[7.270] too many concurrent smtp [CONFIRMED]

after 3 days i got every time the same error ,,too many concurrent smtp" if i recive or send emails. after a restart the firewall works 3 days without problems. is it posible to close every open smtp connection after 30minutes? i think there is hanging anything in the smtp part.

i find another thread with the same problem on older versions: climbing smtp connections. i had the same problem with 6.*** and a technical say to me, in the new 7.3 this problem will solved, but know the connections climing every day - i think so.

is there a way to show a graphical statistic of the concurrent smtp connections?

Parents

0 tom_01 over 16 years ago

That sounds odd. I'd like to take a look at that system. Would it be possible to have SSH login details? Send them to tkistner@astaro.com. Thanks!
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 akgolx over 16 years ago in reply to tom_01

It is the same here, since I installed 7.270 my mailserver cannot receive emails.

451 Too many connections, please try later
2008:08:11-16:44:01 (none) exim[5823]: 2008-08-11 16:44:01
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Alex76 over 16 years ago in reply to akgolx

i have the same problems with the old 6.*** versions too, but a technical called me and say, that its fixed in the 7.300, so i test now the betas and hope . . .
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Alex76 over 16 years ago in reply to Alex76

is there any success in this case. its very bad to restart the firewall every 2 days? [:@]
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Gert Hansen over 16 years ago in reply to Alex76

HI Alex,

please verify if the problem persists with the latest version 7.290 released just a few minutes ago.
If yes, than we need to log in to the box and check what ist going wrong. As Tom is unfortunalty on holiday, please send it to qa at astaro dot com

thx Gert
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Alex76 over 16 years ago in reply to Gert Hansen

Hi Gert,

ok, i will check this with the new 2.900, with 2.800 the problem exists. it there any way to query the current used smtp connections, for example with smnp?

in other case i must wait 4 days and if the firewall blocks again the mails the problems exists. did you know anything about a changelog on 2.900?

Now i will check every hour the current smtp connections over shell with ,,netstat --timers | grep smtp" and i hope i will see anything. if there is a problem with the keepalive connections anyone must kill every one or make a special counter for this one with higher values.

lg

Alex
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 mhock over 16 years ago in reply to Alex76

Hi,
One of our clients seems to have this problem on an ASG V6.3:

netstat --timers | grep smtp shows about 40 connections, most of them in state "timewait". The smtp log says

Connection from [] refused: too many connections.

RBL and Greylisting are enabled, to minimize the number of concurrent connections, but it seems like this wont solve the problem completely.
Furthermore RAM ist at 95% and Swap at about 70% (Swap used to be at about 90%, but decreased after activating RBL/greylisting).

My questions:
- Is there a way to avoid the "too many connections" issue?
- Does this correlate to the high Mem/Swap usage?

Thank You!!
Marcus
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Alex76 over 16 years ago in reply to mhock

Dear Marcus,

is it able to post the list of connections (for example without the ips). i think the default value is 20 current connections (not waitings). i think the wrong state of the connections will be counted to this 20 connections value.

kind regards

Alex
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Reply

0 Alex76 over 16 years ago in reply to mhock

Dear Marcus,

is it able to post the list of connections (for example without the ips). i think the default value is 20 current connections (not waitings). i think the wrong state of the connections will be counted to this 20 connections value.

kind regards

Alex
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

Children

0 mhock over 16 years ago in reply to Alex76

gate:/var/log # tail smtp.log -f -n 100 | grep many
2008:08:21-14:07:31 (none) exim[16316]: 2008-08-21 14:07:31 Connection from [200.207.216.243] refused: too many connections
2008:08:21-14:07:31 (none) exim[16316]: 2008-08-21 14:07:31 Connection from [87.109.109.28] refused: too many connections
2008:08:21-14:07:31 (none) exim[16316]: 2008-08-21 14:07:31 Connection from [89.123.243.112] refused: too many connections
2008:08:21-14:07:31 (none) exim[16316]: 2008-08-21 14:07:31 Connection from [83.239.107.96] refused: too many connections

