Mail flood from 202.46.160.18 (www-wlg.domainz.net.nz)

Just a heads up in case any other ISPs are seeing the same thing.. I've had to block inbound traffic from www-wlg.domainz.net.nz - the load average on our primary MX was at a nice healthy 97 thanks to an extremely large number of connections originating from this mail server. Thankfully, we were dropping it all on the floor because the sender domain doesn't exist (why not?): ruleset=check_mail, arg1=<4Service(a)wlg-iis.domainz.net.nz>, relay=www-wlg.domainz.net.nz [202.46.160.18], reject=501 5.1.8 <4Service(a)wlg-iis.domainz.net.nz>... Domain of sender address 4Service(a)wlg-iis.domainz.net.nz does not exist Domainz, please investigate and explain. I suspect whatever caused this will have left a large amount of mail queued on 202.46.160.18 waiting to be sent on. Regards, - -- Mark Seward [ Network Operations Manager ] Paradise Net Telstra Saturn Limited Phone: 0800 467272 Fax: 0800 367200 Email: <mds(a)tsnz.net> --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

Mark, Thanks for that. I've asked Advantage to investigate, My regards, Patrick -----Original Message----- From: owner-nznog(a)list.waikato.ac.nz [mailto:owner-nznog(a)list.waikato.ac.nz]On Behalf Of Mark Seward Sent: Thursday, 3 August 2000 12:55 p.m. To: 4Service(a)domainz.net.nz Cc: nznog(a)list.waikato.ac.nz Subject: Mail flood from 202.46.160.18 (www-wlg.domainz.net.nz) Just a heads up in case any other ISPs are seeing the same thing.. I've had to block inbound traffic from www-wlg.domainz.net.nz - the load average on our primary MX was at a nice healthy 97 thanks to an extremely large number of connections originating from this mail server. Thankfully, we were dropping it all on the floor because the sender domain doesn't exist (why not?): ruleset=check_mail, arg1=<4Service(a)wlg-iis.domainz.net.nz>, relay=www-wlg.domainz.net.nz [202.46.160.18], reject=501 5.1.8 <4Service(a)wlg-iis.domainz.net.nz>... Domain of sender address 4Service(a)wlg-iis.domainz.net.nz does not exist Domainz, please investigate and explain. I suspect whatever caused this will have left a large amount of mail queued on 202.46.160.18 waiting to be sent on. Regards, - -- Mark Seward [ Network Operations Manager ] Paradise Net Telstra Saturn Limited Phone: 0800 467272 Fax: 0800 367200 Email: <mds(a)tsnz.net> --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

On Thu, Aug 03, 2000 at 12:55:09PM +1200, Mark Seward wrote: I've had to block inbound traffic from www-wlg.domainz.net.nz - the load average on our primary MX was at a nice healthy 97 thanks to an extremely large number of connections originating from this mail server. Looks like you are using sendmail -- it has (very) crude resource limited facilities to deal with this; look for thins such as: O QueueLA=8 O RefuseLA=16 O MaxDaemonChildren=200 O ConnectionRateThrottle=25 in your .cf file. Better still, repent now and kill sendmail with great vengeance. --cw --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

Slightly off topic - but important! A vacancy exists on the ISOCNZ council for an industry representative. It is imperative that this role is filled by a person dedicated to seeing the introduction of a competitive domain name registration system in New Zealand. If you own or operate an ISP that has anything to do with .nz domain names, you *need* to join ISOCNZ as an organisational member. It will only cost NZD$150 per year, and you get to vote for a person to represent us all on council. Whilst council seem keen to push on with a competitive registry model, it will happen much quicker if most NZ ISP's join up. http://www.isocnz.org.nz/membform2.htm Regards Peter Mott Chief Enthusiast 2day.com -/- --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog
participants (4)
-
Chris Wedgwood
-
Mark Seward
-
Patrick O'Brien
-
Peter Mott