O que fazer para identificar uma inundação EXIM. São várias conexões que aparecem, externa, conectados no EXIM, com isso, os processos almentam, e os clientes não conseguem baixar nem enviar e-mails.
Veja o exemplo:
tcp 0 0 0.0.0.0:465 0.0.0.0:* LISTEN 13603/exim
tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN 13589/exim
tcp 0 xxxxxxxxxxxxxxx:25 200.158.66.80:4433 ESTABLISHED 26075/exim
tcp 1 xxxxxxxxxxxxxxx:25 67.160.77.97:32853 CLOSE_WAIT 20065/exim
tcp 0 xxxxxxxxxxxxxxx:25 200.208.19.131:45434 ESTABLISHED 26076/exim
tcp 1 xxxxxxxxxxxxxxx:25 67.163.238.12:2211 CLOSE_WAIT 13766/exim
tcp 0 xxxxxxxxxxxxxxxx:36794 208.36.123.41:25 SYN_SENT 20050/exim
tcp 1 xxxxxxxxxxxxxxxx:25 200.141.236.232:29849 CLOSE_WAIT 19482/exim
tcp 1 xxxxxxxxxxxxxxxx:25 200.141.236.232:29082 CLOSE_WAIT 18050/exim
tcp 0 xxxxxxxxxxxxxxxx:25 201.47.220.2:50532 ESTABLISHED 19849/exim
tcp 1 xxxxxxxxxxxxxxx:25 67.163.238.12:2768 CLOSE_WAIT 17964/exim
tcp 1 xxxxxxxxxxxxxxxx:25 80.81.34.100:1167 CLOSE_WAIT 20056/exim
tcp 1 xxxxxxxxxxxxxxx:25 69.205.116.20:2095 CLOSE_WAIT 20050/exim
tcp 1 xxxxxxxxxxxxxx:25 67.160.77.97:33284 CLOSE_WAIT 18038/exim
tcp 0 xxxxxxxxxxxxxxx:25 200.141.236.232:12483 ESTABLISHED 26047/exim
tcp 0 xxxxxxxxxxxxxxx:36804 208.36.123.145:25 SYN_SENT 19844/exim
tcp 0 xxxxxxxxxxxxxxx:36795 208.36.123.145:25 SYN_SENT 18050/exim
tcp 1 xxxxxxxxxxxxxxxxx:25 67.160.77.97:33583 CLOSE_WAIT 19844/exim
tcp 0 xxxxxxxxxxxxxxxxx:25 210.51.25.177:46021 ESTABLISHED 20076/exim
warning, got duplicate tcp line.
warning, got duplicate tcp line.
tcp 1 xxxxxxxxxxxxxxx:25 80.81.34.100:4940 CLOSE_WAIT 19957/exim
tcp 0 xxxxxxxxxxxxxx:36796 64.71.166.202:25 SYN_SENT 26062/exim
tcp 0 xxxxxxxxxxxxxxx:36798 64.71.166.196:25 SYN_SENT 19482/exim
tcp 0 xxxxxxxxxxxxxxx:36783 64.71.166.196:25 SYN_SENT 18038/exim
tcp 1 xxxxxxxxxxxxxxxxxx:25 80.81.34.100:3931 CLOSE_WAIT 19437/exim
tcp 0 xxxxxxxxxxxxxxxxx:36770 64.71.166.194:25 SYN_SENT 26047/exim
tcp 0 xxxxxxxxxxxxxxxxxxxx:25 80.81.34.100:1377 ESTABLISHED 26066/exim
tcp 1 xxxxxxxxxxxxxxxxxxx:25 200.141.236.232:11276 CLOSE_WAIT 19890/exim
warning, got duplicate tcp line.
tcp 1 xxxxxxxxxxxxxx:25 67.160.77.97:34292 CLOSE_WAIT 19962/exim
tcp 0 xxxxxxxxxxxxxx:25 201.5.116.10:1053 ESTABLISHED 19710/exim
tcp 0 xxxxxxxxxxxxxx:25 69.205.116.20:3535 ESTABLISHED 26062/exim
tcp 1 xxxxxxxxxxxxxxx:25 80.81.34.100:4216 CLOSE_WAIT 19529/exim
tcp 1 xxxxxxxxxxxxxxxx:25 67.160.77.97:32995 CLOSE_WAIT 19564/exim
tcp 1 xxxxxxxxxxxxxxxx:25 200.141.236.232:10781 CLOSE_WAIT 19735/exim
tcp 0 xxxxxxxxxxxxxxxxxx:25 196.217.234.104:4701 ESTABLISHED 13682/exim
tcp 0 xxxxxxxxxxxxxxxxx:36812 64.74.223.5:25 SYN_SENT 20076/exim
tcp 0 xxxxxxxxxxxxxxxxxx:25 69.95.117.57:4624 ESTABLISHED 26079/exim
tcp 1 xxxxxxxxxxxxxxxxxx:25 200.141.236.232:11867 CLOSE_WAIT 20011/exim
warning, got duplicate tcp line.
