Hi All 

I have noticed about 3 times today my exim server has used a lot on DNS,
about 2GB a time.  Below are the logs from my bandwidth monitoring

x.x.x.x                 b.dns.br                2135.61 MB
x.x.x.x                 200.160.0.10            2135.47 MB
x.x.x.x                 jim1.us.archive.org     2135.32 MB
x.x.x.x                 ns20.ja.net             223        MB
x.x.x.x                 ns8.spamhaus.org        199.27    MB

I have checked the ip addresses and it has to do with the dns
blacklisting in exim.  Any ideas why it would use so much bandwidth.

I looked more into the logs for 200.160.0.10 on our Cisco ASA and got
the following

Nov 11 15:16:57 %ASA-6-302015: Built outbound UDP connection 17443293
for outside:200.160.0.10/53 (200.160.0.10/53) to hsn:x.x.x.x/55074
(x.x.x.x/55074)
Nov 11 15:16:57 %ASA-6-302015: Built outbound UDP connection 17443293
for outside:200.160.0.10/53 (200.160.0.10/53) to hsn:x.x.x.x /55074
(x.x.x.x /55074)
Nov 11 15:16:57 %ASA-6-302015: Built outbound UDP connection 17443293
for outside:200.160.0.10/53 (200.160.0.10/53) to hsn:x.x.x.x /55074
(x.x.x.x /55074)
Nov 11 15:19:01 %ASA-6-302016: Teardown UDP connection 17443293 for
outside:200.160.0.10/53 to hsn:x.x.x.x /55074 duration 0:02:03 bytes 176
Nov 11 15:19:01 %ASA-6-302016: Teardown UDP connection 17443293 for
outside:200.160.0.10/53 to hsn:x.x.x.x /55074 duration 0:02:03 bytes 176
Nov 11 15:19:01 %ASA-6-302016: Teardown UDP connection 17443293 for
outside:200.160.0.10/53 to hsn:x.x.x.x /55074 duration 0:02:03 bytes 176

Nov 11 16:05:33 %ASA-6-302015: Built outbound UDP connection 17614488
for outside:200.160.0.10/53 (200.160.0.10/53) to hsn:x.x.x.x /55074
(x.x.x.x /55074)
Nov 11 16:05:33 %ASA-6-302015: Built outbound UDP connection 17614488
for outside:200.160.0.10/53 (200.160.0.10/53) to hsn:x.x.x.x /55074
(x.x.x.x /55074)
Nov 11 16:05:33 %ASA-6-302015: Built outbound UDP connection 17614488
for outside:200.160.0.10/53 (200.160.0.10/53) to hsn:x.x.x.x /55074
(x.x.x.x /55074)
Nov 11 16:07:37 %ASA-6-302016: Teardown UDP connection 17614488 for
outside:200.160.0.10/53 to hsn:x.x.x.x /55074 duration 0:02:03 bytes
2239204366
Nov 11 16:07:37 %ASA-6-302016: Teardown UDP connection 17614488 for
outside:200.160.0.10/53 to hsn:x.x.x.x /55074 duration 0:02:03 bytes
2239204366
Nov 11 16:07:37 %ASA-6-302016: Teardown UDP connection 17614488 for
outside:200.160.0.10/53 to hsn:x.x.x.x /55074 duration 0:02:03 bytes
2239204366

As you can see, it downloaded about 1GB at a time :-( 

Thanks for help in advance
-- 
## List details at http://lists.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Reply via email to