[toaster] rblsmtpd

2004-06-29 Thread Lars E. D. Jensen
Hi
I want to use rblsmtpd, and this is my run script without rblsmtpd. It 
works just fine!

#!/bin/sh
QMAILDUID=`id -u vpopmail`
QMAILDGID=`id -g vpopmail`
HOSTNAME=`mail.domain.com`
MAXCONCURRENCY=`cat /var/qmail/control/concurrencyincoming`
exec softlimit -m 2000 \
   tcpserver -vR -l "$HOSTNAME" -c "$MAXCONCURRENCY" \
   -u "$QMAILDUID" -g "$QMAILDGID" 0 smtp \
   /usr/local/bin/recordio sh -c '/var/qmail/bin/qmail-smtpd \
   /var/vpopmail/bin/vchkpw /usr/bin/true 2>&1'
This is my run script with rblsmtpd and it doesn't work. In fact I can't 
receive any mail at all when using this script.

#!/bin/sh
QMAILDUID=`id -u vpopmail`
QMAILDGID=`id -g vpopmail`
HOSTNAME=`mail.domain.com`
MAXCONCURRENCY=`cat /var/qmail/control/concurrencyincoming`
exec softlimit -m 2000 \
   tcpserver -vR -l "$HOSTNAME" -c "$MAXCONCURRENCY" \
   -u "$QMAILDUID" -g "$QMAILDGID" 0 smtp \
   /usr/local/bin/recordio sh -c \
   /usr/local/bin/rblsmtpd -b \
-a rbl.casevie.com \
-r relays.ordb.org \
-r sbl-xbl.spamhaus.org \
   '/var/qmail/bin/qmail-smtpd \
   /var/vpopmail/bin/vchkpw /usr/bin/true 2>&1'
Of the examples I've seen I can't see any big difference with my version 
and versions of others.

I get this in the log
@400040e11397358d01dc tcpserver: ok 417 :212.10.144.77:25 
backup-mx.stofanet.dk:212.10.30.236::37809
@400040e113973602e1a4 rblsmtpd: usage: rblsmtpd [ -b ] [ -R ] [ -t 
timeout ] [ -r base ] [ -a base ] smtpd [ arg ... ]
@400040e1139736082934 tcpserver: end 417 status 25600

It seems that I'm not using rblsmtpd properly.
Anyone know what's wrong?
Thanks
--
Med venlig hilsen / Best regards
Lars E. D. Jensen
[EMAIL PROTECTED]


[toaster] SMTP-AUTH does not work for me.

2004-06-29 Thread John Doe
Hello,

I installed a new version of netqmail-1.05 with the 'Large Qmail patch' but
SMTP-AUTH isn't working.


I took a new
netqmail-1.05 and only aplied the 'Large qmail patch' without errors.
compiled without errors, installed and started the daemons. There were no
startup errors.

When I try to send mail without authentification it works !?! So this
creates an open relay to me.

I use vpopmail 5.4.5 with MySQL Auth. The smtpd startup script is:

$more /etc/rc.d/rc.qmail
#!/bin/bash
export
PATH="/bin:/usr/bin:/sbin:/usr/sbin:/usr/local/bin:/var/qmail/bin:/var/vpopm
ail/bin"

  [ -f /var/qmail/bin/qmail-send ] || exit 0

  start() {
echo -n "Starting Qmail: "
qmail-start "`cat /var/qmail/dot-qmail`" splogger qmail &

# SMTP-AUTH w/RBL's
 tcpserver -H -l0 -R -c 512 -x /var/vpopmail/etc/tcp.smtp.cdb -u 89
-g 89 0.0.0.0 25 /var/qmail/bin/tcp-env \
tcp-env rblsmtpd -r bl.spamcop.net -r list.dsbl.org -r
rbl-plus.mail-abuse.org -r list.dsbl.org -r sbl.spamhaus.org \
  /var/qmail/bin/qmail-smtpd /var/vpopmail/bin/vchkpw /bin/true &


