ps ax shows this:
24195 ? Rs 306:26 /usr/bin/qpsmtpd [208.250.48.181 :
post.taipan2.net : 15:21:08 2007-02-26]
26546 ? Rs 290:14 /usr/bin/qpsmtpd [208.250.48.181 :
post.taipan2.net : 15:51:17 2007-02-26]
27702 ? Rs 288:06 /usr/bin/qpsmtpd [208.250.48.181 :
post.taipan2.net : 15:56:42 2007-02-26]
28579 ? Rs 283:44 /usr/bin/qpsmtpd [208.250.48.181 :
post.taipan2.net : 16:06:23 2007-02-26]
31951 ? Rs 285:04 /usr/bin/qpsmtpd [208.250.48.181 :
post.taipan2.net : 16:36:30 2007-02-26]
3686 ? Rs 278:43 /usr/bin/qpsmtpd [208.250.48.181 :
post.taipan2.net : 17:06:46 2007-02-26]
7617 ? Rs 278:09 /usr/bin/qpsmtpd [208.250.48.181 :
post.taipan2.net : 17:36:56 2007-02-26]
11543 ? Rs 274:23 /usr/bin/qpsmtpd [208.250.48.181 :
post.taipan2.net : 18:07:06 2007-02-26]
14132 ? Rs 271:53 /usr/bin/qpsmtpd [208.250.48.181 :
post.taipan2.net : 18:37:18 2007-02-26]
17874 ? Rs 271:22 /usr/bin/qpsmtpd [208.250.48.181 :
post.taipan2.net : 19:07:28 2007-02-26]
1744 ? Rs 68:29 /usr/bin/qpsmtpd [81.223.46.27 :
xpressmail2.emarsys.net : 15:33:37 2007-03-01]
7499 ? Rs 64:48 /usr/bin/qpsmtpd [81.223.46.27 :
xpressmail2.emarsys.net : 16:40:17 2007-03-01]
12281 ? Rs 60:29 /usr/bin/qpsmtpd [81.223.46.27 :
xpressmail2.emarsys.net : 18:53:37 2007-03-01]
30138 ? Rs 54:53 /usr/bin/qpsmtpd [81.223.46.27 :
xpressmail2.emarsys.net : 21:06:54 2007-03-01]
21650 ? Rs 49:14 /usr/bin/qpsmtpd [81.223.46.27 :
xpressmail2.emarsys.net : 23:20:18 2007-03-01]
7772 ? Rs 45:35 /usr/bin/qpsmtpd [81.223.46.27 :
xpressmail2.emarsys.net : 01:33:38 2007-03-02]
18003 ? Rs 40:34 /usr/bin/qpsmtpd [81.223.46.27 :
xpressmail2.emarsys.net : 03:46:55 2007-03-02]
30537 ? Rs 37:08 /usr/bin/qpsmtpd [81.223.46.27 :
xpressmail2.emarsys.net : 06:00:15 2007-03-02]
7934 ? Rs 33:25 /usr/bin/qpsmtpd [81.223.46.27 :
xpressmail2.emarsys.net : 08:13:40 2007-03-02]
19493 ? Rs 29:55 /usr/bin/qpsmtpd [81.223.46.27 :
xpressmail2.emarsys.net : 10:27:00 2007-03-02]
I used to get legitimate mailing list traffic from post.taipan2.net
until last Monday. Since then I haven't received any more connections
from post.taipan2.net.
qpsmtpd-xinetd is as follows:
service smtp
{
flags = REUSE
socket_type = stream
protocol = tcp
wait = no
user = smtpd
groups = yes
server = /usr/sbin/in.qpsmtpd
log_on_failure += USERID
disable = no
rlimit_as = 128M
instances = 40
per_source = 10
cps = 50 10
}
I went back to check my source, namely
http://wiki.qpsmtpd.org/deploy:start
, which points to
http://www.nntp.perl.org/group/perl.qpsmtpd/2007/01/msg6220.html
, but that message is empty...
I can't find in.qpsmtpd and qpsmtpd-xinetd in trunk either -- weren't
they supposed to go into the distribution?
per_source = 10
effectively does limit the number of connections; that's why I haven't
received anything from post.taipan2.net anymore. But what can I do
against the hanging processes? I'll try experimenting with
rlimit_cpu
Is this a misconfiguration of post.taipan2.net? What should I tell its
postmaster?
Hans
P.S. At this point I'm not sure whether xpressmail2.emarsys.net sends
legitimate traffic or not.