Jorge Bastos wrote:
> What do you see in the logs?
> My guess is that someone is trying a brute force auth against you,
Thanks Jorge, I think this is the answer. I'm using dovecot for exim4 SMTP
authentication. The exim4 logs show brute force attacks.
--
Edward.
Every few days I find that dovecot auth is using all my CPU.
This is from dovecot 2.2.13, I've just upgraded to 2.2.18
strace -r -p 17956 output:
Process 17956 attached
0.00 lseek(19, 0, SEEK_CUR)= -1 ESPIPE (Illegal seek)
0.57 getsockname(19, {sa_family=AF_LOCAL, NULL}, [2