5 messages in net.sourceforge.lists.courier-usersRe: [courier-users] Too many ESTABLIS...
FromSent OnAttachments
Nicolas PenceNov 13, 2007 12:43 pm 
Brian A. SekleckiNov 13, 2007 12:54 pm 
Nicolas PenceNov 14, 2007 7:02 am 
Brian A. SekleckiNov 14, 2007 7:12 am 
Nicolas PenceNov 14, 2007 10:00 am 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:Re: [courier-users] Too many ESTABLISHED connections ?Actions...
From:Nicolas Pence (npe@dedicado.com)
Date:Nov 14, 2007 7:02:15 am
List:net.sourceforge.lists.courier-users

What type of NAT/PAT appliance/route is doing the translation?

NAT/Cisco PIX

What are the default socket timeouts?

Couldn´t get this info, not shure really where to look

Your netstat(8) should have a "state"colum to tell you what the 3-Way-handshake
state of your sockets is:

Yes, the state is ESTABLISHED, and stays like this for several minuts

# netstat -an | grep client-ip Proto Recv-Q Send-Q Local Address Foreign Address State tcp 0 0 server-ip:110 client-ip:4642 ESTABLISHED tcp 0 0 server-ip:110 client-ip:4638 ESTABLISHED tcp 0 0 server-ip:110 client-ip:4630 ESTABLISHED tcp 0 0 server-ip:110 client-ip:4626 ESTABLISHED tcp 0 0 server-ip:110 client-ip:4622 ESTABLISHED tcp 0 0 server-ip:110 client-ip:5643 ESTABLISHED

-----Mensaje original----- De: Brian A. Seklecki [mailto:lava@spiritual-machines.org] Enviado el: Martes, 13 de Noviembre de 2007 18:55 Para: Nicolas Pence CC: cour@lists.sourceforge.net Asunto: Re: [courier-users] Too many ESTABLISHED connections ?

On Tue, 2007-11-13 at 18:44 -0200, Nicolas Pence wrote:

Hi, seeing multiple connections from the same ip that stays ESTABLISHED for a long time, they reach easily the MAXPERIP=30 setted in pop3d.

Client see intermittent connection to our mailserver, courier-esmtp

What type of NAT/PAT appliance/route is doing the translation? What are the
default socket timeouts? Its likely not transmitting RST packets properly,
and/or keeping bad states.

Your netstat(8) should have a "state"colum to tell you what the 3-Way-handshake
state of your sockets is:

[...] Proto Recv-Q Send-Q Local Address Foreign Address (state)

tcp4 0 0 192.168.1.100.443 192.168.1.100.50052 TIME_WAIT tcp4 0 0 192.168.1.100.80 192.168.1.100.50051 TIME_WAIT tcp4 0 0 192.168.1.51.61624 192.168.1.68.389 ESTABLISHED

doesn´t behave like courier-pop3d in this case.

Number of PC's behind IP Address = 5, and it was tested using differen