From owner-freebsd-isp@FreeBSD.ORG Sat Jun 14 06:13:25 2003 Return-Path: Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E6C9437B401 for ; Sat, 14 Jun 2003 06:13:25 -0700 (PDT) Received: from mirage.nlink.com.br (mirage.nlink.com.br [200.249.195.3]) by mx1.FreeBSD.org (Postfix) with SMTP id 374E443FB1 for ; Sat, 14 Jun 2003 06:13:24 -0700 (PDT) (envelope-from paulo@nlink.com.br) Received: (qmail 9026 invoked by uid 85); 14 Jun 2003 13:13:22 -0000 Received: from paulo@nlink.com.br by mirage.nlink.com.br by uid 82 with qmail-scanner-1.16 (clamscan: 0.54. spamassassin: 2.55. Clear:. Processed in 0.233709 secs); 14 Jun 2003 13:13:22 -0000 Received: from foker.nlink.com.br (HELO nlink.com.br) (200.249.197.10) by mirage.nlink.com.br with SMTP; 14 Jun 2003 13:13:21 -0000 Message-ID: <3EEB1F64.3000706@nlink.com.br> Date: Sat, 14 Jun 2003 10:13:08 -0300 From: Paulo Fragoso User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.3.1) Gecko/20030523 X-Accept-Language: en-us, en MIME-Version: 1.0 To: freebsd-isp@freebsd.org Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Subject: Limit for smtp connection X-BeenThere: freebsd-isp@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Internet Services Providers List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 14 Jun 2003 13:13:26 -0000 Hi, How can we limit the number of simultaneously accepted connections from the same IP address to our smtp server? We are using qmail+daemontools+spamcontrol+qmailscanner+spamd, but sometimes there are floods from same IP to our server (smtp port), reaching connetions limit configured on tcpserver startup (tcpserver -c #). We can't increase this limit because it can kill other process by out swap (DoS). We have found some SMTP server on the internet which accept no more than 5 simultaneusly connection from our SMTP server. How to implement this using qmail+tcpserver? Paulo.