On 14 June 2013 17:44, c cc <sub...@gmail.com> wrote: > > Hi, > > For the last few days, I noticed that our postfix server had crawl to a halt > due to some kind of email attack. As you can see below, there were a lot of > smtp connections. I was wondering if there is a way to stop this from > Postfix? Thanks! > > /etc/postfix $netstat -plan | grep ':25' | grep ESTAB > tcp 0 0 xx.xx.xx.xx:25 181.66.192.196:11798 ESTABLISHED > 17329/smtpd > tcp 0 0 xx.xx.xx.xx:25 77.42.140.151:54112 ESTABLISHED - > tcp 0 0 xx.xx.xx.xx:25 109.166.128.3:36208 ESTABLISHED - > tcp 0 0 xx.xx.xx.xx:25 186.46.0.66:16698 ESTABLISHED
Presumably they are connecting more than once? Fail2ban? Simon
