --U.S. Air Force Manual

Reply via email to