/var/log/messages
Mar 30, 2007What does the #53 mean at the end of the following?
Code:
Mar 25 04:28:23 gamma named[9887]: lame server resolving 'xxxxx.com' (in 'xxxxx.com'?): 207.58.185.160#53
ADVERTISEMENT
/var/log/messages Flooded With Kernel Messages
Feb 6, 2007I have just noticed that for several days I'm constantly receiving these infos in /var/log/messages. I haven't done anything that would invoke them. How can I disable these messages? Are they anything to worry about?
Code:
Feb 6 14:28:18 server kernel: [<c014f600>] find_extend_vma+0x12/0x4f
Feb 6 14:28:18 server kernel: [<c0134383>] get_futex_key+0x39/0x108
Feb 6 14:28:18 server kernel: [<c011d305>] finish_task_switch+0x30/0x66
Feb 6 14:28:18 server kernel: [<c02cf618>] schedule+0x844/0x87a
Feb 6 14:28:18 server kernel: [<c027734b>] sys_socketcall+0x1df/0x1fb
Feb 6 14:28:18 server kernel: [<c0125bc5>] sys_gettimeofday+0x53/0xac
Feb 6 14:28:18 server kernel: [<c02d137f>] syscall_call+0x7/0xb
Feb 6 14:28:18 server kernel: [<c02d007b>] _read_lock_irq+0x4/0x1e
Feb 6 14:28:18 server kernel: Badness in dst_release at include/net/dst.h:149
Feb 6 14:28:18 server kernel: [<f8d8a555>] ip6_push_pending_frames+0x340/0x369 [ipv6]
Feb 6 14:28:18 server kernel: [<f8d9883f>] udp_v6_push_pending_frames+0x169/0x185 [ipv6]Badness in dst_release at include/net/dst.h:149
Feb 6 14:28:18 server kernel: [<c0278fa8>]
Feb 6 14:28:18 server kernel: [<f8d98e7d>] udpv6_sendmsg+0x622/0x770 [ipv6]
Feb 6 14:28:18 server kernel: [<c027a498>] __kfree_skb+0x55/0xf7
Feb 6 14:28:18 server kernel: [<c027e1b8>] skb_dequeue+0x40/0x46
Feb 6 14:28:18 server kernel: [<c027b009>] net_tx_action+0x60/0xfc
Feb 6 14:28:18 server kernel: [<c0126354>] skb_recv_datagram+0x61/0x9b
Feb 6 14:28:18 server kernel: [<c02b1ed7>] __do_softirq+0x4c/0xb1
Feb 6 14:28:18 server kernel: [<c010814b>] do_softirq+0x4f/0x56
Feb 6 14:28:18 server kernel: =======================
Feb 6 14:28:18 server kernel: [<c0107a60>] do_IRQ+0x1a2/0x1ae
Feb 6 14:28:18 server kernel: [<c02d1d3c>] udp_recvmsg+0x5f/0x271
Feb 6 14:28:18 server kernel: [<c02b7b35>] common_interrupt+0x18/0x20
Feb 6 14:28:18 server kernel: [<c02d007b>] inet_sendmsg+0x38/0x42
Feb 6 14:28:18 server kernel: [<c02757f5>] _read_lock_irq+0x4/0x1e
Feb 6 14:28:18 server kernel: sock_sendmsg+0xdb/0xf7
Feb 6 14:28:18 server kernel: [<c02757f5>] sock_sendmsg+0xdb/0xf7
Feb 6 14:28:18 server kernel: [<c011fee1>] autoremove_wake_function+0x0/0x2d
