Roy Urick | 24 May 2013 15:46
Picon

[BlueOnyx:13097] dovecot not registering with failed logins?

during troubleshooting of a new server install, I noticed one single IP 
slowly doing a dictionary attack of sorts against pop. (one attempt 
every 30-6 seconds, user name is incrementing alphabetically)

Even though I see all of these attempts from the one IP, that host isnt 
showing in the failed logins GUI. Normal?
jeffrey Pellin - PX2 | 24 May 2013 10:34
Favicon

[BlueOnyx:13094] AV-Spam ignores settings

Hi all,

We just had a client who changed the domain that he wanted to resolve to his WP site.

I probably did a stupid thing - I just changed the domain in the General settings. This mostly worked - you have to remember to change the web server alias and the email server alias but mostly OK.

Now, however, AVSpam (I think it's the Solarspeed package) just ignores any settings for users on that domain - I've tried a new user too - it just uses the server defaults.

So any ideas at all would be appreciated - I don't really even know where to start to look.

Regards

Jeffrey

 

 

 

<div>
<p>Hi all,</p>
<p>We just had a client who changed the domain that he wanted to resolve to his WP site.</p>
<p>I probably did a stupid thing - I just changed the domain in the General settings. This mostly worked - you have to remember to change the web server alias and the email server alias but mostly OK.</p>
<p>Now, however, AVSpam (I think it's the Solarspeed package) just ignores any settings for users on that domain - I've tried a new user too - it just uses the server defaults.</p>
<p>So any ideas at all would be appreciated - I don't really even know where to start to look.</p>
<p>Regards</p>
<p>Jeffrey</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<p>&nbsp;</p>
<div>-- <br><table border="0" cellspacing="0" cellpadding="0">
<tr>
<td colspan="2">
<table border="0" cellspacing="0" cellpadding="0"><tr valign="top">
<td width="40%">Jeffrey Pellin<br><span>Director</span><br><br><a href="http://www.quick-websites.co.uk" target="nw">Jeffrey Pellin Consultancy Ltd</a>
</td>
<td width="40%">Work: 01692 558226<br>Mobile: 07768 451738 <br>Email: <a href="mailto:jeffrey <at> pellin.co.uk" target="nw">jeffrey@...</a><br><div><a href="http://uk.linkedin.com/pub/jeffrey-pellin/15/a85/3b0" target="nw">Professional Profile</a></div>
</td>
<td width="20%">
<br><br>
</td>
</tr></table>
</td>
</tr>
<tr>
<td><a href="http://www.linkedin.com/e/wwk/53425140/?hs=false&amp;tok=13wzr5NHSChl41" target="nw">See who we know in common</a></td>
<td align="right">&nbsp;</td>
</tr>
</table>
</div>
</div>
Eiji Hamano | 24 May 2013 06:38
Picon

[BlueOnyx:13093] Problem: webalizer: not run

Hi

After yum updateon one 5106R,  webalizer not work well.
>From the date of the yum update,  the contents is stopped..

It work well in server lever page,  but not work in all site.

Because of Stopped state of ftp.dti.ad.jp,  was update too many? 
Any Idea, please.

Eiji Hamano 

Dr. Blunt | 23 May 2013 04:17
Picon
Favicon

[BlueOnyx:13088] Re: Active Monitor "Support/Maintenance" messages

Just to confirm then ---

1. The active monitor is still flashing "red" on one of my servers
2. The NewLinQ - Support Expiry Report indicates: No items linked to your 
server.
3. The NewLinQ - Connection Status check indicates: NewLinQ - Connection 
Status = Your connection to NewLinQ is operating correctly.
4. Then it says:  Get some software: You dont have any packages linked yet. 
Go to the Compass store to obtain some applications for your appliance. If 
you have already registered in the store, try going to the link menu to add 
your purchases to this server.

So to turn off the "red" flashing I need to purchase which software at the 
store??

FYI:
yum clean all;yum update
Loaded plugins: security
Cleaning repos: BlueOnyx Solarspeed.net sl sl-security
Cleaning up Everything
Loaded plugins: security
BlueOnyx                                                 | 1.9 kB     00:00
BlueOnyx/primary 
| 365 kB     00:02
BlueOnyx 
2241/2241
Solarspeed.net 
| 2.3 kB     00:00
Solarspeed.net/primary_db 
| 6.8 kB     00:00
sl 
| 3.7 kB     00:00
sl/primary_db 
| 3.4 MB     00:20
sl-security 
| 3.0 kB     00:00
sl-security/primary_db 
| 2.1 MB     00:12
Setting up Update Process
No Packages marked for Update

At 05:16 PM 5/22/2013, you wrote:
>In all cases I have reviewed, Newlinq is operating now as designed. If you 
>go to the expiry reports, are there any expired products? This is the key 
>to the active monitor alerting. If anything is not green, active monitor 
>will be at a minimum an amber colour. If any of the products have updates 
>that were released after the expiry date, it will instead turn red. This 
>feature/functionality was built after receiving multiple request from 
>clients to know when their support has expired.

