Re: [cobalt-users] Raq 550 total lockup

["Ted" <ted@xxxxxxxxxxxxxxx>]

also try a netstat -AN on the unit.

This will give you a list of open ports and what is connected to them.
For a great cheap free firewall try www.smoothwall.org
runs on old PC stuff and you can be up and running in 1/2
an hour. best part, its free. I would place a firewall in place
of where my inbound connection was at any COLO
no matter what they can or can not do.

my 2cents worth.


----- Original Message ----- 
From: "Franklin S. Werren" <fswerren@xxxxxxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Sent: Tuesday, November 25, 2003 3:32 PM
Subject: Re: [cobalt-users] Raq 550 total lockup


> It sounds like to me one of 3 problems, I have seen it before
>
> 1) You had a file that was very very popular and to many people trying to
> download that file....  Ad-Aware is a good example.... I could load up
> 1/2 of the T3 my one server is on, The co-lo owner was not happy!!!!
>
> 2) A DDOS attack of some sort against your IP Address...
> It will load up your co-lo network and lock up the whole NOC
> Again the Co-lo owner will not be happy
>
> 3) Your log files are to big and need to be cleaned out...
> go through as root when you ssh in and find  every users Domain
> and del all files in /logs. Usually the "top" command will show you that
> problem.
>
> If  2 happens, you co-lo owner does not have a good active firewall
> set up on his border router, better look for another co-lo!!
> There is no reason in the world why a co-lo or ISP does not have a good
> firewall
>
> I have had every one of these problems myself....
> and I admin 4 different Cobalt servers + several others.
>
> My 2 cents worth....
>
> Franklin S. Werren  www.bagpipes.net   www.chautauqualake.net
> www.franksradio.net http://stvef.chautauqualake.net
> http://rtcw.chautauqualake.net
>
>
> ----- Original Message ----- 
> From: "Chris L" <clathem@xxxxxxxxxxxxx>
> To: <cobalt-users@xxxxxxxxxxxxxxx>
> Sent: Tuesday, November 25, 2003 4:14 PM
> Subject: [cobalt-users] Raq 550 total lockup
>
>
> > Just curiousity on this one.
> >
> > Last night my 550 almost completely stopped responding to the world.
SSH,
> > SMTP, POP3, and the management UI quit responding completely. I was able
> to
> > view ordinary sites without any problems, but OpenWebMail also stopped
> > working. I was able to use a VPN tunnel to get onto my LAN and SSH in to
> > reboot. Things have been going fine since the reboot. Has anyone seen
> > something like this before? Any ideas on what could have happened?
> >
> > Thanks,
> > Chris
> >
> > _____________________________________
> > cobalt-users mailing list
> > cobalt-users@xxxxxxxxxxxxxxx
> > To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> > http://list.cobalt.com/mailman/listinfo/cobalt-users
> >
> >
>
>
> _____________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To subscribe/unsubscribe, or to SEARCH THE ARCHIVES, go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
>
>