Hi,

Ich benötige mal eine kurze Expertenmeinung, bevor ich das als Bug poste. Ich betreibe einen vServer (Serv**4y**) auf dem postfix läuft. Heute hatte ich Probleme. Zwar wurde das Webinterface (squirrelmail/Apache) zum Mail-Server geladen; nach der Authentifizierung lief ich aber scheinbar in einen Timeout. Ich habe eben die Logs geprüft. Es sieht so aus, dass ein DoS produziert wurde. Ich kann leider nicht ganz nachvollziehen, welcher Platz ausgegangen ist, RAM oder HD, aber das sollte so nicht passieren. Dahinter steht das Projekt hier: http://dnssectest.informatik.fh-muenchen.de/

Vielleicht könnt ihr mir noch ein Feedback geben?

VG Daniel

/var/log/mail.err:(auszugsweise): Mar 30 06:09:33 mail postfix/smtpd[7580]: fatal: inet_addr_local[getifaddrs]: getifaddrs: Permission denied Mar 30 06:10:34 mail postfix/smtpd[7584]: fatal: inet_addr_local[getifaddrs]: getifaddrs: Permission denied Mar 30 06:11:35 mail postfix/smtpd[7586]: fatal: inet_addr_local[getifaddrs]: getifaddrs: Permission denied Mar 30 06:12:36 mail postfix/smtpd[7587]: fatal: inet_addr_local[getifaddrs]: getifaddrs: Permission denied Mar 30 06:13:34 mail postfix/smtpd[7588]: fatal: no SASL authentication mechanisms Mar 30 06:15:36 mail postfix/smtpd[7593]: fatal: inet_addr_local[getifaddrs]: getifaddrs: Permission denied Mar 30 06:15:39 mail postfix/smtpd[7594]: fatal: inet_addr_local[getifaddrs]: getifaddrs: Permission denied Mar 30 06:16:37 mail postfix/smtpd[7595]: fatal: inet_addr_local[getifaddrs]: getifaddrs: Permission denied Mar 30 06:16:40 mail postfix/smtpd[7596]: fatal: inet_addr_local[getifaddrs]: getifaddrs: Permission denied [..] Mar 30 08:50:12 mail postfix/smtpd[8089]: fatal: inet_addr_local[getifaddrs]: getifaddrs: Permission denied Mar 30 08:50:12 mail postfix/smtpd[8088]: fatal: inet_addr_local[getifaddrs]: getifaddrs: Permission denied Mar 30 08:51:00 mail postfix/pickup[8090]: fatal: inet_addr_local[getifaddrs]: getifaddrs: Permission denied Mar 30 08:51:13 mail postfix/smtpd[8091]: fatal: inet_addr_local[getifaddrs]: getifaddrs: Permission denied Mar 30 08:51:13 mail postfix/smtpd[8092]: fatal: inet_addr_local[getifaddrs]: getifaddrs: Permission denied Mar 30 08:52:01 mail postfix/pickup[8093]: fatal: inet_addr_local[getifaddrs]: getifaddrs: Permission denied Mar 30 08:52:14 mail postfix/smtpd[8095]: fatal: inet_addr_local[getifaddrs]: getifaddrs: Permission denied Mar 30 08:52:14 mail postfix/smtpd[8094]: fatal: inet_addr_local[getifaddrs]: getifaddrs: Permission denied [..]

und so ging das scheinbar über Stunden. Ein Blick ins syslog zeigt gleichzeitig (auszugsweise):

