I see following error in my server memory informatiow can resolve this issue?
Memory for crash kernel (0x0 to 0x0) notwithin permissible range
Memory: 4143608k/5242880k available (2078k kernel code, 48376k reserved, 860k data, 220k init, 3275776k highmem)
My RAM is 2G.
The cache memory of my server is eating, After 2 weeks, the cache memory is below 1G, then the server crashed.
After I reboot the machine, the cache memory back to normal. But it starts to eating again.
I have attached the graph.
I am using lighttpd, php, mysql
we have one box in hivelocity.net that has been down so many times this month that we were forced to remove links to siteuptime where we were once so proud of having a 99.7% uptime for 3 years in theplanet.
syslog shows that just before crashing, these entries were made:
kernel: kernel BUG at mm/rmap.c:479
kernel: invalid operand:0000 [#1]
dmesg also shows this:
...
Brought up 2 CPUs
zapping low mappings.
checking if image is initramfs... it is
Freeing initrd memory: 482k freed
NET: Registered protocol family 16
PCI: PCI BIOS revision 2.10 entry at 0xf9f20, last bus=1
PCI: Using configuration type 1
mtrr: v2.0 (20020519)
mtrr: your CPUs had inconsistent fixed MTRR settings
mtrr: probably your BIOS does not setup all CPUs.
mtrr: corrected configuration.
...
i've googled these messages and they point to ram problems.
hivelocity.net claims to have done diagnostics on the box and that there were no problems reported.
they said this is a result of a sys configuration problem made by us.
any ideas?
running centos/virtuozzo 2.6.18-028stab062.3
when i configure vmware it asks at one point for kernel header files. where would i find them to match the current kernel?
i asked at parallels forums but help there is very scarce. i checked openVZ repositories and they dont yet have headers for this version.
what are my options? i have one last windows machine left and want to run it in VMware.
Last year I ordered a new server with Centos 4.3 and it had the kernel kernel 2.6.9-34.0.2ELsmp installed. It runned fine and I didn't update any packages since then.
Today I started getting a problem where both mysqld and kswapd0 uses very high amounts of CPU, spiking up to 100% and my memory usage is at 99% all the time. The problem seems exactly the same as the one mentioned in this thread.
In that thread the exact same kernel is said to be insecure and to cause this problem. I also came across a centOS bug that reports this problem with high cpu, mem usage and mysql & kswapd0 consuming all resources.
In the linked thread the person solved the problem by upgrading to kernel 2.6.9-42 using rpms but others recommended a newer kernel or a custom compiled kernel for CentOS.
Apparently when they used yum it said 34.0.2 was the latest kernel.
What should I do to upgrade the kernel, which version should i upgrade to, and where do I get it from? I won't be able to compile a custom kernel and I've only installed basic rpm packages before.
I have a VPS. And have had an issue both when it was 1Gig and now I recently downgraded it to 768m, because I am moving some sites to a dedicated.
However, the part I am having trouble grasping is that when I look at graphs from Munin, it will typically always show 200-400MB free memory (and free -m and top agrees with munin), but Munin shows 'committed' memory that is above the total Ram on the VPS and once the 'committed' ram exceeds the VPS limit, processes start failing.
So, why is 'committed' memory exceeding the RAM on my VPS, when Munin, free -m and top all show there is free memory available?
Code:
root@server [~]# free -m
total used free shared buffers cached
Mem: 768 449 318 0 0 0
-/+ buffers/cache: 449 318
Swap: 0 0 0
Here's a graph that munin produces that shows the 'committed' memory exceeding the total memory.
[url]
Let's say when i first joined the datacenter, i'm given some 16 IPs from 123.123.123.*.
Now that i need more IPs, and they have to give me IPs from 123.123.124.*, am i right to say i need a new switch?
Now is it possible that i link up the new switch together, so that both switch can pick up any available IPs from either range?
I'm running a web server with mod_evasive and want to know how can I prevent mod_evasive from blocking the googlebot crawler ip address.
Is there a script out there that can detect this crawler and make sure its ip doesnt get blocked by iptables or mod_evasive?
am using APF firewall and am getting ddos from these range ips
4.68.25.*
8.0.4.*
8.0.5.*
how could i delete all the range from these ip's?
I set up a forum for a small group of users, so I don't really wish to see spiders or bots on it, so I've put a robots.txt file there to prevent all of them from accessing the forum pages.
I know not all bots follow the robots.txt rule, and these days a really annoying bot called MUNAXNET or Munax AB with IP range 82.99.30.0 - 82.99.30.127 is causing the forum to have extra and unexpected loads.