Feb 6 14:28:18 server kernel: [<c027a89e>] verify_iovec+0x76/0xc2
Feb 6 14:28:18 server kernel: [<c0276f44>] sys_sendmsg+0x1ee/0x23b
Feb 6 14:28:18 server kernel: [<c011cb7d>] activate_task+0x88/0x95
Feb 6 14:28:18 server kernel: [<c011d00a>] try_to_wake_up+0x225/0x230
Feb 6 14:28:18 server kernel: [<c011d00a>] try_to_wake_up+0x225/0x230
Feb 6 14:28:18 server kernel: [<c0170776>] inode_update_time+0x80/0x87
Feb 6 14:28:18 server kernel: [<c0164748>] pipe_writev+0x310/0x31c
Feb 6 14:28:18 server kernel: [<c02cf622>] schedule+0x84e/0x87a
Feb 6 14:28:18 server kernel: [<c027734b>] sys_socketcall+0x1df/0x1fb
Feb 6 14:28:18 server kernel: [<c0125bc5>] sys_gettimeofday+0x53/0xac
Feb 6 14:28:18 server kernel: [<c02d137f>] syscall_call+0x7/0xb
Feb 6 14:28:18 server kernel: [<c02d007b>] _read_lock_irq+0x4/0x1e
Feb 6 14:28:18 server kernel: Badness in dst_release at include/net/dst.h:149
Feb 6 14:28:18 server kernel: [<f8d98ef7>] udpv6_sendmsg+0x69c/0x770 [ipv6]
Feb 6 14:28:18 server kernel: [<c027a498>] skb_dequeue+0x40/0x46
Feb 6 14:28:18 server kernel: [<c027b009>] skb_recv_datagram+0x61/0x9b
Feb 6 14:28:18 server kernel: [<c02b1ed7>] udp_recvmsg+0x5f/0x271
Feb 6 14:28:18 server kernel: [<c02b7b35>] inet_sendmsg+0x38/0x42
Feb 6 14:28:18 server kernel: [<c02757f5>] sock_sendmsg+0xdb/0xf7
Feb 6 14:28:18 server kernel: [<c02757f5>] sock_sendmsg+0xdb/0xf7
Feb 6 14:28:18 server kernel: [<c011fee1>] autoremove_wake_function+0x0/0x2d
Feb 6 14:28:18 server kernel: [<c027a89e>] verify_iovec+0x76/0xc2
Feb 6 14:28:18 server kernel: [<c0276f44>] sys_sendmsg+0x1ee/0x23b
Feb 6 14:28:18 server kernel: [<c011cb7d>] activate_task+0x88/0x95
Feb 6 14:28:18 server kernel: [<c011d00a>] try_to_wake_up+0x225/0x230
Feb 6 14:28:18 server kernel: [<c011d00a>] try_to_wake_up+0x225/0x230
Feb 6 14:28:18 server kernel: [<c0170776>] inode_update_time+0x80/0x87
Feb 6 14:28:18 server kernel: [<c0164748>] pipe_writev+0x310/0x31c
Feb 6 14:28:18 server kernel: [<c02cf622>] schedule+0x84e/0x87a
Feb 6 14:28:18 server kernel: [<c027734b>] sys_socketcall+0x1df/0x1fb
Feb 6 14:28:18 server kernel: [<c0125bc5>] sys_gettimeofday+0x53/0xac
Feb 6 14:28:18 server kernel: [<c02d137f>] syscall_call+0x7/0xb
Feb 6 14:28:18 server kernel: [<c02d007b>] _read_lock_irq+0x4/0x1e
Where Are Email Messages
Oct 13, 2009I need to backup some emails from my VPS, Can you please tell me where my emails are stored, I have a VPS running CENTOS, PLESK and POSTFIX mail server.