# SMTP-AUTH w/SSL
tcpserver -n /etc/ssl/certs/smtps.pem -x
/var/vpopmail/etc/tcp.smtp.cdb \
-s -H -l0 -R -u 89 -g 89 0 465 /var/qmail/bin/tcp-env \
tcp-env /var/qmail/bin/qmail-smtpd /var/vpopmail/bin/vchkpw
/bin/true &
  }

  stop() {
echo -n "Shutting down Qmail: "
killall qmail-send
killall tcpserver
rm -f /var/lock/subsys/qmail
  }

  case "$1" in
start)
start
;;
stop)
stop
;;
restart)
stop
start
;;
*)
echo $"Usage: $0 {start|stop|restart}"
exit 1
  esac

In old version this is work great, but in new version this does not work.
I can send email without authentication.

Any body know what is the problem ?

Regards,
John



Re: [toaster] rblsmtpd

2004-06-29 Thread trevor
I can't see why it's not working either.  The only difference I have in 
mine is I don't use the -b and -a args.  Mine is simply:

/usr/local/bin/rblsmtpd -r bl.spamcop.net \
-r sbl.spamhaus.org \
Why not try that.  If that works then add the -b and see if that 
works then the -a.   It looks like it's one of those args but why I 
don't know.

Lars E. D. Jensen wrote:
Hi
I want to use rblsmtpd, and this is my run script without rblsmtpd. It 
works just fine!

#!/bin/sh
QMAILDUID=`id -u vpopmail`
QMAILDGID=`id -g vpopmail`
HOSTNAME=`mail.domain.com`
MAXCONCURRENCY=`cat /var/qmail/control/concurrencyincoming`
exec softlimit -m 2000 \
   tcpserver -vR -l "$HOSTNAME" -c "$MAXCONCURRENCY" \
   -u "$QMAILDUID" -g "$QMAILDGID" 0 smtp \
   /usr/local/bin/recordio sh -c '/var/qmail/bin/qmail-smtpd \
   /var/vpopmail/bin/vchkpw /usr/bin/true 2>&1'
This is my run script with rblsmtpd and it doesn't work. In fact I can't 
receive any mail at all when using this script.

#!/bin/sh
QMAILDUID=`id -u vpopmail`
QMAILDGID=`id -g vpopmail`
HOSTNAME=`mail.domain.com`
MAXCONCURRENCY=`cat /var/qmail/control/concurrencyincoming`
exec softlimit -m 2000 \
   tcpserver -vR -l "$HOSTNAME" -c "$MAXCONCURRENCY" \
   -u "$QMAILDUID" -g "$QMAILDGID" 0 smtp \
   /usr/local/bin/recordio sh -c \
   /usr/local/bin/rblsmtpd -b \
-a rbl.casevie.com \
-r relays.ordb.org \
-r sbl-xbl.spamhaus.org \
   '/var/qmail/bin/qmail-smtpd \
   /var/vpopmail/bin/vchkpw /usr/bin/true 2>&1'
Of the examples I've seen I can't see any big difference with my version 
and versions of others.

I get this in the log
@400040e11397358d01dc tcpserver: ok 417 :212.10.144.77:25 
backup-mx.stofanet.dk:212.10.30.236::37809
@400040e113973602e1a4 rblsmtpd: usage: rblsmtpd [ -b ] [ -R ] [ -t 
timeout ] [ -r base ] [ -a base ] smtpd [ arg ... ]
@400040e1139736082934 tcpserver: end 417 status 25600

It seems that I'm not using rblsmtpd properly.
Anyone know what's wrong?
Thanks


Re: [toaster] rblsmtpd

2004-06-29 Thread trevor
One more thing.  I also don't have the sinle quotes(' ') around here: 
'/var/qmail/bin/qmail-smtpd \
/var/vpopmail/bin/vchkpw /usr/bin/true 2>&1'

But I'm using an older toaster so I don't know if it's that either.

Lars E. D. Jensen wrote:
Hi
I want to use rblsmtpd, and this is my run script without rblsmtpd. It 
works just fine!

