Re: [qmailtoaster] Apache issues

2011-01-13 Thread Jake Vickers

On 01/12/2011 05:16 PM, Mike Canty wrote:


To all,

I have a server that is having some problems with some apache 
services.The machine appears to have a runaway process that takes up 
just over 20% of the CPU, but this is enough to stop all mail and to a 
certain extent network as well.


The problem for me is this machine is at a remote site. When this 
process runs away, I cannot connect to the network remotely, to 
resolve the issue, I need to get someone internally to log on to the 
server itself and kill the process.


When I say Apache, that is the user listed against the process, so 
it must be some form of web service.The command at fault is either 
std or s, although I have seen a perl command giving issues as 
well, but not to the same effect.


Does anyone have any idea what may be causing this?Or what I can do to 
rectify?





Not really Qmailtoaster related, but it sounds like you have a web app 
that has been compromised. There was a big issue with Roundcube webmail 
that allowed this to happen a year or so ago. Might be similar 
circumstances.




[qmailtoaster] Apache issues

2011-01-12 Thread Mike Canty
To all,
I have a server that is having some problems with some
apache services.  The machine appears to have a runaway process that takes
up just over 20% of the CPU, but this is enough to stop all mail and to a
certain extent network as well.
 
The problem for me is this machine is at a remote site. When this process
runs away, I cannot connect to the network remotely, to resolve the issue, I
need to get someone internally to log on to the server itself and kill the
process.
 
When I say Apache, that is the user listed against the process, so it must
be some form of web service.  The command at fault is either std or s,
although I have seen a perl command giving issues as well, but not to the
same effect.
 
Does anyone have any idea what may be causing this?  Or what I can do to
rectify?
 
Cheers
Mike Canty