dccm timeout lets spam through

Gary Mills mills@cc.UManitoba.CA
Thu Mar 27 00:54:32 UTC 2003


We had a couple of incidents today where `dccm' logged timeouts
connecting to `dccd', and was unable to reject bulk mail.  There were
high volumes of incoming mail each time, so it's likely related to the
number of connections or the connection rate.  After each incident,
`dccm' seemed to return to normal. Is there something I can adjust in
the dccm or dccd configuration to prevent this from happening?

The dccm log files looked like this:

  VERSION: 3
  DATE: 03/26/03 13:12:27 CST
  IP: evrtwa1-ar7-4-63-187-205.evrtwa1.dsl-verizon.net ::ffff:4.63.187.205
  HELO: aol.com
  ...
  To: Everyone
  Subject: Up To $5000 Per Week/FREE Laptop/No Phone Sales RQD
  Date: Wed, 26 Mar 2003 22:02:14 -0300
  ...
  ### end of message body ########################
  
  skip asking DCC 205.847 seconds more after failure
  ...
  result: accept

The sendmail logs had entries like this:

  Mar 26 13:00:03 electra dccm[922]: [ID 702911 mail.error] skip asking DCC 23.211 seconds more after failure
  Mar 26 13:00:04 electra dccm[922]: [ID 702911 mail.error] skip asking DCC 24.660 seconds more after failure
  ...
  Mar 26 13:47:27 electra dccm[922]: [ID 702911 mail.error] skip asking DCC 298.196 seconds more after failure
  Mar 26 13:47:27 electra dccm[922]: [ID 702911 mail.error] skip asking DCC 298.358 seconds more after failure
  Mar 26 13:47:29 electra dccm[922]: [ID 702911 mail.error] skip asking DCC 299.923 seconds more after failure


-- 
-Gary Mills-    -Unix Support-    -U of M Academic Computing and Networking-



More information about the DCC mailing list

Contact vjs@rhyolite.com by mail or use the form.