Home / user-81146

Hao's questions

Martin Hope
Hao
Asked: 2014-01-27 04:19:57 +0800 CST
  • 1

This might have something to do with a server that I have set the root user with a forward rule to send me emails. But I am not sure and I can't figure out why... Is it possible that my server has been used by other people to do spamming? My server is in a local network by the way.

Based on the returned content of the email, it's for several spam emails. Pure spam. And the sender is not even ME, not even a proper address (some random name). That's why I think it feels like someone seems relaying emails (spam) through my server. And I got all the returned emails back. My email server (a very good company) didn't treat this as spam. They normally help me block tons of spam automatically.

For example

The original message was received at Sun, 26 Jan 2014 05:05:40 -0700
from m50-134.163.com [123.125.50.134]

   ----- The following addresses had permanent fatal errors -----
<[email protected]>
    (reason: 550-5.1.1 The email account that you tried to reach does not exist. Please try)

   ----- Transcript of session follows -----
... while talking to aspmx.l.google.com.:
>>> DATA
<<< 550-5.1.1 The email account that you tried to reach does not exist. Please try
<<< 550-5.1.1 double-checking the recipient's email address for typos or
<<< 550-5.1.1 unnecessary spaces. Learn more at
<<< 550 5.1.1 http://support.google.com/mail/bin/answer.py?answer=6596 ha7si10821727icc.12 - gsmtp
550 5.1.1 <[email protected]>... User unknown
<<< 503 5.5.1 RCPT first. ha7si10821727icc.12 - gsmtp

priearl2003 is the spammer I think. 

Content-Type: Message/delivery-status
Content-Description: Delivery error report

Final-Recipient: rfc822; [email protected]
Action: failed
Status: 5.0.0
Diagnostic-Code: SMTP; SMTP error, DOT: 550 5.7.0 (SNT0-MC4-F26) Message could not be delivered. Please ensure the message is RFC 5322 compliant..(SMTP&nbsp;error,&nbsp;DOT:&nbsp;550&nbsp;5.7.0&nbsp;(SNT0-MC4-F26)&nbsp;Message&nbsp;could&nbsp;not&nbsp;be&nbsp;delivered.&nbsp;Please&nbsp;ensure&nbsp;the&nbsp;message&nbsp;is&nbsp;RFC&nbsp;5322&nbsp;compliant.)
--------------Boundary-00=_MQ805PDL3A1S4OLBH890
Content-Type: Message/Rfc822
Content-Description: Undelivered Message
Content-Transfer-Encoding: 8bit

Received: from mycomputer (unknown [91.124.65.192])
    by smtp4 (Coremail) with SMTP id DtGowECZB0Ue6ORSchJSDQ--.24287S3;
    Sun, 26 Jan 2014 18:49:20 +0800 (CST)
From: "markp markp" <priearl2003>
To: "keacyking" <[email protected]>, "KC" <[email protected]>,
 "sexy kio kyle hot7187493825" <[email protected]>,
 "rod isreal" <[email protected]>,
 "korey 3369724167" <[email protected]>,
 "junglefever 04" <[email protected]>, "Keino" <[email protected]>,
 "Y U WANNA KNOW autour detroit" <[email protected]>,
 "Kennen butler buffalo" <[email protected]>,
 "=?ISO-8859-1?Q?Charles_Knowles=2C_Jr?=" <[email protected]>
Subject: markp markp
Date: Sat, 26 Jan 2014 11:49:14 +0100
MIME-Version: 1.0
X-mailer: Microsoft Office Outlook, Build 11.0.5510
Reply-To: priearl2003
Content-type: Multipart/mixed; boundary="3E762EB7_62CA3E41_boundary"
Content-Description: Multipart message
X-CM-TRANSID:DtGowECZB0Ue6ORSchJSDQ--.24287S3
X-Coremail-Antispam: 1Uf129KBjDUn29KB7ZKAUJUUUUU529EdanIXcx71UUUUU7v73
    VFW2AGmfu7bjvjm3AaLaJ3UbIYCTnIWIevJa73UjIFyTuYvjxUa038UUUUU
X-Originating-IP: [91.124.65.192]

--3E762EB7_62CA3E41_boundary
Content-type: text/html; charset=UTF-8
Content-Transfer-Encoding: Quoted-printable
Content-Disposition: inline
Content-Description: HTML text

=EF=BB=BF<html><head><meta http-equiv=3D"content-type" content: text/html;=
 charset=
=3DUTF-8></head><body>http://atasehiringilizcekurslari.org/vhwk/jgmbsvgubadcgt=
ecpios.dcgpurxvlyoigqhfjgxeg</body></html>
--3E762EB7_62CA3E41_boundary--
linux
Martin Hope
Hao
Asked: 2014-01-09 01:50:47 +0800 CST
  • 0

/etc/init.d/vsftpd start Starting vsftpd for vsftpd: /usr/sbin/vsftpd: error while loading shared libraries: libz.so.1:

failed to map segment from shared object: Permission denied [FAILED]

I am afraid that this has something to do with a previous disaster happened. I accidentally changed most of the files permission in this CentOS box to 777.

So I have located this libz.so.1 file which is a link to libz.so.1.2.3 and they are all 777 now.

I don't know what to do with them. Help please?

