Mail4 server - getting an attack flood - Resolved

[Stephen]

We are checking on mail4, as it is getting a flood and dropping a lot/most packets, it is not large enough to impact other servers, but something crafted, working on getting in control.

 

[SachinK]

We tried reboot the server but looks like its not able to find the interfaces. Working on it and will update soon.

 

[Stephen]

Still working on this, very odd case here, a flood was coming in, packets started dropping from it, then almost like the NICs quit, maybe triggered a bug, and we are working to find exactly where.

 

[Stephen]

UP UP UP.

The blocking it did for the flood prevention really fouled up the entire network routing config, we gave up on fixing what was there and nuked it all, restarted from nothing to make it (the configs that is, not the entire server!)

We've seen floods before and all, but not one that did this, so it was quite likely a fluke bug.