Re: [qmailtoaster] Re: Fail2ban and vpopmail

2011-03-02 Thread Cecil Yother, Jr.
The reason I ask is I have successfully been running mine that way for some time now. I also run a webserver on the same system. Fingers crossed, now that I said that. On 03/02/2011 01:35 PM, Eric Shubert wrote: > Security and managability. > > In addition, QMT is a heavy DNS user, so it's best

[qmailtoaster] Re: Fail2ban and vpopmail

2011-03-02 Thread Eric Shubert
Security and managability. In addition, QMT is a heavy DNS user, so it's best to run a caching resolver on the QMT host. It's also a good idea make your authoritative DNS server (if you run one yourself) separate from your resolver. Hence, if you have a caching resolver on your QMT, your autho

Re: [qmailtoaster] Re: Fail2ban and vpopmail

2011-03-02 Thread Cecil Yother, Jr.
I am curious why you say it's not a good idea to run a QMT server and a NS on the same machine? CJ On 03/02/2011 12:40 PM, Eric Shubert wrote: > On 03/02/2011 01:21 PM, Sergio M wrote: >> I can say that with 64 concurrencyincoming and 16 spamd childs (and a >> magic reboot, just in case) >> its

[qmailtoaster] Re: Fail2ban and vpopmail

2011-03-02 Thread Eric Shubert
On 03/02/2011 01:21 PM, Sergio M wrote: I can say that with 64 concurrencyincoming and 16 spamd childs (and a magic reboot, just in case) its now flowing smoothly and the sessions are under 40/64 most of the time. (for now) # top top - 17:19:24 up 43 min, 1 user, load average: 0.55, 0.73, 0.95 Ta

[qmailtoaster] Re: Fail2ban and vpopmail

2011-03-02 Thread Eric Shubert
On 03/02/2011 01:21 PM, Sergio M wrote: I can say that with 64 concurrencyincoming and 16 spamd childs (and a magic reboot, just in case) its now flowing smoothly and the sessions are under 40/64 most of the time. (for now) # top top - 17:19:24 up 43 min, 1 user, load average: 0.55, 0.73, 0.95 Ta

Re: [qmailtoaster] Re: Fail2ban and vpopmail

2011-03-02 Thread Sergio M
I can say that with 64 concurrencyincoming and 16 spamd childs (and a magic reboot, just in case) its now flowing smoothly and the sessions are under 40/64 most of the time. (for now) # top top - 17:19:24 up 43 min, 1 user, load average: 0.55, 0.73, 0.95 Tasks: 269 total, 1 running, 268 slee

[qmailtoaster] Re: Fail2ban and vpopmail

2011-03-02 Thread Eric Shubert
On 03/02/2011 12:55 PM, Sergio M wrote: Eric Shubert escribió: On 03/02/2011 12:32 PM, Sergio M wrote: Eric Shubert escribió: On 03/02/2011 12:04 PM, Sergio M wrote: #!/bin/sh exec /usr/bin/spamd -x -m 8 -u vpopmail -s stderr 2>&1 That's a good start. What are your load number looking li

Re: [qmailtoaster] Re: Fail2ban and vpopmail

2011-03-02 Thread Sergio M
Eric Shubert escribió: On 03/02/2011 12:32 PM, Sergio M wrote: Eric Shubert escribió: On 03/02/2011 12:04 PM, Sergio M wrote: #!/bin/sh exec /usr/bin/spamd -x -m 8 -u vpopmail -s stderr 2>&1 That's a good start. What are your load number looking like? Pretty low I expect. I'd open that p

[qmailtoaster] Re: Fail2ban and vpopmail

2011-03-02 Thread Eric Shubert
On 03/02/2011 12:32 PM, Sergio M wrote: Eric Shubert escribió: On 03/02/2011 12:04 PM, Sergio M wrote: #!/bin/sh exec /usr/bin/spamd -x -m 8 -u vpopmail -s stderr 2>&1 That's a good start. What are your load number looking like? Pretty low I expect. I'd open that puppy up. You can handle

Re: [qmailtoaster] Re: Fail2ban and vpopmail

2011-03-02 Thread Sergio M
Eric Shubert escribió: On 03/02/2011 12:04 PM, Sergio M wrote: #!/bin/sh exec /usr/bin/spamd -x -m 8 -u vpopmail -s stderr 2>&1 That's a good start. What are your load number looking like? Pretty low I expect. I'd open that puppy up. You can handle way more than 25 connections. I'd go bac

[qmailtoaster] Re: Fail2ban and vpopmail

2011-03-02 Thread Eric Shubert
On 03/02/2011 12:04 PM, Sergio M wrote: #!/bin/sh exec /usr/bin/spamd -x -m 8 -u vpopmail -s stderr 2>&1 That's a good start. What are your load number looking like? Pretty low I expect. I'd open that puppy up. You can handle way more than 25 connections. I'd go back to the default value o

