Re: [CentOS] SYD flood dropped on Sendmail (centos 4.x)

2008-11-20 Thread Kai Schaetzl
Scott Silva wrote on Thu, 20 Nov 2008 16:03:04 -0800: > CentOS 4 comes with a very OLD version of dovecot. > If you are using dovecot, you can get a much newer version at atrpms.net. > The upgrade might be all you need to fix it. The dovecot in CentOS 5 exhibits the same problem when hammered by

Re: [CentOS] SYD flood dropped on Sendmail (centos 4.x)

2008-11-20 Thread Kai Schaetzl
Chris Heiner wrote on Thu, 20 Nov 2008 13:43:44 -0800: > I get complaints about "the servers asking for username and password". from your users or what? Of course, they may complain. A big dictionary attack can take almost all the bandwidth for some time or leave a backlog of dovecot instances.

Re: [CentOS] SYD flood dropped on Sendmail (centos 4.x)

2008-11-20 Thread Filipe Brandenburger
Hi Chris, You still did not give enough detail of what happens on the machine when the problem strikes you. For instance: - What is in /var/log/messages at that time? - What is in "dmesg" output? - What is in the log of your POP3 server (you still did not tell which program you are using)? - What

RE: [CentOS] SYD flood dropped on Sendmail (centos 4.x)

2008-11-20 Thread Chris Heiner
:07 PM To: CentOS mailing list Subject: Re: [CentOS] SYD flood dropped on Sendmail (centos 4.x) Kai Schaetzl wrote: > Chris Heiner wrote on Thu, 20 Nov 2008 08:48:50 -0800: > >> My firewall seems to block an attack my Centos / Sendmail boxes on port 110. > > port 110 is your PO

RE: [CentOS] SYD flood dropped on Sendmail (centos 4.x)

2008-11-20 Thread Chris Heiner
ble. Thanks for any replies.. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kai Schaetzl Sent: Thursday, November 20, 2008 12:53 PM To: centos@centos.org Subject: Re: [CentOS] SYD flood dropped on Sendmail (centos 4.x) Chris, you still didn't answer *why

Re: [CentOS] SYD flood dropped on Sendmail (centos 4.x)

2008-11-20 Thread Kai Schaetzl
Chris, you still didn't answer *why* you have to reboot them. What exactly is the symptom that makes you think you have to reboot? I assume now that with "My firewall says it's blocked" you referred to the drops? (Next time say so, as this wording is really ambiguous.) > What would you like to

Re: [CentOS] SYD flood dropped on Sendmail (centos 4.x)

2008-11-20 Thread John Hinton
John Hinton wrote: Chris Heiner wrote: My guys, My firewall seems to block an attack my Centos / Sendmail boxes on port 110. These servers require a reboot after each attack. My firewall says it’s blocked? Do I need to patch something on sendmail? Or is my firewall not doing its job (Sonicw

Re: [CentOS] SYD flood dropped on Sendmail (centos 4.x)

2008-11-20 Thread John Hinton
Chris Heiner wrote: My guys, My firewall seems to block an attack my Centos / Sendmail boxes on port 110. These servers require a reboot after each attack. My firewall says it’s blocked? Do I need to patch something on sendmail? Or is my firewall not doing its job (Sonicwall)? This is not th

Re: [CentOS] SYD flood dropped on Sendmail (centos 4.x)

2008-11-20 Thread Les Mikesell
Kai Schaetzl wrote: Chris Heiner wrote on Thu, 20 Nov 2008 08:48:50 -0800: My firewall seems to block an attack my Centos / Sendmail boxes on port 110. port 110 is your POP server, probably dovecot. These servers require a reboot after each attack. Because of what? My firewall says it's

RE: [CentOS] SYD flood dropped on Sendmail (centos 4.x)

2008-11-20 Thread Chris Heiner
: [CentOS] SYD flood dropped on Sendmail (centos 4.x) Chris Heiner wrote on Thu, 20 Nov 2008 08:48:50 -0800: > My firewall seems to block an attack my Centos / Sendmail boxes on port 110. port 110 is your POP server, probably dovecot. > These servers require a reboot after each attack. Because o

RE: [CentOS] SYD flood dropped on Sendmail (centos 4.x)

2008-11-20 Thread Chris Heiner
ly my Centos boxes as I have others that are not affect by it. Does the help? Thanks in advance. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kai Schaetzl Sent: Thursday, November 20, 2008 11:31 AM To: centos@centos.org Subject: Re: [CentOS] SYD flood dropp

Re: [CentOS] SYD flood dropped on Sendmail (centos 4.x)

2008-11-20 Thread Kai Schaetzl
Chris Heiner wrote on Thu, 20 Nov 2008 08:48:50 -0800: > My firewall seems to block an attack my Centos / Sendmail boxes on port 110. port 110 is your POP server, probably dovecot. > These servers require a reboot after each attack. Because of what? > My firewall says it's > blocked? I don't