exim script issue? stuck process?

R1Lover

Verified User
Joined
Feb 24, 2007
Messages
420
Anyone see this before? I have killed it a few times, the next day it's back and causing a consistent higher load.




20154 root 25 0 100m 77m 1664 R 99.1 2.0 335:00.27 /usr/bin/perl /usr/share/logwatch/scripts/services/exim
 
I think this may be an issue in this one server due to many failed attempts by spammers... creating larger log files.

I was going to ask jeff if we could build into spamblocker an IP banning process that bans IP's after so many bad attempts?

Jeff is this something you have experience with or can do?

I'm sure I'm not the only one with this issue.

Thanks in advance.
 
IP#s should really be blocked at the firewall level. There are several threads in these forums already, concerning this. I don't want to delay SpamBlocker any longer to build a whole new functionality into it, that's better done at the firewall level. I don't have time to look for other threads right now; if you can find it and if it requires I do something, please bring it to my attentin in an email showing the specific threads I should be looking at.

Thanks.

Jeff
 
I'll take a look around and see what I can find... thanks for the reply.
 
My solution was to ban the IP ranges of those creating very large attacks or attempts to get into the server and send mail.

I would still like to see a process added to CSF for watching the exim reject log and banning the IP after so many attempts.

I haven't had time to look into this myself.... but it is needed from what I can see in order to keep things in order.
 
Back
Top