[Mimedefang] Can someone explain this?

Wed Nov 26 12:10:31 EST 2003

Greetings:

We ran into a new problem overnight. Some clown tried a dictionary attack against one of our customer's domains. After about 4 tries to spam our customer, MD suddenly started gagging (see log below). However, after about a minute, everything seemed to correct itself. Checking our performance monitoring logs, our load level never exceeded 3, cpu utilization never exceeded 8%, we had zero paging and disk i/o was less than 10/sec.

We start 8 slaves and from all appearances, all were running. There were no other sendmail connections at the time this occurred. In fact, about 5 minutes later the log shows slave status of: stopped=16, idle=8, busy=killed=queued=0 msgs=14859 activations=56. The maximum number of slaves is set to 40.

Any idea what is going on here?

Thanks!

Jon R. Kibler
Chief Technical Officer
A.S.E.T., Inc.
Charleston, SC  USA
(843) 849-8214

Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: MXCommand: connect: Connection refused: Is multiplexor running?
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: mfconnect: Error communicating with multiplexor
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: MXCommand: connect: Connection refused: Is multiplexor running?
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: mfconnect: Error communicating with multiplexor
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: MXCommand: connect: Connection refused: Is multiplexor running?
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: mfconnect: Error communicating with multiplexor
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: MXCommand: connect: Connection refused: Is multiplexor running?
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: mfconnect: Error communicating with multiplexor
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: MXCommand: connect: Connection refused: Is multiplexor running?
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: mfconnect: Error communicating with multiplexor
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: MXCommand: connect: Connection refused: Is multiplexor running?
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: mfconnect: Error communicating with multiplexor
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: MXCommand: connect: Connection refused: Is multiplexor running?
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: mfconnect: Error communicating with multiplexor
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: MXCommand: connect: Connection refused: Is multiplexor running?
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: mfconnect: Error communicating with multiplexor
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: MXCommand: connect: Connection refused: Is multiplexor running?
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: mfconnect: Error communicating with multiplexor
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: MXCommand: connect: Connection refused: Is multiplexor running?
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: mfconnect: Error communicating with multiplexor
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: MXCommand: connect: Connection refused: Is multiplexor running?
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: mfconnect: Error communicating with multiplexor
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: MXCommand: connect: Connection refused: Is multiplexor running?
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: mfconnect: Error communicating with multiplexor
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: MXCommand: connect: Connection refused: Is multiplexor running?
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: mfconnect: Error communicating with multiplexor
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: MXCommand: connect: Connection refused: Is multiplexor running?
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: mfconnect: Error communicating with multiplexor
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: MXCommand: connect: Connection refused: Is multiplexor running?
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: mfconnect: Error communicating with multiplexor
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: MXCommand: connect: Connection refused: Is multiplexor running?
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: mfconnect: Error communicating with multiplexor