#!/bin/sh
QMAILDUID=`id -u vpopmail`
QMAILDGID=`id -g vpopmail`
HOSTNAME=`mail.domain.com`
MAXCONCURRENCY=`cat /var/qmail/control/concurrencyincoming`
exec softlimit -m 2000 \
   tcpserver -vR -l "$HOSTNAME" -c "$MAXCONCURRENCY" \
   -u "$QMAILDUID" -g "$QMAILDGID" 0 smtp \
   /usr/local/bin/recordio sh -c '/var/qmail/bin/qmail-smtpd \
   /var/vpopmail/bin/vchkpw /usr/bin/true 2>&1'
This is my run script with rblsmtpd and it doesn't work. In fact I can't 
receive any mail at all when using this script.

#!/bin/sh
QMAILDUID=`id -u vpopmail`
QMAILDGID=`id -g vpopmail`
HOSTNAME=`mail.domain.com`
MAXCONCURRENCY=`cat /var/qmail/control/concurrencyincoming`
exec softlimit -m 2000 \
   tcpserver -vR -l "$HOSTNAME" -c "$MAXCONCURRENCY" \
   -u "$QMAILDUID" -g "$QMAILDGID" 0 smtp \
   /usr/local/bin/recordio sh -c \
   /usr/local/bin/rblsmtpd -b \
-a rbl.casevie.com \
-r relays.ordb.org \
-r sbl-xbl.spamhaus.org \
   '/var/qmail/bin/qmail-smtpd \
   /var/vpopmail/bin/vchkpw /usr/bin/true 2>&1'
Of the examples I've seen I can't see any big difference with my version 
and versions of others.

I get this in the log
@400040e11397358d01dc tcpserver: ok 417 :212.10.144.77:25 
backup-mx.stofanet.dk:212.10.30.236::37809
@400040e113973602e1a4 rblsmtpd: usage: rblsmtpd [ -b ] [ -R ] [ -t 
timeout ] [ -r base ] [ -a base ] smtpd [ arg ... ]
@400040e1139736082934 tcpserver: end 417 status 25600

It seems that I'm not using rblsmtpd properly.
Anyone know what's wrong?
Thanks


RE: [toaster] rblsmtpd

2004-06-29 Thread Shane Chrisp
Try something like this.

#!/bin/sh
QMAILDUID=`id -u vpopmail`
NOFILESGID=`id -g vpopmail`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`

exec /usr/local/bin/softlimit -m 2 \
/usr/local/bin/tcpserver -v -R -S -l 0 -c 20 -x
/home/vpopmail/etc/tcp.smtp.cdb -u "$QMAILDUID" -g "$NOFILESGID" 0 smtp \
/usr/local/bin/rblsmtpd -b -C -r sbl.spamhaus.org -r list.dsbl.org -r
relays.ordb.org -r rbl.2000cn.com.au -rbl.spamcop.net \
-r combined.njabl.org /usr/local/bin/recordio /usr/local/bin/fixcrio
/var/qmail/bin/qmail-smtpd \
/home/vpopmail/bin/vchkpw /bin/true 2>&1