DD | 20 May 2013 19:41

[BlueOnyx:13075] Reading Active Monitor

Hi all,

 

I am interested in creating a server monitor page along the lines of the ActiveMonitor page at /base/am/amStatus.php – does anyone know where the various status values come from? I’m poking my way through libPhp but it occurs to me that someone may have already done this.

 

Regards,

 

 

Dick Dolby

 

<div><div class="WordSection1">
<p class="MsoNormal">Hi all,<p></p></p>
<p class="MsoNormal"><p>&nbsp;</p></p>
<p class="MsoNormal">I am interested in creating a server monitor page along the lines of the ActiveMonitor page at /base/am/amStatus.php &ndash; does anyone know where the various status values come from? I&rsquo;m poking my way through libPhp but it occurs to me that someone may have already done this.<p></p></p>
<p class="MsoNormal"><p>&nbsp;</p></p>
<p class="MsoNormal">Regards,<p></p></p>
<p class="MsoNormal"><p>&nbsp;</p></p>
<p class="MsoNormal"><p>&nbsp;</p></p>
<p class="MsoNormal">Dick Dolby<p></p></p>
<p class="MsoNormal"><p>&nbsp;</p></p>
</div></div>
Matt James | 20 May 2013 15:18
Gravatar

[BlueOnyx:13068] Active Monitor "Support/Maintenance" messages

Hello all,

Overnight (and some over the weekend) I received Active Monitor messages on some of my servers that go back and forth between "Support / Maintenance has expired" and "Support / Maintenance Renewals are current".

I haven't seen these messages before and the only things that I know of which have changed are that these servers likely have Newlinq installed on them (for the dfix free bundle) and also, the Newlinq issues that have been going on which have been well documented by Greg on the list.

Can anyone tell me what these messages mean and what I can do to relieve the issue?

Thanks for your help!

--
Matt James
RainStorm Consulting
(207) 866-3908




<div>Hello all,<div><br></div>
<div>Overnight (and some over the weekend) I received Active Monitor messages on some of my servers that go back and forth between "Support / Maintenance has expired" and "Support / Maintenance Renewals are current".</div>
<div><br></div>
<div>I haven't seen these messages before and the only things that I know of which have changed are that these servers likely have Newlinq installed on them (for the dfix free bundle) and also, the Newlinq issues that have been going on which have been well documented by Greg on the list.</div>
<div><br></div>
<div>Can anyone tell me what these messages mean and what I can do to relieve the issue?</div>
<div><br></div>
<div>Thanks for your help!<br><div>
<span class="Apple-style-span"><span class="Apple-style-span"><div>
<br class="Apple-interchange-newline">--</div>
<div>Matt James</div>
<div>RainStorm Consulting</div>
<div>(207) 866-3908</div>
<div><br></div></span><br class="Apple-interchange-newline"></span><br class="Apple-interchange-newline">
</div>
<br>
</div>
</div>
Stuart Clark (Datacenta | 20 May 2013 12:57
Favicon

[BlueOnyx:13066] find unused e-mail users

Hi

 

Is there an easy way to find all e-mail users that are no longer using their accounts?

I am doing a migration soon and would like to strip out all users that are no longer required to speed up the migration work.

 

Regards,

 

Stuart

 

 

<div>
<div class="WordSection1">
<p class="MsoNormal"><span>Hi<p></p></span></p>
<p class="MsoNormal"><span><p>&nbsp;</p></span></p>
<p class="MsoNormal"><span>Is there an easy way to find all e-mail users that are no longer using their accounts?<p></p></span></p>
<p class="MsoNormal"><span>I am doing a migration soon and would like to strip out all users that are no longer required to speed up the migration work.<p></p></span></p>
<p class="MsoNormal"><span><p>&nbsp;</p></span></p>
<p class="MsoNormal"><span>Regards,<p></p></span></p>
<p class="MsoNormal"><span><p>&nbsp;</p></span></p>
<p class="MsoNormal"><span>Stuart<p></p></span></p>
<p class="MsoNormal"><span><p>&nbsp;</p></span></p>
<p class="MsoNormal"><p>&nbsp;</p></p>
</div>
</div>
Marcello Torchio | 18 May 2013 14:20
Picon

[BlueOnyx:13059] Possible attack - Limited resources

Hi,

i'm having trouble with my BO server.