Nov 26 07:18:35 trustem01.trustem.net sendmail[8596]: hAQCIZmp008596: Milter: connect: host=218-170-108-188.HINET-IP.hinet.net, addr=218.170.108.188, temp failing commands
Nov 26 07:18:35 trustem01.trustem.net sendmail[8545]: hAQCIZmp008545: Milter: connect: host=218-170-108-188.HINET-IP.hinet.net, addr=218.170.108.188, temp failing commands
Nov 26 07:18:35 trustem01.trustem.net sendmail[8576]: hAQCIZmp008576: Milter: connect: host=218-170-108-188.HINET-IP.hinet.net, addr=218.170.108.188, temp failing commands
Nov 26 07:18:35 trustem01.trustem.net sendmail[8597]: hAQCIZmp008597: Milter: connect: host=218-170-108-188.HINET-IP.hinet.net, addr=218.170.108.188, temp failing commands
Nov 26 07:18:35 trustem01.trustem.net sendmail[8598]: hAQCIZmp008598: Milter: connect: host=218-170-108-188.HINET-IP.hinet.net, addr=218.170.108.188, temp failing commands
Nov 26 07:18:35 trustem01.trustem.net sendmail[8599]: hAQCIZmp008599: Milter: connect: host=218-170-108-188.HINET-IP.hinet.net, addr=218.170.108.188, temp failing commands
Nov 26 07:18:35 trustem01.trustem.net sendmail[8600]: hAQCIZmp008600: Milter: connect: host=218-170-108-188.HINET-IP.hinet.net, addr=218.170.108.188, temp failing commands
Nov 26 07:18:35 trustem01.trustem.net sendmail[8601]: hAQCIZmp008601: Milter: connect: host=218-170-108-188.HINET-IP.hinet.net, addr=218.170.108.188, temp failing commands
Nov 26 07:18:35 trustem01.trustem.net sendmail[8602]: hAQCIZmp008602: Milter: connect: host=218-170-108-188.HINET-IP.hinet.net, addr=218.170.108.188, temp failing commands
Nov 26 07:18:35 trustem01.trustem.net sendmail[8603]: hAQCIZmp008603: Milter: connect: host=218-170-108-188.HINET-IP.hinet.net, addr=218.170.108.188, temp failing commands
Nov 26 07:18:35 trustem01.trustem.net sendmail[8604]: hAQCIZmp008604: Milter: connect: host=218-170-108-188.HINET-IP.hinet.net, addr=218.170.108.188, temp failing commands
Nov 26 07:18:35 trustem01.trustem.net sendmail[8605]: hAQCIZmp008605: Milter: connect: host=218-170-108-188.HINET-IP.hinet.net, addr=218.170.108.188, temp failing commands
Nov 26 07:18:35 trustem01.trustem.net sendmail[8606]: hAQCIZmp008606: Milter: connect: host=218-170-108-188.HINET-IP.hinet.net, addr=218.170.108.188, temp failing commands
Nov 26 07:18:35 trustem01.trustem.net sendmail[8607]: hAQCIZmp008607: Milter: connect: host=218-170-108-188.HINET-IP.hinet.net, addr=218.170.108.188, temp failing commands
Nov 26 07:18:35 trustem01.trustem.net sendmail[8540]: hAQCIZmp008540: Milter: connect: host=218-170-108-188.HINET-IP.hinet.net, addr=218.170.108.188, temp failing commands
Nov 26 07:18:35 trustem01.trustem.net sendmail[8563]: hAQCIZmp008563: Milter: connect: host=218-170-108-188.HINET-IP.hinet.net, addr=218.170.108.188, temp failing commands
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: MXCommand: connect: Connection refused: Is multiplexor running?
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: mfconnect: Error communicating with multiplexor
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: MXCommand: connect: Connection refused: Is multiplexor running?
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: mfconnect: Error communicating with multiplexor
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: MXCommand: connect: Connection refused: Is multiplexor running?
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: mfconnect: Error communicating with multiplexor
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: MXCommand: connect: Connection refused: Is multiplexor running?
Nov 26 07:18:35 trustem01.trustem.net mimedefang[11944]: mfconnect: Error communicating with multiplexor
Nov 26 07:18:35 trustem01.trustem.net sendmail[8595]: hAQCIZmp008595: Milter: connect: host=218-170-108-188.HINET-IP.hinet.net, addr=218.170.108.188, temp failing commands
Nov 26 07:18:35 trustem01.trustem.net sendmail[8574]: hAQCIZmp008574: Milter: connect: host=218-170-108-188.HINET-IP.hinet.net, addr=218.170.108.188, temp failing commands
Nov 26 07:18:35 trustem01.trustem.net sendmail[8588]: hAQCIZmp008588: Milter: connect: host=218-170-108-188.HINET-IP.hinet.net, addr=218.170.108.188, temp failing commands
Nov 26 07:18:35 trustem01.trustem.net sendmail[8531]: hAQCIZmp008531: Milter: connect: host=218-170-108-188.HINET-IP.hinet.net, addr=218.170.108.188, temp failing commands

==================================================
Filtered by: TRUSTEM.COM's Email Filtering Service
http://www.trustem.com/
No Spam. No Viruses. Just Good Clean Email.