Re: [cobalt-users] Raq 550 total lockup

["Franklin S. Werren" <fswerren@xxxxxxxxxxxx>]

It sounds like to me one of 3 problems, I have seen it before

1) You had a file that was very very popular and to many people trying to
download that file....  Ad-Aware is a good example.... I could load up
1/2 of the T3 my one server is on, The co-lo owner was not happy!!!!

2) A DDOS attack of some sort against your IP Address...
It will load up your co-lo network and lock up the whole NOC
Again the Co-lo owner will not be happy

3) Your log files are to big and need to be cleaned out...
go through as root when you ssh in and find  every users Domain
and del all files in /logs. Usually the "top" command will show you that
problem.

If  2 happens, you co-lo owner does not have a good active firewall
set up on his border router, better look for another co-lo!!
There is no reason in the world why a co-lo or ISP does not have a good
firewall

I have had every one of these problems myself....
and I admin 4 different Cobalt servers + several others.

My 2 cents worth....

Franklin S. Werren  www.bagpipes.net   www.chautauqualake.net
www.franksradio.net http://stvef.chautauqualake.net
http://rtcw.chautauqualake.net


----- Original Message ----- 
From: "Chris L" <clathem@xxxxxxxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Sent: Tuesday, November 25, 2003 4:14 PM
Subject: [cobalt-users] Raq 550 total lockup


> Just curiousity on this one.
>
> Last night my 550 almost completely stopped responding to the world. SSH,
> SMTP, POP3, and the management UI quit responding completely. I was able
to
> view ordinary sites without any problems, but OpenWebMail also stopped
> working. I was able to use a VPN tunnel to get onto my LAN and SSH in to
> reboot. Things have been going fine since the reboot. Has anyone seen
> something like this before? Any ideas on what could have happened?
>
> Thanks,
> Chris
>
> _____________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
>
>