{"id":7706,"date":"2004-07-22T21:55:26","date_gmt":"2004-07-22T19:55:26","guid":{"rendered":"https:\/\/mamchenkov.net\/wordpress\/2004\/07\/22\/downtime-investigated\/"},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-29T22:00:00","slug":"downtime-investigated","status":"publish","type":"post","link":"https:\/\/mamchenkov.net\/wordpress\/2004\/07\/22\/downtime-investigated\/","title":{"rendered":"Downtime investigated"},"content":{"rendered":"<!-- google_ad_section_start -->\n<p>\t<img decoding=\"async\" class=\"alignright\" src=\"\/wordpress\/wp-content\/20040504-work.jpeg\" alt=\"\"><\/p>\n<p>I have investigated why the <a href=\"\/blog\/item\/1399\">server went down today<\/a> morning.  Apparently, the server was a victim to a dictionary spam attack.  I didn&#8217;t have any limits configured for Exim and that resulted in load avereages exceeding 60.  Gucho went extremely busy another couple of times during the course of the day, but now it should be OK.  I have set a few load average related limits and added few domains into the blacklist.  I have also upgraded Exim to a newer version (4.40), so I hope it will run for awhile now.<\/p>\n<div class=\"asis\">\n<pre>\n# Do not do any deliveries if load average is greater that this value\nqueue_only_load = 12\n# Do not run runq if load average is greater than this value\ndeliver_queue_load_max = 14\n# Do not accept any SMTP sessions (except for hosts in smtp_reserve_hosts) if\n# load average is greater than this value\nsmtp_load_reserve = 20\n<\/pre>\n<\/p><\/div>\n<p>If anyone has any other suggestions, let me know via comments.<\/p>\n<!-- google_ad_section_end -->\n","protected":false},"excerpt":{"rendered":"<!-- google_ad_section_start -->\n<p>I have investigated why the server went down today morning. Apparently, the server was a victim to a dictionary spam attack. I didn&#8217;t have any limits configured for Exim and that resulted in load avereages exceeding 60. Gucho went extremely busy another couple of times during the course of the day, but now it should &hellip; <a href=\"https:\/\/mamchenkov.net\/wordpress\/2004\/07\/22\/downtime-investigated\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Downtime investigated<\/span><\/a><\/p>\n<!-- google_ad_section_end -->\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"_links_to":"","_links_to_target":""},"categories":[1,1335],"tags":[],"keyring_services":[],"class_list":["post-7706","post","type-post","status-publish","format-standard","hentry","category-general","category-site-news"],"aioseo_notices":[],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack-related-posts":[{"id":7467,"url":"https:\/\/mamchenkov.net\/wordpress\/2004\/04\/26\/mrtg\/","url_meta":{"origin":7706,"position":0},"title":"MRTG","author":"Leonid Mamchenkov","date":"April 26, 2004","format":false,"excerpt":"MRTG (Multi Router Traffic Grapher) is monitoring utility, which runs on many platforms and is capable of collecting and graphing statistical information such as network traffic, CPU\/Memory\/Disk space usage, etc. MRTG can gather information using both SNMP protocol and external scripts. Below are few pieces of my MRTG config file\u2026","rel":"","context":"In &quot;All&quot;","block_context":{"text":"All","link":"https:\/\/mamchenkov.net\/wordpress\/category\/general\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":8519,"url":"https:\/\/mamchenkov.net\/wordpress\/2005\/01\/23\/fixing-spamassassin-high-load\/","url_meta":{"origin":7706,"position":1},"title":"Fixing SpamAssassin high load","author":"Leonid Mamchenkov","date":"January 23, 2005","format":false,"excerpt":"Since few days before the upgrade of the home server to Fedora Linux Core 3 I was seeing high load spikes from SpamAssassin. After the upgrade, my load average stayed at 10-15 almost the whole day. I was trying to fix it, but to no avail. At first, I have\u2026","rel":"","context":"In &quot;All&quot;","block_context":{"text":"All","link":"https:\/\/mamchenkov.net\/wordpress\/category\/general\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":8990,"url":"https:\/\/mamchenkov.net\/wordpress\/2005\/05\/22\/uptime-records\/","url_meta":{"origin":7706,"position":2},"title":"Uptime records","author":"Leonid Mamchenkov","date":"May 22, 2005","format":false,"excerpt":"It's been a while since I checked uptime on few servers that I manage at work. And by \"a while\" I mean \"a while\". Here are five records for you to be impressed. ldap-master - this server has a pretty easy life. It is a master node of our internal\u2026","rel":"","context":"In &quot;All&quot;","block_context":{"text":"All","link":"https:\/\/mamchenkov.net\/wordpress\/category\/general\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":29034,"url":"https:\/\/mamchenkov.net\/wordpress\/2018\/11\/26\/roadrunner-high-performance-php-application-server-load-balancer-and-process-manager\/","url_meta":{"origin":7706,"position":3},"title":"RoadRunner &#8211; high-performance PHP application server, load-balancer and process manager","author":"Leonid Mamchenkov","date":"November 26, 2018","format":false,"excerpt":"RoadRunner is a high-performance PHP application server, load-balancer and process manager, written in Goland.\u00a0 It sounds like an excellent replacement for the built-in PHP server, and even more than that - it's production-ready.\u00a0 And it works on Windows too. RoadRunner is an open source (MIT licensed) high-performance PHP application server,\u2026","rel":"","context":"In &quot;All&quot;","block_context":{"text":"All","link":"https:\/\/mamchenkov.net\/wordpress\/category\/general\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":10580,"url":"https:\/\/mamchenkov.net\/wordpress\/2006\/11\/13\/killing-the-apache-load-with-keepalive\/","url_meta":{"origin":7706,"position":4},"title":"Killing the Apache load with KeepAlive","author":"Leonid Mamchenkov","date":"November 13, 2006","format":false,"excerpt":"Over the weekend, Apache web server went nuts and bolts, pushing server load average to 10, 11, 12, 14, 15... I even got the notification from the hosting company that they see some abnormal behaviour on my node. Looking for a quick fix, I scrolled through default configuration looking for\u2026","rel":"","context":"In &quot;All&quot;","block_context":{"text":"All","link":"https:\/\/mamchenkov.net\/wordpress\/category\/general\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":7954,"url":"https:\/\/mamchenkov.net\/wordpress\/2004\/09\/25\/relay_from_hosts-in-exim-440\/","url_meta":{"origin":7706,"position":5},"title":"relay_from_hosts in exim-4.40","author":"Leonid Mamchenkov","date":"September 25, 2004","format":false,"excerpt":"Just in case you will bump into the same problem or if I will forget how to solve it... If you want to use a file with a list of IP addresses that are allowed to relay mail through your server, you need to use net-iplsearch instead of plain lsearch.\u2026","rel":"","context":"In &quot;All&quot;","block_context":{"text":"All","link":"https:\/\/mamchenkov.net\/wordpress\/category\/general\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"jetpack_sharing_enabled":true,"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/posts\/7706","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/comments?post=7706"}],"version-history":[{"count":0,"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/posts\/7706\/revisions"}],"wp:attachment":[{"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/media?parent=7706"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/categories?post=7706"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/tags?post=7706"},{"taxonomy":"keyring_services","embeddable":true,"href":"https:\/\/mamchenkov.net\/wordpress\/wp-json\/wp\/v2\/keyring_services?post=7706"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}