View 1 Replies View RelatedMessages Logs
Aug 16, 2007My messages logs are full with the following:
Aug 16 05:45:08 sml101 sshd(pam_unix)[23100]: check pass; user unknown
Aug 16 05:45:08 sml101 sshd(pam_unix)[23100]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.111.176.1$
Aug 16 05:45:13 sml101 sshd(pam_unix)[23119]: check pass; user unknown
Aug 16 05:45:15 sml101 sshd(pam_unix)[23119]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.111.176.1$
Aug 16 05:45:18 sml101 sshd(pam_unix)[23161]: check pass; user unknown
Aug 16 05:45:18 sml101 sshd(pam_unix)[23161]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.111.176.1$
Aug 16 05:45:21 sml101 sshd(pam_unix)[23178]: check pass; user unknown
Aug 16 05:45:21 sml101 sshd(pam_unix)[23178]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.111.176.1$
Aug 16 05:45:24 sml101 sshd(pam_unix)[23187]: check pass; user unknown
Aug 16 05:45:24 sml101 sshd(pam_unix)[23187]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.111.176.1$
Aug 16 05:45:27 sml101 sshd(pam_unix)[23235]: check pass; user unknown
Aug 16 05:45:27 sml101 sshd(pam_unix)[23235]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.111.176.1$
Aug 16 05:45:29 sml101 sshd(pam_unix)[23249]: check pass; user unknown
Aug 16 05:45:29 sml101 sshd(pam_unix)[23249]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.111.176.1$
Aug 16 05:45:32 sml101 sshd(pam_unix)[23262]: check pass; user unknown
Aug 16 05:45:32 sml101 sshd(pam_unix)[23262]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.111.176.1$
Aug 16 05:45:35 sml101 sshd(pam_unix)[23283]: check pass; user unknown
Aug 16 05:45:35 sml101 sshd(pam_unix)[23283]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.111.176.1$
Aug 16 05:45:38 sml101 sshd(pam_unix)[23307]: check pass; user unknown
Aug 16 05:45:38 sml101 sshd(pam_unix)[23307]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.111.176.1$
Aug 16 05:45:40 sml101 sshd(pam_unix)[23321]: check pass; user unknown
Aug 16 05:45:40 sml101 sshd(pam_unix)[23321]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.111.176.1$
Ata Error In Messages File
Jul 27, 2009Does anyone know what the following events in /var/log/messages mean. It looks like some sort of failure on the ata bus. Does the last line mean that it successfully wrote all data using the cache, or could there be data loss?
The output of smartctl looks ok for the disk.
Code:
Jul 26 16:44:35 server1 kernel: ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x2 frozen
Jul 26 16:44:35 server1 kernel: ata1.00: cmd c8/00:08:9d:e2:8a/00:00:00:00:00/ec tag 0 cdb 0x0 data 4096 in
Jul 26 16:44:35 server1 kernel: res 40/00:01:00:4f:c2/00:00:00:00:00/00 Emask 0x4 (timeout)
Jul 26 16:44:42 server1 kernel: ata1: port is slow to respond, please be patient (Status 0xd0)
Jul 26 16:45:05 server1 kernel: ata1: port failed to respond (30 secs, Status 0xd0)
Jul 26 16:45:05 server1 kernel: ata1: soft resetting port
Jul 26 16:45:10 server1 kernel: ata1.00: revalidation failed (errno=-2)
Jul 26 16:45:10 server1 kernel: ata1: failed to recover some devices, retrying in 5 secs
Jul 26 16:45:15 server1 kernel: ata1: soft resetting port
Jul 26 16:45:15 server1 kernel: ata1.00: configured for UDMA/133
Jul 26 16:45:15 server1 kernel: ata1: EH complete
Jul 26 16:45:15 server1 kernel: SCSI device sda: 976773168 512-byte hdwr sectors (500108 MB)
Jul 26 16:45:15 server1 kernel: SCSI device sda: drive cache: write back
LFD Messages Regarding High Load...
Jun 16, 2009I have a VPS with Future Hosting and recently I have been getting more and more notifications from LFD regarding high CPU load. For example:
Time: Sun Jun 14 06:50:48 2009 -0500
1 Min Load Avg: 9.47
5 Min Load Avg: 6.25
15 Min Load Avg: 3.68
Running/Total Processes: 2/105
I am getting at least one of these a day now and I am also getting alerts about services failing, SPAMD in particular but also EXIM (and messages about LFD being unable to determine the exim queue length). External monitors are also warning me about SMTP timeouts during the same time period that I get the "high load" errors.
Tech support seems a bit stumped by this one and ALWAYS come back with "load looks fine right now". With the frequency of the warning emails increasing I am getting very concerned about the stability of my VPS.
