Hi again!
Sorry for disturbing, it’s not an ASSP problem! Have been going about all logging and there seems to be some botnet trying to send a lot of spam by trying to spoof past ASSP or sending “Relays” and there is a lot of them. And I must have had perfect timing for when it all started. Within minutes after I upgraded the “attack” started. Trying to send from thousands of IP’s in India, Pakistan, Vietnam and so forth… Assp is working hard, I have no way of blocking them all. I guess we have to ride this out. Anyone else experiencing this right now? Any ideeas of how to mitigate? Regards, Pontus Från: Thomas Eckardt [mailto:thomas.ecka...@thockar.com] Skickat: den 22 januari 2019 14:13 Till: ASSP development mailing list <assp-test@lists.sourceforge.net> Ämne: Re: [Assp-test] smtp sessions going nuts All changes between 19007 and 19019 are analyzer related only. Except, the default value for 'DoNoFromSelect','Select Checks for From: and Sender: Header' is changed from 63 to 59 Thomas Von: "Pontus Hellgren" <pontus.hellg...@scandinavianhosting.se <mailto:pontus.hellg...@scandinavianhosting.se> > An: <assp-test@lists.sourceforge.net <mailto:assp-test@lists.sourceforge.net> > Datum: 22.01.2019 13:53 Betreff: [Assp-test] smtp sessions going nuts _____ Hello! This morning I upgraded to asspboxes from ASSP version 2.6.2 *Fortress* build 19007 to ASSP version 2.6.4 *SPAM-Evaporator* build 19019 After upgrading I got a lot of service mail of errors, like this: error: Worker_4 accept to client failed IO::Socket::INET=GLOB(0x7ff2f943e5b0) (timeout: 2 s) : Transport endpoint is not connected full line in log is: Jan-22-19 10:06:08 [Worker_4] Error: Worker_4 accept to client failed IO::Socket::INET=GLOB(0x7ff2f943e5b0) (timeout: 2 s) : Transport endpoint is not connected match in 'NotifyRe' was: >Error:< - for regular expression: >error:< Why? I have no idea, it should indicate that it is having problem connecting to the mailserver to deliver, but I can find no problem on that end(testing from elsewhere or smtp connections on that end) Looking at my cactigraphs told me that smtp sessions flew from nice and easy average 2 to 46, maybe not so strange if it keeps dropping sessions to the mailserver, maybe even before establishing one. I reverted back to 19007 on one to see if the drops stopped. It did, a little, but not back to “Normal”. Any major change to transport session back to mailserver/s that could be the problem? Or does my upgrade happen to be done in the middle/start of a strange spam-attack? Regards, Pontus Virusfritt. <https://www.avast.com/sig-email?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=emailclient> www.avast.com _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net <mailto:Assp-test@lists.sourceforge.net> <https://lists.sourceforge.net/lists/listinfo/assp-test> https://lists.sourceforge.net/lists/listinfo/assp-test DISCLAIMER: ******************************************************* This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the individual to whom it is addressed. This email was multiple times scanned for viruses. There should be no known virus in this email! ******************************************************* --- Detta e-postmeddelande har sökts igenom efter virus med antivirusprogram från Avast. https://www.avast.com/antivirus
_______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
