infiniti, bentley, pontiac, g35 mail attacks

[GatorBrent]

infiniti, bentley, pontiac, g35 are being affected by attacks pointed at exim causing max connections to keep being hit. We don't know if its directed at us or the 70.84 block in the datacenter. I'm currently on the phone working with dc to setup filters.

[khepri]

I'm on pontiac...I won't bother with a support ticket then...just wait...thanks

K

[Thomas]

Thanks very much Brent for this vital info.
But this is getting quite painful. Five + hours without email!
Anything to report?

[computergenius]

Also, I can't get a reply about what is happening to the incoming mail.

Is it held on the server? Is it bounced? Is it lost?

Asking the Chat support, I was told to email. Now that's a good idea, except...

[c-double]

I am getting this message when I try to go to Fantastico. Does this have anything to do with the problem you are having?

Warning: in_array(): Wrong datatype for second argument in /tmp/cpanel.chris.1121460811.18134 on line 932

Warning: in_array(): Wrong datatype for second argument in /tmp/cpanel.chris.1121460811.18134 on line 998

[Thomas]

Originally Posted by computergenius

Also, I can't get a reply about what is happening to the incoming mail.

Is it held on the server? Is it bounced? Is it lost?

Asking the Chat support, I was told to email. Now that's a good idea, except...

I've been sending test messages and watching. It's not bouncing, it's hanging. When exim goes back up for a minute a few messages get thru before it goes back down.

Stuff I sent at 10:00 am arrived at about 4:30 pm.

[GatorBrent]

Things look to have mostly resolved on all the boxes. woot!!


please let me know if you're having problems still.

[orbitant]

Good to hear that, hopefully it will not happen again during the weekdays.

Cheers!

[computergenius]

Am I missing something here?

There was a dictionary attack, yes? This is what was in the rejection message received by one of my Yahoo groups.

So spammers were looking at a @ somedomain . com, b @ somedomain . com, c @ somedomain . com, etc, looking for valid email addresses.

But all the posts that I have seen on the net say that you should have software in place to recognise that an attack is under way, and to block that IP - Hostgator seem to have simply blocked all IPs, so that no-one, legal or otherwise, could get through.

My email traffic still seems low, I haven't figured out why yet. And as to the person who said that he hopes it doesn't happen during the week, I was off for most of Friday and part of Saturday.