On 31 Aug 2007, at 15:59, Marc Perkel wrote: > Interesting. I'm wondering if that is happening to me. The number > of open connection to my main serve has increased by almost 10 > times normal. I have the capacity to handle it and the load levels > haven't increased. So maybe the same thing is happening to me as > happening to you?
It's possible. Certainly one big difference with this attack is that CPU load wasn't hugely affected. I've got the connection limit set at a point where normally the servers are under pretty heavy load by the time it's reached and have probably dropped back to queue_only. This time, as most of the connections were simply hanging until they timed out, the load only went up slightly - meaning it did take rather longer to set off the alarm bells. mrj -- Mark Rigby-Jones, System Operations Manager CI-Net, Network House, Langford Locks, Kidlington, OX5 1GA CI-Net is the trading name for Community Internet plc A company registered in England and Wales number 3155758 t: 01865 856009 m: 07747 862201 e: [EMAIL PROTECTED] w: www.ci-net.com -- ## List details at http://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
