#1  
Old 1st January 2011, 20:49
Tekati Tekati is offline
ISPConfig Developer
 
Join Date: Aug 2007
Posts: 19
Thanks: 0
Thanked 0 Times in 0 Posts
Default Massive Postfix Queue's!

Here is the output of a simple qshape

Code:
                          T    5   10   20   40   80   160   320  640 1280 1280+
                TOTAL 93620 1389 1222 2669 5056 9680 21957 44912 6735    0     0
          xxxxx.net 92456 1364 1205 2643 5000 9566 21694 44334 6650    0     0
           xxxxx.com   299    4    7    7   16   34    71   135   25    0     0
xxxxx.com   255    3    3    2   11   23    60   132   21    0     0
         xxxx.com   250    4    1    7   12   31    53   123   19    0     0
      xxx.com   232    9    1    7   12   14    43   132   14    0     0
         xx.com    44    1    4    1    2    6     6    19    5    0     0
        xxxxxx.org    20    1    0    0    1    2     3    13    0    0     0
 xxxxx.org    20    1    0    0    0    1    13     5    0    0     0
        xxxx.net    16    0    1    0    1    2     1    10    1    0     0
            x.com     7    0    0    0    0    0     5     2    0    0     0
   xxxxxxx.com     5    1    0    0    0    0     1     3    0    0     0
      xxx.xxxxx.net     4    1    0    1    1    0     1     0    0    0     0
              xxxx.net     3    0    0    0    0    0     3     0    0    0     0
              xxxxxxxx.com     3    0    0    0    0    0     2     1    0    0     0
            xxxxxxxxx.com     3    0    0    0    0    0     1     2    0    0     0
         xxxxxxxxxx.com     1    0    0    0    0    0     0     1    0    0     0
        xxx.net     1    0    0    1    0    0     0     0    0    0     0
xxxx.org     1    0    0    0    0    1     0     0    0    0     0
Here is a qshape active

Code:
                                T  5 10  20  40   80   160   320  640 1280 1280+
                      TOTAL 77359  5 17 175 840 3938 20190 44822 7372    0     0
                    xxxxxxx.net 76401  5 16 173 832 3904 19950 44249 7272    0     0
                     xxxxxx.com   241  0  1   0   2    9    69   132   28    0     0
      xxxxxxxxxxxxxxxxx.com   217  0  0   0   1    8    55   130   23    0     0
                    xxxxxxx.com   212  0  0   1   4   11    52   122   22    0     0
               xxxxxxxxxxx.com   188  0  0   1   1    2    37   127   20    0     0
                   xxxxxxxx.com    32  0  0   0   0    3     5    18    6    0     0
           xxxxxxxxxxxxxxx.org    18  0  0   0   0    0     6    12    0    0     0
                     xxxxxxxx.org    16  0  0   0   0    0     3    13    0    0     0
                   xxxxxxxxx.net    12  0  0   0   0    0     1    10    1    0     0
                       xxxxxx.com     7  0  0   0   0    0     5     2    0    0     0
            xxxxxxxxxxxxxx.com     4  0  0   0   0    0     1     3    0    0     0
                            xxx.net     3  0  0   0   0    0     3     0    0    0     0
                           xxx.com     3  0  0   0   0    0     2     1    0    0     0
                        xxxxx.com     3  0  0   0   0    0     1     2    0    0     0
                     xxxxxxx.com     1  0  0   0   0    0     0     1    0    0     0
   xxxxxxxxxxxxxxxxxxxxx.org     1  0  0   0   0    1     0     0    0    0     0
Here is a qshape incoming

Code:
                              T    5   10   20   40   80  160 320 640 1280 1280+
                    TOTAL 17013 1210 1275 2635 4178 6005 1710   0   0    0     0
              xxxxxxx.net 16803 1205 1250 2606 4132 5923 1687   0   0    0     0
               xxxxxxx.com    57    2    6    7   15   26    1   0   0    0     0
          xxxxxxxxx.com    45    0    7    7    8   16    7   0   0    0     0
             xxxxxxxxx.com    40    1    4    5    7   18    5   0   0    0     0
    xxxxxxxxxxxxxxxxxx.com    39    1    5    3    8   15    7   0   0    0     0
             xxxxxxxx.com    12    0    1    4    3    2    2   0   0    0     0
          xxx.xxxxxxx.net     5    1    0    1    2    0    1   0   0    0     0
            xxxxxxxx.org     4    0    1    0    1    2    0   0   0    0     0
            xxxxxxxx.net     4    0    0    1    1    2    0   0   0    0     0
      xxxxxxxxxxxxxx.org     2    0    1    0    0    1    0   0   0    0     0
            xxxxxxxx.net     1    0    0    0    1    0    0   0   0    0     0
       xxxxxxxxxxx.com     1    0    0    1    0    0    0   0   0    0     0
Here is a qshape outgoing

Code:
                                         T  5 10 20 40 80 160 320 640 1280 1280+
                                  TOTAL  0  0  0  0  0  0   0   0   0    0     0
This was with the Multiple Debian setup straight from the manual.

Obviously we are being targeted by massive dictionary attacks.

What can I change in the configuration to fix this?

Any suggestions???
Reply With Quote
Sponsored Links
  #2  
Old 2nd January 2011, 20:54
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,478
Thanks: 813
Thanked 5,255 Times in 4,121 Posts
 
Default

Dictionary attacks are not related to the number of mails in the queue as a dictionary attack is just a auth request. You can block dictionary attacke e.g. with fail2ban:

http://www.fail2ban.org/wiki/index.php/Postfix
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
mail authentication failure - unknown user or password evok Installation/Configuration 9 16th October 2010 06:37
Undelivered Mail Returned to Sender Error202 General 5 7th May 2009 11:14
localhost postfix/master: fatal: bind 127.0.0.1 port 125: Permission denied g18c Installation/Configuration 4 24th March 2009 17:39
Centos 4.4 32bit Hangs, High Server load 3cwired_com Server Operation 11 16th November 2006 15:47
Verify email setup meekish Installation/Configuration 28 27th October 2006 15:36


All times are GMT +2. The time now is 05:26.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.