I've tried to block this IP range with .htaccess and uploaded it to the root of the site a few days ago, here is the content:
<Limit GET HEAD POST>
order allow,deny
deny from 82.99.30.0-82.99.30.127
allow from all
</LIMIT>
However strangely it seems that all of these are not working for this bot, today I saw my forum had 80 users online and that army still keeps coming and browsing all pages of my forums...
I tested the .htaccess with blocking myself, and it actually worked for me, dunno why it's not working for that bot..
we want a dedicated server with a full range of ip with our own company name(or with my name) and abuse mail
+ kvm and apc access
we need a good support too , for example if we want to check our hard disk the provider check it fast
I need to ban IP range and I inserted say ip 12.44.0.0 in the deny_hosts rules, this should ban range from 12.44 but strange is people from that range still be able to access my site, any idea what went wrong?
View 3 Replies View RelatedServer: OS RHEL 4
Web Server: Apache1.3.37
Hi. I want to block a range of IPs. Currently, I use the following command as an effective weapon against the IPs of people I find in the log trying to do bad things.
/sbin/route add -host x.x.x.x reject
Works like a charm. I then put the offending IP in the file /etc/rc.d/rc.local so that it will reload the bad ips when the server reboots next.
I also use the CSF/LFD firewall, and it successfully blocks single, offensive IPs also.
What I need, though, is the ability to block an entire range of IPs. For example, i have a very persistent hacker trying to access from a certain range like so....
255.155.x.x.
The last two numbers are always changing but the first two remain the same.
How do I block this "range" of IPs from accessing my server?
Note, I know how to block a range of IPs in a .htaccess file for a certain account, I put this in the .htaccess file...
deny from 205.196.
But when I try this with /sbin/route, it will not accept the ip. My firewall will also not accept a range of IPs.
Is there any way to block all and just allow certain IP using APF or iptables?
I want to block all the traffic to the server and just alow IP range.
I have a client who needs to block IP range on a windows server. However, he is using Cloud hosting from Rackspace. I guess they are not being corporative in doing so. Anyway to do this without root? Perhaps from the control panel?
I am getting my quote back Tuesday but need a little bargaining power with these guys...
Oakland, Ca datacenter
40mbps, 20A, 42U rack.
What should I be looking at price range here, how much per mbps?
Only info I've seen is from 2003 where people were saying $200/mbps. Obviously prices have come WAY down. I've seen people on here reselling internap bandwidth for $12/mbps, but they might have bought a huge commit.
i have 2 range ip
range 1 is : 111.111.111-119
range2 is : 222.222.222-229
how may i add both range?
i can add for one range,but about 2 rage i can`t
from 36 hours we have really critical issue:
we have 3 server with Liquidweb that have problem to "resolve" a server locate in Italy
Email sent from server with LW to Italy server is not sent and stay in queue.
We try to force delivery and error is:
Message 1Je39R-0000wk-3N is not frozen LOG: MAIN
cwd=/usr/local/cpanel/whostmgr/docroot 4 args: /usr/sbin/exim -v -M
1Je39R-0000wk-3N delivering 1Je39R-0000wk-3N Connecting to italyserver.com
[**.**.**.**]:25 ... failed: Connection timed out (timeout=5m) LOG: MAIN
italyserver.com [**.**.**.**]:25 Connection timed out LOG: MAIN
== email@italyserver.com R=lookuphost T=remote_smtp defer (110): Connection
== timed out
--
We have check, there aren't problem with port and firewall
All seesm ok, for all server
We have try to restart exim, reboot, ..
Emails don't start from 3 server LW to 1 in Italy
We have try to ping from server LW the Italian server and the problem is the same, found IP but 100% packet lost..
If we ping from 3 server LW a IP of server that is "over" the server IT is all ok
The problem seems only with single IP
So, we have try to send from server in Italy to 1 of 3 server under LW.. same problem
------
Message 1JeSBO-0003CD-HO is not frozen LOG: MAIN
cwd=/usr/local/cpanel/whostmgr/docroot 4 args: /usr/sbin/exim -v -M
1JeSBO-0003CD-HO delivering 1JeSBO-0003CD-HO Connecting to
mail.serverlw.it [**.**.***.**]:25 ... failed: Connection timed out
(timeout=5m) LOG: MAIN mail.serverlw.it [**.**.***.**] Connection
timed out LOG: MAIN
== email@serverlw.it R=lookuphost T=remote_smtp defer (110):
== Connection timed out
------
LW support not have suggest solutions and also Italian support not have idea of problem solution
we want a dedicated server with a full range of ip with our own company name(or my name) and our own abuse e-mail address
+ kvm and apc access
we need a good support too , for example if we want to check our hard disk the provider check it fast
any body know anywhere to provide this services with a good price?
I would like to use different Class C IP ranges across my domains for better cross linking. Of course, all domains are closely related to a particular niche.
I am currently on imountain.com, they have been extremely helpful and good. But wondering if same host can provide me different class C IP range?
want to confirm this before i order a new server from them.
or should i just go for another hosting provider? wondering anyone as good as imountain?
Is there any way to get the IP Range of providers like SAVVIS, Global Crossing, or Level3?
View 1 Replies View Relatedi have the following server specs :-
Processor Intel Quad-Core Xeon X3323 2.5GHz/2x6MB 1066FSB
RAM 4GB 667MHz Dual Rank ECC Memory (4X1GB)
i have some sites vb forums / proxy sites / file hosting site / tube sites , all together some 10-12K visitors a day , i am using xcache , but still apache is crashing many times ,what should i do , i have asked platinum server management guys, they disable logs , suexec but still no luck, will increase of another 2gb of ram help me?
We are now online after The Planet crash but since this morning we have a strange problem...
All our servers are resolving, including our database server but the servers do not see the database server (Ip not resolving...)
Our computer to database server = Resolving
Our computer to servers = Resolving
Servers to database server = Not Resolving
The Apache service is getting crash and creaing following logs
[Mon Jul 07 23:52:21 2008] [notice] child pid 12878 exit signal Segmentation fault (11)
[Mon Jul 07 23:52:21 2008] [notice] child pid 12881 exit signal Segmentation fault (11)
[Mon Jul 07 23:52:21 2008] [notice] child pid 12886 exit signal Segmentation fault (11)
[Mon Jul 07 23:52:22 2008] [notice] child pid 12859 exit signal Segmentation fault (11)
[Mon Jul 07 23:52:23 2008] [notice] child pid 12904 exit signal Segmentation fault (11)
[Mon Jul 07 23:52:23 2008] [notice] child pid 12909 exit signal Segmentation fault (11)
[Mon Jul 07 23:52:25 2008] [notice] child pid 12877 exit signal Segmentation fault (11)
Server Specification.
4GB RAM
Apache : 2.0.52
PHP : PHP 5.2.5
MySQL : 5.0.51
httpd.conf
KeepAlive Off
MaxKeepAliveRequests 50
KeepAliveTimeout 10
StartServers 16
MinSpareServers 8
MaxSpareServers 64
ServerLimit 1000
MaxClients 500
MaxRequestsPerChild 5000
ServerSignature On
my.cnf (Seprate box with 2GB RAM)
log-slow-queries = /var/log/mysql/mysql-slow.log
skip-external-locking
skip-locking
skip-innodb
skip-bdb
skip-name-resolve
max_connections = 800
max_user_connections = 800
key_buffer = 36M
key_buffer_size = 64M
myisam_sort_buffer_size = 64M
join_buffer_size = 2M
read_buffer_size = 2M
sort_buffer_size = 3M
thread_stack = 128K
table_cache = 1024
thread_cache_size = 286
interactive_timeout = 25
wait_timeout = 1800
connect_timeout = 10
max_allowed_packet = 16M
max_connect_errors = 999999
query_cache_limit = 8M
query_cache_size = 64M
query_cache_type = 1
tmp_table_size = 16M
old_passwords=1
user=mysql
quick
quote-names
max_allowed_packet = 16M
[isamchk]
key_buffer = 16M
Some of our client emails are being blocked and it appears that the whole GNAX range of more than 103680 IP addresses was blocked.
Quote:
As you should know now: It is not you, it is your complete provider which got UCEPROTECT-Level 3 listed.
Your IP xxx.xxx.xxx.xxx was NOT part of a spamrun, but you are the one that has freely chosen your provider.
By tolerating or ignoring that your provider doesn't care about spammers you are indirectly also supporting the global spam with your money.
Seen from this point of view, you really shouldn't wonder about the consequences.
What I want to know is how often do it happens that a datacenter have all it's IP addresses being blocked?
I contacted Gnax about this but their response was merely that they will take steps and the whole range will eventually be delisted. (Obviously the immediate removal fee of $200 something is too much for them)
Ironically merely a few hours AFTER I contacted them I got a "warning" about spam send from one of our clients.
The date of the email was a few weeks AGO and We already long ago warned our LEGIMATE client that such emails are not allowed and the account will be terminated if it happens again. (In other words WE immediately acted against potential spam while Gnax not and then have the nerve to warn US after WE informed them of the blacklisting)
On the one hand I understand that it can be difficult for a very large provider and uceprotect.net seems a bit harse to block ALL IP addresses due to 0.238 % spam ip addresses.
This came as a surprise today, I setup a server-based RSS reader and could not get WHT's forum RSS feeds. A little digging revealed it was the default APF installation that was blocking the 174.0.0.0/8 range, which includes WHT and a chunk of Softlayer's ip range.
The quick fix is easy, just remove that range from the /etc/apf/internals/reserved.networks file and restart, in the latest apf version, I don't know how many apf versions back this block goes.
