My raq3 has been either down or very slow today. does any one else has the same problem?

I have the same problem, it feels like the server is on a 28k modem and 10 people are download movies from it!!.. I think it´s on 0kb/sec -> 0.01kb/sec (if lucky)...

I also had friends from different parts of US, Canada and also Europe try it.. same for all, some couldn't even load the page.


Saeed

Yeah same here ... But except with me its been slightly slower since the router issue.

My guess sprint through a paddy again.

I have same troubles with my RaQ3 on tera-byte :(

It got a little better now.. loads and all, but still a little slow.. Let's give it a little time and see how this turns out.

Saeed

Good newz, guys!

I asked tera-byte about slowdown and have reply very quickly! They wrote to me:

-----------
Just a short 4webspace firewall maint. It was only a few minutes and it's back up.
-----------

I think it's been almost an hour now since I first discovered the slow speed. It's still very bad speed for me. ;(

Saeed

It takes 20 sec to load a mostly text page.

heehee you aint seen my email account its full of we cant connect to your site whats going on?....

Kinda funny.

Our server has been behaving like this for the past 21 hours.... I went to sleep last night being unable to install a critical security update.

I truly hope this is just a temporary thing - but judging by support's reply above claiming they've fixed the problem, our account could go the sameway as the one we previously held with cobaltracks.

Its fast.......thanks Tera Byte

The tera-byte connection hasnt slowwed down at all, however the 4webspace one has. it appears some hacker puppy read about the bind exploit and has portscanned all the 4webspace raq's and found those running the exploited bind and hacked into them all. this afternoon he sent out a distributed DOS attack using a bunch of raq's as the source. those raq's have been shut down, tonight we found some more he started to use. tomorrow ill be turning off the ability to use port 53 on all 4webspace raq's of the 50 i checked using bind none had updated their version yet. we will also be adding the ability for people to use our nameservers with their own names so that wont be an excuse for running an insecure daemon. Just a side note if your running bind and you havent upgraded it disable it ASAP (or upgrade it)


Steve


[Edited by Keeg on 02-12-2001 at 02:08 AM]

Now I'm confused. I have a RAQ at 4webspace (surfsyou.net), and I've installed about all the upgrades from the Cobalt site yesterday afternoon (localtime, so that was in the morning in US time), except the last rotation thing at the top, but including the DOS thing just beneath...

Now you're saying that no one has upgraded yet, which includes me. So which upgrade are we talking about then and where the hack is it?

Originally posted by Pingu
Now I'm confused. I have a RAQ at 4webspace (surfsyou.net), and I've installed about all the upgrades from the Cobalt site yesterday afternoon (localtime, so that was in the morning in US time), except the last rotation thing at the top, but including the DOS thing just beneath...

Now you're saying that no one has upgraded yet, which includes me. So which upgrade are we talking about then and where the hack is it?

He said out of the 50 nameservers he tested they were all running the vulnerable version of named. There are more than 50 servers running named, and there are a select few who have upgraded, but the vast majority have not.

Originally posted by Keeg
we will also be adding the ability for people to use our nameservers with their own names so that wont be an excuse for running an insecure daemon.


That's great news - not only do we get the private names, but the geographical redundancy of Tera-Byte's 3 name servers.

Originally posted by CJB
He said out of the 50 nameservers he tested they were all running the vulnerable version of named. There are more than 50 servers running named, and there are a select few who have upgraded, but the vast majority have not.

Duhh :blush:

Guess I was just in time then with the updates :)

And those that don't run there own dns.... are ok?

i dont even run my own dns and i still upgraded bind. i'm a looooser :)

Originally posted by Technics
And those that don't run there own dns.... are ok?

If you don't have named running, you should be fine.

It's 12:45PM CST and I still can't access my server. I can't even get 4webspace.com or tera-byte.com. Are they still getting attacked or did they just decide to switch everything off and go home...:)

Dave

Tera-Byte has been working fine here -- try using a proxy (e.g. http://www.safeweb.com), to see if it might be your ISP at fault.

Sincerely,

George Kirikos
http://www.kirikos.com/