Re: [qmailtoaster] Re: Fail2ban and vpopmail

2011-03-02 Thread Sergio M
#!/bin/sh exec /usr/bin/spamd -x -m 8 -u vpopmail -s stderr 2>&1 That's a good start. What are your load number looking like? Pretty low I expect. I'd open that puppy up. You can handle way more than 25 connections. I'd go back to the default value of 100 for starters, and double the numbe

[qmailtoaster] Re: Fail2ban and vpopmail

2011-03-02 Thread Eric Shubert
On 03/02/2011 11:16 AM, Sergio M wrote: Eric Shubert escribió: On 03/02/2011 10:22 AM, Sergio M wrote: Eric Shubert escribió: You should see: 03-02 10:09:37 tcpserver: status: 0/25 right after you start qmail. If it doesn't drop to 0 when you start it, then something's wrong. Please check the

[qmailtoaster] Re: Fail2ban and vpopmail

2011-03-02 Thread Eric Shubert
Good guess Finn, but they appear to be coming from a wide variety of addresses. -- -Eric 'shubes' On 03/02/2011 11:15 AM, Finn Buhelt (kirstineslund) wrote: Hi Sergio. Sounds like You're having a script that sends mail ! Do You by any chance have a webserver with e-mail forms that can have be

Re: [qmailtoaster] Re: Fail2ban and vpopmail

2011-03-02 Thread Sergio M
Eric Shubert escribió: On 03/02/2011 10:22 AM, Sergio M wrote: Eric Shubert escribió: You should see: 03-02 10:09:37 tcpserver: status: 0/25 right after you start qmail. If it doesn't drop to 0 when you start it, then something's wrong. Please check the status message which corresponds to the

Re: [qmailtoaster] Re: Fail2ban and vpopmail

2011-03-02 Thread Finn Buhelt (kirstineslund)
Hi Sergio. Sounds like You're having a script that sends mail ! Do You by any chance have a webserver with e-mail forms that can have been compromised ? Regards, Finn On 02-03-2011 18:22, Sergio M wrote: Eric Shubert escribió: You should see: 03-02 10:09:37 tcpserver: status: 0/25 right a

[qmailtoaster] Re: Fail2ban and vpopmail

2011-03-02 Thread Eric Shubert
On 03/02/2011 10:22 AM, Sergio M wrote: Eric Shubert escribió: You should see: 03-02 10:09:37 tcpserver: status: 0/25 right after you start qmail. If it doesn't drop to 0 when you start it, then something's wrong. Please check the status message which corresponds to the start of qmail. If it's

Re: [qmailtoaster] Re: Fail2ban and vpopmail

2011-03-02 Thread Cecil Yother, Jr.
For simple exercise I would run queue repair. On 03/02/2011 09:22 AM, Sergio M wrote: > Eric Shubert escribió: >> >> You should see: >> 03-02 10:09:37 tcpserver: status: 0/25 >> right after you start qmail. If it doesn't drop to 0 when you start >> it, then something's wrong. Please check the stat

Re: [qmailtoaster] Re: Fail2ban and vpopmail

2011-03-02 Thread Sergio M
Eric Shubert escribió: You should see: 03-02 10:09:37 tcpserver: status: 0/25 right after you start qmail. If it doesn't drop to 0 when you start it, then something's wrong. Please check the status message which corresponds to the start of qmail. If it's not 0/25, please post several lines be

[qmailtoaster] Re: Fail2ban and vpopmail

2011-03-02 Thread Eric Shubert
On 03/02/2011 09:44 AM, Sergio M wrote: Eric Shubert escribió: On 03/02/2011 06:31 AM, Sergio M wrote: [from this other thread http://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg30514.html ] As I said, being under SMTP attack I installed fail2ban and created a set of rules like

Re: [qmailtoaster] Re: Fail2ban and vpopmail

2011-03-02 Thread Sergio M
Eric Shubert escribió: On 03/02/2011 06:31 AM, Sergio M wrote: [from this other thread http://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg30514.html ] As I said, being under SMTP attack I installed fail2ban and created a set of rules like: *** jail.conf *** (...) [vpopmail] e

[qmailtoaster] Re: Fail2ban and vpopmail

2011-03-02 Thread Eric Shubert
On 03/02/2011 06:31 AM, Sergio M wrote: [from this other thread http://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg30514.html ] As I said, being under SMTP attack I installed fail2ban and created a set of rules like: *** jail.conf *** (...) [vpopmail] enabled = true port = pop3 f

[qmailtoaster] Re: Fail2ban and vpopmail

2011-03-02 Thread Sergio M
Sergio M escribió: [from this other thread http://www.mail-archive.com/qmailtoaster-list@qmailtoaster.com/msg30514.html ] As I said, being under SMTP attack I installed fail2ban and created a set of rules like: *** jail.conf *** (...) [vpopmail] enabled = true port = pop3 filter = vpopmail