On Fri, 25 Jan 2008 21:09:34 +0600
"N.Novozhilov" <[EMAIL PROTECTED]> wrote:
> I just increase idle-timeout-secs=180 , seems it help (as palliative).
... but not at all ....
>
> On Fri, 25 Jan 2008 20:37:52 +0600
> "N.Novozhilov" <[EMAIL PROTECTED]> wrote:
>
> > >From yesterday I discover very strange behavior of spamdyke, all
> > >time
> > before all was good:
> >
> > First running copy stay resident and listen network. Short log:
> >
> > host# strace -p 12787 -e trace=network
> > Process 12787 attached - interrupt to quit
> > accept(3, 0xbfffc050, [16]) = ? ERESTARTSYS (To be
> > restarted)
> > --- SIGCHLD (Child exited) @ 0 (0) ---
> > accept(3, {sa_family=AF_INET, sin_port=htons(4430),
> > sin_addr=inet_addr ("88.229.222.135")}, [16]) = 0 accept(3,
> > {sa_family=AF_INET, sin_port=htons(3953), sin_addr=inet_addr
> > ("83.166.219.102")}, [16]) = 0
> >
> > accept(3, {sa_family=AF_INET, sin_port=htons(2396),
> > sin_addr=inet_addr ("189.0.199.23")}, [16]) = 0 accept(3,
> > {sa_family=AF_INET, sin_port=htons(13776), sin_addr=inet_addr
> > ("122.164.34.160")}, [16]) = 0
> >
> > accept(3, 0xbfffc050, [16]) = ? ERESTARTSYS (To be
> > restarted)
> > --- SIGCHLD (Child exited) @ 0 (0) ---
> >
> > accept(3, 0xbfffc050, [16]) = ? ERESTARTSYS (To be
> > restarted)
> > --- SIGCHLD (Child exited) @ 0 (0) ---
> >
> > accept(3, 0xbfffc050, [16]) = ? ERESTARTSYS (To be
> > restarted)
> > --- SIGCHLD (Child exited) @ 0 (0) ---
> >
> > accept(3, {sa_family=AF_INET, sin_port=htons(58206),
> > sin_addr=inet_addr ("123.248.102.135")}, [16]) = 0 accept(3,
> > 0xbfffc050, [16]) = ? ERESTARTSYS (To be restarted)
> > --- SIGCHLD (Child exited) @ 0 (0) ---
> >
> > accept(3, {sa_family=AF_INET, sin_port=htons(2693),
> > sin_addr=inet_addr ("85.104.38.223")}, [16]) = 0 accept(3,
> > 0xbfffc050, [16]) = ? ERESTARTSYS (To be restarted)
> > --- SIGCHLD (Child exited) @ 0 (0) ---
> >
> > accept(3, {sa_family=AF_INET, sin_port=htons(4269),
> > sin_addr=inet_addr ("83.166.219.102")}, [16]) = 0 accept(3,
> > {sa_family=AF_INET, sin_port=htons(2788), sin_addr=inet_addr
> > ("85.104.38.223")}, [16]) = 0 accept(3, 0xbfffc050,
> > [16]) = ? ERESTARTSYS (To be restarted)
> > --- SIGCHLD (Child exited) @ 0 (0) ---
> >
> > accept(3, 0xbfffc050, [16]) = ? ERESTARTSYS (To be
> > restarted)
> > --- SIGCHLD (Child exited) @ 0 (0) ---
> >
> > accept(3, {sa_family=AF_INET, sin_port=htons(2852),
> > sin_addr=inet_addr ("85.104.38.223")}, [16]) = 0 accept(3,
> > {sa_family=AF_INET, sin_port=htons(4547), sin_addr=inet_addr
> > ("83.166.219.102")}, [16]) = 0 accept(3, 0xbfffc050,
> > [16]) = ? ERESTARTSYS (To be restarted)
> > --- SIGCHLD (Child exited) @ 0 (0) ---
> >
> > accept(3, 0xbfffc050, [16]) = ? ERESTARTSYS (To be
> > restarted)
> > --- SIGCHLD (Child exited) @ 0 (0) ---
> > accept(3, {sa_family=AF_INET, sin_port=htons(2894),
> > sin_addr=inet_addr ("85.104.38.223")}, [16]) = 0 accept(3,
> > {sa_family=AF_INET, sin_port=htons(1268), sin_addr=inet_addr
> > ("200.88.97.100")}, [16]) = 0 accept(3, {sa_family=AF_INET,
> > sin_port=htons(1269), sin_addr=inet_addr ("200.88.97.100")}, [16])
> > = 0
> >
> > and so on...
> >
> > What is it - some bug in configuration of qmail (I didn't change
> > anything in a work spamdyke conf) or new hacker attack?
> >
> > P.S. I'm sorry about previous mail - I didn't wait for full stop of
> > all smtp processes.
> >
> >
> > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> > Regards
> > Nicholas A. Novozhilov, NAN6-RIPE
> >
> > NTR Lab
> > System administrator
> > _______________________________________________
> > spamdyke-users mailing list
> > [email protected]
> > http://www.spamdyke.org/mailman/listinfo/spamdyke-users
>
>
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> Regards
> Nicholas A. Novozhilov, NAN6-RIPE
>
> NTR Lab
> System administrator
> _______________________________________________
> spamdyke-users mailing list
> [email protected]
> http://www.spamdyke.org/mailman/listinfo/spamdyke-users
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Regards
Nicholas A. Novozhilov, NAN6-RIPE
NTR Lab
System administrator
_______________________________________________
spamdyke-users mailing list
[email protected]
http://www.spamdyke.org/mailman/listinfo/spamdyke-users
