Bandwidth Over-usage

[Nomis]

Not sure where to post this so Usage Issue it is.

My access line is being pushed to the max. Is there any way to see what is causing the problem. And what ports are not needed for ispCP to work properly.

I am using Debian Etch and ispCP

[BeNe]

You mean the Traffic or what ?
Take a look at you IPTables or the ispCP Stats.

Quote:And what ports are not needed for ispCP to work properly.

What Services do you need on your Server ?
Take a look at your /etc/services about the Portnumbers.

Greez BeNe

[Nomis]

(02-13-2009 02:06 AM)BeNe Wrote:  You mean the Traffic or what ?
Take a look at you IPTables or the ispCP Stats.

Quote:And what ports are not needed for ispCP to work properly.

What Services do you need on your Server ?
Take a look at your /etc/services about the Portnumbers.

Greez BeNe

Yes I mean the Traffic, it is something coming down the line to the server. Which then generates a lot of out going traffic, which means that services like mail delivery is slowed down so much that mail can not be downloaded.

Not sure where to look for ispCP stats. I looked at the /etc/service for the port numbers. But still don't know what ports are needed to run a full web and mail server. If I turn off postfix the outbound traffic does drop but the incoming remains the same. So it defiantly something inbound. Is there a way to scan the ports and see what kind of traffic is using all the bandwidth?

[simple]

You have an awful lot of outgoing IMAP traffic, are you sure there's no missuse of the server as spam relay?

[Nomis]

(02-13-2009 05:14 AM)simple Wrote:  You have an awful lot of outgoing IMAP traffic, are you sure there's no missuse of the server as spam relay?

How would I find out and more importantly how do I stop it.

[BeNe]

Take a look at you Mail Logs.

Quote:how do I stop it.

Disable Courier/Dovecot and maybe Postfix.
But then you Mailserver is completly down and no custmer can sent or recieve a Mail.

Greez BeNe

[Nomis]

(02-13-2009 07:09 PM)BeNe Wrote:  Take a look at you Mail Logs.

Quote:how do I stop it.

Disable Courier/Dovecot and maybe Postfix.
But then you Mailserver is completly down and no custmer can sent or recieve a Mail.

Greez BeNe

Cant stop Mailserver, I did stop Postfix and outbound traffic reduced, but did nothing for incoming traffic. Do I need IMAP if everyone uses POP3 accounts.
If not how can I disable it?

[pgentoo]

Have you looked into your mail log files? That's quite a bit of mail traffic compared to the rest of your stuff; you could have an open relay or something maybe?

Also, yeah you can block IMAP if you don't offer it to your clients. you can block it at the service level, or simply just firewall off port 143 if you don't want to mess with the service configs.

-
pGentoo

[simple]

To stop IMAP: /etc/init.d/courier-imap stop
or really remove it: aptitude remove courier-imap / apt-get remove courier-imap

[Nomis]

(02-14-2009 09:12 PM)simple Wrote:  To stop IMAP: /etc/init.d/courier-imap stop
or really remove it: aptitude remove courier-imap / apt-get remove courier-imap

Ok so I removed courier-imap and it did not reduce the amount of traffic.
If I remove the ap, do the posts still remain open and can they be used. How do you close the ports or firewall it as mentioned?

---

Sorry meant the ports