Title: Re: [IMail Forum] Nobody vs Rejects

On the Domino Servers, how many users? Can you manually create the aliases?

 

It would be interesting to see what the log analsis shows of what domain all those stuck in the queue are headed for (on the gatewayed domains.)

 

John Tolmachoff

Engineer/Consultant/Owner

eServices For You

 

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Keith Johnson
Sent:
Thursday, January 06, 2005 7:30 AM
To: [email protected]
Subject: RE: [IMail Forum] Nobody vs Rejects

 

John,

    We have the exchange2aliases where we can, however, we also have Domino Servers that we connect to that do not support LDAP (older versions). 

 

Keith

 


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists)
Sent:
Thursday, January 06, 2005 10:23 AM
To: [email protected]
Subject: RE: [IMail Forum] Nobody vs Rejects

Ding Ding Ding Ding Ding Ding

 

You have gatewayed domains.

 

Gateway to what kind of server.

 

You are most likely seeing dictionary type spam attacks to the gateway domains, in which Imail is indeed accepting all and then having to deal with the non-deliverable when it attempts to send it to the gatewayed server.

 

So yes, it makes perfect sense that the spool is backing up, as your server is being flooded. You need to use exchange2aliases.

 

John Tolmachoff

Engineer/Consultant/Owner

eServices For You

 

-----Original Message-----
From: Keith Johnson [mailto:[EMAIL PROTECTED] On Behalf Of Keith Johnson
Sent:
Thursday, January 06, 2005 5:14 AM
To: [email protected]
Subject: RE: [IMail Forum] Nobody vs Rejects

 

Sanford,

         As always, I appreciate your comments.  I agree with you it doesn't seem right that the queue should grow with a ton of env. rejections.  I thought SMTPD handled the rejections.  The CPU on both seem to be fine, as in, good peaks and valleys, never above 50%.  I was on there at 4am this morning and noticed a backlog had happened around 3am.  Thus over 3000 items in queue, most of which was spam of course.  We use Imail Registry database and no errors are being reported in the log.  We have poured through the log and are in the process of getting per hour numbers during this time frame to see where connections are coming from.  This box hosts both virtuals and gateway clients.  It is just doesn't make sense that Queue Mgr stalls (always shows STARTED as a service, with no event log errors nor errors in the queue).  Could it be that a high level of spam connections could overload queue manager with the understanding that the cpu never goes over 50%?  I am wondering if there is an issue with the actually Imail exe's.  Thanks again for the aid and time.

 

Keith

-----Original Message-----
From: [EMAIL PROTECTED] on behalf of Sanford Whiteman
Sent: Thu
1/6/2005 12:40 AM
To: Keith Johnson
Cc:
Subject: Re: [IMail Forum] Nobody vs Rejects

> Recently  we  instituted  a  policy  to  not  allow  nobody aliases,
> however, now I have noticed that our Queue will grow out of control.

Well, that's backwards.

> What I have noticed is a since the nobody alias is gone, there are a
> large  amount  of  'invalid  user'  rejects  happening.

That's expected, no?

> This  server  produces  between  75K  and 100K messages per day.

"Produces" as in relays? Delivers locally? Both combined?

> Would  it be better to NULL the nobody alias and actually black hole
> the email vs. having the 'invalid users' rejected?

If  a  reasoned comparison shows that going back to 'nobody' stops the
hangs,  then  it  would  be,  strictly  speaking,  "better"  for  your
particular  case.  But there's no way that the technical theory behind
envelope-level  rejection  is inferior to spool-and-delete. There may,
it seems, be something in the implementation and/or your envt which is
causing a cascading issue.

> Just  wondering about the Queue Mgr getting overwhelmed with refusal
> connections could be causing this issue.

QUEUEMGR doesn't handle incoming SMTP connections--that's SMTPD. If QM
is  hanging,  the  problem  is definitely not _directly_ linked to the
envelope  rejections.

Other  questions:

- How's SMTP's and QM's CPU?

- What userbase are you using?

- Are there any errors in the SMTPD logs?

--
Sandy


------------------------------------
Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
e-mail: [EMAIL PROTECTED]

SpamAssassin plugs into Declude!
  http://www.mailmage.com/products/software/freeutils/SPAMC32/download/release/

Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases!
  http://www.mailmage.com/products/software/freeutils/exchange2aliases/download/release/
  http://www.mailmage.com/products/software/freeutils/ldap2aliases/download/release/


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to