From owner-freebsd-isp Wed Mar 8 10:40:13 2000 Delivered-To: freebsd-isp@freebsd.org Received: from troi.csw.net (troi.csw.net [209.136.192.23]) by hub.freebsd.org (Postfix) with ESMTP id 7A1DA37BEA3 for ; Wed, 8 Mar 2000 10:40:06 -0800 (PST) (envelope-from lambert@cswnet.com) Received: from ssaos2.csw.net (ssaos2.csw.net [209.136.201.13]) by troi.csw.net (8.9.3/8.9.3) with SMTP id MAA71554 for ; Wed, 8 Mar 2000 12:40:05 -0600 (CST) (envelope-from lambert@cswnet.com) Message-Id: <200003081840.MAA71554@troi.csw.net> From: lambert@cswnet.com Date: Wed, 08 Mar 2000 12:40:04 -0600 To: freebsd-isp@freebsd.org In-Reply-To: Subject: Re: Am I being spammed? Or is egroups this impolite? X-Mailer: MR/2 Internet Cruiser Edition for OS/2 v2.01 Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org In , on 03/08/2000 at 12:27 PM, Steve Hovey said: >You can set max connections per minute in sendmail, max children total, >etc to minimize the impact of jerk sites like egroups. I set MaxDaemonChildren last night. I see ConnectionRateThrottle and QueueFactor. ConnectionRateThrottle will just make it take longer for them to swamp me correct? It seems that it will also slow down connections from polite sites while egroups is pounding on me. Sorry for the long lines in the last message. For some reason I had the re-wrap on send turned off. Thanks to everybody for the helpful ideas. I think I can get them handled now. >On Wed, 8 Mar 2000 lambert@cswnet.com wrote: >> In , on 03/08/2000 >> at 09:45 AM, Tom said: >> >> >> >On Tue, 7 Mar 2000 lambert@cswnet.com wrote: >> >> >> Hi, >> >> >> >> I have an immediate problem wherein I am seeing a heinous number of >> >> sumultanious connects claiming to be from egroups.com. >> >> >> >> This barrage has brought both my MX servers to their knees. >> >> > EGroups sends e-mail to a mailing list sorted by domain. They use >> >Qmail, so they send to one recipient per connection. So if you have a >> >100 people at your domain get EGroups e-mail, in a short period of time, >> >EGroups will open a 100 connections to your mail server(s). Hopefully you >> >can handle it. This results in a EGroups cutting a swath through the >> >internet every time they do a mailing. >> >> I had 35 open connections from egroups to my primary MX for over 30 minutes. My secondary MX had over 30 connections from egroups at the same time. Is this a case of a clueless admin at egroups? Or are they just assuming that everyone else has 3 C-Classes of MX hosts also? I only have 20K mailboxes. >> >> > You should probably set your maximum connection limit to something that >> >your servers can handle. Switching from Sendmail to Postfix should help. >> >> I was running out of file handles : >> >> /tmp/RxB37043: Too many open files in system >> >> So I guess I'll have to rebuild the kernel. I'll take this as an oportunity to upgrade from Jun 30 3.2-STABLE. >> >> I'm still a newbie BSD admin. I've only been immersed in *nix for the last 18 months (working my way through a backlog of stuff, 2.1.6, that should have been done a long time ago). I'm still not confident enough of my ability to convert a production box to Postfix without making a lot of customers mad. Fortunately, this is my next priority item. >> >> -- >> Scott Lambert >> lambert@cswnet.com >> Systems and Security Administrator >> CSW Net, Inc. >> ================================================================ >> Written: Wednesday, March 08, 2000 - 09:45 AM >> >> >> >> >> To Unsubscribe: send mail to majordomo@FreeBSD.org >> with "unsubscribe freebsd-isp" in the body of the message >> -- Scott Lambert lambert@cswnet.com Systems and Security Administrator CSW Net, Inc. ================================================================ Written: Wednesday, March 08, 2000 - 12:27 PM To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message