Shane

>#!/bin/sh
>QMAILDUID=`id -u vpopmail`
>QMAILDGID=`id -g vpopmail`
>HOSTNAME=`mail.domain.com`
>MAXCONCURRENCY=`cat /var/qmail/control/concurrencyincoming`
>exec softlimit -m 2000 \
>tcpserver -vR -l "$HOSTNAME" -c "$MAXCONCURRENCY" \
>-u "$QMAILDUID" -g "$QMAILDGID" 0 smtp \
>/usr/local/bin/recordio sh -c '/var/qmail/bin/qmail-smtpd \
>/var/vpopmail/bin/vchkpw /usr/bin/true 2>&1'
>
>
>This is my run script with rblsmtpd and it doesn't work. In 
>fact I can't 
>receive any mail at all when using this script.
>
>#!/bin/sh
>QMAILDUID=`id -u vpopmail`
>QMAILDGID=`id -g vpopmail`
>HOSTNAME=`mail.domain.com`
>MAXCONCURRENCY=`cat /var/qmail/control/concurrencyincoming`
>exec softlimit -m 2000 \
>tcpserver -vR -l "$HOSTNAME" -c "$MAXCONCURRENCY" \
>-u "$QMAILDUID" -g "$QMAILDGID" 0 smtp \
>/usr/local/bin/recordio sh -c \
>/usr/local/bin/rblsmtpd -b \
> -a rbl.casevie.com \
> -r relays.ordb.org \
> -r sbl-xbl.spamhaus.org \
>'/var/qmail/bin/qmail-smtpd \
>/var/vpopmail/bin/vchkpw /usr/bin/true 2>&1'
>
>Of the examples I've seen I can't see any big difference with 
>my version 
>and versions of others.
>
>I get this in the log
>
>@400040e11397358d01dc tcpserver: ok 417 :212.10.144.77:25 
>backup-mx.stofanet.dk:212.10.30.236::37809
>@400040e113973602e1a4 rblsmtpd: usage: rblsmtpd [ -b ] [ -R ] [ -t 
>timeout ] [ -r base ] [ -a base ] smtpd [ arg ... ]
>@400040e1139736082934 tcpserver: end 417 status 25600
>
>It seems that I'm not using rblsmtpd properly.
>
>Anyone know what's wrong?
>
>Thanks
>
>-- 
>Med venlig hilsen / Best regards
>
>Lars E. D. Jensen
>[EMAIL PROTECTED]
>



[toaster] TLS

2004-06-29 Thread Mario Viana
How do I implement SSL+SMTP-AUTH in netqmail-1.05 + vpopmail 5.4.3?

I've done the make cert and all the control files necessary but I don't know 
how to get the clientca.pem .
When we use make cert what CA are we using? How do I obtain its key? SMTP-AUTH 
(Login, Plain and CRAM-MD5) is working well. I took at Google but I couldn't 
find any help.

Thanks in advance,

Mário Junior
ISP Network Admin



Re: [toaster] rblsmtpd

2004-06-29 Thread Lars E. D. Jensen
Hi
It was the recordio which was wrong in my own run script file.
I simply removed sh -c (shell)...
Thanks for all your run scripts, nice to have when tweaking :)
Med venlig hilsen / Best regards
Lars E. D. Jensen
[EMAIL PROTECTED]
Shane Chrisp wrote:
Try something like this.
#!/bin/sh
QMAILDUID=`id -u vpopmail`
NOFILESGID=`id -g vpopmail`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
...


[toaster] qmail-smtpd-chkusr (renamed qmail-smtpd)

2004-06-29 Thread Lars E. D. Jensen
Hi
Maybe a stupid question, but do I have to rename qmail-smtpd-chkusr in 
order to get the chk-user patch to work?

And how can I see if emails are denied?
--
Med venlig hilsen / Best regards
Lars E. D. Jensen
[EMAIL PROTECTED]


Re: [toaster] qmail-smtpd-chkusr (renamed qmail-smtpd)

2004-06-29 Thread David
On Tue, 2004-06-29 at 19:55, Lars E. D. Jensen wrote:
> Hi
> 
> Maybe a stupid question, but do I have to rename qmail-smtpd-chkusr in 
> order to get the chk-user patch to work?
> 
> And how can I see if emails are denied?

Hi,
renamed not needed. Just apply the right patch (mysql or cdb).

And you will see something like this on your qmail-smtpd log file:

550 sorry, no mailbox here by that name (#5.1.1 - chkusr)

You could also place recordio in the qmail-smtpd run script and log more
information about the smtp conversation.




[toaster] smtp issue

2004-06-29 Thread Darius Wei
I'm using the process gleaned from Bill's Qmail Toaster, with one 
exception -- the new version of vpopmail 5.4.5.

I altered the configuration to put vpopmail in /var/vpopmail, changed 
the vpopmail user's home dir to /var/vpopmail, and even edited the 
conf-vpopmail file that came out of the chkuser patch so that it looks 
for /var/vpopmail instead of /home/vpopmail.

