Understanding through Discussion


Welcome! You are not logged in. [ Login ]
EvC Forum active members: 113 (8734 total)
Current session began: 
Page Loaded: 03-30-2017 2:34 PM
450 online now:
Chatting now:  Chat room empty
Newest Member: timtak
Post Volume:
Total: 802,236 Year: 6,842/21,208 Month: 2,603/2,634 Week: 266/525 Day: 25/74 Hour: 2/9


Thread  Details

Email This Thread
Newer Topic | Older Topic
  
Prev1
2
3456Next
Author Topic:   Network Problems
New Cat's Eye
Member
Posts: 11185
From: near St. Louis
Joined: 01-27-2005
Member Rating: 1.7


(2)
Message 16 of 76 (735805)
08-25-2014 2:34 PM
Reply to: Message 15 by ringo
08-25-2014 1:26 PM


I tried Ctrl+Alt+Delete and got a Change User screen

For future reference, Ctrl+Shift+Esc takes you directly to the Task Manager.


This message is a reply to:
 Message 15 by ringo, posted 08-25-2014 1:26 PM ringo has responded

Replies to this message:
 Message 17 by ringo, posted 08-26-2014 11:40 AM New Cat's Eye has acknowledged this reply

  
ringo
Member
Posts: 12826
From: frozen wasteland
Joined: 03-23-2005
Member Rating: 2.6


Message 17 of 76 (735836)
08-26-2014 11:40 AM
Reply to: Message 16 by New Cat's Eye
08-25-2014 2:34 PM


Catholic Scientist writes:

For future reference, Ctrl+Shift+Esc takes you directly to the Task Manager.


It took me since Windows 98 to memorize Ctrl+Alt+Delete.
This message is a reply to:
 Message 16 by New Cat's Eye, posted 08-25-2014 2:34 PM New Cat's Eye has acknowledged this reply

  
Admin
Director
Posts: 12395
From: EvC Forum
Joined: 06-14-2002
Member Rating: 2.6


Message 18 of 76 (735883)
08-27-2014 3:14 PM


Okay, I'm back. I'd like to observe the problem myself before attempting to fix it. Is the problem still occurring?

--Percy
EvC Forum Director

Replies to this message:
 Message 19 by Stile, posted 08-27-2014 3:19 PM Admin has acknowledged this reply
 Message 20 by New Cat's Eye, posted 08-27-2014 3:47 PM Admin has acknowledged this reply
 Message 21 by Tangle, posted 08-27-2014 4:06 PM Admin has acknowledged this reply
 Message 22 by Tangle, posted 08-27-2014 5:26 PM Admin has acknowledged this reply
 Message 23 by nwr, posted 08-27-2014 6:57 PM Admin has acknowledged this reply

    
Stile
Member
Posts: 2851
From: Ontario, Canada
Joined: 12-02-2004
Member Rating: 1.9


Message 19 of 76 (735886)
08-27-2014 3:19 PM
Reply to: Message 18 by Admin
08-27-2014 3:14 PM


Nope.

As they say in my business... good work!


This message is a reply to:
 Message 18 by Admin, posted 08-27-2014 3:14 PM Admin has acknowledged this reply

    
New Cat's Eye
Member
Posts: 11185
From: near St. Louis
Joined: 01-27-2005
Member Rating: 1.7


Message 20 of 76 (735891)
08-27-2014 3:47 PM
Reply to: Message 18 by Admin
08-27-2014 3:14 PM


I had one 503 error earlier this morning.
This message is a reply to:
 Message 18 by Admin, posted 08-27-2014 3:14 PM Admin has acknowledged this reply

  
Tangle
Member
Posts: 4417
From: UK
Joined: 10-07-2011
Member Rating: 2.8


Message 21 of 76 (735892)
08-27-2014 4:06 PM
Reply to: Message 18 by Admin
08-27-2014 3:14 PM


Yes. It improved for a couple of days yesterday and the day before, but today has been back to normal. I'm getting 503s about 20% of the time and slowness all the time. By slowness, I mean it connects then hangs, then if it doesn't 503, it connects quickly.

Life, don't talk to me about life - Marvin the Paranoid Android

"Science adjusts it's views based on what's observed.
Faith is the denial of observation so that Belief can be preserved."
- Tim Minchin, in his beat poem, Storm.


