[Imc-tech] Website Down

Zachary C. Miller zach at chambana.net
Wed Sep 14 02:13:32 CDT 2005


Yes. I had the server down all day for diagnostics due to the fact
that the server was dead this morning in the same way it was a few
days ago. I also discovered a root kit (root was not gained, afaict,
but the web user was compromised and used to launch attack attempts on
other sites) on the server yesterday. I needed to find out whether a
security hole was responsible for the crash this morning or whether a
hardware problem was at fault.

I ran low level comprehensive memory and disk scans on the server
which took all day to complete. 

I've determined that one of our disks is definitely dying. Luckily the
only data on that disk was our daily backups so no data has been
lost. But until I replace it (hopefully tomorrow...meaning another
hour of downtime) we are running without daily backups. In the mean
time I am running a manual backup to another machine. 

I do not think the rootkit was related to these outages and I believe
that nothing was compromised on the system and I believe that I have
patched the security hole that was used to get in but I am not certain
about any of this. I remain watchful.

Bryan Cribbs wrote:
> I'm sure Zach can give a more comprehensive report, 
> the server has been killed twice in the last 4 days.
> It's not yet clear what's up.  Last time it died I 
> talked to Zach and he was running diagnostics on the server.
> 
> (note: forgive my jargon of "killed" and "died"... 
> I have not seen anything suggesting malicious intent).
> 
> * Mike Lehman <rebelmike at earthlink.net> :
> > I ahve been unable to reach the website for the last hour or so, at
> > home or office.
> > Mike Lehman
> > _______________________________________________
> > Imc-tech mailing list
> > Imc-tech at lists.ucimc.org
> > http://lists.chambana.net/cgi-bin/listinfo/imc-tech
> _______________________________________________
> Imc-tech mailing list
> Imc-tech at lists.ucimc.org
> http://lists.chambana.net/cgi-bin/listinfo/imc-tech
> 

-- 
Zachary C. Miller - @= - http://zach.chambana.net/
IMSA 1995 - UIUC 2000 - Just Another Leftist Muppet - Ya Basta!
 Social Justice, Community, Nonviolence, Decentralization, Feminism,
 Sustainability, Responsibility, Diversity, Democracy, Ecology


More information about the Imc-tech mailing list