Hi. My SMTP is going kablooie. Nobody is able to send messages until I
reboot the machine. And then after a few minutes it dies again. POP
works ok. Well, dying is not the exact term.
I do a ps ax | grep qmail and I get something like this:
72 ? S 0:00 qmail-lspawn ./Maildir/
71 ? S 0:00 splogger qmail
74 ? S 0:00 qmail-clean
73 ? S 0:00 qmail-rspawn
104 ? S 0:00 qmail-remote texaco.com [EMAIL PROTECTED]
[EMAIL PROTECTED]
158 ? S 0:00 qmail-remote gld.mmtr.or.jp [EMAIL PROTECTED]
chapolim
904 ? S 0:00 qmail-remote gld.mmtr.or.jp [EMAIL PROTECTED]
chapolim
926 ? S 0:00 qmail-remote pop.openlink.com.br
[EMAIL PROTECTED]
1286 ? S 0:00 qmail-remote hotmail.com [EMAIL PROTECTED]
1542 ? S 0:00 qmail-remote hotmail.com [EMAIL PROTECTED]
68 ? S 0:01 qmail-send
1550 p0 S 0:00 grep qmail
Theres no qmail-smtpd because I killed them in panic. :-O
The ones like "qmail-remote hotmail.com [EMAIL PROTECTED]" keep
showing up at an alarming rate. Sometimes there are 10,15 of them, then
the number decreases, then rises again. Could it be a DoS attack? Spam?
What logfiles can I read to trace this?
Thanx,
--
___THE___ One man alone cannot fight the future. USE LINUX!
\ \ / / _______________________________________________
\ V / |Juan Carlos Castro y Castro |
\ / |[EMAIL PROTECTED] |
/ \ |Linuxeiro, alvinegro, X-Phile e Carioca Folgado|
/ ^ \ |Diretor de Informática e Eventos Sobrenaturais |
/ / \ \ |da E-RACE CORPORATION |
~~~ ~~~ -----------------------------------------------
RACER