gate:/var/log # netstat  --timers | grep smtp
tcp        0      0 gate.mydomain.org:smtp 217-15-155-182.ip:10804 SYN_RECV    on (2.97/0/0)
tcp        0      0 gate.mydomain.org:smtp 83.239.99.7:unisql-java ESTABLISHED keepalive (297.97/0/0)
tcp        0      0 gate.mydomain.org:smtp pc0.zz.ha.cn:14418      TIME_WAIT   timewait (52.03/0/0)
tcp        0      0 gate.mydomain.org:smtp 097.166.[:P]riority-e-com TIME_WAIT   timewait (7.91/0/0)
tcp        0     44 gate.mydomain.org:smtp 59.95.184.73:4069       FIN_WAIT1   on (95.91/8/0)
tcp        0     37 gate.mydomain.org:smtp 97-113-118-37.tuk:54121 ESTABLISHED on (44.69/5/0)
tcp        0      0 gate.mydomain.org:smtp host1172490:sccip-media TIME_WAIT   timewait (41.56/0/0)
tcp        0      0 gate.mydomain.org:smtp 83.239.107.96:15090     TIME_WAIT   timewait (48.16/0/0)
tcp        0      0 gate.mydomain.org:smtp 230-155.insatnet.s:4192 TIME_WAIT   timewait (48.16/0/0)
tcp        0      0 gate.mydomain.org:smtp 097.166.15:sitaraserver TIME_WAIT   timewait (8.25/0/0)
tcp        0      0 gate.mydomain.org:smtp server.kemm.de:63648    ESTABLISHED keepalive (298.55/0/0)
tcp        0      0 gate.mydomain.org:smtp 121.188.22.171:61707    TIME_WAIT   timewait (15.65/0/0)
tcp        0      0 gate.mydomain.org:smtp 121.188.22.171:63751    TIME_WAIT   timewait (15.66/0/0)
tcp        0     54 gate.mydomain.org:smtp 89.216.94:gsigatekeeper ESTABLISHED on (0.34/0/0)
tcp        0     37 gate.mydomain.org:smtp 217-15-155-182.ip:10804 ESTABLISHED on (2.79/0/0)
tcp        0    121 gate.mydomain.org:smtp 88.254.1:menandmice-lpm ESTABLISHED on (8.69/8/0)
tcp        0      0 gate.mydomain.org:smtp 89.123.243.112:51749    TIME_WAIT   timewait (48.05/0/0)
tcp        0     47 gate.mydomain.org:smtp 57.120.3.1:novell-lu6.2 LAST_ACK    on (58.93/7/0)
tcp        0      0 gate.mydomain.org:smtp 213.234.[:P]asswrd-policy TIME_WAIT   timewait (41.24/0/0)
tcp        0      0 gate.mydomain.org:smtp 87.109.109.28:52642     TIME_WAIT   timewait (48.40/0/0)
tcp        0      0 gate.mydomain.org:smtp ppp195.nostra.by:vt-ssl ESTABLISHED keepalive (291.87/0/0)
tcp        0      0 gate.mydomain.or:57840 smtpex05.ekom21.de:smtp TIME_WAIT   timewait (5.19/0/0)
tcp        0      0 gate.mydomain.org:smtp 78.178.63.9:3569        TIME_WAIT   timewait (29.06/0/0)
tcp        0      1 gate.mydomain.or:57709 mail.agscimt-wcp.c:smtp SYN_SENT    on (9.61/4/0)
tcp        0      0 gate.mydomain.org:smtp 98.bishop.edu:13630     ESTABLISHED keepalive (298.99/0/0)
tcp        0      1 gate.mydomain.or:58077 mail.landenhouseco:smtp SYN_SENT    on (7.90/2/0)
tcp        0      0 gate.mydomain.or:57752 81.23.235.185:smtp      ESTABLISHED keepalive (221.12/0/0)
tcp        0    386 gate.mydomain.org:smtp no-reverse-found.:47353 ESTABLISHED on (0.72/0/0)
tcp        0      0 gate.mydomain.org:smtp 64.122.248:ibm-dial-out TIME_WAIT   timewait (14.62/0/0)
tcp        0      0 gate.mydomain.org:smtp 190-172-252-[:P]rivateark ESTABLISHED keepalive (296.79/0/0)
tcp        0      0 gate.mydomain.org:smtp dialup-ekt-83.219.:3554 ESTABLISHED keepalive (294.20/0/0)
tcp        0    224 gate.mydomain.org:smtp dialup-ekt-83.219.:3554 ESTABLISHED on (0.83/0/0)
tcp        0      0 gate.mydomain.org:smtp dsl.static8121521:50513 ESTABLISHED keepalive (109.72/0/0)
tcp        0    107 gate.mydomain.org:smtp 88.234.12.78:58256      ESTABLISHED on (5.39/4/0)
tcp        0      0 gate.mydomain.org:smtp pool-98-109:flukeserver TIME_WAIT   timewait (52.82/0/0)