Few minutes ago one of my customer contact me saying that his website was down.

I've connected to server through SSH and i was unable to restart httpd.

There were 3 httpd processes "froze"

So i'v done kill -9 PID and restarted httpd

All works fine.


The problem is that if I restart httpd all the memory (RAM) will be completely used.

running top from terminal says that there are a lot op httpd processes, responsible of that big RAM usage.

Is there any kind of DoS attack?

What can i do?

Thanks

Marcello
<div><div dir="ltr">Hi,<div><br></div>
<div>i'm having trouble with my BO server.</div>
<div><br></div>
<div>Few minutes ago one of my customer contact me saying that his website was down.</div>
<div><br></div>
<div>
I've connected to server through SSH and i was unable to restart httpd.</div>
<div><br></div>
<div>There were 3 httpd processes "froze"</div>
<div><br></div>
<div>So i'v done kill -9 PID and restarted httpd</div>
<div><br></div>
<div>All works fine.</div>
<div><br></div>
<div><br></div>
<div>The problem is that if I restart httpd all the memory (RAM) will be completely used.</div>
<div><br></div>
<div>
running top from terminal says that there are a lot op httpd processes, responsible of that big RAM usage.</div>
<div><br></div>
<div>Is there any kind of DoS attack?</div>
<div><br></div>
<div>What can i do?</div>
<div><br></div>
<div>Thanks</div>
<div><br></div>
<div>Marcello</div>
</div></div>
Greg Kuhnert | 18 May 2013 01:11
Picon
Favicon

[BlueOnyx:13054] Newlinq

OK. Its back up... 

There will be a number of changes over the near future that will help to "tame the beast".  Right now, the plans are:

1. Do some filtering of botnet traffic (Complete).
2. Increase some parameters in aventurine to give it some more grunt. (Complete)
3. Change compass website to a different IP. This will leave newlinq on its own IP. (Complete)
4. Put varnish in front of newlinq only. (WIP)
5. Later - Possibly migrate to ngenix and split some other components.

Ignore any am status values that show issues with renewal status right now - I will investigate and update in
the near future.

Greg.
Gerald Waugh | 18 May 2013 00:59
Favicon

[BlueOnyx:13051] * amStatusFailure

I hve servers from several different locations with this error

======
Active Monitor has detected recent changes in the state of your server appliance.
For more details, please see the Active Monitor section of the Server Desktop.

Summary of changes:

* amStatusFailure
=============== 

--

-- 
Gerald
James | 17 May 2013 23:45

[BlueOnyx:13050] How to script...

Hey guys – I’d like to do a tiny bit of automation, and I expect one of you can tell me how.  Here’s what I would like to do for an existing site:

-          Create an associated non-administrative user account.

-          Create a forwarder to an external email address.

Alternatively:

-          If the user already exists, simply change existing forwarder to specified address.

 

Seems like it should be pretty simple, but I don’t know the ins and outs of what BlueOnyx needs to keep track of where...

 

Thanks!

<div><div class="WordSection1">
<p class="MsoNormal">Hey guys &ndash; I&rsquo;d like to do a tiny bit of automation, and I expect one of you can tell me how.&nbsp; Here&rsquo;s what I would like to do for an existing site:<p></p></p>
<p class="MsoListParagraph"><span>-<span>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span></span>Create an associated non-administrative user account.<p></p></p>
<p class="MsoListParagraph"><span>-<span>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span></span>Create a forwarder to an external email address.<p></p></p>
<p class="MsoNormal">Alternatively:<p></p></p>
<p class="MsoListParagraph"><span>-<span>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span></span>If the user already exists, simply change existing forwarder to specified address.<p></p></p>
<p class="MsoNormal"><p>&nbsp;</p></p>
<p class="MsoNormal">Seems like it should be pretty simple, but I don&rsquo;t know the ins and outs of what BlueOnyx needs to keep track of where...<p></p></p>
<p class="MsoNormal"><p>&nbsp;</p></p>
<p class="MsoNormal">Thanks!<p></p></p>
</div></div>

Gmane