Koozali.org: home of the SME Server

Legacy Forums => Experienced User Forum => Topic started by: Peter Smit on January 04, 2004, 11:46:33 AM

Title: Strange things happening
Post by: Peter Smit on January 04, 2004, 11:46:33 AM
Hello everyone,

Since a few days my server is locking up for a reason I can't find.
looked in the log files and there was only one thing I never seen earlyer.
This line repeats and repeats.....

So I only copied one :

Jan  4 12:31:23 smitti kernel: denylog:IN=eth1 OUT= MAC=00:10:a7:12:03:86:00:04:80:36:*:*:*:* SRC=213.*.*.* DST=213.231.223.230 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=13512 DF PROTO=TCP SPT=2885 DPT=135 WINDOW=64240 RES=0x00 SYN URGP=0

I have changed the mac and IP whit stars.

Does someone nows wat this means?
Thanx in advance

Peter Smit
Title: Re: Strange things happening
Post by: Peter Smit on January 04, 2004, 11:47:40 AM
stupid of me forgot to say its a SME 6.0 final server


Peter Smit
Title: Re: Strange things happening
Post by: gbl on January 04, 2004, 01:43:25 PM
DPT=135 ??
It seems to be a Samba Problem. Try to stop samba and repost the results here.


sincerly
Guenter
Title: Re: Strange things happening
Post by: Peter Smit on January 04, 2004, 02:33:32 PM
rebooted again and it won't start up at all Kernel panic just after it should mount local file systems :(

no rescue disk....... stupid...... lucky for me I have my data on a sec. hdd

Probally I will go back to 5.6... wa smore lucky for me than 6.03 beta and the final (mabey we should call it 6.0 stupid)

Peter Smit
Title: Re: Strange things happening
Post by: Pat Erler on January 04, 2004, 03:46:19 PM
that looks like hardware problem.. check memory, CPU (temperature?)..

PAT
Title: Re: Strange things happening
Post by: Chris on January 04, 2004, 04:15:14 PM
That port 135 stuff is the blaster worm. That should be unrelated to your problems..... I would say it could be a hardware issue.
Title: Re: Strange things happening
Post by: Peter Smit on January 04, 2004, 04:20:21 PM
none of my windowz computers has the blasterworm,

I do think it is hardware now...
trown out al of the memory, pci cards and stil trying to find out wath the problem is,

putting at this moment redhat 9 on the sysytem and we will see......

thanx for the replies......

Peter Smit
Title: Re: Strange things happening
Post by: Charlie Brady on January 04, 2004, 08:00:34 PM
Peter Smit wrote:

> Since a few days my server is locking up for a reason I can't
> find.

Nearly all lockups are hardware related - bad RAM or overheated CPU.

> So I only copied one :
>
> Jan  4 12:31:23 smitti kernel: denylog:IN=eth1 OUT=
> MAC=00:10:a7:12:03:86:00:04:80:36:*:*:*:* SRC=213.*.*.*
> DST=213.231.223.230 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=13512
> DF PROTO=TCP SPT=2885 DPT=135 WINDOW=64240 RES=0x00 SYN URGP=0

That's the blaster worm, and everyone connected to the Internet gets hit with those - only those using Windows need worry about them.

Charlie
Title: Re: Strange things happening
Post by: Peter Smit on January 04, 2004, 08:28:50 PM
yes indeed it is hardware releated.....

Trown the compaq 7592 into a corner because the motherboard seems to be the problem.
Mabey its the processor (PIII 600) ? my new server wil be the one I had for my 4 year old.

Gateway system celeron 400 512MB 40GB+80GB HDD 16MBvideo riva128

Going backwards because no money :(

thanx anyway all who responded

Peter Smit