tcp        0     44 gate.mydomain.org:smtp dsl081-105:elvin_client FIN_WAIT1   on (19.72/6/0)
tcp        0    139 gate.mydomain.org:smtp 93-120-135-189.dyn:4417 ESTABLISHED on (0.22/0/0)
tcp        0     47 gate.mydomain.org:smtp 121.70.230.138:42813    LAST_ACK    on (65.46/6/0)
tcp        0      0 gate.mydomain.org:smtp 66-81-76-226.baya:aztec TIME_WAIT   timewait (55.09/0/0)
tcp        0      0 gate.mydomain.or:58068 mail.servermasters:smtp ESTABLISHED keepalive (281.15/0/0)
tcp        0      0 gate.mydomain.or:58068 mail.servermasters:smtp ESTABLISHED keepalive (281.12/0/0)
tcp        0      0 gate.mydomain.org:smtp stecks-logistic.t:11060 TIME_WAIT   timewait (54.23/0/0)
tcp        0      0 gate.mydomain.org:smtp ppp92-101:edm-mgr-cntrl ESTABLISHED keepalive (299.22/0/0)
tcp        0     37 gate.mydomain.org:smtp 88.234.12.78:58393      ESTABLISHED on (2.88/0/0)
tcp        0      0 gate.mydomain.org:smtp 66-81-76-226.baya:aztec TIME_WAIT   timewait (54.08/0/0)
tcp        0      0 gate.mydomain.org:smtp 85.103.25.29:mciautoreg ESTABLISHED keepalive (299.21/0/0)
tcp        0      0 gate.mydomain.or:58068 mail.servermasters:smtp ESTABLISHED keepalive (280.37/0/0)
tcp        0      0 gate.mydomain.org:smtp stecks-logistic.t:11060 TIME_WAIT   timewait (53.49/0/0)
unix  3      [ ]         STREAM     CONNECTED     2088183682 /var/chroot-smtp/dev/log
unix  3      [ ]         STREAM     CONNECTED     2087952705 /var/chroot-smtp/dev/log
unix  3      [ ]         STREAM     CONNECTED     2087910561 /var/chroot-smtp/dev/log
unix  3      [ ]         STREAM     CONNECTED     2087870593 /var/chroot-smtp/dev/log
unix  3      [ ]         STREAM     CONNECTED     2087817752 /var/chroot-smtp/dev/log
unix  3      [ ]         STREAM     CONNECTED     2087768357 /var/chroot-smtp/dev/log
unix  3      [ ]         STREAM     CONNECTED     2087765222 /var/chroot-smtp/dev/log
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Alex76 over 16 years ago in reply to mhock
2008:08:21-14:13:33 (none) exim[4577]: 2008-08-21 14:13:33 Connection from [88.17.225.216]:4504 refused: too many connections
2008:08:21-14:13:35 (none) exim[4577]: 2008-08-21 14:13:35 Connection from [59.115.32.213]:1368 refused: too many connections

i have the same problem with 7.290, so i think the problem exists!

i hope that anyone find a solution for this problem, because its very hard to restart the firewall every 3-4days.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 svens over 16 years ago in reply to Alex76
Hi,

2008:08:21-14:13:33 (none) exim[4577]: 2008-08-21 14:13:33 Connection from [88.17.225.216]:4504 refused: too many connections
2008:08:21-14:13:35 (none) exim[4577]: 2008-08-21 14:13:35 Connection from [59.115.32.213]:1368 refused: too many connections

i have the same problem with 7.290, so i think the problem exists!

i hope that anyone find a solution for this problem, because its very hard to restart the firewall every 3-4days.

As Gert already asked: Is it possible to get a login to your installation?

Cheers,

Sven.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Alex76 over 16 years ago in reply to svens

Hi Sven,

i have sended the data to you.

kind regrads

Alex
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 mhock over 16 years ago in reply to Alex76

Hi alex, hi sven

Assuming you are troubleshooting this issue on alex' system, would you please post your results here so I might solve the problem on my ASG 6.3 too?

Thank You!
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel