I'm about to upgrade my co-locationed server from twin 2214 Opertons (dual core 2.2GHz) to
twin 2378 Opertons (quad core 2.4GHz). [Got to love the upgrade path on Opertons, single core to 6 core on the same socket.] I know I'll need to do a Bios upgrade but is there
anything else I should worry about. I want to minimize downtime as much as possible.
my log watch and see things like this each day and some days more, does this mean someones is trying to gain access to the server by hunting for the passwords?
Log Watch so I am just asking for some advice out there.
--------------------- SSHD Begin ------------------------
Failed logins from these: apache/password from ::ffff:200.206.107.12: 2 Time(s) ftp/password from ::ffff:200.206.107.12: 2 Time(s) mysql/password from ::ffff:200.206.107.12: 2 Time(s) root/password from ::ffff:200.206.107.12: 2 Time(s) root/password from ::ffff:61.186.188.168: 260 Time(s)
I can't remember the name of the utility that lets you watch what a process is doing. You call it on a PID and you can see all the memory allocations, file IO, library loading, etc. that the process is doing as it happens. Anyone know what I'm thinking of?
I had two server from LT for few years. I was happy with the server until 6 month ago. I got an email from LT and was told the price will be increased. I have not choice but paid what they asked. I got another email few days later, again LT increased price. I think it's fine if they increase the price. The problem I got is: LT increases the price but at same time LT still offer same package I had back to few years to their new customers. I called LT, they told me they can do nothing. Today I looked the offer carefully. Here's detail. ------------------------------------- Dual-Processor Opteron 248$59/Month RAM:2GB Hard Drive(s):2 x 160GB SATA Free upgrade to 2 x 250GB Bandwidth:3300GB IP Addresses:8 (5 Usable) Notes:No Reseller Discount Setup Fee:$999 setup --------------------------------------- Ha, $59 not bad deal at all. But watch out, $999 setup fee. Think this, LT will increase your price two years later. Then monthly cost will be $59+$999/24=$100 OR if LT increase you price one year later, your cost will be $59+$999/12=$142. Just think twice before you order from LT.
I have recently removed my Servers from Moxie Hosting, and I think that if you are reading this you should know what this Commpany is all about..
When I signed up Last year for a year Contract, Sean Corbin, Stated to me that they have own suite at an other location that the cage my equipment was in was tempuary, and that they would be opening a new suite, when I moved to 8th floor and was told that the that suite was their, which it was not, Watch out for thier 100% up time, they have been having problems with power, sence the moved and and till a week ago, they keep blaming the building, and that I would not get any recourse, because Sean Corbin has stated to me that it wasn't his fault and that not his problem,
They also stated that they have a tec on site 24/7, not true, they have an on line tec that can remotely look at issues, but when I need to get access to my server when I need to fix a issue I had to wait for a tec to show up, and if is after hours its a longer wait because Sean Corbin has no tec on site, I have asked to worked on my server during days, he also staited that he dosn't go to suite during days, and he only works nights.
After reading numerous accounts (27 and counting) of people's domains being stolen I decided to investigate the situation more closely. What follows is my personal investigation.
Without jumping to any conclusions as to how all of these domains were hijacked, I gathered the facts and sat back to see where the common denominators were. All of the domains had GMail accounts listed in whois.
Many of the domains were hosted with GoDaddy
Many of them had Alexa rankings of less than 10,000
While the GoDaddy connection was interesting, the fact that all of the hijacked domains had GMail accounts stood out as the real common thread.
It's still not clear how the hijacker was able to obtain access to the GMail accounts it is clear that using a GMail account for your domain registrations may not be a wise decision. We have seen infectious code on websites designed to either steal cookies or check to see if the visitor also has GMail opened in another window.
A few cases involved visiting a webpage while GMail was opened and the webpage doing a POST to a GMail interface and injecting an email filter into the visitor's GMail settings.
Typically the injection would include filters that would automatically skip the inbox and forward emails from register.com, godaddy.com and dreamhost.com to another GMail email account.
Then with forwarding set and knowledge of the registered email address, the hijacker would have use GoDaddy's website to obtain the customer number, which requires a verification email. Armed with that information, the hijacker would go back to GoDaddy and have an Authorization Code for password reset, sent to the registered email address.
The password would be sent to the email address, which would be forwarded to the hijacker and then they could move the domain to another registrar, change the website and benefit from the traffic to that website.
Or in some of these recent cases, the hijacker asked for $2,000 in order to "give" the domain back.
How did this happen?
Creating a filter in your GMail account sends a request to the GMail server farm. The request is an obfuscated URL with each section identifying the filter, the account, etc.
Many of the parameters passed in the URL can be generated accurately but one parameter needs the cookie from the account holder's computer. They can obtain this quite easily with any general cookie stealing technique (there are many).
What can you do? For starters, this isn't the first exploit of GMail accounts. I would switch all of my domains to be registered to a different email address.
Secondly, I would pay the extra money to have your domain information listed as Private. This way your contact information will not show up on whois searches. GoDaddy offers Protected Registration if you're already listed with them.
Third, if you do use GMail, check your filters often. And check your deleted items as well. You never know what you might find in there.