I am not running anything significant on my VPS yet with minimal visitors and load (RAM usage consistently stays below 300MB on a VPS with 1+GB RAM.
Slow Log Messages To Syslog
Dec 8, 2008Is there any way with mysql 5.0 to send query and slow
log messages (e.g. mysql-slow log and/or mysql-query
log messages) to syslog ?
I want to visualize my mysql report online. ( like use Rsyslog )
Named Message In Var/log/messages
Jun 30, 2007Few days back i began to have problem with server overload, when i checked in /var/log/messages i found a lot of
Jun 28 14:17:59 secure named[3523]: client 200.48.225.146#59035: error sending response: host unreachable
Jun 28 14:17:59 secure named[3523]: client 200.51.211.5#32774: error sending response: host unreachable
Jun 28 14:17:59 secure named[3523]: client 202.55.145.3#32637: error sending response: host unreachable
Jun 28 14:17:59 secure named[3523]: client 66.245.177.163#3936: error sending response: host unreachable
Jun 28 14:17:59 secure named[3523]: client 202.59.163.2#32768: error sending response: host unreachable
Jun 28 14:17:59 secure named[3523]: client 216.247.37.56#24990: error sending response: host unreachable
Jun 28 14:17:59 secure named[3523]: client 194.18.168.184#39718: error sending response: host unreachable
Jun 28 14:17:59 secure named[3523]: client 64.226.28.70#45706: error sending response: host unreachable
all at the same hour,minutes and seconds, this that i wrote is an example (the ip's are reals) but like it i found a lot of more, and is in the same time that the server overload. the server is RHE and i have APF and BFA installed.
Postfix Bounce Messages
Feb 6, 2008Where can I turn off the emails that go out in response to a message not being delivered?
View 2 Replies View RelatedRkhunter Error Messages
Dec 29, 2007I just ran 'rkhunter -c --quiet' and this is the error messages I got:
Line:
Warning: This operating system is not fully supported!
Line: Warning: This operating system is not fully supported!
Warning: Cannot find md5_not_known
Some errors has been found while checking. Please perform a manual check on this machine debian
Is this something I should be worried about??
I'm running CentOS 5.
MSN / Hotmail Blocking Messages
Feb 13, 2007It appears that MSN / Hotmail have recently began blocking an awful lot of servers I manage. Several of them (for a company I work for) are in a few blacklists however a number of the IP addresses I manage are 100% clean.
Anyone know of something MSN/Hotmail recently began enforcing?
The blocks began at around 6 PM EST on Thursday of last week.
The error message is as follows:
Your e-mail was rejected for policy reasons on this
gateway. Reasons for rejection may be related to content such as obscene
language, graphics, or spam-like characteristics (or) other reputation
problems. For sender troubleshooting information, please go to
http://postmaster.msn.com. Please note: if you are an end-user please
contact your E-mail/Internet Service Provider for assistance.
I feel like a pawn for asking this on WHT but from what I can see
it's fairly widespread.
The domains in question do have basic SPF implemented as well.
not limited to a contact at hotmail / msn that would enjoy a phonebeating.
[smtp] 421 Too Many Messages In This Connection
Jul 10, 2007we send mailing tih php through smtp connection
All ok in the last 5 month
But now when set more than 1000 emails x sessione (any 10 minutes) we get this error:
"421 too many messages in this connection"
There aren't new configuration on exim.
So we have set 1000 emails max and lower minutes in the session (5) but there is another problem:
Warning: fsockopen() [function.fsockopen]: unable to connect to mx.***.com:25 in /home/***.php on line 47
Connection refused (111)
Can be too lower 5 minutes?
Filter Outgoing Messages
Apr 1, 2007I am on a DirectAdmin server, with root access. Exim mail server.
Is there any way to filter outgoing messages? Let's say if IP of client is listed in blacklist, they can not send out emails
How To Hide Server Messages
Nov 18, 2007messages such as
Apache/2.2.6 (Unix) mod_ssl/2.2.6 OpenSSL/0.9.7a FrontPage/5.0.2.2635 mod_bwlimited/1.4 mod_jk/1.2.25 mod_mono/1.2.4 mod_auth_passthrough/2.1 PHP/5.2.4
when you go to browse a folder with no index file..
is there away to remove this?
