1 of 1 people found this helpful
Someone, or more likely a large number of systems, from the internet are making requests to your system for services that are not running, or are trying improper TCP connections and they system is closing and sending a reset packet. These lines indicate that the events are happening faster than the 200/s limit set on the system. Do you have a firewall in front of the Email Gateway, or is it directly on the internet?
Thanks for quick reply.
There is a firewall in front of Email Gateway, connection from internet is only allowed to tcp port 25.
We would need to try a packet capture to see where all the resets are, but it is likely that senders are continuing to try sending to you after the IronMail has indicated that it is done with a particular connection.