Today i got home from work to find none of my websites responding. When i ping the server i get a response as normal so i know its online. It seems the firewall iptables is blocking all incoming access to the server. When trying to connect to ssh nothing happens (just a blank black screen) heres a screenshot: [url]
I rang my datacenter but no one is there as its sunday evening.
Is there anyway i can get into the server to turn off the firewall?
We get this for our HyperVM/Lxadmin vps when we try to restart:
vzctl restart <vid>
Container already locked
Also all sites are down.
when I tried to reboot my VPS via Hypervm Enterprise I got this error:
===========
Alert: The vps myvps.vm is locked by another user. This would also be because you had interrupted an earlier activity that would take long time to complete. HyperVM has waited 15 seconds for the other process to finish. Please try after sometime.
===========
and memory usage going crazy it's going from 400MB "natural usage level" to 1024MB then the vps and all sites going down.
Have a new client who's locked themselves out of their web server. Basically they've forgotten their password. Sadly there's no backup admin account.
It's a Dell PE1950 running Win2K3 R2 (SP2). Standalone server (non-domain). OS is in RAID-1 on a PERC 5i card.
I've attempted to use BartPE and UBCD with various instruction sets I've found online regarding PERC controllers, but I can't actually get either of them to boot (just hangs at the 'loading PE' screen with the bar).
I've tried using
I'm thinking I'm screwing up the driver part somehow, as the discs otherwise boot on standard, non-RAID IDE systems. I'm using Win2K3 R2 media for my base package.
When account is accessed via Outlook an error is generated saying "mailbox is temp unavaliable because another email message is being delivered or another application is accessing it. The server responded: -ERR Timeout while obtaining a lock on /home/user/mail/domain.com/emailuser/inbox"
When attempt to login using HORDE I just cycle through logging in, going from login and trying to get to the In box and timing out as content fails to complete
I tried searching the forums for this, nothing. Anyone know what to do about this?
I have a customer that currently is paying a nice chunk of money every month for WebsitePros.com (one of those do it yourself sites).
Domain is registered by them and they are claiming if we want to cancel and get access to the domain name we have to pay a $100 fee(to gain access to the domain name).
This has happened twice now. I have my wait_timeout variable set to 60 seconds, but occasionally my database gets overloaded with "locked" queries. Here's an example of my processlist:
Code:
| 14773848 | db_name | localhost | db_name | Query | 35483 | statistics | SELECT COUNT... |
| 14776290 | db_name | localhost | db_name | Query | 35144 | statistics | SELECT COUNT... |
| 14778877 | db_name | localhost | db_name | Query | 34841 | statistics | SELECT COUNT... |
| 14790744 | db_name | localhost | db_name | Query | 33056 | Locked | UPDATE... |
| 14791275 | db_name | localhost | db_name | Query | 32977 | Locked | SELECT... |
| 14791395 | db_name | localhost | db_name | Query | 32960 | Locked | SELECT... |
| 14791556 | db_name | localhost | db_name | Query | 32929 | Locked | SELECT... |
| 14791603 | db_name | localhost | db_name | Query | 32924 | Locked | SELECT... |
| 14791757 | db_name | localhost | db_name | Query | 32900 | Locked | SELECT... |
| 14792209 | db_name | localhost | db_name | Query | 32815 | Locked | SELECT... |
| 14792355 | db_name | localhost | db_name | Query | 32786 | Locked | SELECT... |
This continues on with locked queries all the way up to my limit of 450 connections, then the whole server goes down. Note the time spent processing these queries, 35483 seconds and counting! Surely the wait_timeout is supposed to prevent this from happening?!
Also, this appears to start with queries in the State "statistics". Then the State for the following queries becomes "locked". Does anyone know what these mean? Can I get them to timeout normally? Queries which never timeout are guaranteed to bring your server down eventually, surely this is not the desired behaviour.
I had to bump a server we have over at the planet, but I cannot seem to determine the cause of its unresponsiveness (everything down to even simple ping). I checked APF logs and it didn't show anything except its normal periodic refresh of rules and such. I also see an selinux warning about proftpd trying to get to proftpd.conf and I saw something about selinux blocking mysql from using mysql.sock as well - I temporarily disabled SELINUX all together (it was in targeted mode). In the log files, it did log the fact though that it received SIGTERM and was going to runlevel 0, so it wasn't completely dead. I've gone through quite a few other logs and have come up empty handed. Is there anything else I can do? I want to get to the bottom of this.
