Re: Drop connection when tcpserver -c limit is reached, Is it posible?
Jimmy Spam <[email protected]> Mon, 26 Jul 2010 11:53:25 +0200
| Newsgroups | gmane.mail.qmail.ldap |
|---|---|
| Message-ID | <[email protected]> |
Hi friends, I've already fixed this problem. My solution: Modify the tcpserver limits patch (http://qmail.jms1.net/ucspi-tcp/) for add a "global limit" instead of only a "per IP" and "per C-Class block" limit, recompile tcpserver.c and use the new binary of tcpserver. Regards, Spamis Jimmy Spam <[email protected]> escribió: > > Hi friends, > > I know how limit the total concurrent connections that tcpserver can > handle, but, Is it posible change its behavior to drop connection > suddenly, instead of defer acceptance? > > -------------------------------------------------------------------------------------------------------------- > tcpserver: > > -c n: Do not handle more than n simultaneous connections. If there > are n simultaneous copies of prog running, defer acceptance of a new > connection until one copy finishes. n must be a positive integer. > Default: 40. > -------------------------------------------------------------------------------------------------------------- > > When my server receive too many connections, if tcpserver limit is > reached, the new incoming connections are keep in SYN_RECV status, > increasing permanently until my MX is KO. > > I've notice that my old MX, with Kaspersky MailGateway, send a > message: "421 4.3.1 mailhost.chg ESMTP Service not available, > closing transmission channel", when too many connections arrive and > with this action, keep the server up all time (only the smtp service > it's down during few seconds/minutes per day). > > I've thought that maybe it's a good idea send a "421 message" when > tcpserver -c limit is reached, in combination with SMTP550DISCONNECT > variable of qmail-ldap for keep the incoming concurrent connections > and qmail-smtdp process at correct levels. > > Any opinion/advice? > > Thank you very much, > Spamis > >