Pure-ftpd In /var/log/messages
Sep 14, 2007/var/log/messages is full of messages like this every 5 minutes:
[INFO] New connection from 209.85.4.32
pure-ftpd: (?@209.85.4.32) [INFO] Logout
is there any way to stop it?
Strange Stuff In /var/log/messages
Feb 19, 2007Quote:
Feb 19 15:57:39 server proftpd[1363]: server.com (127.0.0.1[127.0.0.1]) - FTP session closed.
Feb 19 16:06:02 server proftpd[1982]: server.com (127.0.0.1[127.0.0.1]) - FTP session opened.
Feb 19 16:06:02 server proftpd[1982]: server.com (127.0.0.1[127.0.0.1]) - FTP session closed.
Feb 19 16:14:24 server proftpd[2471]: server.com (127.0.0.1[127.0.0.1]) - FTP session opened.
Feb 19 16:14:24 server proftpd[2471]: server.com (127.0.0.1[127.0.0.1]) - FTP session closed.
Feb 19 16:22:46 server proftpd[3062]: server.com (127.0.0.1[127.0.0.1]) - FTP session opened.
Feb 19 16:22:46 server proftpd[3062]: server.com (127.0.0.1[127.0.0.1]) - FTP session closed.
Feb 19 16:31:09 server proftpd[3696]: server.com (127.0.0.1[127.0.0.1]) - FTP session opened.
Feb 19 16:31:09 server proftpd[3696]: server.com (127.0.0.1[127.0.0.1]) - FTP session closed.
Feb 19 16:39:31 server proftpd[4185]: server.com (127.0.0.1[127.0.0.1]) - FTP session opened.
Feb 19 16:39:31 server proftpd[4185]: server.com (127.0.0.1[127.0.0.1]) - FTP session closed.
Feb 19 16:47:53 server proftpd[4946]: server.com (127.0.0.1[127.0.0.1]) - FTP session opened.
Feb 19 16:47:53 server proftpd[4946]: server.com (127.0.0.1[127.0.0.1]) - FTP session closed.
Feb 19 16:56:16 server proftpd[5495]: server.com (127.0.0.1[127.0.0.1]) - FTP session opened.
Feb 19 16:56:16 server proftpd[5495]: server.com (127.0.0.1[127.0.0.1]) - FTP session closed.
Feb 19 17:04:38 server proftpd[6206]: server.com (127.0.0.1[127.0.0.1]) - FTP session opened.
Feb 19 17:04:38 server proftpd[6206]: server.com (127.0.0.1[127.0.0.1]) - FTP session closed.
Feb 19 17:13:00 server proftpd[6661]: server.com (127.0.0.1[127.0.0.1]) - FTP session opened.
Feb 19 17:13:00 server proftpd[6661]: server.com (127.0.0.1[127.0.0.1]) - FTP session closed.
Feb 19 17:21:23 server proftpd[7225]: server.com (127.0.0.1[127.0.0.1]) - FTP session opened.
Feb 19 17:21:23 server proftpd[7225]: server.com (127.0.0.1[127.0.0.1]) - FTP session closed.
I see over a few hundred of these lines in /var/log/messages. The timestamp is exactly the same for every 2 lines (Proftp session- Opened and Closed). It's occuring every hour of the day. Is someone attacking the ftp daemon or something?
Exim Failed Messages
Nov 15, 2007We're on a VPS and lately we've been getting a few 'exim has failed...A restart was attempted automagicly.' messages. Support indicated that we're hitting our limits and suggested that we move to a bigger package or remove accounts. I only have 2 active sites on this account. We're new at this and don't know if there's anything else we can do.
Does anyone know what could be causing exim to fail?
Apache :: Startup Messages Do Not Appear
Jan 25, 2014I have 2.4.3 (Win-64) installed and running. When it starts up, I get a command prompt window that has messages in it, but the window closes so quickly, I can't read the messages. They don't appear in the log. I have tried to manually start the server, but when I do, the messages do not appear!
