Re: [cobalt-developers] Raq 3 Hangs! Websites down

[alan@xxxxxxxxxxxxxxxxxxxx]

We have to reboot the RAq3's at least twice a week luckily there here in
our office and not in a colo. It always requires a hard reboot and
nothing in the logs show why it hangs. All updates are current all
services look good except for the IMAP which has remained broke for over
a year. We installed neomail and it works but is extremely slow.


Alan DeRossett
Digital Starlight Communications Inc.

earthlink wrote:
> 
> Hi, let me thank you first of all. Now, I will be more clear about the
> problem
> 
> When I say the server hangs, I mean this:
> 
> We physically in any way shape or form cannot connect to the websites via
> domain name, or IP
> I *cannot* log into the console when it hangs. At all. Domain or ip of the
> host
> 
> When it is restarted, all is ok again. Then I can log into the console
> 
> I am wondering now that I can log in (Until the next damn 'freeze')
> what commands I can type to try to grasp what would cause this out of
> nowhere after 1.5 years of no problems
> 
> I hope this helps explain my situation more. What solutions would there be?
> Is this just a network problem?
> After reboots, *everything* seems to be working fine, I just don't know why
> it would freeze at all
> 
> It has frozen 2 times, and a reboot fixes it, but I do NOT feel secure in it
> staying unfrozen, if you will
> 
> Thanks
> 
> Joel
> ----- Original Message -----
> From: Peter Gloor <pgloor@xxxxxxx>
> To: <cobalt-developers@xxxxxxxxxxxxxxx>
> Sent: Monday, April 01, 2002 10:45 AM
> Subject: Re: [cobalt-developers] Raq 3 Hangs! Websites down
> 
> > Joel,
> >
> > Beginning about six weeks ago we had (and still have) something similar on
> a
> > Microsoft Windows NT Web/Proxy server. The same symptoms. The system is
> > still running, no entries in any of the logs, but any incoming or outgoing
> > traffic is blocked until we reboot the server.
> >
> > What we found out so far looks like a (new?) kind of attack. It looks
> > somewhat like the well known Syn Flood attack. As I'm not good in these
> > things I have no idea what to do against it.
> >
> > We are currently evaluating the Qube 3 as a replacement for the NT server,
> > but so far I did not find the time to put it in place.
> >
> > Using netstat, immediately before the NIC hangs, I can see a lot of SYN
> > RECEIVED with connections to port 80 on any IP address we have. The source
> > has a bogus (spoofed) IP address.
> >
> > Now we have written a job that runs netstat any 30 second and writes any
> > source adress for connections having SYN RECEIVED for more than 30 seconds
> > into a file. We use this file daily to block this addresses from entering
> > our network in the router.
> >
> > Windows NT has an entry in the registry to protect from Syn Flood attacks.
> > Enabling this protection helped a little but did not solve the problem.
> >
> > Hope you'll get your problem solved, soon!
> >
> > Kind regards,
> >
> > Peter
> >
> > ----- Original Message -----
> > From: "earthlink" <joelmon2002@xxxxxxxxxxxxx>
> > To: <cobalt-developers@xxxxxxxxxxxxxxx>
> > Sent: Sunday, March 31, 2002 9:51 PM
> > Subject: [cobalt-developers] Raq 3 Hangs! Websites down
> >
> >
> > > Hello, this is the 2nd time this week our Raq 3 has hung and now
> > > I cannot telnet into it and all websites are down
> > >
> > > One person will have to go out monday and restart the darn thing
> > >
> > > When it reboots and is back up and running (as it was for 2 days after
> the
> > > last hang and before it
> > > died on us) what can I do to prevent this from happening again?
> > >
> > > It was fine for 1.5 years
> > >
> > > Is this just a piece of garbage that is no longer functional? We do not
> > host
> > > that many websites
> > >
> > > What can I do after a reboot to prevent this? This is PATHETIC
> > >
> > > Thanks
> > >
> > > Joel
> > >
> > > _______________________________________________
> > > cobalt-developers mailing list
> > > cobalt-developers@xxxxxxxxxxxxxxx
> > > http://list.cobalt.com/mailman/listinfo/cobalt-developers
> > >
> >
> >
> 
> _______________________________________________
> cobalt-developers mailing list
> cobalt-developers@xxxxxxxxxxxxxxx
> http://list.cobalt.com/mailman/listinfo/cobalt-developers