Anyone here have any stories to share about domains hijacked?
Im working at time with ffserver ... i test ffmpeg with flash streaming and it works perfectly but i want to do anoter step.
Im trying to do a streaming of a file to watch that movie in Windows Media Player. The problem is that i have a lot of errors of "buffer underflow" when i stream the video.
I Post My Config:
Port 8090 BindAddress 0.0.0.0 MaxClients 1000 MaxBandwidth 10000 NoDaemon
I have centOS box with 1 x dual core CPU in it. The load average is between 1.5 and 3. When the traffic is on top the load average is between 2.5 - 3.5. Is it necessary to upgrade ? Server seems to be respond fast. Also I heard that Top command on centOS with dual core CPU doesn't show exact values.
At the moment, I am been hosted on an unmanaged server (dedicated).
My server provider is offering $25/hour for managed support.
My Kernal and Centos have not been updated for a while and I am looking to upgrade both of them. I am wondering how long would these 2 jobs normally take?
This concerns a fairly successful ecommerce website. It is coded in classic asp and has a MS SQL database.
The site sees average of 1500 visitors a day using about 50 GB of bandwidth a month.
The host wants to move the site to a two box dedicated (1 web - 1 database server).
This is an expensive proposition and the client is balking. I am not an expert in these matters but it seems like overkill to me. It seems like most sites don't have problems with the database and web server on 1 box.
How To Upgrade Apache 1.3.37 to 2.2.x on Cpanel Server?
Currently, Apache is recommending:
Quote:
Apache 1.3.37 is the current stable release of the Apache 1.3 family. We strongly recommend that users of all earlier versions, including 1.3 family release, upgrade to to the current 2.2 version as soon as possible.
1) Is it safe to upgrade from Apache 1.3.37 to 2.2.4 on a Cpanel machine. I am worried that Cpanel won't like it.
2) Is Php4 still acceptable to use with Apache 2.2?
3) Can someone suggest a tutorial or guide for an upgrade to 2.2?
I have a P4 2.8Ghz 1GB RAM dedicated server that runs one main site. The site runs vBulletin that I've extended to operate cross-site (keeping track of all members and guests) and receives around 10,000-12,000 daily unique visitors, of which the server can currently handle no more than 300-350 users online (based on a 15 minute timeout).
My top stats during CPU spikes (of which are occurring more and more frequently) indicate that the server is hitting the memory ceiling, so I need to make a decision on whether to upgrade the memory to 2GB or to purchase a new server.
Do you believe 2GB will be sufficient to solve my current load problems and maybe make room for a further 100-200 users online, or is this something that would require a better server (of which I have no idea what I would need)?
Right now at around 150,000 to maybe over 200,000 pageviews a day thanks to an influx of Korean traffic, the number of Apache connections is making my swf files extremely slow.
I may have to upgrade the 3TB bandwidth too at some point along the line.
Its the raw number of Apache connections that is the problem, my host says. The SQL isn't causing any issues.
What do you guys suggest?
How much with a Opteron server with 2GB RAM help me right now?
I have a server running Fedora 4 and WHM/cPanel. I would like to upgrade the linux kernel to the latest version, so mosey in via SSH and type "yum -y upgrade". It downloads a few things and tells me everything is hunky dory.
Now, the version it says it is currently running is: 2.6.17-1.2142_FC4 #1 Tue Jul 11 22:41:14 EDT 2006
Is that the really the newest version available? Maybe I'm confused as to how this works, but if I go to kernel.org it tells me the most recent stable version of the kernel is 2.6.24.3. Is this because I am running FC4?
I have a server with SoftLayer which is based on the Xeon 3060 with 2GB RAM and 2x250GB Hard Drives setup as soft raid using Windows 2003.
I am now looking at two options for an MS Exchange Server 2003 with 25 user licences. I can either get a new dual core AMD server with 2GB and 2x250GB hard drives in soft RAID 1 for about $170-$180 or I could bump the specifications of the current server by adding additional 2GBs (for total of 4GB), another 250GB hard drive with the 3Com RAID controller (for 500GB RAID5 setup) and possibly a quad core CPU upgrade when SL introduces it. The total cost for upgrades would total to $110. I already have a Windows 2003 server license that I can utilize.
We have a quad code with 8GB ram dedicated for one website, but still the load goes through the roof and crashes the server. The site has one vB forum (with minimum hacks), and a custom CMS for the front pages which uses a minimum of queries.
I'm not an expert, but it would seem like mySQL is the one that crashes. When the site crashes and someone browse the site, you can see the "could not connect to mySQL through socket" error message. At that point the load just skyrocket (been up to 4-500), and then the server crashes and has to be rebooted.
* Is our only option to make some sort of cluster? * Could upgrading to i.eg Apache 2.x or installing an op code cacher like xCache help? * Is it possible to run the databases from RAM to save IO (so it only writes to the HDD on update/insert/delete etc)?
I have root access, so if you need me to run more commands to look up statistics, just let me know.
We have one server don't want to touch the php on - how can we upgrade our PPA cluster and leave the one server alone - or at least exclude it from upgrading PHP/mySQL/Apache?