On: Fri, Mar 16, 2007 at 05:44:36PM -0400,Tim Casten Wrote:

} LSTSRV-L,
} 
}   Have a strange problem that started right after my last lsoft
}   upgrade on march 9th. i installed the newest update.
} 
}   Anyway here is what is going on the lsmtp console is showing about
}   7000 messages in and out a minute, and showing a constant 180 smtp
}   in and out connections.
} 
}   Top thread count has reached the 500 mark and usually stays around
}   110
} 
}   So first reaction we are being attacked.
} 
}   Checked the firewall at the server level nothing coming in to that
}   particular server.  checked with our rack hosting company and they
}   see nothing abnormal.
} 
}   completely disconnected lsmtp from lsoft and shutdown lsoft services
}   and the connections continued to climb.  we have lsmtp logs in the
}   range of 2 gigs per day.
} 
}   So it appears that something internally with lsmtp is sending
}   messages within itself from the server.
} 
}   also the domains that are making the multiple connections are
}   showing
} 
}   localhost.ultrarpm.com
}   and
}   localhost.fabulous.com
} 
}   over and over again however like i said they are not coming from
}   outside they are coming from within the machine

Could someone in your local LAN have a virus thats trying to spread
spam?  or itself?

-- 
Rich Greenberg  N Ft Myers, FL, USA richgr atsign panix.com  + 1 239 543 1353
Eastern time.  N6LRT  I speak for myself & my dogs only.    VM'er since CP-67
Canines:Val, Red, Shasta & Casey (RIP), Red & Zero, Siberians  Owner:Chinook-L
Retired at the beach                                     Asst Owner:Sibernet-L