tcp 0 xxxxxxxxxxxxxxxxxxx:25 200.146.157.96:62644 ESTABLISHED 26050/exim
warning, got duplicate tcp line.
tcp 0 xxxxxxxxxxxxxxxxxx:25 200.241.126.15:39285 ESTABLISHED 19702/exim
tcp 0 xxxxxxxxxxxxxxxxxx:36802 208.36.123.58:25 SYN_SENT 26066/exim
tcp 0 xxxxxxxxxxxxxxxxxxx:36762 208.36.123.58:25 SYN_SENT 19890/exim
tcp 0 xxxxxxxxxxxxxxxxx:36769 208.36.123.58:25 SYN_SENT 19437/exim
warning, got duplicate tcp line.
warning, got duplicate tcp line.
warning, got duplicate tcp line.
tcp 0 xxxxxxxxxxxxxxxxx:36779 208.36.123.40:25 SYN_SENT 17964/exim
warning, got duplicate tcp line.
tcp 0 xxxxxxxxxxxxxxxxx:25 201.58.110.153:2980 ESTABLISHED 20063/exim
warning, got duplicate tcp line.
tcp 0 xxxxxxxxxxxxxxxx:25 82.240.48.69:1816 ESTABLISHED 26060/exim
tcp 0 xxxxxxxxxxxxxxxxx:25 190.46.29.128:4046 ESTABLISHED 13596/exim
tcp 0 xxxxxxxxxxxxxxxx:25 201.58.110.153:1981 ESTABLISHED 19573/exim
tcp 0 xxxxxxxxxxxxxxxx:36793 208.36.123.68:25 SYN_SENT 19564/exim
tcp 0 xxxxxxxxxxxxxxxx:36799 208.36.123.68:25 SYN_SENT 20056/exim
tcp 0 xxxxxxxxxxxxxxxx:36810 208.36.123.68:25 SYN_SENT 20065/exim
tcp 0 xxxxxxxxxxxxxxxxxx:25 200.208.82.225:3525 ESTABLISHED 26068/exim
tcp 1 xxxxxxxxxxxxxxxx:25 85.108.93.62:29259 CLOSE_WAIT 19938/exim
tcp 0 xxxxxxxxxxxxxxxx:36790 64.71.166.199:25 SYN_SENT 20047/exim
tcp 0 xxxxxxxxxxxxxxxx:36789 64.71.166.199:25 SYN_SENT 26060/exim
tcp 0 xxxxxxxxxxxxxxxx:36775 64.71.166.199:25 SYN_SENT 19529/exim
tcp 0 xxxxxxxxxxxxxxx:36767 64.71.166.197:25 SYN_SENT 20011/exim
tcp 0 xxxxxxxxxxxxxxx:36758 64.71.166.197:25 SYN_SENT 20078/exim
warning, got duplicate tcp line.
tcp 0 xxxxxxxxxxxxxxx:25 200.152.211.6:59195 ESTABLISHED 19546/exim
tcp 0 xxxxxxxxxxxxxxx:36780 205.158.62.181:25 SYN_SENT 13766/exim
tcp 0 xxxxxxxxxxxxxxx:36759 205.158.62.181:25 SYN_SENT 19735/exim
tcp 0 xxxxxxxxxxxxxx:36805 205.158.62.181:25 SYN_SENT 19962/exim
warning, got duplicate tcp line.
tcp 0 xxxxxxxxxxxxxxx:36788 205.158.62.33:25 SYN_SENT 19938/exim
tcp 0 xxxxxxxxxxxxxx:36764 205.158.62.33:25 SYN_SENT 19772/exim
warning, got duplicate tcp line.
tcp 0 xxxxxxxxxxxxxx:25 200.152.211.6:60506 ESTABLISHED 26058/exim
tcp 0 xxxxxxxxxxxxxx:36800 205.158.62.33:25 SYN_SENT 19957/exim
tcp 1 xxxxxxxxxxxxxx:25 85.108.93.62:29467 CLOSE_WAIT 20078/exim
warning, got duplicate tcp line.
tcp 1 xxxxxxxxxxxxxx:25 82.240.48.69:1200 CLOSE_WAIT 20047/exim
tcp 1 xxxxxxxxxxxxxx:25 85.108.93.62:28986 CLOSE_WAIT 19772/exim
tcp 0 xxxxxxxxxxxxxx:25 201.58.110.153:2306 ESTABLISHED 19802/exim
Bloquear os IP's não adinata de nada!
Inundação Exim
Started By bsantos, 03/08/2006, 18:02
Nenhuma resposta neste tópico
0 user(s) are reading this topic
0 membro(s), 0 visitante(s) e 0 membros anônimo(s)
