hi i'm running courier as smtp-server, there were no problems for the last month, but since yesterday it needs some minutes before accepting mails. i've done a tcpdump on the server while sending mail from a remote host, and there is the SYN-SYN-ACK from my host, all fine, then the smtp-server tries to SYN with the auth-port of my host (why? i'm using smtp without authentification - where can I switch this auth.SYN off?). Then there is a THREE-minute pause, and then the client starts to send the Maildata. Any idea where the problem is? (the server is only running courier, nothing else, uptime says low usage, ps and netstat shows nothing useless running, etc)
as i said, this is since yesterday, no hackers, no other strange things... i've also rebooted the machine twice without any changes. any ideas? greetz markus smtp:~# tcpdump not port 22 | grep 10.0.4.4 tcpdump: listening on eth0 10:41:46.752435 10.0.4.4.2764 > 10.2.4.130.smtp: S 2733484419:2733484419(0) win 16384 <mss 1460,nop,nop,sackOK> (DF) 10:41:46.752918 10.2.4.130.smtp > 10.0.4.4.2764: S 448455173:448455173(0) ack 2733484420 win 5840 <mss 1460,nop,nop,sackOK> (DF) 10:41:46.753430 10.0.4.4.2764 > 10.2.4.130.smtp: . ack 1 win 17520 (DF) 10:41:46.870735 10.2.4.130.1061 > 10.0.4.4.auth: S 451096627:451096627(0) win 5840 <mss 1460,sackOK,timestamp 495414 0,nop,wscale 0> (DF) 10:41:46.872356 10.0.4.4.auth > 10.2.4.130.1061: R 0:0(0) ack 451096628 win 0 10:44:54.101613 10.2.4.130.smtp > 10.0.4.4.2764: P 1:17(16) ack 1 win 5840 (DF) 10:44:54.102532 10.0.4.4.2764 > 10.2.4.130.smtp: P 1:17(16) ack 17 win 17504 (DF) 10:44:54.102861 10.2.4.130.smtp > 10.0.4.4.2764: . ack 17 win 5840 (DF) 10:44:54.107704 10.2.4.130.smtp > 10.0.4.4.2764: P 17:141(124) ack 17 win 5840 (DF) 10:44:54.110450 10.0.4.4.2764 > 10.2.4.130.smtp: P 17:56(39) ack 141 win 17380 (DF) 10:44:54.143139 10.2.4.130.smtp > 10.0.4.4.2764: . ack 56 win 5840 (DF) 10:44:54.154541 10.2.4.130.smtp > 10.0.4.4.2764: P 141:150(9) ack 56 win 5840 (DF) 10:44:54.155399 10.0.4.4.2764 > 10.2.4.130.smtp: P 56:93(37) ack 150 win 17371 (DF) 10:44:54.155663 10.2.4.130.smtp > 10.0.4.4.2764: . ack 93 win 5840 (DF) 10:44:54.187308 10.2.4.130.smtp > 10.0.4.4.2764: P 150:159(9) ack 93 win 5840 (DF) 10:44:54.188166 10.0.4.4.2764 > 10.2.4.130.smtp: P 93:130(37) ack 159 win 17362 (DF) 10:44:54.192764 10.2.4.130.smtp > 10.0.4.4.2764: P 159:168(9) ack 130 win 5840 (DF) 10:44:54.193512 10.0.4.4.2764 > 10.2.4.130.smtp: P 130:136(6) ack 168 win 17353 (DF) 10:44:54.194164 10.2.4.130.smtp > 10.0.4.4.2764: P 168:177(9) ack 136 win 5840 (DF) 10:44:54.196873 10.0.4.4.2764 > 10.2.4.130.smtp: P 136:1089(953) ack 177 win 17344 (DF) 10:44:54.233017 10.2.4.130.smtp > 10.0.4.4.2764: . ack 1089 win 8577 (DF) 10:44:54.233520 10.0.4.4.2764 > 10.2.4.130.smtp: P 1089:1094(5) ack 177 win 17344 (DF) 10:44:54.233925 10.2.4.130.smtp > 10.0.4.4.2764: . ack 1094 win 8577 (DF) 10:44:54.350788 10.2.4.130.smtp > 10.0.4.4.2764: P 177:204(27) ack 1094 win 8577 (DF) 10:44:54.351949 10.0.4.4.2764 > 10.2.4.130.smtp: P 1094:1100(6) ack 204 win 17317 (DF) 10:44:54.383436 10.2.4.130.smtp > 10.0.4.4.2764: . ack 1100 win 8577 (DF) 10:44:54.386493 10.2.4.130.smtp > 10.0.4.4.2764: P 204:214(10) ack 1100 win 8577 (DF) 10:44:54.387224 10.0.4.4.2764 > 10.2.4.130.smtp: F 1100:1100(0) ack 214 win 17307 (DF) 10:44:54.388677 10.2.4.130.smtp > 10.0.4.4.2764: F 214:214(0) ack 1101 win 8577 (DF) 10:44:54.389260 10.0.4.4.2764 > 10.2.4.130.smtp: . ack 215 win 17307 (DF) _______________________________________________ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