View 0 Replies View Relatedi have hypervm(openvz)
named is failed
smapd is failed
and i can`t enter to myssh
#service ssh status
#sshd dead but subsys locked
i use of cpanel
I found VPS at Virtuozzo logs that system turns locked and mounted and I believe the system becomes unresponsive at same time.
Here is the sequence of the status that can be found at VPS/status changes
RUNNING--->MOUNTED--->(LOCKED)-->(LOCKED, MOUNTED)-->
(LOCKED, RUNNING)-->(LOCKED)-RUNNING
Code:
VPS STATUS LOGS:
Aug 17, 2007 01:06:16 PM VPS is locked at the moment. It may take some time.(locked) VPS is up and running now.running
Aug 17, 2007 01:06:10 PM VPS is locked at the moment. It may take some time.(locked,mounted) VPS is locked at the moment. It may take some time.(locked,running)
Aug 17, 2007 01:06:04 PM VPS is mounted now. It is not running and some operations are not available.mounted VPS is locked at the moment. It may take some time.(locked)
Aug 17, 2007 01:05:49 PM VPS is up and running now.running VPS is mounted now. It is not running and some operations are not available.mounted
Aug 17, 2007 12:46:10 PM VPS is locked at the moment. It may take some time.(locked) VPS is up and running now.running
Aug 17, 2007 12:46:04 PM VPS is mounted now. It is not running and some operations are not available.mounted VPS is locked at the moment. It may take some time.(locked)
Aug 17, 2007 12:45:16 PM VPS is up and running now.running VPS is mounted now. It is not running and some operations are not available.mounted
Aug 17, 2007 09:37:13 AM VPS is starting up at the moment. It may take some time.(starting) VPS is up and running now.running
Aug 17, 2007 09:37:10 AM VPS is stopping now. It may take some time.(stopping) VPS is starting up at the moment. It may take some time.(starting)
Aug 17, 2007 09:36:52 AM VPS is up and running now.running VPS is stopping now. It may take some time.(stopping)
Aug 17, 2007 08:51:46 AM VPS is locked at the moment. It may take some time.(locked) VPS is up and running now.running
Aug 17, 2007 08:51:25 AM VPS is up and running now.running VPS is locked at the moment. It may take some time.(locked)
Aug 16, 2007 03:00:18 PM VPS is locked at the moment. It may take some time.(locked) VPS is up and running now.running
Aug 16, 2007 03:00:03 PM VPS is mounted now. It is not running and some operations are not available.mounted VPS is locked at the moment. It may take some time.(locked)
Aug 16, 2007 02:59:39 PM VPS is up and running now.running VPS is mounted now. It is not running and some operations are not available.mounted
Also I'm receiving emails with ftpd, exim, cpsrvd failed
when that happens:
Code:
ftpd failed @ Fri Aug 17 09:37:26 2007. A restart was attempted
automagically.
I saw some spams and I try to remove them on my cPanel server from WHM > Mail Queue
Message 1MFr0q-0001cK-TV is locked
Message 1MGJLb-0001UL-4y is locked
Message 1MGIqC-00036q-7v is locked
Message 1MGIvk-00044Q-5r is locked
Message 1MGJpk-0003fU-5K is locked
Message 1MGJK9-00015D-US is locked
Message 1MGJhL-00006a-Mh is locked
Message 1MGHK4-0004e6-60 is locked
Message 1MFrD4-0002Up-OX is locked
I can't seem to remove them. What's the way to kill them at once?
can it be done? because a dumb customer sent an email with like 500 recipients... and its stucked on the queue. So i wanna delete it... but when i go to Mail queue manager (i use WHM) i got this:
Message 1KRTsr-0006tc-F6 is locked
So what can i do? should i just sit and wait until its "unlocked"?
can i kill any process? i already tried restarting exim... but its still there... and btw the size of that message is of about 500 mb >.<
When i login to the root for the server and go to mysql process list i see a lot of processes that are connected to photo handling and the sate is Locked with over 500 seconds of each one.
I see there is one process that the state says: Copying to tmp table
I read online that if this is taking long it might lock up other queries causing your server to perform slow and only solution is to restart mysql servers.
Right now i have over 100 queries that say Locked and one that says Copying to tmp table....each time i have to restart the mysql services but this happens every 10 minutes as i have enough traffic to cause this problem.
For some application-testing I installed PHP 5.5 and PHP 5.6 alongside the existing PHP 5.3 installation. To do that I used the web-interface of the Plesk-installer.
Installing the software went well, or at least didn't show any errors.
After installing I went back to the login-page to get back into the portal, but that didn't work.
