> This strongly suggests that you have is a 10 second time limit > on the life time of NAT/VPS/whatever state. > > Wietse
Makes complete sense. I will bounce it off the ipvsadm list. They don't tend to respond much as of recent. BTW, I did notice, while analyzing some of the logs, that a good percentage of the connections were unknown. I might be able to write off a number of these as being spammers with bad implementations for disconnect. So I might be chasing a partial ghost. May 13 04:08:33 host01 postfix/smtpd[10912]: lost connection after DATA from unknown[82.178.110.201] May 13 04:08:34 host01 postfix/smtpd[10409]: lost connection after RCPT from unknown[109.96.25.206] May 13 04:09:23 host01 postfix/smtpd[10301]: lost connection after RCPT from unknown[190.107.112.194] [root tmp]# grep -c "lost connection after RCPT from" maillog 1646 [root tmp]# grep -c "lost connection after RCPT from unknown" maillog 1153 [root tmp]# grep -c "lost connection after DATA from" maillog 689 [root tmp]# grep -c "lost connection after DATA from unknown" maillog 465 Anyway, thanks everyone for providing me some directions on where to look. I think the advanced TCP and the timeout and the ipvsadm might be the biggest issue. Gary-
