Thanks Dan,
I have now had the server rebooted and everything is functioning fine.
Looking through the maillog shows MailScanner/Clamav dealing with lots
of DOS attacks and I guess finally the server gave in.
I run chkrootkit on the server and nothing is detected but I am a bit
suspicious of a process and netstat reports that the server is listening
on an odd port too. This has lead to my other post about the firewall as
I would like to close all ports that aren't necessary. I will then
probably restore the raq using the strongbolt CD and then start from
fresh so I know there isn't anything going on.
I still haven't find out why the back-ups didn't work though.
Thanks
Jason
Dogsbody wrote:
>
>> SSH occasionally brings up the "login:" but if I try to enter a user
>> name nothing happens
>> Websites on the box sometimes load but mostly timeout
>> Pop3, smtp and imap are dead
>> ftp is dead.
>> DNS is operating fine.
>>
>> I have a guy on the way to the co-lo to restart the box and try and
>> see whats happening. Does anybody have any ideas?
>
> Just sounds like an intermittent connection to me. Could it even be
> just a local network issue to you? Otherwise it could be any of the
> networking connecting to the net or even a DoS attack to another server
> in the same Co-Lo that you share a switch with.
>
> Try doing a traceroute and a load of pings to the server from a number
> of places. If you want to send me the server address offline then I'll
> do a few from a couple of places here if you like?
>
> Dan
>