[BlueOnyx:02234] Re: Dovecot issues?

[Chuck Tetlow]

Sure,

Its probably just typical hacker activity. 

If you look at a list of processes, you'll see dozens or even hundreds of "dovecot-auth" and "pop3-login" in the list.  Its someone running a password guessing program against your server trying to find weak passwords so they can exploit an account.  After a while, their script has eaten up all the memory for dovecot and you get this type of "denial-of-service" problem.

I'm sure the guys who have set up dfix and have it helping with that problem can give you a hand.  I haven't done that myself, so I can't say how.

Chuck

---------- Original Message -----------
From: "Gregg" <greggk1 at cox.net> 
To: "'BlueOnyx General Mailing List'" <blueonyx at blueonyx.it> 
Sent: Thu, 27 Aug 2009 14:48:35 -0700 
Subject: [BlueOnyx:02233]  Dovecot issues?

> Hello,
> Recently I have noticed in the mail lot a lot of weird errors.
>  
> dovecot: pop3-login: Can't connect to auth server at default:Too many open files
> dovecot: imap-login: socket(default) failed: Too many open files
>  
> I do not have that many users on this particular server, andit's not that busy.  I have to manually restart dovecot, and all is back tonormal.
> Has someone else experienced this? What could be causing it? Anysuggestions is appreciated.
>  
> Gregg
------- End of Original Message -------
 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.blueonyx.it/pipermail/blueonyx/attachments/20090827/f71813b7/attachment.html>