http://permalink.gmane.org/gmane.linux.devices.blueonyx.user hourly 1 1901-01-01T00:00+00:00 http://gmane.org/img/gmane-25t.png http://gmane.org http://permalink.gmane.org/gmane.linux.devices.blueonyx.user/13052 <pre>Marcello, You can limit the number of httpd processes by editing /etc/httpd/conf/httpd.conf. Find the section for the prefork MPM configuration and change the line: ServerLimit 256 This line sets the max number of copies of apache that will be started. Set that to a lower number and restart httpd. The number to choose depends on your RAM. You can run, "tail -f /var/log/httpd/access_log /var/log/httpd/error_log" to watch what is happening. If it looks malicious and if the malicious behavior is coming from a few IP addresses, you can block them using iptables. This has instructions on how to do that: http://www.cyberciti.biz/faq/linux-iptables-drop/. Be sure you do not block yourself! If the problem is not caused by malicious behavior but by something like an overactive web crawler, you should consider turning on keep-alives. This will let a client reuse a connection for several requests rather than making a new connection for each request. If you run, "netstat -na|grep TIME_W</pre> Eric Peabody 2013-05-18T13:05:02 http://permalink.gmane.org/gmane.linux.devices.blueonyx.user/13051 <pre>Hi, i'm having trouble with my BO server. Few minutes ago one of my customer contact me saying that his website was down. I've connected to server through SSH and i was unable to restart httpd. There were 3 httpd processes "froze" So i'v done kill -9 PID and restarted httpd All works fine. The problem is that if I restart httpd all the memory (RAM) will be completely used. running top from terminal says that there are a lot op httpd processes, responsible of that big RAM usage. Is there any kind of DoS attack? What can i do? Thanks Marcello </pre> Marcello Torchio 2013-05-18T12:20:06 http://permalink.gmane.org/gmane.linux.devices.blueonyx.user/13050 <pre> On 18/05/2013, at 11:45 AM, "Stephanie Sullivan" &lt;ses-i0EhqrIUmh5BDgjK7y7TUQ&lt; at &gt;public.gmane.org&gt; wrote: Thought about that, but decided against it. Some people get 30 days maintenance, so a 30 day amber warning was not a good fit. This is the best of both worlds. Amber &lt; at &gt; expiry .... giving you time to renew before red when the first update is published that you would miss. Regards, Greg. </pre> Greg Kuhnert 2013-05-18T02:43:20 http://permalink.gmane.org/gmane.linux.devices.blueonyx.user/13049 <pre> Thanks for your efforts on this, Greg. I'm aware of the amount of diagnostics, planning, and reworking that go into a large-scale project and it's not always easy! Your contributions are well appreciated. </pre> Chris Gebhardt - VIRTBIZ Internet 2013-05-18T02:15:06 http://permalink.gmane.org/gmane.linux.devices.blueonyx.user/13048 <pre>May I suggest that Amber means "Your support expires within the next 30 days - renew to avoid an interruption of service. Thanks, -Stephanie </pre> Stephanie Sullivan 2013-05-18T01:45:58 http://permalink.gmane.org/gmane.linux.devices.blueonyx.user/13047 <pre> On 18/05/2013, at 9:11 AM, Greg Kuhnert &lt;gkuhnert-KfwGzCiItid+XZJcv9eMoO+c56aDEaJX&lt; at &gt;public.gmane.org&gt; wrote: renewal (am_status) issues are now fixed. This is a new feature we built a while ago. Basically, it integrates some smarts into newlinq, where you will be notified if about renewals for your server based on the following criteria; Green = All good Amber = Renewal date has passed Red = Renewal date has passed, AND there are updates that you cannot download which may affect the security of your server. Its been running for a while, but the funny story is that during testing, I hard coded the checks to lookup details from one of my test servers. I forgot to remove that hard coded detail, so everyone got the RED status of one of my servers at the same time. I have updated the code, and it now accurately reflects the renewal status for your servers directly. One more update: Varnish is now running in front of newlinq. Before this issue, it was already on the to-do list. The current setup is only doin</pre> Greg Kuhnert 2013-05-18T00:19:20 http://permalink.gmane.org/gmane.linux.devices.blueonyx.user/13046 <pre>OK. Its back up... There will be a number of changes over the near future that will help to "tame the beast". Right now, the plans are: 1. Do some filtering of botnet traffic (Complete). 