I am using the right username and password and don't see any errors, I just keep getting the login-screen and no errors. Logging in through SSH is working as it should. Only access to Plesk on 8443 seems to be denied.
Server reboot didn't work, restarting Plesk-services didn't work...
How can I restore this so I can get back to work?
This Plesk-installation is on a CentOS 6 server on which I have full rights.
Do you recommend a software firewall when behind a hardware firewall?
All of our servers are behind Cisco ASA 5505 firewalls which we rent from Liquidweb. All are being managed correctly and setup to there optimal levels. With hardware firewalls firmly in place, do you still recommend a software firewall such as APF or IPTables (we're talking linux); in our opinion we see it as an extra administration overhead. If this is however untrue, we will change out thinking.
I've found a dedicated server at a great price and plan to stick with it, my first ( already have 2 vps accounts ). I don't have the money for a hardware firewall. However, I do have a chance to renew a Kerio WinRoute Firewall license from way back.
Does anyone think this would be better than the default windows 2003 firewall?
after install apf firewall whole server blocked to everyone.. i can't get ping back as well. Any idea?
View 2 Replies View RelatedI'm planning to place some firewalls in my network, but I'm afraid of something.
I have never used cisco pix, checkpoints and others.. We currently use custom made linux solutions for that
When we use these ready-to-go boxes, do we need to NAT the internal server IPs?
Is it possible to use these ready-to-go solutions with REAL IPs in the servers?
Does cPanel work well with NATed internal IPs? Or shall I have some trouble?
Do you think it's safer to with NATed, or it will be better to use real ips instead?
I was wondering what everyone thinks the best Firewall software is for a dedicated server?
View 7 Replies View RelatedIm using the latest cPanel release. Using Pure-FTPD as the ftp server. I have CSF Firewall installed and configured and have also got [url]installed. on the dos deflate software ive set the ban limit to 250 connections.
But what my problem is that while downloading on ftp clients with internet that can download very fast that it will ban them. Ive kinda realised that it is to do with the DDos software but im unsure what i should do. Increase the limit of connections but that would mean that more minor Ddos attacks might get through so that would affect more clients. Or leave the limit at 250 and let clients get blocked for 20 minutes.
Or alternatively is there a way i can stop people getting banned via FTP completly. As i dont see that option on the Ddos or csf.
I´m running the remote desktop service and configuring a remote dedicated server right now.
So, I need to install a firewall in this machine, but I don´t want to be disconnected after the installation.
So, can anyone tell me of a firewall that don´t stop the connection of RDP just after installation and works with Windows 2003 Server?
secure a LAN network with 200 computers, a specific hardware solution (like CISCO PIX or so) might not be available.
Though, I'm considering a Firewall OS based Solution like pfSense, m0n0wall, eBox, Endian Firewall, SmoothWall, etc.
There are so many options and I have no experience with none of this. My Requirements are:
Web based configuration
Clean Interface with graphic statistics
Pretty Secure
Good hardware support
Free usage
Simple configuration
Support for high bandwidth usage
I think OpenBSD is pretty secure, is there any OpenBSD Firewall OS solution with this requirements?
What better firewall to vps?
In my vps not use csf or iptables
Virtuozzo has bug that.
What do you think of this two firewall? which one is better overall?
View 14 Replies View RelatedI am looking to setup a Firewall etc... on a VPS and would like to know what is the better one and easy to use etc...
CSF or APF and BFD ?
know of any hardware firewall (or suggest) which is under 300 USD and can protect around 5 servers with a total bandwidth capacity of 100 (+/-) Mbps. I am really no security expert
Of course, it should have web based management, online documentation (not really needed) and something special for prevent DoS attacks automatically (really fed up of them).
If possible if you can link me directly to an online store that can ship it Internationally / Europe?
I was having attacks so I installed CSF firewall which did a great job. However on a few of my sites, specifically proxy ones, every second or third page you visit will be a 403 Forbidden error. After about 20-30 seconds, you can refresh and it goes away. I suspect CSF is causing this, because it just started to happen after I installed it. Is it thinking there are too many connections or too much bandwidth and its blocking me or other users just using the proxy? Is there a way to make it slightly more tolerant?
View 3 Replies View RelatedI am a non technical type that is trying to start a web based business. I am thnking a dedicated server will be the best option for me but as I looked at the quotes from several different web hosts I noticed that the firewall services that they provide are very expensive. 100$ a month - 150$ a month.
Are there other firewall options that can be installed on the server that we as administrators can install and use?