How can I get that window to stay open or where can I see those messages?
I Can Not Receive Messages From The Server Pop3
Jan 27, 2008I can not download messages from the server via pop3 and browsed on outlook
View 2 Replies View RelatedStrange Kernel Messages In Shell
Feb 7, 2007I am getting these strange messages in the shell.
Message from syslogd@hostname at Thu Feb 8 02:08:10 2007 ...
hostname kernel: Call Trace:
Message from syslogd@hostname at Thu Feb 8 02:08:10 2007 ...
hostname kernel: <c01c2650> do_lookup+0x5a/0x78 <c01c2de3> __link_path_walk+0x775/0xbf0
Message from syslogd@hostname at Thu Feb 8 02:08:10 2007 ...
hostname kernel: <c019fa60> prep_new_page+0x2f/0x148 <c01c32a1> link_path_walk+0x43/0xae
Message from syslogd@hostname at Thu Feb 8 02:08:10 2007 ...
hostname kernel: <c01c69d7> vfs_readdir+0x5f/0x67 <c01c6e3d> sys_getdents64+0xb8/0xc3
Message from syslogd@hostname at Thu Feb 8 02:08:10 2007 ...
hostname kernel: <c0345252> _atomic_dec_and_lock+0x2a/0x44 <c01c36b5> do_path_lookup+0x1f6/0x241
Message from syslogd@hostname at Thu Feb 8 02:08:10 2007 ...
hostname kernel: <c01c3910> __user_walk_fd+0x29/0x3a <c01bedd8> sys_readlinkat+0x25/0x74
Message from syslogd@hostname at Thu Feb 8 02:08:10 2007 ...
hostname kernel: <c01c69d7> vfs_readdir+0x5f/0x67 <c01c6e3d> sys_getdents64+0xb8/0xc3
Message from syslogd@hostname at Thu Feb 8 02:08:10 2007 ...
hostname kernel: <c0345252> _atomic_dec_and_lock+0x2a/0x44 <c01bee3a> sys_readlink+0x13/0x17
Message from syslogd@hostname at Thu Feb 8 02:08:10 2007 ...
hostname kernel: <c01666ab> sysenter_past_esp+0x54/0x89
Message from syslogd@hostname at Thu Feb 8 02:08:10 2007 ...
hostname kernel: Code: 00 00 70 ee a0 d0 bc ee a0 d0 bc ed a0 d0 c4 ee a0 d0 c4 ed a0 d0 4c ee a0 d0 4c ee a0 d0 64 ba 8f d1 64 ba 8f d1 87 2f 39 34 30 <d1> 35 f6 00 0c 10 c2 00 00 00 00 00 00 00 00 36 31 38 00 65 6e
Message from syslogd@hostname at Thu Feb 8 02:08:10 2007 ...
hostname kernel: EIP: [<d0a0ee61>] 0xd0a0ee61 SS:ESP 0068:f320fe44
Is this any issues with the current kernel that i am running. Do I need to change the kernel version ( 2.6.17.6 )
Limit Outgoing Messages (QMail)
Nov 9, 2009We've got a dedicated server at our company that hosts several sites and email accounts. Today I noticed that in the mail queue (from Plesk) we have like 5 or 6 messages from the same customer with around 400 destination addresses for EACH one. This would be like 2000-3000 emails to be sent. It isn't spam as it's some kind of newsletter.
I don't really know how the QMail server handles this, but it's been 5 hours since some of those messages entered the queue, and they are still there, so it seems that is having some difficulty.
I don't pretend to limit the amount of emails an user can send per minute or per hour, but I would like to know if there is any way of managing the queue like, lets say, send 50 message per minute. As far as I know, the mail queue right now (by default) starts sending the messages as they come, which means it could send 1000 in a few seconds if it can handle it.
I don't even know if this would be better or worse, meaning that maybe messages could get queued when the server could handle them, so some customers would see that emails are not working instantly as they do now. It also would be good if this tool (if exists) could report the current status of the queue, saturation, etc...
