Re: Problem with nb of connectiosn from single host
Solar Designer <solar@...
2002-07-01 10:50:45 GMT
On Mon, Jul 01, 2002 at 12:00:33PM +0200, FAI - Thierry Montigneaux wrote:
> This means that there are about 105 POP connections coming in from the same
> host every 5 minutes.
> Until now, I was running popa3d from INETD. This morning I tried to switch
> to using it as a Daemon... I get the following error message when doing so
> popa3d: 192.168.1.8: per source limit reached
> I guess popa3d is interpreting the connections from 192.168.1.8 as attempts
> to flood the system as there are many POP sessions coming in in sequence.
> As our mail gateway is firewalled from the outside on the port used by POP3
> and our other server is the only machine connecting to the POP port, I am
> not too worried about these flooding problems.
> Is there any parameter, or way to fine tune popa3d to accept those 105
> connections every 5 minutes without problems ?
Yes, but at this time this setting is compile-time. This means that
you'd need to either build popa3d from the original source tarball
(and install under /usr/local) or patch the OpenBSD source tree and
rebuild popa3d from there.
What you're looking for is the MAX_SESSIONS, MAX_SESSIONS_PER_SOURCE,
and/or MIN_DELAY parameters in params.h.
The sessions are opened one at a time, right? If so, I suggest that
you leave MAX_SESSIONS as is (at 100), increase MAX_SESSIONS_PER_SOURCE