On Tue, 6 Apr 2004 18:02:47 -0400, "Woodie Sayles" <[EMAIL PROTECTED]> wrote: > I'm running SMTPRcv on both a W2K server and an NT4SP6 server. At least once > a day, the W2K server gets hit with what looks like a DoS attack, but the NT > server has never had this happen. I restart SMTPRcv and it immediately > stops, which seems to indicate that it might not be a DoS attack, but > something possibly set up wrong. > > Other people have listed similar complaints but I don't remember seeing > anything that would resolve this problem. Not only does it bog down the > server, the Inlog file continues to grow until SMTPRcv is restarted and the > "attack" (or whatever it is) stops. I've had the Inlog file grow to over 1GB > once!
What does the inlog say? is it the same message id repeating or are they all different? When the "attack" happens what does netstat say? klint. +---------------------------------------+-----------------+ : Klint Gore : "Non rhyming : : EMail : [EMAIL PROTECTED] : slang - the : : Snail : A.B.R.I. : possibilities : : Mail University of New England : are useless" : : Armidale NSW 2351 Australia : L.J.J. : : Fax : +61 2 6772 5376 : : +---------------------------------------+-----------------+ This is the discussion list for the IMS Free email server software. To unsubscribe send mailto:[EMAIL PROTECTED] Delivered by Rockliffe MailSite http://www.rockliffe.com/mailsite Rock Solid Software (tm)