Viewing and receiving email works just fine, but when I try to connect 
to port 25 or use SMTP in any way, I get the following error in my qmail 
SMTP log:

@400040e177f301bf2a9c tcpserver: status: 1/20
@400040e177f301c0c0dc tcpserver: pid 25605 from 210.101.50.44
@400040e177f301c197b4 tcpserver: warning: dropping connection, 
unable to read /home/vpopmail/etc/tcp.smtp.cdb: file does not exist
@400040e177f301c3d204 tcpserver: end 25605 status 28416

Of course, it all goes away with a symlink, but that's not the real way 
to go about solving things, not to mention it'll be a bit of a 
performance hit to query a symbolic link every time there's an SMTP 
connection.

Does anybody have any idea what I'm doing wrong?  Thanks!
darius



RE: [toaster] smtp issue

2004-06-29 Thread Shane Chrisp
>I altered the configuration to put vpopmail in /var/vpopmail, changed 
>the vpopmail user's home dir to /var/vpopmail, and even edited the 
>conf-vpopmail file that came out of the chkuser patch so that it looks 
>for /var/vpopmail instead of /home/vpopmail.
>
>Viewing and receiving email works just fine, but when I try to connect 
>to port 25 or use SMTP in any way, I get the following error 
>in my qmail 
>SMTP log:
>
>@400040e177f301bf2a9c tcpserver: status: 1/20
>@400040e177f301c0c0dc tcpserver: pid 25605 from 210.101.50.44
>@400040e177f301c197b4 tcpserver: warning: dropping connection, 
>unable to read /home/vpopmail/etc/tcp.smtp.cdb: file does not exist

Change the path to your tcp.smtp.cdb file as per the error messgae.
You probably have it in /var/vpopmail/etc now.

Shane



Re: [toaster] smtp issue

2004-06-29 Thread Tom Collins
On Jun 29, 2004, at 11:13 AM, Darius Wei wrote:
I altered the configuration to put vpopmail in /var/vpopmail, changed 
the vpopmail user's home dir to /var/vpopmail, and even edited the 
conf-vpopmail file that came out of the chkuser patch so that it looks 
for /var/vpopmail instead of /home/vpopmail.

Viewing and receiving email works just fine, but when I try to connect 
to port 25 or use SMTP in any way, I get the following error in my 
qmail SMTP log:
Fix the path in your qmail-smtpd/run script.  That's where tcpserver 
gets the path to tcp.smtp.cdb.

--
Tom Collins  -  [EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
Info on the Sniffter hand-held Network Tester: http://sniffter.com/


[toaster] remote conncurrency

2004-06-29 Thread Jeff Koch
All of a sudden this weekend the remote concurrency started topping out. We 
tried raising it to 30 then to 40 and now it is at 50 but it is still 
staying at the peak and users are complaining that their email is being 
delayed by a few hours. The queue has also jumped by 20%. I know this is 
off topic but if any of you can give me a quick opinion on what's 
happenning and what to do I would really appreciate it.


Best Regards,
Jeff Koch 



Re: [toaster] remote conncurrency

2004-06-29 Thread Jason 'XenoPhage' Frisvold
On Tue, 2004-06-29 at 15:14, Jeff Koch wrote:
> All of a sudden this weekend the remote concurrency started topping out. We 
> tried raising it to 30 then to 40 and now it is at 50 but it is still 
> staying at the peak and users are complaining that their email is being 
> delayed by a few hours. The queue has also jumped by 20%. I know this is 
> off topic but if any of you can give me a quick opinion on what's 
> happenning and what to do I would really appreciate it.

Sounds like a dictionary attack...  Are you using the tarpit features?

