[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20020701145045.A11306@openwall.com>
Date: Mon, 1 Jul 2002 14:50:45 +0400
From: Solar Designer <solar@...nwall.com>
To: popa3d-users@...ts.openwall.com
Subject: Re: Problem with nb of connectiosn from single host
On Mon, Jul 01, 2002 at 12:00:33PM +0200, FAI - Thierry Montigneaux wrote:
> This means that there are about 105 POP connections coming in from the same
> host every 5 minutes.
>
> Until now, I was running popa3d from INETD. This morning I tried to switch
> to using it as a Daemon... I get the following error message when doing so
> :
>
> popa3d[4053]: 192.168.1.8: per source limit reached
>
> I guess popa3d is interpreting the connections from 192.168.1.8 as attempts
> to flood the system as there are many POP sessions coming in in sequence.
>
> As our mail gateway is firewalled from the outside on the port used by POP3
> and our other server is the only machine connecting to the POP port, I am
> not too worried about these flooding problems.
>
> Is there any parameter, or way to fine tune popa3d to accept those 105
> connections every 5 minutes without problems ?
Yes, but at this time this setting is compile-time. This means that
you'd need to either build popa3d from the original source tarball
(and install under /usr/local) or patch the OpenBSD source tree and
rebuild popa3d from there.
What you're looking for is the MAX_SESSIONS, MAX_SESSIONS_PER_SOURCE,
and/or MIN_DELAY parameters in params.h.
The sessions are opened one at a time, right? If so, I suggest that
you leave MAX_SESSIONS as is (at 100), increase MAX_SESSIONS_PER_SOURCE
to 50, and decrease MIN_DELAY to 1 second. That will allow up to 50
sessions from the same source per second. If that is still not enough,
you may further increase MAX_SESSIONS_PER_SOURCE and MAX_SESSIONS or
set MIN_DELAY to 0.
--
/sd
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