2. Increase some parameters in aventurine to give it some more grunt. (Complete) 3. Change compass website to a different IP. This will leave newlinq on its own IP. (Complete) 4. Put varnish in front of newlinq only. (WIP) 5. Later - Possibly migrate to ngenix and split some other components. Ignore any am status values that show issues with renewal status right now - I will investigate and update in the near future. Greg. </pre> Greg Kuhnert 2013-05-17T23:11:40 http://permalink.gmane.org/gmane.linux.devices.blueonyx.user/13045 <pre>Hi Gerald, On 5/17/2013 6:02 PM, Gerald Waugh wrote: I suppose this has to do with the outage that has been ongoing throughout today with the BlueOnyx store, as NewLinQ would be tied closely to that. See [BlueOnyx:13042] for that thread. Hopefully that will be restored soon - it must be a pretty big issue so I wish the guys luck. </pre> Chris Gebhardt - VIRTBIZ Internet 2013-05-17T23:09:07 http://permalink.gmane.org/gmane.linux.devices.blueonyx.user/13044 <pre> On 05/17/2013 05:59 PM, Gerald Waugh wrote: Oops I find Support Maintenance Status RedBall Current Status &lt;javascript: void 0&gt; Severe Problem &lt;javascript: void(0);&gt; Support / Maintenance has expired - New updates built after your expiry date Status Last Changed &lt;javascript: void 0&gt; May 17 2013 6:00 PM </pre> Gerald Waugh 2013-05-17T23:02:13 http://permalink.gmane.org/gmane.linux.devices.blueonyx.user/13043 <pre>I hve servers from several different locations with this error ====== Active Monitor has detected recent changes in the state of your server appliance. For more details, please see the Active Monitor section of the Server Desktop. Summary of changes: * amStatusFailure =============== </pre> Gerald Waugh 2013-05-17T22:59:06 http://permalink.gmane.org/gmane.linux.devices.blueonyx.user/13042 <pre>Hey guys - I'd like to do a tiny bit of automation, and I expect one of you can tell me how. Here's what I would like to do for an existing site: - Create an associated non-administrative user account. - Create a forwarder to an external email address. Alternatively: - If the user already exists, simply change existing forwarder to specified address. Seems like it should be pretty simple, but I don't know the ins and outs of what BlueOnyx needs to keep track of where... Thanks! </pre> James 2013-05-17T21:45:24 http://permalink.gmane.org/gmane.linux.devices.blueonyx.user/13041 <pre> Noticed yesterday....hope all is well Best Regards, Jon McCauley </pre> Jon McCauley 2013-05-17T17:27:39 http://permalink.gmane.org/gmane.linux.devices.blueonyx.user/13040 <pre>Hi Michael, On 5/17/2013 12:16 PM, Michael Stauber wrote: Yikes. Sounds like you have your hands full. As always, reach out if there is any way I (or someone) can contribute. </pre> Chris Gebhardt - VIRTBIZ Internet 2013-05-17T17:22:42 http://permalink.gmane.org/gmane.linux.devices.blueonyx.user/13039 <pre>Hi Chris, Yes, I'm at it. This will get solved one way or another today. </pre> Michael Stauber 2013-05-17T17:16:51 http://permalink.gmane.org/gmane.linux.devices.blueonyx.user/13038 <pre>Maybe spammers/hakers are mad at michael because the recent dns blockage removed several thousands of servers from their hands for hacking ------Mensaje original------ De: Wisja.net Computers Remitente: blueonyx-bounces-tmYmGKlYHG7xDQNxMPk8KQ&lt; at &gt;public.gmane.org Para: BlueOnyx General Mailing List Responder a: BlueOnyx General Mailing List Asunto: [BlueOnyx:13044] Re: Compass, Solarspeed, BX Shop down? Enviado: 17 de may de 2013 10:45 AM Hi Chris Same problem over here in the Netherlands (so its not a local routing problem probably). Wisja On Fri, 17 May 2013 11:27:36 -0500, Chris Gebhardt - VIRTBIZ Internet wrote _______________________________________________ Blueonyx mailing list Blueonyx-tmYmGKlYHG7xDQNxMPk8KQ&lt; at &gt;public.gmane.org http://mail.blueonyx.it/mailman/listinfo/blueonyx