Hi Michael, and list, I have a particular 5208R with AV-SPAM 6.3.0-1. We have been experiencing login attacks from China (nothing new there) that eventually render our SMTP server inoperative.
I get an email from Active Monitor telling me the SMTP server is down, and could not be restarted. Have have to ssh into the box, issue a "/usr/sausalito/sbin/avspam_init.pl -restart” command, then everything is right with the world… Until the next attack. My question/suggestion: Isn’t there, or could there be, an addition to the SMTP swatch routine that tries a AV-SPAM init in the process of trying to get the SMTP server running again? Clearing the AV-SPAM database helps for a couple days, at the expense of losing all the learned rules… Not liking that. Any suggestions? Regards, Jeff Folk _______________________________________________ Blueonyx mailing list Blueonyx@mail.blueonyx.it http://mail.blueonyx.it/mailman/listinfo/blueonyx