We're a bit worried because a couple of days ago we had some kind of attack and our server started sending hundreds of emails with fake sender and the CPU went overloaded and the mail queue was too big.
Handling Incoming Email Messages
Nov 12, 2008i'm wanting my users to be able to upload pictures to their accounts via email by sending the picture to a central email address (pics@mysite.com, for example).
from there, i'd like to take that incoming email and parse it how i see fit. (matching the email address to the user account, inserting the subject as the photo title, etc...)
what's the best method of handling this?
Warning Messages From The Nobody Check Script
Apr 21, 2008I am getting the following warning messages from the nobody check script by Webhostgear [url]
Warning: Malicious Nobody Process Found
=========================================
Options: kill bad proc=1 logging lvl=1
SCAN SUMMARY
========================================
Clean Processes: 12
DETECTED Malicious Processes: 1
DETECTION DETAILS
========================================
DETECTION: Process 7752 with name perl and path /usr/bin/perl
Process ID: 7752 has been killed
Restuls for PID: 7752
total 0
dr-xr-xr-x 3 nobody nobody 0 Apr 21 12:35 .
dr-xr-xr-x 1856 root root 0 Apr 2 16:12 ..
-r-------- 1 nobody nobody 0 Apr 21 13:00 auxv
-r--r--r-- 1 nobody nobody 0 Apr 21 12:35 cmdline
lrwxrwxrwx 1 nobody nobody 0 Apr 21 13:00 cwd -> /
-r-------- 1 nobody nobody 0 Apr 21 13:00 environ
lrwxrwxrwx 1 nobody nobody 0 Apr 21 12:35 exe -> /usr/bin/perl
dr-x------ 2 nobody nobody 0 Apr 21 12:36 fd
-r--r--r-- 1 nobody nobody 0 Apr 21 13:00 maps
-rw------- 1 nobody nobody 0 Apr 21 13:00 mem
-r--r--r-- 1 nobody nobody 0 Apr 21 13:00 mounts
-r-------- 1 nobody nobody 0 Apr 21 13:00 mountstats
lrwxrwxrwx 1 nobody nobody 0 Apr 21 13:00 root -> /
-r-------- 1 nobody nobody 0 Apr 21 13:00 smaps
-r--r--r-- 1 nobody nobody 0 Apr 21 12:35 stat
-r--r--r-- 1 nobody nobody 0 Apr 21 12:35 statm
-r--r--r-- 1 nobody nobody 0 Apr 21 12:35 status
dr-xr-xr-x 3 nobody nobody 0 Apr 21 13:00 task
-r--r--r-- 1 nobody nobody 0 Apr 21 13:00 wchan
Netstat:
Environ:
Server Admin action is required immediately.
In Messages Log :: Currently Unreadable (pending) Sectors
Jun 13, 2008I found these lines in my messages log:
Jun 13 16:04:43 vilabr smartd[2564]: Device: /dev/sda, 5 Currently unreadable (pending) sectors
Jun 13 16:04:43 vilabr smartd[2564]: Device: /dev/sda, 5 Offline uncorrectable sectors
Jun 13 16:34:43 vilabr smartd[2564]: Device: /dev/sda, 5 Currently unreadable (pending) sectors
Jun 13 16:34:43 vilabr smartd[2564]: Device: /dev/sda, 5 Offline uncorrectable sectors
Jun 13 17:04:43 vilabr smartd[2564]: Device: /dev/sda, 5 Currently unreadable (pending) sectors
Jun 13 17:04:43 vilabr smartd[2564]: Device: /dev/sda, 5 Offline uncorrectable sectors
Jun 13 17:34:43 vilabr smartd[2564]: Device: /dev/sda, 5 Currently unreadable (pending) sectors
Jun 13 17:34:43 vilabr smartd[2564]: Device: /dev/sda, 5 Offline uncorrectable sectors
Jun 13 18:04:43 vilabr smartd[2564]: Device: /dev/sda, 5 Currently unreadable (pending) sectors
Jun 13 18:04:43 vilabr smartd[2564]: Device: /dev/sda, 5 Offline uncorrectable sectors
Jun 13 18:34:43 vilabr smartd[2564]: Device: /dev/sda, 5 Currently unreadable (pending) sectors
Jun 13 18:34:43 vilabr smartd[2564]: Device: /dev/sda, 5 Offline uncorrectable sectors
Jun 13 19:04:43 vilabr smartd[2564]: Device: /dev/sda, 5 Currently unreadable (pending) sectors
Jun 13 19:04:43 vilabr smartd[2564]: Device: /dev/sda, 5 Offline uncorrectable sectors
Jun 13 19:34:43 vilabr smartd[2564]: Device: /dev/sda, 5 Currently unreadable (pending) sectors
Jun 13 19:34:43 vilabr smartd[2564]: Device: /dev/sda, 5 Offline uncorrectable sectors
What does it mean?