The APF folks do a fantastic job in keeping APF up to date, but this seems to be recent update to this particular ip range that hasn't made it into APF yet.
I want to stop users from country X from accessing my website, I know I can ban people's IPs but I dont know if it is possible to ban certain geographical area and if so, I haven't got a clue about how to do it.
View 8 Replies View RelatedI have in my possession a new server which is running cPanel. For some unknown reason it keeps crashing about every 4-6 hours where I must get a remote reboot done.
Its starting to annoy me that I'm unable connect to anything. What I suspect is high disk red/write. As what I'm finding is over 10k blocks being written per second with only 300 being read per second. I also am not seeing any bandwidth out/in usage being high.
I have a dedicated server with NyNOC and earlier on today the server dissapeared off the net, wouldn't respond to ssh, http etc, nor pings
I submitted a ticket and the server got rebooted, went through the FSCK check and came back up ok, but now I'm concerned as to what caused it
Andy the technician said he couldn't find out the reason why and neither can I
I can only put it down to PERHAPS faulty hardware somewhere?
The /var/log/messages file doesn't say anything useful, the last entries show..
Quote:
May 27 06:41:17 server kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:xxxxxxxx SRC=xxxxxxxx DST=255.255.255.255 LEN=153 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=8778 DPT=11777 LEN=133
May 27 06:56:43 server kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:00:xxxxxxxx SRC=xxxxxxxxx DST=255.255.255.255 LEN=153 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=8778 DPT=11777 LEN=133
May 27 07:02:56 server kernel: Firewall: *UDP_IN Blocked* IN=eth0 OUT= MAC=00:14:d1:14:a7:c0:00xxxxxxxxx SRC=xxxxxxxxx DST=xxxxxxxx LEN=622 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=UDP SPT=54284 DPT=1027 LEN=602
May 27 07:03:13 server kernel: Firewall: *TCP_IN Blocked* IN=eth0 OUT= MAC=00:14:d1:14:a7:c0:xxxxxxx SRC=xxxxxxxx DST=xxxxxxxx LEN=48 TOS=0x00 PREC=0x00 TTL=117 ID=47647 PROTO=TCP SPT=21173 DPT=22 WINDOW=65535 RE$
May 27 13:01:45 server syslogd 1.4.1: restart.
May 27 13:01:45 server kernel: klogd 1.4.1, log source = /proc/kmsg started.
May 27 13:01:45 server kernel: Linux version 2.6.18-128.1.10.el5PAE (mockbuild@builder16.centos.org) (gcc version 4.1.2 20080704 (Red Hat 4.1.2-44)) #1 SMP Thu May 7 11:14:31 EDT 2009
May 27 13:01:45 server kernel: BIOS-provided physical RAM map:
May 27 13:01:45 server kernel: BIOS-e820: 0000000000000000 - 000000000009fc00 (usable)
May 27 13:01:45 server kernel: BIOS-e820: 000000000009fc00 - 00000000000a0000 (reserved)
May 27 13:01:45 server kernel: BIOS-e820: 00000000000e7000 - 0000000000100000 (reserved)
May 27 13:01:45 server kernel: BIOS-e820: 0000000000100000 - 00000000affb0000 (usable)
May 27 13:01:45 server kernel: BIOS-e820: 00000000affb0000 - 00000000affc0000 (ACPI data)
May 27 13:01:45 server kernel: BIOS-e820: 00000000affc0000 - 00000000afff0000 (ACPI NVS)
May 27 13:01:45 server kernel: BIOS-e820: 00000000afff0000 - 00000000b0000000 (reserved)
May 27 13:01:45 server kernel: BIOS-e820: 00000000fec00000 - 00000000fec01000 (reserved)
May 27 13:01:45 server kernel: BIOS-e820: 00000000fee00000 - 00000000fef00000 (reserved)
May 27 13:01:45 server kernel: BIOS-e820: 00000000fff80000 - 0000000100000000 (reserved)
May 27 13:01:45 server kernel: BIOS-e820: 0000000100000000 - 0000000140000000 (usable)
May 27 13:01:45 server kernel: 4224MB HIGHMEM available.
May 27 13:01:45 server kernel: 896MB LOWMEM available.
May 27 13:01:45 server kernel: found SMP MP-table at 000ff780
May 27 13:01:45 server kernel: Memory for crash kernel (0x0 to 0x0) notwithin permissible range
May 27 13:01:45 server kernel: disabling kdump
You can see it was down for some 6 hours, but I can't find a reason why
Diskspace is ample, there's no odd programs/scripts installed (it's a Centos server running whm with CSF firewall)
This is something i was wondering about and never found any answers.
Based on your experience, what are the most common reasons mysql tables crash?