View Single Post
  #16  
Old 26th June 2009, 17:41
matiasCU matiasCU is offline
Member
 
Join Date: Apr 2007
Posts: 57
Thanks: 5
Thanked 2 Times in 2 Posts
Default

Hi Falko:
No. I'm doing direct from my server, I'm not using relay. Why ask this?

I think the attack is Backscatter for the messages I have in the queue of deferred look this:
Quote:
T 5 10 20 40 80 160 320 640 1280 1280+
TOTAL 16908 0 0 1 0 0 0 184 4 7 16712
yahoo.com 3665 0 0 0 0 0 0 149 0 0 3516
emirates.net.ae 2982 0 0 0 0 0 0 1 0 0 2981
bellsouth.net 1729 0 0 0 0 0 0 3 0 0 1726
comcast.net 1469 0 0 0 0 0 0 0 0 0 1469
freenet.columbus.oh.us 294 0 0 0 0 0 0 1 0 0 293
sunbeach.net 270 0 0 0 0 0 0 2 0 0 268
adelphia.net 202 0 0 0 0 0 0 0 0 0 202
verizon.net 150 0 0 0 0 0 0 0 0 0 150
tampabay.rr.com 108 0 0 0 0 0 0 0 0 0 108
cfl.rr.com 88 0 0 0 0 0 0 0 0 0 88
knology.net 83 0 0 0 0 0 0 0 0 0 83
mslottery.com 74 0 0 1 0 0 0 1 4 7 61
scf.usc.edu 70 0 0 0 0 0 0 0 0 0 70
aludra.usc.edu 66 0 0 0 0 0 0 0 0 0 66
nc.rr.com 62 0 0 0 0 0 0 0 0 0 62
rochester.rr.com 62 0 0 0 0 0 0 0 0 0 62
engbbs.ust.hk 61 0 0 0 0 0 0 1 0 0 60
twcny.rr.com 60 0 0 0 0 0 0 0 0 0 60
aol.com 57 0 0 0 0 0 0 0 0 0 57

I've made the changes mentioned maikcat, also erased the deferred queue, with postsuper -d ALL deferred command.
Apparently now the queue is empty, but I have to continue to monitor the operation of the server.
Quote:
#qshape deferred
T 5 10 20 40 80 160 320 640 1280 1280+
TOTAL 25 0 0 0 0 0 0 0 0 0 25
comcast.net 5 0 0 0 0 0 0 0 0 0 5
cs.com 2 0 0 0 0 0 0 0 0 0 2
aol.com 1 0 0 0 0 0 0 0 0 0 1
....
Reply With Quote