The Elsmar Cove Wiki More Free Files The Elsmar Cove Forums Discussion Thread Index Post Attachments Listing Failure Modes Services and Solutions to Problems Elsmar cove Forums Main Page Elsmar Cove Home Page
Google
  Web Elsmar.com
*Please be aware that SOME RECENT forum threads may not yet be indexed by Google.

View Full Version : Server changes - Temporary problems - 11 December 2008


Marc
11th December 2008, 12:27 PM
I have a company doing some work on the server. They are doing a poor job and I may have to get a different company.

This company made some changes to php and didn't compile it to the old specifications so file uploads are temporarily restricted to 1.8 MB or smaller.

You may also experience some brief connection problems over the next day or so as the server software is updated and more security is added.

Coury Ferguson
11th December 2008, 12:30 PM
Thanks for the Info Marc.

howste
11th December 2008, 03:27 PM
I have a company doing some work on the server. They are doing a poor job and I may have to get a different company.

This company made some changes to php and didn't compile it to the old specifications so file uploads are temporarily restricted to 1.8 MB or smaller.

You may also experience some brief connection problems over the next day or so as the server software is updated and more security is added.

What were your criteria for selection and evaluation of the provider? Did your purchasing information clearly describe the services to be performed?

Sorry, I just couldn't help myself...

BradM
11th December 2008, 03:36 PM
What were your criteria for selection and evaluation of the provider? Did your purchasing information clearly describe the services to be performed?

Sorry, I just couldn't help myself...

Was the provider ISO'd? :tg:

Dean Frederickson
11th December 2008, 03:43 PM
Were they on your Approved Supplier List?:lmao::lmao::lmao:

somerqc
11th December 2008, 04:55 PM
I always figured this was a tough crowd...but, yeesh! ;)

Marc
11th December 2008, 08:45 PM
What were your criteria for selection and evaluation of the provider? Did your purchasing information clearly describe the services to be performed? Evaluated about a year ago to my server needs, and yes there was a clear, detailed service order.

Was the provider ISO'd? :tg: No. Never a criteria for me.

Were they on your Approved Supplier List? Yes. They do good work. They're just always slow and in this case I had to help troubleshoot a problem that popped up when they did the distro rpm update. The rpm changed permissions on a directory that it shouldn't have. We're not sure why it did yet.

By the way - I'll be rebooting the server late tonight because kernel changes require a reboot and we didn't want to reboot at the busy time of day.

Changes should be complete other than that and upload sizes should be back like they were. The php ini file is tailored for my needs which is a bit unusual. Most people use the defaults.

Marc
11th December 2008, 08:53 PM
BTW - This update was mainly to put in enhanced server security. The 'bad guys' are getting better at breaking into servers all the time so we made a lot of security changes as a precaution. Recently there was a brute force attempt to crack my root account which lasted 8 days. It's surprising how often people use software for things like brute force attempts to crack a server. I see attacks almost every day, but never before have I seen one that lasted 8 days.

Wes Bucey
11th December 2008, 10:26 PM
BTW - This update was mainly to put in enhanced server security. The 'bad guys' are getting better at breaking into servers all the time so we made a lot of security changes as a precaution. Recently there was a brute force attempt to crack my root account which lasted 8 days. It's surprising how often people use software for things like brute force attempts to crack a server. I see attacks almost every day, but never before have I seen one that lasted 8 days.When a hacker/cracker aims at a server like Elsmar, you can be sure it is all about ultimately getting at some of the machines of the demographic served by Elsmar. We have visitors from all over the world - many of whom are accessing through the employer's machines. It would be a coup to serendipitously (and surreptitiously) plant a virus to turn one of those machines into a zombie ready to divulge all company data and secrets when it goes behind the firewall.

So far this week, I, myself, have detected and deleted some malware on my machine which was so clumsy it slowed my browsing to a crawl, initiating my search & destroy mission two days ahead of my regular sweep and delete schedule. I am not the kind of beginner who opens attachments on email without screening, so I can only suppose I picked these up while browsing news and shopping sites.

BradM
11th December 2008, 10:48 PM
So far this week, I, myself, have detected and deleted some malware on my machine which was so clumsy it slowed my browsing to a crawl, initiating my search & destroy mission two days ahead of my regular sweep and delete schedule. I am not the kind of beginner who opens attachments on email without screening, so I can only suppose I picked these up while browsing news and shopping sites.


:topic: Wes... are you sure you got them all, and their roots?? I would suggest posting a Hijack This log on one of the malware forums just to be sure. Too (I know you know this..) make sure you have an adware and virus program current and stuff.

If you use Internet Explorer, consider switching to Mozilla or another one. Most malware aims at Internet Explorer. Too, check your Java; either update or delete it. Lots of malware finds big holes in old versions of Java. I'm sure you have SP2; that's a must today.

Wes Bucey
11th December 2008, 10:55 PM
:topic: Wes... are you sure you got them all, and their roots?? I would suggest posting a Hijack This log on one of the malware forums just to be sure. Too (I know you know this..) make sure you have an adware and virus program current and stuff.

If you use Internet Explorer, consider switching to Mozilla or another one. Most malware aims at Internet Explorer. Too, check your Java; either update or delete it. Lots of malware finds big holes in old versions of Java. I'm sure you have SP2; that's a must today.I'm pretty obsessive about keeping current in antivirus/adware/malware sniffers. In point of fact, though I have both IE and Firefox loaded and continually updated with security patches, etc., I have ONLY used Firefox as a browser in the past month, so any and all new malware came through Firefox (Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.4) Gecko/2008102920 Firefox/3.0.4)

Marc
12th December 2008, 03:01 AM
Server has been rebooted. Things should be back to normal now.

Attachment size check appended to this post.