DOS attacked :(

Pete pete at eatathome.com.au
Wed Mar 3 23:07:35 GMT 2004


What should i do to rectify or prevent this? Nothing leave it to MS?

Load avergae is stuck on 7 and almost nothing is wworking on this
machine, even ssh commands have a 10sec delay.

Will deleting the offending email be the entire solution?


Mar  4 10:09:56 mail01 postfix/qmgr[14167]: 6D35733D27: from=<>,
size=3477, nrcpt=1 (queue active)
Mar  4 10:09:56 mail01 postfix/smtpd[15859]: disconnect from
adl0133.systems.sa.gov.au[143.216.236.20]
Mar  4 10:09:56 mail01 postfix/qmgr[14167]: 6D35733D27:
to=<lwelch at mteliza.com.au>, relay=none, delay=0, status=deferred
(deferred transport)
Mar  4 10:10:20 mail01 update.virus.scanners: Found clamav installed
Mar  4 10:10:20 mail01 update.virus.scanners: Running autoupdate for clamav
Mar  4 10:10:27 mail01 MailScanner[14186]: SpamAssassin timed out and
was killed, consecutive failure 12 of 20
Mar  4 10:10:50 mail01 MailScanner[14171]: Commercial scanner
clamavmodule timed out!
Mar  4 10:10:50 mail01 MailScanner[14182]: Commercial scanner
clamavmodule timed out!
Mar  4 10:10:52 mail01 MailScanner[14171]: Virus Scanning: Denial Of
Service attack is in message A086133CDD
Mar  4 10:10:52 mail01 ClamAV-autoupdate[16032]: ClamAV did not need
updating
Mar  4 10:10:53 mail01 MailScanner[14182]: Virus Scanning: Denial Of
Service attack detected!
Mar  4 10:11:12 mail01 MailScanner[14186]: SpamAssassin timed out and
was killed, consecutive failure 13 of 20
Mar  4 10:11:35 mail01 postfix/smtpd[15859]: warning: 144.134.105.149:
hostname glpp-p-144-134-105-149.prem.tmns.net.au verification failed:
Host not found
Mar  4 10:11:46 mail01 postfix/qmgr[14167]: 802E233CF1: skipped, still
being delivered
Mar  4 10:11:46 mail01 postfix/qmgr[14167]: 81A6B33CF8: skipped, still
being delivered
Mar  4 10:11:46 mail01 postfix/qmgr[14167]: 319FC33CF6: skipped, still
being delivered
Mar  4 10:11:46 mail01 postfix/qmgr[14167]: 7AB0F33CE7: skipped, still
being delivered
Mar  4 10:11:46 mail01 postfix/qmgr[14167]: 7144633CEF: skipped, still
being delivered
Mar  4 10:11:46 mail01 postfix/qmgr[14167]: 7BB5933CF5: skipped, still
being delivered
Mar  4 10:11:46 mail01 postfix/qmgr[14167]: B023533CFB: skipped, still
being delivered
Mar  4 10:11:46 mail01 postfix/qmgr[14167]: A086133CDD: skipped, still
being delivered
Mar  4 10:11:46 mail01 postfix/qmgr[14167]: A101F33CF9: skipped, still
being delivered
Mar  4 10:11:46 mail01 postfix/qmgr[14167]: 632A833CE0: skipped, still
being delivered
Mar  4 10:11:46 mail01 postfix/qmgr[14167]: 67E9533CE2: skipped, still
being delivered
Mar  4 10:11:46 mail01 postfix/qmgr[14167]: 593BD33984: skipped, still
being delivered
Mar  4 10:11:53 mail01 MailScanner[14186]: SpamAssassin timed out and
was killed, consecutive failure 14 of 20
Mar  4 10:12:37 mail01 MailScanner[14186]: SpamAssassin timed out and
was killed, consecutive failure 15 of 20



More information about the MailScanner mailing list