This message is a reply to:
 Message 18 by Admin, posted 08-27-2014 3:14 PM Admin has acknowledged this reply

  
Tangle
Member
Posts: 4417
From: UK
Joined: 10-07-2011
Member Rating: 2.8


Message 22 of 76 (735905)
08-27-2014 5:26 PM
Reply to: Message 18 by Admin
08-27-2014 3:14 PM


22.25 BST

Service Temporarily Unavailable

The server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try again later.

Apache Server at www.evcforum.net Port 80

Edited by Tangle, : It's BST not GMT here now!


Life, don't talk to me about life - Marvin the Paranoid Android

"Science adjusts it's views based on what's observed.
Faith is the denial of observation so that Belief can be preserved."
- Tim Minchin, in his beat poem, Storm.


This message is a reply to:
 Message 18 by Admin, posted 08-27-2014 3:14 PM Admin has acknowledged this reply

  
nwr
Member
Posts: 5508
From: Geneva, Illinois
Joined: 08-08-2005
Member Rating: 5.6


Message 23 of 76 (735926)
08-27-2014 6:57 PM
Reply to: Message 18 by Admin
08-27-2014 3:14 PM


It was pretty rough at around 6:54 EDT, but responding properly only two minutes later.

Fundamentalism - the anti-American, anti-Christian branch of American Christianity

This message is a reply to:
 Message 18 by Admin, posted 08-27-2014 3:14 PM Admin has acknowledged this reply

  
Admin
Director
Posts: 12395
From: EvC Forum
Joined: 06-14-2002
Member Rating: 2.6


Message 24 of 76 (735936)
08-28-2014 8:45 AM


Apache Server Restarted
I haven't yet experienced this intermittent problem myself, but I have restarted the Apache server. This is the software process that services requests for webpages from the website.

Please let me know if the problem continues. If it does then I will next reboot the server.


--Percy
EvC Forum Director

Replies to this message:
 Message 25 by Tangle, posted 08-28-2014 12:48 PM Admin has acknowledged this reply

    
Tangle
Member
Posts: 4417
From: UK
Joined: 10-07-2011
Member Rating: 2.8


Message 25 of 76 (735948)
08-28-2014 12:48 PM
Reply to: Message 24 by Admin
08-28-2014 8:45 AM


Re: Apache Server Restarted
'fraid not - 17.47 BST

Service Temporarily Unavailable

The server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try again later.

Apache Server at www.evcforum.net Port 80


Life, don't talk to me about life - Marvin the Paranoid Android

"Science adjusts it's views based on what's observed.
Faith is the denial of observation so that Belief can be preserved."
- Tim Minchin, in his beat poem, Storm.


This message is a reply to:
 Message 24 by Admin, posted 08-28-2014 8:45 AM Admin has acknowledged this reply

  
Admin
Director
Posts: 12395
From: EvC Forum
Joined: 06-14-2002
Member Rating: 2.6


Message 26 of 76 (735976)
08-29-2014 9:09 AM


Experiencing some slowness this morning I checked the access log and found that IP address 195.211.155.163 has been banging hard on us, around 400 accesses/second, many to the login page. I added code so that the software now exits without delivering any pages for his IP address. If this isn't enough I'll disable his access at the Apache level. Please keep me apprised of any performance issues.

--Percy
EvC Forum Director

Replies to this message:
 Message 27 by Tangle, posted 08-29-2014 9:40 AM Admin has responded
 Message 28 by PaulK, posted 08-29-2014 9:54 AM Admin has acknowledged this reply

    
Tangle
Member
Posts: 4417
From: UK
Joined: 10-07-2011
Member Rating: 2.8


Message 27 of 76 (735977)
08-29-2014 9:40 AM
Reply to: Message 26 by Admin
08-29-2014 9:09 AM


No problem so far today.

As that's a DoS attack, can't your hosting company block it at their firewall for you?


Life, don't talk to me about life - Marvin the Paranoid Android

"Science adjusts it's views based on what's observed.
Faith is the denial of observation so that Belief can be preserved."
- Tim Minchin, in his beat poem, Storm.


