Sendmail - Connection rate limit exceeded.

Sendmail - Connection rate limit exceeded.

Post by jona » Thu, 17 Mar 2005 22:23:00


Hi,

I'm using sendmail 8.13.3
I'm getting:
Mar 16 09:41:16 xxxxxxxx sm-mta[16412]: ruleset=check_relay,
arg1=relay6.xxx.xxxx.xx, arg2=21x.5x.xxx.xx, relay=relay6.xxx.xx.xx
[21x.xx.xxx.xx], reject=421 4.3.2 Connection rate limit exceeded.

My sendmail.mc:

define(`confCONNECTION_RATE_WINDOW_SIZE', `45m')dnl


Why?

thanks in advance.
 
 
 

Sendmail - Connection rate limit exceeded.

Post by Serge » Thu, 17 Mar 2005 23:10:08


45m - very big size :-)

Please show confCONNECTION_RATE_THROTTLE.

--
Regards, Sergey

PS:
confCONNECTION_RATE_WINDOW_SIZE ConnectionRateWindowSize
[60s] Define the length of the
interval for which the number of
incoming connections is maintained.

 
 
 

Sendmail - Connection rate limit exceeded.

Post by serrachinh » Thu, 17 Mar 2005 23:23:25


define(`confCONNECTION_RATE_THROTTLE', `15')dnl

For a 5 domains configuration, 67 users, and some bigs emails, which are
the "best values"?

Many thanks
 
 
 

Sendmail - Connection rate limit exceeded.

Post by jona » Thu, 17 Mar 2005 23:30:25

>>> define(`confCONNECTION_RATE_WINDOW_SIZE', `45m')dnl

Sorry too many mailboxes!
 
 
 

Sendmail - Connection rate limit exceeded.

Post by Jose Marci » Fri, 18 Mar 2005 01:19:07


..

define(`confCONNECTION_RATE_WINDOW_SIZE', `45m')dnl

This shall be something between 5m and 10m - not more than 10m. This
value shall be less than usual queue running intervals (usually 15 m).

But it seems that this isn't your problem.
 
 
 

Sendmail - Connection rate limit exceeded.

Post by jona » Fri, 18 Mar 2005 19:46:58


Now i increase my limits.
My access (xx.xx.xx my lan):
GreetPause:xx.xx.xx 0
GreetPause: 5000
GreetPause:127.0.0.1 0

ClientRate:xx.xx.xx 10
ClientRate: 10
ClientRate:127.0.0.1 0
ClientConn:xx.xx.xx 50
ClientConn: 50
ClientConn:127.0.0.1 0

Connect:127.0.0.1 RELAY

Connect:xx.xx.xx RELAY

Connect:yyyyy REJECT

# Whitelisted users
Spam:postmaster@ FRIEND
Spam:abuse@ FRIEND
Spam:spam@ FRIEND
#

my sendmail.mc:
define(`confCONNECTION_RATE_THROTTLE', `50')dnl
define(`confCONNECTION_RATE_WINDOW_SIZE', `10m')dnl

Is this ok?


Srv_Features:127 LC what's this?


And i only have 2 "DATA" connections!!!!!

root 22085 1 0 09:51 ? 00:00:00 sendmail: MTA: accepting
connections root 23581 22085 0 10:09 ? 00:00:00
sendmail: MTA: j2HA9joW023581 smtp.net.vodafone.pt [212.18.160.145]: DATA
root 23626 22085 0 10:10 ? 00:00:00 sendmail: MTA:
j2HAAERO023626 minho.seg-social.pt [195.245.197.204]: DATA
root 23633 22085 0 10:10 ? 00:00:00 sendmail: MTA:
j2HAASPD023633 smtp.net.vodafone.pt [212.18.160.145]: MAIL FROM
root 23637 22085 0 10:10 ? 00:00:00 sendmail: MTA:
j2HAASK9023637 squid-cache.org [206.168.0.9]: MAIL FROM
root 23649 22085 0 10:10 ? 00:00:00 sendmail: MTA:
j2HAAraN023649 [132.12.58.19]: MAIL FROM
root 23653 22085 0 10:11 ? 00:00:00 sendmail: MTA:
j2HAB47t023653 [212.12.39.21]: MAIL FROM
root 23681 22085 0 10:11 ? 00:00:00 sendmail: MTA:
j2HAC2no023681 [83.78.97.26]: MAIL FROM
root 23682 22085 0 10:12 ? 00:00:00 sendmail: MTA:
j2HAC0Gp023682 host87-78.pool80182.interbusiness.it [80.182.78.87]: MAIL
FROM
root 23694 22085 0 10:12 ? 00:00:00 sendmail: MTA:
j2HACPju023694 relay2.ptmail.sapo.pt [212.55.154.22]: MAIL FROM
root 23701 22085 0 10:12 ? 00:00:00 sendmail: MTA:
j2HACVZs023701 host-216-119-183-212.vista-express.com [216.119.183.212]:
MAIL FROM
root 23711 22085 0 10:12 ? 00:00:00 sendmail: MTA:
j2HACjIw023711 murphy.debian.org [146.82.138.6]: MAIL FROM
root 23723 22085 0 10:13 ? 00:00:00 sendmail: MTA:
j2HAD6FM023723 [87.34.4.83]: MAIL FROM
root 23726 22085 0 10:13 ? 00:00:00 sendmail: MTA: startup
with smtp.net.vodafone.pt
root 23729 6719 0 10:13 tty1 00:00:00 grep MTA
 
 
 

Sendmail - Connection rate limit exceeded.

Post by Serge » Fri, 18 Mar 2005 20:59:53


It only your server. Parameters is variables that everyone
can select for itself. :-)

For example I use default WINDOW SIZE (60s) and RATE THROTTLE 10
for any. The list of exceptions with the removed or weakened
restrictions is exist also.

--
Regards, Sergey