Hi all,
Over the weekend, my server (that hosts PGD) started reporting excessive process warnings on the monitoring solution I use to keep an eye on things.
In investigating this it's become plainly apparent that there are a lot of weird connections coming into the server from some dubious IP addresses. Many of these are already being handled by the firewall and the hosting management software, but some were not and these seemed to be intent on keeping connections to the mail services alive for an indefinite period of time.
To try and combat this I've added some rules to the firewall to limit simultaneous connections. The downside of this is that you may notice a slight performance hit when surfing the site as connections could be rejected during page loading.
I'm doing my best to ensure the server is safe from malicious activity and right now, this is the best solution I can come up with. Looking at some monitoring of the network it appears to be working.
If you do notice any issues, please post details here.
Thanks
Bookmarks