This message is a reply to:
 Message 26 by Admin, posted 08-29-2014 9:09 AM Admin has responded

Replies to this message:
 Message 29 by Admin, posted 08-29-2014 10:28 AM Tangle has responded

  
PaulK
Member
Posts: 12452
Joined: 01-10-2003
Member Rating: 2.5


Message 28 of 76 (735978)
08-29-2014 9:54 AM
Reply to: Message 26 by Admin
08-29-2014 9:09 AM


That address is registered to Unit-IS Ltd, based in Odessa. They run a data centre so probably one of their machines has been compromised.
This message is a reply to:
 Message 26 by Admin, posted 08-29-2014 9:09 AM Admin has acknowledged this reply

    
Admin
Director
Posts: 12395
From: EvC Forum
Joined: 06-14-2002
Member Rating: 2.6


Message 29 of 76 (735981)
08-29-2014 10:28 AM
Reply to: Message 27 by Tangle
08-29-2014 9:40 AM


Tangle writes:

As that's a DoS attack, can't your hosting company block it at their firewall for you?

Surprisingly, no. When the website went offline some months back it was because of a DoS attack that overwhelmed the webhosting company's servers, so they shut our website down. Here's their initial response:

Superb Hosting writes:

I have enabled the IP for the time being. If ddos attack occurs, we will have to null route the IP again.

Since, this is a self managed server, unfortunately you will be responsible for managing security in your server.

Please see our AUP for below regarding dos:

12.2.4. Denial of Service
Under no circumstances may SI's systems be used to gain access or deny access to a system or attempt to gain or attempt to deny access to a system without the permission of the system's owners (or rightful users).
A Denial of Service (DoS) attack is designed to disproportionately consume the resources of a system in order to reduce its ability to serve its function. Under no circumstances may SI's network be used in DoS attacks.
Abnormal traffic shapes may cause detrimental effects to other users and/or the network, and, in extreme cases, may have DoS attack-like effects.
12.2.5. You are solely responsible for maintaining the security of access codes, authorization codes, and passwords.

With that being said, if you want security audits done on your server we can do for 8 support credit or OS hardening services are also offered by our PSD department.

It can also be that server is hacked or it is running an an outdated and un-patched OS.

Having chapter and verse cited to me wasn't that helpful, so I asked for more details:

Superb Hosting writes:

The DDOS received affected other servers. When our routers are inundated with this much data, normal traffic destined for other servers may be dropped, which is unacceptable. The DDOS can be received or transmitted and in this case it was received by your server. There is very little that can be done to mitigate attacks like this without using a third party DDOS mitigation service.

When I inquired further they responded:

Superb Hosting writes:

Yes, your server was the target of a DDOS. I am uncertain as to why it was suggested to have a security audit. You are correct in saying that there is very little that can be done for a DDOS. It is uncommon for us to have a DDOS, maybe 3 times a year some server or another falls victim within our company. Generally, the DDOS is a result of someone getting angry enough about some content on a site and they want it shut down for a laugh.

I don't know why they refer to a DoS as a DDOS. I couldn't figure out what the extra D is for. My reaction to all this was that it seemed strange that they're as helpless in the face as a DoS attack as I am.


--Percy
EvC Forum Director

This message is a reply to:
 Message 27 by Tangle, posted 08-29-2014 9:40 AM Tangle has responded

Replies to this message:
 Message 30 by PaulK, posted 08-29-2014 10:35 AM Admin has acknowledged this reply
 Message 31 by Tangle, posted 08-29-2014 10:43 AM Admin has acknowledged this reply

    
PaulK
Member
Posts: 12452
Joined: 01-10-2003
Member Rating: 2.5


Message 30 of 76 (735983)
08-29-2014 10:35 AM
Reply to: Message 29 by Admin
08-29-2014 10:28 AM


The first responses seem to be assuming that your server had been compromised and was being used for a DoS attack.

DDoS is Distributed DoS - rather than one host attacking dozens are used. The usual source is a "botnet" - malware infiltrated onto a large number of unsuspecting people's computers, enabling remote control for various malign purposes.


This message is a reply to:
 Message 29 by Admin, posted 08-29-2014 10:28 AM Admin has acknowledged this reply

    
Prev1
2
3456Next
Newer Topic | Older Topic
Jump to:


Copyright 2001-2015 by EvC Forum, All Rights Reserved

™ Version 4.0 Beta
Innovative software from Qwixotic © 2017