[root@deadwood repo01]# ls --lcontext /lib64/libz.so.1 
lrwxrwxrwx 1 system_u:object_r:lib_t          root root 13 Aug  9 07:55 /lib64/libz.so.1 -> libz.so.1.2.3 
[root@deadwood repo01]# ls --lcontext /lib64/libz.so.1.2.3
-rwxrwxrwx 1 system_u:object_r:lib_t          root root 85544 Jul 17  2012 /lib64/libz.so.1.2.3 
[root@deadwood repo01]# ls --lcontext /lib/libz.so.1 
lrwxrwxrwx 1 system_u:object_r:lib_t          root root 13 Aug  9 07:55 /lib/libz.so.1 -> libz.so.1.2.3 
[root@deadwood repo01]# ls --lcontext /lib/libz.so.1.2.3
-rwxr-xr-x 1 system_u:object_r:lib_t          root root 75088 Jul 17  2012 /lib/libz.so.1.2.3
permissions
Martin Hope
Hao
Asked: 2012-02-09 19:27:33 +0800 CST
  • 1

I am out of means to find out if my server is using RAID or not. If yes, which mode? The server is connected with the disk array box. So I am pretty sure that it's supposed to use RAID. Can it not?

cat /proc/mdstat

I got this:

Personalities:
unused devices: <none>

Here is df result

Filesystem           1K-blocks      Used Available Use% Mounted on                                                                            
/dev/mapper/VolGroup00-LogVol00                                                                                                               
                      72656340  17564032  51342012  26% /                                                                                     
/dev/sda1               101086     25149     70718  27% /boot                                                                                 
tmpfs                  1029744         0   1029744   0% /dev/shm                                                                              
/dev/mapper/VolGroup--MD1000-DATA--01                                                                                                         
                     2113529792 1749272544 364257248  83% /opt
raid
Martin Hope
Hao
Asked: 2011-07-08 00:20:47 +0800 CST
  • -1

I had a Drupal website on a test box and I am the only visitor.

When I do nothing. Mysql is taking like 7% mem. When I click homepage. I can literally see that mem ramps up to 15% of the mem by using top command.

Then 15% it is and it sits there. So previously, I have 200M about free memory, now only 10M free memory left.

No kidding that everything is so slow. The memory just not enough.

Memory in all is 1.5GB. It might not be big but it's a good Dell server with good CPU.

Any mysql variable to look into? Or any tools to help me make mysql more realistic .

Attached is the my.cnf

[client]
default-character-set=utf8
port    = 3306
socket  = /tmp/mysql.sock

[mysqld]
character-set-server = utf8
replicate-ignore-db = mysql
replicate-ignore-db = test
replicate-ignore-db = information_schema
user    = mysql
port    = 3306
socket  = /data0/mysql/mysql.sock
basedir = /usr/local/webserver/mysql
datadir = /data0/mysql/data
log-error = /data0/mysql/mysql_error.log
pid-file = /data0/mysql/mysql.pid
open_files_limit    = 10240
back_log = 600
max_connections = 5000
max_connect_errors = 6000
table_cache = 614
external-locking = FALSE
max_allowed_packet = 32M
sort_buffer_size = 1M
join_buffer_size = 1M
thread_cache_size = 300
#thread_concurrency = 8
query_cache_size = 512M
query_cache_limit = 2M
query_cache_min_res_unit = 2k
default-storage-engine = MyISAM
thread_stack = 192K
transaction_isolation = READ-COMMITTED
tmp_table_size = 512M
max_heap_table_size = 246M
long_query_time = 3
log-slave-updates
log-bin = /data0/mysql/binlog/binlog
binlog_cache_size = 4M
binlog_format = MIXED
max_binlog_cache_size = 64M
max_binlog_size = 1G
relay-log-index = /data0/mysql/relaylog/relaylog
relay-log-info-file = /data0/mysql/relaylog/relaylog
relay-log = /data0/mysql/relaylog/relaylog
expire_logs_days = 30
key_buffer_size = 256M
read_buffer_size = 1M
read_rnd_buffer_size = 16M
bulk_insert_buffer_size = 64M
myisam_sort_buffer_size = 128M
myisam_max_sort_file_size = 10G
myisam_repair_threads = 1
myisam_recover

interactive_timeout = 120
wait_timeout = 120

skip-name-resolve
slave-skip-errors = 1032,1062,126,1114,1146,1048,1396

server-id = 1

innodb_additional_mem_pool_size = 16M
innodb_buffer_pool_size = 256M
innodb_data_file_path = ibdata1:256M:autoextend
innodb_file_io_threads = 4
innodb_thread_concurrency = 8
innodb_flush_log_at_trx_commit = 2
innodb_log_buffer_size = 16M
innodb_log_file_size = 128M
innodb_log_files_in_group = 3
innodb_max_dirty_pages_pct = 90
innodb_lock_wait_timeout = 120
innodb_file_per_table = 0

log-slow-queries = /data0/mysql/slow.log
long_query_time = 10
log-queries-not-using-indexes

[mysqldump]
quick
max_allowed_packet = 32M
mysql memory
Martin Hope
Hao
Asked: 2011-05-31 00:27:17 +0800 CST
  • 0

This might be hard ...

I have the key ssh user so I normally sync file to server automatically, recently it stopped.

Then I tried rsync manually, it stuck there,

then I tried ssh , sometimes I can log in to the server fast , sometimes no.

And after I log in the server, it stuck after I enter into a few deeper directories...

I am wondering if there is something wrong with local linux or something else...

And there is no error messages displayed

ssh