http & exim floods
load is stable, at day it's not higher than 3, it's usual 1,5
now its 0.8,
when i am in top in idle mode i suddenly see many httpd processes (or exim) which makes iowait & user cpu usage very high
load in few seconds changes from 1 to 36, than i have to reboot my server, which happens almost every day for few times...when i see this "attack" and restart exim or apache for 6 times, load isn't higher than 5, but i can watch the top all day long...
i've installed APF (+ AntiDos), BFD, mod_dosevasive, keepalive is off,
httpd seems to be protect from floods, but exim still not
i do not use mod_security... should i ? i think mod_dosevasive do the job :/
i don't know what to do... someone is really ranodmly flooding my box, which made me & me clients very frustrated :/
netstat, ps wwwaux do not show antyhing suspicous, maybe there are attacks from multiple locations, i really, really do know what to do more........
help!
