Topic: Can not access Server Manager (maybe compromised?)

[dilligaf]

I can not access the server manager from Internet Explorer, or the console.
===================================
Proxy Error
The proxy server received an invalid response from an upstream server.
The proxy server could not handle the request GET /server-manager.

Reason: Could not connect to remote machine: Connection refused
===================================
This is all on a server that has worked great for 2 years.
Any tips on what to start with?

[jsk]

Try to reboot your server.

[dilligaf]

Thanks,
That was the first thing we tried.
No success.
Dan

[cc_skavenger]

what version of sme / e-smith?

[dilligaf]

5.6 all updates.
I know, upgrade to 6.x.
But it has worked perfect for the last 2years

[RavenIV]

can you ping your SME?
what about ssh?
does the httpd (apache) run?

check this and tell the results.

cheers

[dilligaf]

can you ping your SME? YES, internally and externally.
what about ssh? Yes
does the httpd (apache) run? Yes,
Like I said all is working I just can not get in on the server-manager as per theerror listed in initial post.
Dan

[dilligaf]

When I use console to access the server manager and enter the password it just goes immediately back to the console.
I exit the console, and scroll back and see the following:

[root@nebula7653 root]# su admin
Looking up  'localhost' first

Looking up localhost first
Looking up localhost:980
localhost:980
Making HTTP connection to localhost:980
Alert!: Unable to connect to remote host.

lynx: Can't access startfile http://localhost:980/common/noframes
[root@nebula7653 root]#

[marsa_matruh]

Are you sure your hard disk is not full?

Try in console :
df -h

[dilligaf]

Lots of room left.

[root@nebula7653 root]# df -h
Filesystem            Size  Used Avail Use% Mounted on
/dev/hda6              36G  7.4G   26G  22% /
/dev/hda1              15M  2.6M   11M  18% /boot
[root@nebula7653 root]#

[guest22]

Any chance you updated/upgraded samba ?

RequestedDeletion

[dilligaf]

I have changed nothing.
I have installed and updated RKHUNTER, no issues, full scan etc no issues.
Dan

[smeghead]

.. post a copy of the contents of your squid.conf file as I have seen similar beaviour when squid fails to load or freezes.

Also try running:

service squid status

and post the response.

[dilligaf]

squid.conf
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localsrc src 127.0.0.1 192.168.55.0/255.255.255.0
acl localdst dst 127.0.0.1 192.168.55.0/255.255.255.0
acl SSL_ports port 443 563
acl Safe_ports port 80 21 443 563 70 210 1025-65535 980
acl CONNECT method CONNECT
acl webdav method PROPFIND TRACE PURGE PROPPATCH MKCOL COPY MOVE LOCK UNLOCK

#-----------------------------------
# Force Direct Connection for Domains
# ACL Statements
#-----------------------------------

append_domain .willcraft.com
cache_mgr admin@willcraft.com
ftp_user nobody@willcraft.com
http_access allow manager localsrc
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localsrc
http_access deny all

httpd_accel_host virtual
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
icp_access allow all
miss_access allow all

store_avg_object_size 3 KB
always_direct allow webdav

#-----------------------------------
# Force Direct Connection for Domains
# Always Direct Statements
#-----------------------------------
always_direct allow all_direct

always_direct allow all

[dilligaf]

[root@nebula7653 squid]# service squid status
squid (pid 5038 5035) is running...
2004/11/19 10:36:51| squid.conf line 49: always_direct allow all_direct
2004/11/19 10:36:51| aclParseAccessLine: ACL name 'all_direct' not found.
2004/11/19 10:36:51| squid.conf line 49: always_direct allow all_direct
2004/11/19 10:36:51| aclParseAccessLine: Access line contains no ACL's, skipping
[root@nebula7653 squid]#