Hi,

Ich benötige mal eine kurze Expertenmeinung, bevor ich das als Bug
poste. Ich betreibe einen vServer (Serv**4y**) auf dem postfix läuft.
Heute hatte ich Probleme. Zwar wurde das Webinterface
(squirrelmail/Apache) zum Mail-Server geladen; nach der
Authentifizierung lief ich aber scheinbar in einen Timeout. Ich habe
eben die Logs geprüft. Es sieht so aus, dass ein DoS produziert wurde.
Ich kann leider nicht ganz nachvollziehen, welcher Platz ausgegangen
ist, RAM oder HD, aber das sollte so nicht passieren. Dahinter steht das
Projekt hier: http://dnssectest.informatik.fh-muenchen.de/

Vielleicht könnt ihr mir noch ein Feedback geben?

VG Daniel


/var/log/mail.err:(auszugsweise):
Mar 30 06:09:33 mail postfix/smtpd[7580]: fatal: inet_addr_local[getifaddrs]: 
getifaddrs: Permission denied
Mar 30 06:10:34 mail postfix/smtpd[7584]: fatal: inet_addr_local[getifaddrs]: 
getifaddrs: Permission denied
Mar 30 06:11:35 mail postfix/smtpd[7586]: fatal: inet_addr_local[getifaddrs]: 
getifaddrs: Permission denied
Mar 30 06:12:36 mail postfix/smtpd[7587]: fatal: inet_addr_local[getifaddrs]: 
getifaddrs: Permission denied
Mar 30 06:13:34 mail postfix/smtpd[7588]: fatal: no SASL authentication 
mechanisms
Mar 30 06:15:36 mail postfix/smtpd[7593]: fatal: inet_addr_local[getifaddrs]: 
getifaddrs: Permission denied
Mar 30 06:15:39 mail postfix/smtpd[7594]: fatal: inet_addr_local[getifaddrs]: 
getifaddrs: Permission denied
Mar 30 06:16:37 mail postfix/smtpd[7595]: fatal: inet_addr_local[getifaddrs]: 
getifaddrs: Permission denied
Mar 30 06:16:40 mail postfix/smtpd[7596]: fatal: inet_addr_local[getifaddrs]: 
getifaddrs: Permission denied
[..]
Mar 30 08:50:12 mail postfix/smtpd[8089]: fatal: inet_addr_local[getifaddrs]: 
getifaddrs: Permission denied
Mar 30 08:50:12 mail postfix/smtpd[8088]: fatal: inet_addr_local[getifaddrs]: 
getifaddrs: Permission denied
Mar 30 08:51:00 mail postfix/pickup[8090]: fatal: inet_addr_local[getifaddrs]: 
getifaddrs: Permission denied
Mar 30 08:51:13 mail postfix/smtpd[8091]: fatal: inet_addr_local[getifaddrs]: 
getifaddrs: Permission denied
Mar 30 08:51:13 mail postfix/smtpd[8092]: fatal: inet_addr_local[getifaddrs]: 
getifaddrs: Permission denied
Mar 30 08:52:01 mail postfix/pickup[8093]: fatal: inet_addr_local[getifaddrs]: 
getifaddrs: Permission denied
Mar 30 08:52:14 mail postfix/smtpd[8095]: fatal: inet_addr_local[getifaddrs]: 
getifaddrs: Permission denied
Mar 30 08:52:14 mail postfix/smtpd[8094]: fatal: inet_addr_local[getifaddrs]: 
getifaddrs: Permission denied
[..]

und so ging das scheinbar über Stunden. Ein Blick ins syslog zeigt
gleichzeitig (auszugsweise):