Servicio email BlackBerry® xnet </pre> rodrigo ordonez 2013-05-17T17:04:58 http://permalink.gmane.org/gmane.linux.devices.blueonyx.user/13037 <pre>This is also occurring for me at 12:50 PM EDT. -----Original Message----- From: blueonyx-bounces-tmYmGKlYHG7xDQNxMPk8KQ&lt; at &gt;public.gmane.org [mailto:blueonyx-bounces-tmYmGKlYHG7xDQNxMPk8KQ&lt; at &gt;public.gmane.org] On Behalf Of Chris Gebhardt - VIRTBIZ Internet Sent: Friday, May 17, 2013 12:28 PM To: BlueOnyx General Mailing List Subject: [BlueOnyx:13042] Compass, Solarspeed, BX Shop down? Is it just me or are the sites unavailable? http://www.blueonyx.it/ comes up just fine but the Solarspeed, Compass and BlueOnyx shops all appear down. store.blueonyx.it comes up as a BX login page, but I think that the real alias should be shop.blueonyx.it for that site, right? Just curious if anybody else is having the same issue. (About 11:25CDT on May 17). </pre> Adam Lepp 2013-05-17T16:50:58 http://permalink.gmane.org/gmane.linux.devices.blueonyx.user/13036 <pre>Hi Chris Same problem over here in the Netherlands (so its not a local routing problem probably). Wisja On Fri, 17 May 2013 11:27:36 -0500, Chris Gebhardt - VIRTBIZ Internet wrote </pre> Wisja.net Computers 2013-05-17T16:45:06 http://permalink.gmane.org/gmane.linux.devices.blueonyx.user/13035 <pre> I see when I look up the IP that I am connecting from at the http://www.whatismyip.com/ &lt;http://www.whatismyip.com/&gt; site, that my IP is not listed as dynamic. So, I can't actually test it myself now. Also, what I used to do is enable poprelay, then in the sendmail.cf I'd edit it to allow all IPs that were in the poprelayd database. The section I'd edit is below. ###################################################################### ### check_relay -- check hostname/address on SMTP startup ###################################################################### SLocal_check_relay #begin ken changes # Put address in cannonical form R$* $: $&gt;Parse0 03 $1 R$* &lt; $* &gt; $* $: $1 &lt; $2 . &gt; $3 R$* &lt; $* . . &gt; $* $1 &lt; $2 . &gt; $3 # Test against pop-before-relay hash R$* $: &lt; $&amp;{client_addr} &gt; R&lt; $* &gt; $(popauth $1 $) R$* &lt; MATCH &gt; $#OK #end ken changes </pre> Ken Marcus 2013-05-17T16:30:33 http://permalink.gmane.org/gmane.linux.devices.blueonyx.user/13034 <pre>Is it just me or are the sites unavailable? http://www.blueonyx.it/ comes up just fine but the Solarspeed, Compass and BlueOnyx shops all appear down. store.blueonyx.it comes up as a BX login page, but I think that the real alias should be shop.blueonyx.it for that site, right? Just curious if anybody else is having the same issue. (About 11:25CDT on May 17). </pre> Chris Gebhardt - VIRTBIZ Internet 2013-05-17T16:27:36 http://permalink.gmane.org/gmane.linux.devices.blueonyx.user/13033 <pre> Greetings Ken, That's what I thought as well, but not what I actually observed on my BX5107 servers. I do not use the AV-SPAM package, I use a hosted MX based spam &amp; AV filter service instead. To address the spammers' attempts to bypass the mx filter by connecting directly to my SMTP, I added zen.spamhaus.org on the Blacklisting tab of the Email Servers Settings in Network Services &gt; Email. That took care of those hoseheads trying to bypass the MX. I checkmarked the "Enable delay_checks" option on the Advanced tab, because of this description for that option: "delay_checks changes the order Sendmail checks if a connection is correct or not, this is a good option to us if you use RBL blacklists." I thought that would enable customers sending email out via my SMTP that connect with SMTP-AUTH to bypass the RBL check, but it did not. Even thought the customer logged in with SMTP-AUTH, they were then blocked from sending mail by the RBL. I had to add their IP connection hostname to the relay list</pre> David Thacker 2013-05-17T15:51:43 http://permalink.gmane.org/gmane.linux.devices.blueonyx.user/13032 <pre> I think if you set the option to "Delay Checks" then they could still send. </pre> Ken Marcus 2013-05-17T15:13:44 Search the mailing list at Gmane query http://search.gmane.org/?group=$group=gmane.linux.devices.blueonyx.user