Hotmail Will Only Accept HTML Messages
Sep 16, 2007I have noticed that hotmail will only accept HTML message from any of my servers.
Is it me or is Hotmail really a webhosters night mare.
Hundreds Of Messages In Mail Queue
Mar 10, 2007I have hundreds and hundreds of messages in mail queue waiting delivering. Log file says:
connect to remote.host[000.000.000.000]: server refused to talk to me: 421 4.7.0 remote.host Error: too many connections from my-servers-ip
delivery temporarily suspended: connect to remote.host[000.000.000.000]: Connection timed out
(I replaced real IP addresses with 000, my-servers-ip and hostname with "remote host")
It happends only with one host (the most popular free email provider in my country). All emails to yahoo, gmail etc are being delivered without any problems.
What does it mean - too many connections from my server? I have a busy dating website and php script sends out a lot of email notifications (for example - when users get new instant messages). Anyway, I never heard that email providers limit the number of emails from the same server. During the night time all messages from mail queue are being delivered, but at day time this number sometimes grows to 1000.
I have Postfix installed.
Outlook Express Removing All Messages
Feb 1, 2007I have a customer who has a problem, today when he opened Outlook Express, it downloaded his new mails and deleted them automatically and also other mails, then when he clicked the "Trash" directory, it was empty. He checked if no one set rules, and the rules dialog is empty. He says his antivirus is up-to-date.
View 2 Replies View RelatedEmail Messages Rejected From Certain Server?
Sep 8, 2007I was checking my emails today, and have had several that have bounced back. They all returned a message like this:
Quote:
Hi. This is the qmail-send program at web1.daniel15.com.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.
<email address removed>:
167.206.4.79 does not like recipient.
Remote host said: 550 5.7.1 Your mail from IP 66.79.185.81 was rejected. We can't currently accept your message. : <email address removed>
Giving up on 167.206.4.79.
--- Below this line is a copy of the message.
Return-Path: <dansoft-[at]-dansoftaustralia.net>
Received: (qmail 32340 invoked by uid 33); 2 Sep 2007 06:31:42 +1000
To: <email address removed>
Subject: Topic reply: Arcade Pass Item and SMF Arcade Integration
X-PHP-Script: www.daniel15.com/forum/index.php for 71.197.23.33
From: "Daniel15's Forum" <dansoft[-at-]dansoftaustralia.net>
Date: Sat, 01 Sep 2007 20:31:42 -0000
Message-ID: <79f483be9135226a66980c8c97a13454-m6420@dansoftaustralia.net>
X-Mailer: SMF
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="SMF-7402f8e97dbc065a6baa62d68c0d9226"
Content-Transfer-Encoding: 7bit
[actual message omitted for clarity]
Why would the mail from my server be rejected?
Copy My Webmail Sent Messages To Outlook Or Incredimail
Oct 11, 2009I am using CPanel,I have thousands of messages and it takes time to access them via webmail; I have moved all inbox mails to Outlook but I am looking for a solution to upload my sent messages to Outlook so that I 'll never have to use webmail.
View 4 Replies View Related