Hi, I don't know where to look anymore. Sometimes, load on the server shoots up, right now it did to 40 and stays there for a while. Then, normally, it goes back to normal levels (2 or 3 or so)
I 'did a netstat' and I'll attach it here.
It looks like there a lot of attempts to connect to dovecot.
If I 'disable' a certain 'server' (domain) on the server, then the load goes back to normal.
At least it seems it does, it's hard to tell really as it's not very predictable when the load will go up or down, so you never know for sure what caused the change.
I've blocked a few more ip addresses via iptables, but I'm not convinced that does the trick really.
My question is, what is the best way to troubleshoot this and make sure the server responds in a normal way, always?