Mar 30 06:09:32 mail postfix/smtpd[7564]: connect from 
dnssectest.informatik.fh-muenchen.de[141.39.242.16]
Mar 30 06:09:32 mail postfix/smtpd[7565]: connect from 
dnssectest.informatik.fh-muenchen.de[141.39.242.16]
Mar 30 06:09:32 mail postfix/smtpd[7566]: connect from 
dnssectest.informatik.fh-muenchen.de[141.39.242.16]
Mar 30 06:09:32 mail postfix/smtpd[7567]: connect from 
dnssectest.informatik.fh-muenchen.de[141.39.242.16]
Mar 30 06:09:32 mail postfix/smtpd[7568]: connect from 
dnssectest.informatik.fh-muenchen.de[141.39.242.16]
Mar 30 06:09:32 mail postfix/smtpd[7569]: connect from 
dnssectest.informatik.fh-muenchen.de[141.39.242.16]
Mar 30 06:09:32 mail postfix/smtpd[7570]: connect from 
dnssectest.informatik.fh-muenchen.de[141.39.242.16]
Mar 30 06:09:32 mail postfix/smtpd[7571]: connect from 
dnssectest.informatik.fh-muenchen.de[141.39.242.16]
Mar 30 06:09:32 mail postfix/smtpd[7553]: SSL_accept error from 
dnssectest.informatik.fh-muenchen.de[141.39.242.16]: lost connection
Mar 30 06:09:32 mail postfix/smtpd[7553]: lost connection after STARTTLS from 
dnssectest.informatik.fh-muenchen.de[141.39.242.16]
Mar 30 06:09:32 mail postfix/smtpd[7553]: disconnect from 
dnssectest.informatik.fh-muenchen.de[141.39.242.16]
Mar 30 06:09:32 mail postfix/smtpd[7572]: connect from 
dnssectest.informatik.fh-muenchen.de[141.39.242.16]
Mar 30 06:09:32 mail postfix/smtpd[7553]: connect from 
dnssectest.informatik.fh-muenchen.de[141.39.242.16]
Mar 30 06:09:32 mail postfix/smtpd[7557]: lost connection after NOOP from 
dnssectest.informatik.fh-muenchen.de[141.39.242.16]
Mar 30 06:09:32 mail postfix/smtpd[7557]: disconnect from 
dnssectest.informatik.fh-muenchen.de[141.39.242.16]
Mar 30 06:09:32 mail postfix/smtpd[7557]: connect from 
dnssectest.informatik.fh-muenchen.de[141.39.242.16]
Mar 30 06:09:32 mail postfix/smtpd[7573]: connect from 
dnssectest.informatik.fh-muenchen.de[141.39.242.16]
Mar 30 06:09:32 mail postfix/smtpd[7568]: SSL_accept error from 
dnssectest.informatik.fh-muenchen.de[141.39.242.16]: lost connection
Mar 30 06:09:32 mail postfix/smtpd[7568]: lost connection after STARTTLS from 
dnssectest.informatik.fh-muenchen.de[141.39.242.16]
Mar 30 06:09:32 mail postfix/smtpd[7568]: disconnect from 
dnssectest.informatik.fh-muenchen.de[141.39.242.16]
Mar 30 06:09:32 mail postfix/smtpd[7568]: connect from 
dnssectest.informatik.fh-muenchen.de[141.39.242.16]
Mar 30 06:09:32 mail postfix/smtpd[7550]: lost connection after NOOP from 
dnssectest.informatik.fh-muenchen.de[141.39.242.16]
[..]
Mar 30 11:03:26 mail postfix/master[1867]: warning: process 
/usr/lib/postfix/smtpd pid 8594 exit status 1
Mar 30 11:03:26 mail postfix/master[1867]: warning: /usr/lib/postfix/smtpd: bad 
command startup -- throttling
Mar 30 11:03:26 mail postfix/master[1867]: warning: process 
/usr/lib/postfix/smtpd pid 8595 exit status 1
Mar 30 11:03:26 mail postfix/master[1867]: warning: /usr/lib/postfix/smtpd: bad 
command startup -- throttling
Mar 30 11:04:15 mail postfix/pickup[8596]: fatal: inet_addr_local[getifaddrs]: 
getifaddrs: Permission denied
Mar 30 11:04:16 mail postfix/master[1867]: warning: process 
/usr/lib/postfix/pickup pid 8596 exit status 1
Mar 30 11:04:16 mail postfix/master[1867]: warning: /usr/lib/postfix/pickup: 
bad command startup -- throttling
Mar 30 11:04:26 mail postfix/smtpd[8598]: fatal: inet_addr_local[getifaddrs]: 
getifaddrs: Permission denied
Mar 30 11:04:26 mail postfix/smtpd[8597]: fatal: inet_addr_local[getifaddrs]: 
getifaddrs: Permission denied
Mar 30 11:04:27 mail postfix/master[1867]: warning: process 
/usr/lib/postfix/smtpd pid 8597 exit status 1
Mar 30 11:04:27 mail postfix/master[1867]: warning: /usr/lib/postfix/smtpd: bad 
command startup -- throttling
Mar 30 11:04:27 mail postfix/master[1867]: warning: process 
/usr/lib/postfix/smtpd pid 8598 exit status 1
Mar 30 11:04:27 mail postfix/master[1867]: warning: /usr/lib/postfix/smtpd: bad 
command startup -- throttling
[..]
Mar 30 11:09:35 mail postfix/smtpd[7551]: fatal: watchdog timeout
Mar 30 11:09:35 mail postfix/master[1867]: warning: process 
/usr/lib/postfix/smtpd pid 7565 exit status 1
Mar 30 11:09:35 mail postfix/master[1867]: warning: process 
/usr/lib/postfix/smtpd pid 7567 exit status 1
Mar 30 11:09:35 mail postfix/master[1867]: warning: process 
/usr/lib/postfix/smtpd pid 7571 exit status 1
Mar 30 11:09:35 mail postfix/master[1867]: warning: process 
/usr/lib/postfix/smtpd pid 7553 exit status 1
Mar 30 11:09:36 mail postfix/master[1867]: warning: process 
/usr/lib/postfix/smtpd pid 7554 exit status 1
Mar 30 11:09:36 mail postfix/smtpd[7532]: fatal: watchdog timeout
Mar 30 11:09:36 mail postfix/master[1867]: warning: process 
/usr/lib/postfix/smtpd pid 7556 exit status 1
Mar 30 11:09:36 mail postfix/master[1867]: warning: process 
/usr/lib/postfix/smtpd pid 7551 exit status 1
Mar 30 11:09:37 mail postfix/master[1867]: warning: process 
/usr/lib/postfix/smtpd pid 7532 exit status 1
Mar 30 11:10:32 mail postfix/smtpd[8641]: connect from unknown[unknown]
Mar 30 11:10:32 mail postfix/smtpd[8641]: lost connection after CONNECT from 
unknown[unknown]
Mar 30 11:10:32 mail postfix/smtpd[8641]: disconnect from unknown[unknown]
Mar 30 11:10:32 mail postfix/smtpd[8641]: connect from unknown[unknown]
Mar 30 11:10:32 mail postfix/smtpd[8641]: lost connection after CONNECT from 
unknown[unknown]
Mar 30 11:10:32 mail postfix/smtpd[8641]: disconnect from unknown[unknown]
Mar 30 11:10:32 mail postfix/smtpd[8641]: connect from unknown[unknown]
Mar 30 11:10:32 mail postfix/smtpd[8641]: lost connection after CONNECT from 
unknown[unknown]
Mar 30 11:10:32 mail postfix/smtpd[8641]: disconnect from unknown[unknown]



_______________________________________________
Lug-dd maillist  -  [email protected]
https://ssl.schlittermann.de/mailman/listinfo/lug-dd

Antwort per Email an