> Best Regards,
> 
> Jeff Koch 
-- 
---
Jason 'XenoPhage' Frisvold
Engine / Technology Programmer
[EMAIL PROTECTED]
RedHat Certified - RHCE # 803004140609871
MySQL Pro Certified - ID# 207171862
MySQL Core Certified - ID# 205982910
---
"Something mysterious is formed, born in the silent void. Waiting alone
and unmoving, it is at once still and yet in constant motion. It is the
source of all programs. I do not know its name, so I will call it the
Tao of Programming."


signature.asc
Description: This is a digitally signed message part


Re: [toaster] remote conncurrency

2004-06-29 Thread Jeff Koch
This seems to be a problem with the outgoing remote concurrency. I'm not 
sure how this would be related to a tarpit attack. However, we have a 
standard toaster install - is the tarpit patch automatically turned on?

Also, since we've got the 'big concurrency' patch is there any problem with 
raising the remote concurrency to 200, 300 or even 500?

At 03:17 PM 6/29/2004, you wrote:
On Tue, 2004-06-29 at 15:14, Jeff Koch wrote:
> All of a sudden this weekend the remote concurrency started topping 
out. We
> tried raising it to 30 then to 40 and now it is at 50 but it is still
> staying at the peak and users are complaining that their email is being
> delayed by a few hours. The queue has also jumped by 20%. I know this is
> off topic but if any of you can give me a quick opinion on what's
> happenning and what to do I would really appreciate it.

Sounds like a dictionary attack...  Are you using the tarpit features?
> Best Regards,
>
> Jeff Koch
--
---
Jason 'XenoPhage' Frisvold
Engine / Technology Programmer
[EMAIL PROTECTED]
RedHat Certified - RHCE # 803004140609871
MySQL Pro Certified - ID# 207171862
MySQL Core Certified - ID# 205982910
---
"Something mysterious is formed, born in the silent void. Waiting alone
and unmoving, it is at once still and yet in constant motion. It is the
source of all programs. I do not know its name, so I will call it the
Tao of Programming."
Best Regards,
Jeff Koch, Intersessions 



Re: [toaster] remote conncurrency

2004-06-29 Thread Jason 'XenoPhage' Frisvold
On Tue, 2004-06-29 at 16:35, Jeff Koch wrote:
> This seems to be a problem with the outgoing remote concurrency. I'm not 
> sure how this would be related to a tarpit attack. However, we have a 
> standard toaster install - is the tarpit patch automatically turned on?

I don't believe it is...  You need to create
/var/qmail/control/tarpitcount and put the number of rcpt_to's to watch
for in there.  5 is a good number to start with. 
/var/qmail/control/tarpitdelay controls the number of seconds to delay
(default is 5).

If I'm totally off base here, someone please chime in   However,
this should help you out a bit.

In addition, do a 'netstat -an --inet | grep :25' and see if all of the
connections are sourcing from the same place, or the same class C ... 
Perhaps you're being attacked?  Are you receiving a large number of
emails?  If you are being attacked, you can block that IP via the
tcp.smtp file (I think) ...  Or better yet, in your firewall..  (you
have one of those, right?)

> Also, since we've got the 'big concurrency' patch is there any problem with 
> raising the remote concurrency to 200, 300 or even 500?

Not sure.. I've never raised it above the default in the toaster...

> At 03:17 PM 6/29/2004, you wrote:
> >On Tue, 2004-06-29 at 15:14, Jeff Koch wrote:
> > > All of a sudden this weekend the remote concurrency started topping 
> > out. We
> > > tried raising it to 30 then to 40 and now it is at 50 but it is still
> > > staying at the peak and users are complaining that their email is being
> > > delayed by a few hours. The queue has also jumped by 20%. I know this is
> > > off topic but if any of you can give me a quick opinion on what's
> > > happenning and what to do I would really appreciate it.
> >
> >Sounds like a dictionary attack...  Are you using the tarpit features?
> >
> > > Best Regards,
> > >
> > > Jeff Koch
> >--
> >---
> >Jason 'XenoPhage' Frisvold
> >Engine / Technology Programmer
> >[EMAIL PROTECTED]
> >RedHat Certified - RHCE # 803004140609871
> >MySQL Pro Certified - ID# 207171862
> >MySQL Core Certified - ID# 205982910
> >---
> >"Something mysterious is formed, born in the silent void. Waiting alone
> >and unmoving, it is at once still and yet in constant motion. It is the
> >source of all programs. I do not know its name, so I will call it the
> >Tao of Programming."
> 
> Best Regards,
> 
> Jeff Koch, Intersessions 
-- 
---
Jason 'XenoPhage' Frisvold
Engine / Technology Programmer
[EMAIL PROTECTED]
RedHat Certified - RHCE # 803004140609871
MySQL Pro Certified - ID# 207171862
MySQL Core Certified - ID# 205982910
---
"Something mysterious is formed, born in the silent void. Waiting alone
and unmoving, it is at once still and yet in constant motion. It is the
source of all programs. I do not know its name, so I will call it the
Tao of Programming."


