[cobalt-users] RE: A tad bit of a problem

["B. Runge" <brunge@xxxxxxxxxxx>]

To your responce...yes, no, no, yes...found it in /var/log/secure by a 
typo that I had hosts.deny.

However....when it rains it pours! I am in one heck of a spot and this 
makes night two. Allow me to get a bit more in depth. Users at the 
indytel domain cannot pop for mail (POP before Relay is enabled) and 
some time ago I altered q.popper in inetd.conf to allow for more 
connects. (I do know that I have a secondary DNS issue,...that is a 
whole nother story)

This all started when clients just were not able to "pop" for 
mail,..usage was way high as I posted earlier....I installed IPCHAINS, 
threw my script in, ran it, no problems. Then things were working for 
about 4 hours then we had an issue with people not being able to send 
mail.....and now quite sometime later neither are working. Tried 
differnt combinations of starting/stopping/reloading services. I would 
be quite surprised if this message reaches the list! So I upgraded BIND 
to Solarspeeds "RaQ34-Solarspeed.net-Bind-8.3.3" on BOTH of my Raq's
(4i) I have a bad feeling that I have reached the point of no return 
with this...this is also my other issue if I do a named -v I get the 
BIND version on my primary server.....if I run the named -v on my 
secondary server......guess what, no out put...not installed.  Needless 
to say, I re-loaded the *.pkg,..it installed.....In named.conf (on 
secondary server) I have it pointing to primary just how it has always 
in the past. When it moves my zones over to the secondary it my zones 
look something like this sec.indytel.com.Blzd kind of crazy but is it a 
easy fix and if anyone is curious the trailing charicters are not 
consistant.....
So, in a nut shell I have a mail server thats acting up....a secondary 
dns server that is not working (that by the way is hosting other 
domains which they are having the same problems) and a few cans of 
worms.
Thanks again....Bill


>You should look into to your loggingconfiguration and the amount of 
>space
>on your partion holding /var/log because 82.9% off your cputime is 
>used by
>syslogd which isn't normal especially not if it is like that all the 
>time
>and not just at some peak time.
>
>Check that you can answer no to these 4 questions:
>1. Do you have logrotate properly set up?
>2. Is your log partion full?
>3. Do you have execessive rules in syslog.conf?
>4. Do you have something creating a logstorm?
>
>Christian Jiresjö
>
>On Tue, 5 Nov 2002, B. Runge wrote:
>
> Hello again list....
> Have a little problem that is consuming a whole lot of resources
> And I am not quite sure where to begin.  First off it's a Raq4 that
> Is hosting our main website and mail with approximately 1200 accounts.
> It is also our primary dns server...I grabbed a snip of some of the
> processes or pids running (see below). If I try to kill some of the
> processes it just hangs.......If I could get any feed back it
> would be greatly appreciated.
>
>   9:58pm  up 31 min,  2 users,  load average: 1.91, 2.05, 1.79
> 81 processes: 77 sleeping, 4 running, 0 zombie, 0 stopped
> CPU states: 11.0% user, 85.9% system,  0.0% nice,  3.0% idle
> Mem:   127860K av,  107064K used,   20796K free,  172064K shrd,   
23460K
> buff
> Swap:  131532K av,      20K used,  131512K free                   
38240K
> cached