Re: replacing tcpserver

Karim El Chenawi <[email protected]> writes:

> The reason I can't stick with tcpserver is that I'm starting to have real
> trouble with clients tying up all smtp connections leaving no room for
> legitimate users. I'll check your code to see if this is possible.

As an alternative, it's possible if you are using Linux to have netfilter
limit the number of connections based on any netfilter match, i.e. from a
certain netblock to a certain port, etc.

The kernel patch is in patch-o-matic{,-ng} at http://netfilter.org, and
requires iptables-1.2.9 to operate.  It's probably overkill for your
situation, but it may be that a kernel patch is easier to cope with than
hacking mysql support into ipsvd, heh.  The netfilter module is also more
flexible (in a sense) as it can limit traffic to other network-listening
services as well.

I've used it for most of the last year for qmail smtp throttling and it's done
a great job.

- Erik