Hi there,
I'm trying to investigate a recent increase in server load and one
thing I came across when listing running processes (ps axuf) was a
persistent connection on sendmail. For example:
root 24044 0.0 0.0 7324 3028 ? Ss 14:40 0:01
sendmail: accepting connections
root 32652 0.0 0.1 8904 3872 ? S 22:34 0:00 \_
sendmail: l0VMYUS7032652 [200.8.12.186]: DATA
It seems like it never goes away. If I start and stop sendmail then
there is nothing there (except for other connections which terminate
when they have done their task). However, when I check back in a
couple of hours, another persistent connection is hanging around (i've
not noticed it being the same one).
There is nothing of interest in the maillog.
Is this a spammer trying to relay but not succeeding? How can I kill
connections like this automatically?
Thanks,
Russell.
I'm trying to investigate a recent increase in server load and one
thing I came across when listing running processes (ps axuf) was a
persistent connection on sendmail. For example:
root 24044 0.0 0.0 7324 3028 ? Ss 14:40 0:01
sendmail: accepting connections
root 32652 0.0 0.1 8904 3872 ? S 22:34 0:00 \_
sendmail: l0VMYUS7032652 [200.8.12.186]: DATA
It seems like it never goes away. If I start and stop sendmail then
there is nothing there (except for other connections which terminate
when they have done their task). However, when I check back in a
couple of hours, another persistent connection is hanging around (i've
not noticed it being the same one).
There is nothing of interest in the maillog.
Is this a spammer trying to relay but not succeeding? How can I kill
connections like this automatically?
Thanks,
Russell.