This problem, is does generated by CHKUSER, change settings in tcp.smtp Set CHKUSER_RCPTLIMIT="200",CHKUSER_WRONGRCPTLIMIT="3" And Try....
-----Mensaje original----- De: Gabriel Lai Yong Shern [mailto:[EMAIL PROTECTED] Enviado el: Miércoles, 21 de Diciembre de 2005 09:13 p.m. Para: Qmail Toaster List 2 Asunto: [qmailtoaster] Intrusion threshold Hi all, This morning I monitor my smtp current log file, and I found the below messages: @4000000043aa0a8f179617f4 CHKUSER rejected intrusion: from <[EMAIL PROTECTED]::> remote <ylnmr.gov:unknown:60.48.188.125> rcpt <[EMAIL PROTECTED]> : rcpt ignored, session over INTRUSION threshold @4000000043aa0a9704e5a3a4 CHKUSER rejected intrusion: from <[EMAIL PROTECTED]::> remote <ylnmr.gov:unknown:60.48.188.125> rcpt <[EMAIL PROTECTED]> : rcpt ignored, session over INTRUSION threshold @4000000043aa0a9c291090cc tcpserver: status: 8/100 @4000000043aa0a9c2910a454 tcpserver: pid 11825 from 210.187.93.133 @4000000043aa0a9c2910d71c tcpserver: ok 11825 main.etech.net.my:191.167.10.251:25 :210.187.93.133::2560 @4000000043aa0a9f0400ae5c CHKUSER rejected intrusion: from <[EMAIL PROTECTED]::> remote <ylnmr.gov:unknown:60.48.188.125> rcpt <[EMAIL PROTECTED]> : rcpt ignored, session over INTRUSION threshold @4000000043aa0aaa104fc9f4 CHKUSER rejected intrusion: from <[EMAIL PROTECTED]::> remote <ylnmr.gov:unknown:60.48.188.125> rcpt <[EMAIL PROTECTED]> : rcpt ignored, session over INTRUSION threshold @4000000043aa0aae021184a4 tcpserver: end 11809 status 0 @4000000043aa0aae0211982c tcpserver: status: 7/100 @4000000043aa0aba08587b74 CHKUSER rejected intrusion: from <[EMAIL PROTECTED]::> remote <ylnmr.gov:unknown:60.48.188.125> rcpt <[EMAIL PROTECTED]> : rcpt ignored, session over INTRUSION threshold @4000000043aa0ac3014f9c04 CHKUSER rejected intrusion: from <[EMAIL PROTECTED]::> remote <ylnmr.gov:unknown:60.48.188.125> rcpt <[EMAIL PROTECTED]> : rcpt ignored, session over INTRUSION threshold @4000000043aa0acc2a0acb64 CHKUSER rejected intrusion: from <[EMAIL PROTECTED]::> remote <ylnmr.gov:unknown:60.48.188.125> rcpt <[EMAIL PROTECTED]> : rcpt ignored, session over INTRUSION threshold @4000000043aa0ad621e2a114 CHKUSER rejected intrusion: from <[EMAIL PROTECTED]::> remote <ylnmr.gov:unknown:60.48.188.125> rcpt <[EMAIL PROTECTED]> : rcpt ignored, session over INTRUSION threshold @4000000043aa0ae02fb6be9c CHKUSER rejected intrusion: from <[EMAIL PROTECTED]::> remote <ylnmr.gov:unknown:60.48.188.125> rcpt <[EMAIL PROTECTED]> : rcpt ignored, session over INTRUSION threshold @4000000043aa0ae10be883ec CHKUSER accepted rcpt: from <[EMAIL PROTECTED]::> remote <mailgate.mbfcards.com:unknown:210.187.93.133> rcpt <[EMAIL PROTECTED]> : found existing recipient @4000000043aa0aeb15d2d484 CHKUSER rejected intrusion: from <[EMAIL PROTECTED]::> remote <ylnmr.gov:unknown:60.48.188.125> rcpt <[EMAIL PROTECTED]> : rcpt ignored, session over INTRUSION threshold @4000000043aa0af219647724 tcpserver: end 11825 status 0 @4000000043aa0af219648aac tcpserver: status: 6/100 @4000000043aa0af7164b7f24 CHKUSER rejected intrusion: from <[EMAIL PROTECTED]::> remote <ylnmr.gov:unknown:60.48.188.125> rcpt <[EMAIL PROTECTED]> : rcpt ignored, session over INTRUSION threshold @4000000043aa0b0508264014 CHKUSER rejected intrusion: from <[EMAIL PROTECTED]::> remote <ylnmr.gov:unknown:60.48.188.125> rcpt <[EMAIL PROTECTED]> : rcpt ignored, session over INTRUSION threshold @4000000043aa0b111f1b5f0c CHKUSER rejected intrusion: from <[EMAIL PROTECTED]::> remote <ylnmr.gov:unknown:60.48.188.125> rcpt <[EMAIL PROTECTED]> : rcpt ignored, session over INTRUSION threshold @4000000043aa0b1c2fb05dcc tcpserver: end 11801 status 0 @4000000043aa0b1c2fb07154 tcpserver: status: 5/100 Please advice how can I block all this..... Gabriel --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
