Forum Moderators: phranque

Message Too Old, No Replies

apache issue? or something else

subdomains are not working- all push to primary

         

awbadmin

8:52 pm on Oct 26, 2006 (gmt 0)

10+ Year Member



I will first start off by asking 4 your patience as I am no where near the level of many of you, but would appreciate any assist.---I have a dedicated server that is running apache (obviously). I had the apache/cf/squl set up by an ind contr. I have fought the hacking of the machine numerous times which caused some major issues a few of which were detrimental. I give the history b/c I believe that is the case again.

THe subdomains stopped workiing within the past week, but I dont know which day. I have looked in many different logs on the machine and some of the apache logs look real odd as they refer to chats that cant be found and many files within the domains that dont and never did exist, but that cant be found.

I guess my question is, if I did not change DNS, the problem has to be apache, correct? I did double chk DNS, dont see any issues.

SO in apache, I know a lot of the basic stuff, but other stuff I am not up on (YET) --- can anyone guide me as to what I should be looking for to cause such an issue? Other domains work as far as i can tell, it is just the primary domain that has an issue, and the issue is with the subdomains.

I am up to any suggestions so if anyone has any, I would sure appreciate the help. My next set of questions after this is how to better secure the machine, but first things first.

I will update one more thing in that I also see a large qty of robot requested files that arent found as well as the just non-existent (sort of spammy) looking files i mentioned above.

Looking at one of the event manager warnings I see

"A service process other than the one launched by the Service Control Manager connected when starting the ColdFusion MX ODBC Server service. The Service Control Manager launched process 1664 and process 1672 connected instead Note that if this service is configured to start under a debugger, this behavior is expected."

That does not concern me as much as

"Failed to load Terminal Server Profile path. Note that the profile path must be less than 256 characters in length. User Name: Administrator Domain: DEDICATED "

And then there is

"Performance counters for the WmiApRpl (WmiApRpl) service were loaded successfully. The Record Data contains the new index values assigned to this service."

and the series that I will leave with are errors that are grouped daily for a while. They start with this

"The Apache service named Apache.exe reported the following error:
>>> [Tue Oct 24 11:20:11 2006] [notice] jrApache[init] JRun 4.0 (Build 63961) Apache module - Jul 18 2003 12:47:12 <<<"

and then say this about (amazingly) all of the subdomains that arent working

"The Apache service named Apache.exe reported the following error:
>>> [Tue Oct 24 11:20:11 2006] [error] Cannot resolve host name bellacollina.aswebuild.com --- ignoring! <<<"

SOrry it says chronologically the jrapache (init) error after all of the subdomain errors.

the confusing part is that this looks like it has been going on for a while and the problem I know for a fact is no more than two weeks old because I uploaded to the system using CF application and used the subdomains.

awbadmin

9:44 pm on Oct 26, 2006 (gmt 0)

10+ Year Member



An update on this, now that you know all of the other probably unimportant stuff.

I did find out that the subdomains stopped responding on the 22nd at around 9am. I have been working with DNS, because my mail server is giving me problems (that is actually what continues to be a sercurity problem)and I am trying to resolve some of them.

Can anyone tell me if this could be anything beyond an Apache issue? I mean if Apache is receiving the primary request and does not produce the correct directory index.cfm reply, then what else could it be?