Mar 30 06:09:32 mail postfix/smtpd[7564]: connect from dnssectest.informatik.fh-muenchen.de[141.39.242.16] Mar 30 06:09:32 mail postfix/smtpd[7565]: connect from dnssectest.informatik.fh-muenchen.de[141.39.242.16] Mar 30 06:09:32 mail postfix/smtpd[7566]: connect from dnssectest.informatik.fh-muenchen.de[141.39.242.16] Mar 30 06:09:32 mail postfix/smtpd[7567]: connect from dnssectest.informatik.fh-muenchen.de[141.39.242.16] Mar 30 06:09:32 mail postfix/smtpd[7568]: connect from dnssectest.informatik.fh-muenchen.de[141.39.242.16] Mar 30 06:09:32 mail postfix/smtpd[7569]: connect from dnssectest.informatik.fh-muenchen.de[141.39.242.16] Mar 30 06:09:32 mail postfix/smtpd[7570]: connect from dnssectest.informatik.fh-muenchen.de[141.39.242.16] Mar 30 06:09:32 mail postfix/smtpd[7571]: connect from dnssectest.informatik.fh-muenchen.de[141.39.242.16] Mar 30 06:09:32 mail postfix/smtpd[7553]: SSL_accept error from dnssectest.informatik.fh-muenchen.de[141.39.242.16]: lost connection Mar 30 06:09:32 mail postfix/smtpd[7553]: lost connection after STARTTLS from dnssectest.informatik.fh-muenchen.de[141.39.242.16] Mar 30 06:09:32 mail postfix/smtpd[7553]: disconnect from dnssectest.informatik.fh-muenchen.de[141.39.242.16] Mar 30 06:09:32 mail postfix/smtpd[7572]: connect from dnssectest.informatik.fh-muenchen.de[141.39.242.16] Mar 30 06:09:32 mail postfix/smtpd[7553]: connect from dnssectest.informatik.fh-muenchen.de[141.39.242.16] Mar 30 06:09:32 mail postfix/smtpd[7557]: lost connection after NOOP from dnssectest.informatik.fh-muenchen.de[141.39.242.16] Mar 30 06:09:32 mail postfix/smtpd[7557]: disconnect from dnssectest.informatik.fh-muenchen.de[141.39.242.16] Mar 30 06:09:32 mail postfix/smtpd[7557]: connect from dnssectest.informatik.fh-muenchen.de[141.39.242.16] Mar 30 06:09:32 mail postfix/smtpd[7573]: connect from dnssectest.informatik.fh-muenchen.de[141.39.242.16] Mar 30 06:09:32 mail postfix/smtpd[7568]: SSL_accept error from dnssectest.informatik.fh-muenchen.de[141.39.242.16]: lost connection Mar 30 06:09:32 mail postfix/smtpd[7568]: lost connection after STARTTLS from dnssectest.informatik.fh-muenchen.de[141.39.242.16] Mar 30 06:09:32 mail postfix/smtpd[7568]: disconnect from dnssectest.informatik.fh-muenchen.de[141.39.242.16] Mar 30 06:09:32 mail postfix/smtpd[7568]: connect from dnssectest.informatik.fh-muenchen.de[141.39.242.16] Mar 30 06:09:32 mail postfix/smtpd[7550]: lost connection after NOOP from dnssectest.informatik.fh-muenchen.de[141.39.242.16] [..] Mar 30 11:03:26 mail postfix/master[1867]: warning: process /usr/lib/postfix/smtpd pid 8594 exit status 1 Mar 30 11:03:26 mail postfix/master[1867]: warning: /usr/lib/postfix/smtpd: bad command startup -- throttling Mar 30 11:03:26 mail postfix/master[1867]: warning: process /usr/lib/postfix/smtpd pid 8595 exit status 1 Mar 30 11:03:26 mail postfix/master[1867]: warning: /usr/lib/postfix/smtpd: bad command startup -- throttling Mar 30 11:04:15 mail postfix/pickup[8596]: fatal: inet_addr_local[getifaddrs]: getifaddrs: Permission denied Mar 30 11:04:16 mail postfix/master[1867]: warning: process /usr/lib/postfix/pickup pid 8596 exit status 1 Mar 30 11:04:16 mail postfix/master[1867]: warning: /usr/lib/postfix/pickup: bad command startup -- throttling Mar 30 11:04:26 mail postfix/smtpd[8598]: fatal: inet_addr_local[getifaddrs]: getifaddrs: Permission denied Mar 30 11:04:26 mail postfix/smtpd[8597]: fatal: inet_addr_local[getifaddrs]: getifaddrs: Permission denied Mar 30 11:04:27 mail postfix/master[1867]: warning: process /usr/lib/postfix/smtpd pid 8597 exit status 1 Mar 30 11:04:27 mail postfix/master[1867]: warning: /usr/lib/postfix/smtpd: bad command startup -- throttling Mar 30 11:04:27 mail postfix/master[1867]: warning: process /usr/lib/postfix/smtpd pid 8598 exit status 1 Mar 30 11:04:27 mail postfix/master[1867]: warning: /usr/lib/postfix/smtpd: bad command startup -- throttling [..] Mar 30 11:09:35 mail postfix/smtpd[7551]: fatal: watchdog timeout Mar 30 11:09:35 mail postfix/master[1867]: warning: process /usr/lib/postfix/smtpd pid 7565 exit status 1 Mar 30 11:09:35 mail postfix/master[1867]: warning: process /usr/lib/postfix/smtpd pid 7567 exit status 1 Mar 30 11:09:35 mail postfix/master[1867]: warning: process /usr/lib/postfix/smtpd pid 7571 exit status 1 Mar 30 11:09:35 mail postfix/master[1867]: warning: process /usr/lib/postfix/smtpd pid 7553 exit status 1 Mar 30 11:09:36 mail postfix/master[1867]: warning: process /usr/lib/postfix/smtpd pid 7554 exit status 1 Mar 30 11:09:36 mail postfix/smtpd[7532]: fatal: watchdog timeout Mar 30 11:09:36 mail postfix/master[1867]: warning: process /usr/lib/postfix/smtpd pid 7556 exit status 1 Mar 30 11:09:36 mail postfix/master[1867]: warning: process /usr/lib/postfix/smtpd pid 7551 exit status 1 Mar 30 11:09:37 mail postfix/master[1867]: warning: process /usr/lib/postfix/smtpd pid 7532 exit status 1 Mar 30 11:10:32 mail postfix/smtpd[8641]: connect from unknown[unknown] Mar 30 11:10:32 mail postfix/smtpd[8641]: lost connection after CONNECT from unknown[unknown] Mar 30 11:10:32 mail postfix/smtpd[8641]: disconnect from unknown[unknown] Mar 30 11:10:32 mail postfix/smtpd[8641]: connect from unknown[unknown] Mar 30 11:10:32 mail postfix/smtpd[8641]: lost connection after CONNECT from unknown[unknown] Mar 30 11:10:32 mail postfix/smtpd[8641]: disconnect from unknown[unknown] Mar 30 11:10:32 mail postfix/smtpd[8641]: connect from unknown[unknown] Mar 30 11:10:32 mail postfix/smtpd[8641]: lost connection after CONNECT from unknown[unknown] Mar 30 11:10:32 mail postfix/smtpd[8641]: disconnect from unknown[unknown]