signature.asc
Description: This is a digitally signed message part


Re: [toaster] remote conncurrency

2004-06-29 Thread Jeff Koch
Hi Jason:
Thanks for the help. What exactly does 'tarpit' do? Something with a delay?
At 04:47 PM 6/29/2004, you wrote:
On Tue, 2004-06-29 at 16:35, Jeff Koch wrote:
> This seems to be a problem with the outgoing remote concurrency. I'm not
> sure how this would be related to a tarpit attack. However, we have a
> standard toaster install - is the tarpit patch automatically turned on?
I don't believe it is...  You need to create
/var/qmail/control/tarpitcount and put the number of rcpt_to's to watch
for in there.  5 is a good number to start with.
/var/qmail/control/tarpitdelay controls the number of seconds to delay
(default is 5).
If I'm totally off base here, someone please chime in   However,
this should help you out a bit.
In addition, do a 'netstat -an --inet | grep :25' and see if all of the
connections are sourcing from the same place, or the same class C ...
Perhaps you're being attacked?  Are you receiving a large number of
emails?  If you are being attacked, you can block that IP via the
tcp.smtp file (I think) ...  Or better yet, in your firewall..  (you
have one of those, right?)
> Also, since we've got the 'big concurrency' patch is there any problem 
with
> raising the remote concurrency to 200, 300 or even 500?

Not sure.. I've never raised it above the default in the toaster...
> At 03:17 PM 6/29/2004, you wrote:
> >On Tue, 2004-06-29 at 15:14, Jeff Koch wrote:
> > > All of a sudden this weekend the remote concurrency started topping
> > out. We
> > > tried raising it to 30 then to 40 and now it is at 50 but it is still
> > > staying at the peak and users are complaining that their email is being
> > > delayed by a few hours. The queue has also jumped by 20%. I know 
this is
> > > off topic but if any of you can give me a quick opinion on what's
> > > happenning and what to do I would really appreciate it.
> >
> >Sounds like a dictionary attack...  Are you using the tarpit features?
> >
> > > Best Regards,
> > >
> > > Jeff Koch
> >--
> >---
> >Jason 'XenoPhage' Frisvold
> >Engine / Technology Programmer
> >[EMAIL PROTECTED]
> >RedHat Certified - RHCE # 803004140609871
> >MySQL Pro Certified - ID# 207171862
> >MySQL Core Certified - ID# 205982910
> >---
> >"Something mysterious is formed, born in the silent void. Waiting alone
> >and unmoving, it is at once still and yet in constant motion. It is the
> >source of all programs. I do not know its name, so I will call it the
> >Tao of Programming."
>
> Best Regards,
>
> Jeff Koch, Intersessions
--
---
Jason 'XenoPhage' Frisvold
Engine / Technology Programmer
[EMAIL PROTECTED]
RedHat Certified - RHCE # 803004140609871
MySQL Pro Certified - ID# 207171862
MySQL Core Certified - ID# 205982910
---
"Something mysterious is formed, born in the silent void. Waiting alone
and unmoving, it is at once still and yet in constant motion. It is the
source of all programs. I do not know its name, so I will call it the
Tao of Programming."
Best Regards,
Jeff Koch, Intersessions