Mail Service and ssh lagging

Hello,

I am having a trouble with our mail server.

Through out the day our mail server has been acting funny, it will stop receiving e-mail for small amount of time then start again. OR it will go on "thinking mode" for 1-2 minutes while sending.

The client with get this message when the mail server decided to "stuck" or "think".

----
Alert
There may be a problem with the mail server or network. Check the setting for account or try again.

The server error encountered was: The connection to the server on port 110 time out.
----

When the mail server get stuck I will not able to open new ssh. But the connected ssh will be able to browse around. BUT mailq will go into stuck mode too it'll take 3 minutes to display 4 queued messages...

Here's what the secure.log looks like
Nov 20 16:13:04 students sshd[7403]: fatal: Timeout before authentication for xxx.xxx.xxx.xxx
Nov 20 16:13:48 students sshd[7454]: Did not receive identification string from xxx.xxx.xxx.xxx
Nov 20 16:13:48 students sshd[7455]: Did not receive identification string from xxx.xxx.xxx.xxx
Nov 20 16:14:04 students sshd[7438]: fatal: Timeout before authentication for xx.xxx.xxx.xx
Nov 20 16:14:04 students sshd[7439]: fatal: Timeout before authentication for xx.xxx.xxx.xx
Nov 20 16:15:49 students sshd[7468]: fatal: Timeout before authentication for xx.xxx.xxx.xx
Nov 20 16:15:49 students sshd[7469]: fatal: Timeout before authentication for xx.xxx.xxx.xx
Nov 20 16:17:25 students sshd[7541]: reverse mapping checking getaddrinfo for dsl-162.n-chelny.ru failed - POSSIBLE BREAKIN ATTEMPT!
Nov 20 16:17:25 students sshd[7542]: reverse mapping checking getaddrinfo for dsl-162.n-chelny.ru failed - POSSIBLE BREAKIN ATTEMPT!
Nov 20 16:17:34 students sshd[7491]: fatal: Timeout before authentication for xxx.xx.x.xxx
Nov 20 16:17:34 students sshd[7492]: fatal: Timeout before authentication for xxx.xx.x.xxx

The system.log looks like this:
Nov 20 16:16:28 students postfix/smtpd[7507]: auxpropfunc error no mechanism available\n
Nov 20 16:16:28 students servermgrd: TIME-CHECK: NSLXStandardRegisterService took 106.078815 seconds!\n
Nov 20 16:16:30 students pop3[7504]: login: mail.nese.com [xx.xx.xx.xx] harrybudiman plaintext User logged in
Nov 20 16:16:30 students pop3[7495]: login: mail.nese.com [xx.xx.xx.xx] housing plaintext User logged in
Nov 20 16:16:30 students pop3[7498]: login: mail.nese.com [66.92.90.38] michelleduval plaintext User logged in
Nov 20 16:16:30 students pop3[7497]: login: h-67-101-123-170.cmbrmaor.dynamic.covad.net [67.101.123.170] greenhall plaintext User logged in
Nov 20 16:16:30 students pop3[7496]: login: pool-151-203-107-247.bos.east.verizon.net [151.203.107.247] greenhallmanager plaintext User logged in
Nov 20 16:16:30 students pop3[7500]: login: 189-68-234-220.dsl.telesp.net.br [xxx.xx.xxx.xxx] vbellim plaintext User logged in
Nov 20 16:16:47 students postfix/smtpd[7120]: warning: xxx.xxx.xxx.xx: hostname 190-178-128-33.speedy.com.ar verification failed: Host not found

What is happening here? and how can I solve this?

I'd really appreciate some advice and help here 🙂

Thank you!

Jeanny

Mac OS X (10.4)

Posted on Nov 20, 2008 1:20 PM

Reply
2 replies

Nov 21, 2008 12:50 AM in response to sumomo

Check /var/log/secure.log
Chances are your server is under a dictionary (or other) attack on port 22 (ssh).
If you do not need port 22, close it at the firewall (ideally at a hw firewall at the entrance of your network and not OS X Server's firewall).
If you need ssh, then secure it. See davidh's excellent post: http://discussions.apple.com/thread.jspa?messageID=7082312&#7082312

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Mail Service and ssh lagging

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.