Welcome to the GoFuckYourself.com - Adult Webmaster Forum forums.

You are currently viewing our boards as a guest which gives you limited access to view most discussions and access our other features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload content and access many other special features. Registration is fast, simple and absolutely free so please, join our community today!

If you have any problems with the registration process or your account login, please contact us.

Post New Thread Reply

Register GFY Rules Calendar
Go Back   GoFuckYourself.com - Adult Webmaster Forum > >
Discuss what's fucking going on, and which programs are best and worst. One-time "program" announcements from "established" webmasters are allowed.

 
Thread Tools
Old 06-23-2003, 03:31 AM   #1
Tipsy
Confirmed User
 
Join Date: Jul 2001
Location: See sig
Posts: 6,989
Server problem - any ideas

I've never come across this problem before. Rebooting doesn't help and none of the running processes are taking much in the way of resources or memory....

The pages are served very fast, ssh is fast once in but...

Anything that requires authentication is at a crawl. It takes minutes for SSH to actually login, e-mail is failing because it's taking too long, the server also has webmin running which is at a crawl too. Like I say though everything else is fine from script pages through to mysql queries.

First thought was brute force attack but wouldn't that also be having an affect on overall speed not just authentication stuff? I can also see nothing else to suggest one.

Any suggestions?
__________________
Ignorance is never bliss.
Tipsy is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-23-2003, 03:35 AM   #2
funkmaster
So Fucking Banned
 
Join Date: Sep 2001
Location: shell beach
Posts: 7,938
I guess you are running on freebsd ... what does "netstat" say ?
funkmaster is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-23-2003, 03:44 AM   #3
- Jesus Christ -
Confirmed User
 
Industry Role:
Join Date: Mar 2003
Location: ::::::::::::: :::::::::::||::::::::::: :::::::::::||::::::::::: :::::::::::||::::::::::: :::::::::::||::::::::::: :::::::::::||::::::::::: ::::::||||||||||||:::::: :::::::::::||::::::::::: :::::::::::||::::::::::: ::::::::::::::::::::::::
Posts: 7,197
kill bind...

see what happens... if your running RH8 and a recent version of bind I'm gussing that will fix it.. I had the same problem and I just use a seperate nameserver.

Alternativly try switching your nameservers to somthing else. It definatly sounds like a DNS problem.
__________________

Amen
- Jesus Christ - is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-23-2003, 03:59 AM   #4
Tipsy
Confirmed User
 
Join Date: Jul 2001
Location: See sig
Posts: 6,989
Quote:
Originally posted by funkmaster
I guess you are running on freebsd ... what does "netstat" say ?
Thanks. Taking far too long to run but results are interesting. Looks like it may be an attack after all.

Certainly not DNS stuff. Bind isn't running on that server as other servers are used for DNS and domains not on this server are fine.
__________________
Ignorance is never bliss.
Tipsy is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-23-2003, 04:02 AM   #5
funkmaster
So Fucking Banned
 
Join Date: Sep 2001
Location: shell beach
Posts: 7,938
Quote:
Originally posted by Tipsy


Looks like it may be an attack after all.
... been there, done that, got the t-shirt and the video !

btw: try switching ssh to another port.
funkmaster is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-23-2003, 06:28 AM   #6
strainer
Confirmed User
 
Join Date: Oct 2002
Location: Philadelphia
Posts: 418
Type:

top

What does it say:
strainer is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-23-2003, 07:19 AM   #7
buran
Confirmed User
 
Join Date: Mar 2002
Location: how'd I get here?
Posts: 264
Slow SSH is often a failure in reverse DNS. Your webpages probably have dns resolution off, so they're not affected.

netstat -an should run much faster than netstat, it won't be doing any lookups.

try ping www.gofuckyourself.com
ping www.mit.edu
ping www.ind.net

see how quickly it resolves each of those domains. It's a
worth ruling out anyway.

b.
__________________
[this signature intentionally left blank]
buran is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Old 06-23-2003, 08:22 AM   #8
Ludedude
Suck it!
 
Industry Role:
Join Date: Jun 2001
Location: Who wants to know?
Posts: 4,432
Last night must have been active.

We got creamed by a pw hack attempt that was only effective as a DOS. Took a while to figure out wtf was going on.

Does anyone share a list of known cracker IP addys? Be easiest to block those fuckers at the router before they even start.
__________________
Ludedude is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote
Post New Thread Reply
Go Back   GoFuckYourself.com - Adult Webmaster Forum > >

Bookmarks



Advertising inquiries - marketing at gfy dot com

Contact Admin - Advertise - GFY Rules - Top

©2000-, AI Media Network Inc



Powered by vBulletin
Copyright © 2000- Jelsoft Enterprises Limited.