<resend> Hello,
last night I was hit by a flood of 6-10 spams per second. Some minutes before I had read a warning from the FBI and then read a message of Marc Pekel on <spamassassin> and when I answered my courier was very slow. When I checked the server, I had a "Load Average" of more then 49 and up to 120 instances of "couriertcpd" runing... Also my server rejected nearly 99% of the spam on SMTP level without intervention from me. It seems a known botnet to me. Arround 30% where rejects du to "unknown user" So, now I like to know, when courier exactly start a new "couriertcpd" instance? I try to attach a small screenshoot of "top" from last night... Grmpf. I hope, myserver is working now: <http://devel.debian.tamay-dogan.net/foo/20100114034419_cuted.jpg> Thanks, Greetings and nice Day/Evening Michelle Konzack Systemadministrator Electronic Engineer Tamay Dogan Network Debian GNU/Linux Consultant -- Linux-User #280138 with the Linux Counter, http://counter.li.org/ ##################### Debian GNU/Linux Consultant ##################### <http://www.tamay-dogan.net/> Michelle Konzack <http://www.can4linux.org/> Apt. 917 <http://www.flexray4linux.org/> 50, rue de Soultz Jabber [email protected] 67100 Strabourg/France IRC #Debian (irc.icq.com) Tel. DE: +49 177 9351947 ICQ #328449886 Tel. FR: +33 6 61925193
signature.pgp
Description: Digital signature
------------------------------------------------------------------------------ Throughout its 18-year history, RSA Conference consistently attracts the world's best and brightest in the field, creating opportunities for Conference attendees to learn about information security's most important issues through interactions with peers, luminaries and emerging and established companies. http://p.sf.net/sfu/rsaconf-dev2dev
_______________________________________________ courier-users mailing list [email protected] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
