RE: [cobalt-users] mail server not responding update:

[Joseph Brennskag <jbrennsk@xxxxxxxxxxxx>]

Jale...

Just a thought.  I had the very same problem.  The SMTP server would not
respond temporarily due to heavy load.  The reason for the heavy load as it
turned out was that someone was using a FormMail.pl exploit to send spam
through our machine on a hosted customer's site.  Thousands of emails per
day! Totally anonymous spamming. It had me baffled for a while.  Look and
see if you have the FormMail.pl or FormMail.cgi script on your machine
anywhere and what version it is.

Joe Brennskag
Hardy Telecom

-----Original Message-----
From: cobalt-users-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]On Behalf Of jale@xxxxxxxxxx
Sent: Saturday, August 24, 2002 4:25 PM
To: Cobalt Users List
Subject: [cobalt-users] mail server not responding update:


An FYI update, still any other ideas are appreciated:

I am still getting my mail-server-not-responding about once per hr,
sometimes once every few hrs. It does not appear to be at all load related.
The company that we co-host with has a monitoring program that just sent me
this email:

>From: sitescope@xxxxxxx
>To: jale@xxxxxxxxxx
>Subject: SiteScope Alert, error, RAQ - SMTP, unable to connect to server
>(216.xxx.xxx.xxx)
>X-Mailer: SiteScope
>Date: Sat, 24 Aug 2002 15:40:42 -0400
>
>This alert is from SiteScope at http://216.xxx.xxx.xxx/SiteScope
>
>Monitor:  RAQ:RAQ - SMTP
>Group:    RAQ
>Status:   unable to connect to server
>Sample #: 639
>
>Time:     3:40 PM 8/24/02
>
>For documentation about alerts, go to:
>   http://216.xxx.xxx.xxx/SiteScope/docs/AlertHelp.htm
>
>More information:
>
>This message is returned when the server does not accept the connection.
>Check that the server and server process are running.
>Check the load on the server.
>Check the load on the network.
>
>
>A ping of the internet connection to 216.xxx.xxx.xxx was ok (average of
>0.01 seconds).
>
>This suggests that the problem may be a server application that has
>stopped running
>or is too busy to handle requests.
>
>
>----------------------   Detail   ----------------------
>
>
>Host Name: 216.xxx.xxx.xxx
>Port Number: 25
>Update every: 600
>Title: RAQ - SMTP
>Timeout: 60.00 sec
>
>
>groupID: RAQ
>
>
>
>
>-----------------------------------------------------
>SiteScope license for 1250 monitors, 480 used
>
>For info about ordering, upgrades, and support:
>    http://www.freshwater.com
>    julie-support@xxxxxxxxxxxxxx
>    303-443-2266 x6800
>-----------------------------------------------------

_____________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users